last executing test programs: 59.528679143s ago: executing program 3 (id=265): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r1, 0x0, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000001bc0)={0x6, 0x4b, 0x1000004, 0x6, 0xbae2}) madvise(&(0x7f000039c000/0x2000)=nil, 0x2000, 0x3) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x20000100005, 0x44e, 0x200000004, 0x1000000000000e, 0x5, 0x6, 0x7fffffffffffe, 0xa26, 0x1, 0x800000000000005, 0xee, 0x7fff, 0xa, 0x100bdb], 0xeeee8000, 0x3c4254}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x120c1, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x2000}) (async) syz_open_pts(r4, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone3(&(0x7f0000000380)={0x120000, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x40}, &(0x7f0000000340)=""/57, 0x39, &(0x7f0000000280)=""/28, &(0x7f0000000300)=[0x0], 0x1}, 0x58) (async) r9 = getuid() (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000500)=0xe8) sendmsg$nl_generic(r7, &(0x7f0000001b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0400578008000400", @ANYRES32=r8, @ANYRES16=0x0, @ANYRES32=r9, @ANYBLOB="08027800", @ANYRES32=r10, @ANYBLOB='\x00\x00'], 0x15e0}}, 0x40040c0) (async) r11 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write(r11, 0x0, 0x0) (async) getpid() 59.528049033s ago: executing program 3 (id=266): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1, 0x0, 0x1000, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000000)=""/49, &(0x7f0000000040)=0x31) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) userfaultfd(0x80801) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000300)={r5}) close_range(r3, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000883000/0x2000)=nil, 0x2000, 0x19) 59.349057298s ago: executing program 3 (id=267): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x26, 0x3, 0x0, 0x0) pipe(&(0x7f0000000140)) r1 = socket(0x27, 0x3, 0x80000401) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x190c, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{}, 0x14, 0x8000, 0x664b}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socketpair(0x26, 0x3, 0x0, 0x0) (async) pipe(&(0x7f0000000140)) (async) socket(0x27, 0x3, 0x80000401) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x190c, 0x4) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) (async) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{}, 0x14, 0x8000, 0x664b}, 0x18) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 59.298505742s ago: executing program 3 (id=268): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5444000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x2) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) clock_gettime(0x6, &(0x7f00000004c0)) 59.224790828s ago: executing program 3 (id=269): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x22020600) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x40000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 58.392063635s ago: executing program 3 (id=274): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001d0001160000f356fc1de90007"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="4de6ec23be", 0x5, r2) keyctl$unlink(0x9, r3, r2) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x600) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000400)={'trans=unix,', {[{@loose}, {@version_L}, {@access_uid={'access', 0x3d, r5}}, {@access_client}, {@cache_mmap}, {@ignoreqv}, {@noextend}, {@cache_none}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x6}, 0x804}], 0x0, 0x10101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r7, 0xd6baf000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) recvfrom$packet(r8, &(0x7f0000000240)=""/161, 0xa1, 0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f00000000c0)={0x1, 0x100, 0x2, 0x40, 0x2080001, 0x1}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r9, 0xf648e000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 42.894299099s ago: executing program 32 (id=274): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001d0001160000f356fc1de90007"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="4de6ec23be", 0x5, r2) keyctl$unlink(0x9, r3, r2) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x600) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000400)={'trans=unix,', {[{@loose}, {@version_L}, {@access_uid={'access', 0x3d, r5}}, {@access_client}, {@cache_mmap}, {@ignoreqv}, {@noextend}, {@cache_none}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x6}, 0x804}], 0x0, 0x10101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r7, 0xd6baf000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) recvfrom$packet(r8, &(0x7f0000000240)=""/161, 0xa1, 0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f00000000c0)={0x1, 0x100, 0x2, 0x40, 0x2080001, 0x1}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r9, 0xf648e000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 6.105947416s ago: executing program 2 (id=855): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x43, 0x7b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000004c0)='<', 0x1, 0x805, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001a80)}, 0x10000}], 0x1, 0x1131, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) (async) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) (async) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x43, 0x7b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r2, &(0x7f00000004c0)='<', 0x1, 0x805, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001a80)}, 0x10000}], 0x1, 0x1131, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 5.179213981s ago: executing program 2 (id=863): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000004, 0x20010, r0, 0xd55b1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000880)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f00000029c0)=""/208, 0xd0, 0x1, 0x14}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x4, 0x0, &(0x7f0000000540)="ae3f238d"}) 5.088772278s ago: executing program 2 (id=865): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) chdir(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) rmdir(0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x8004af80, &(0x7f0000000040)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7}) r4 = epoll_create(0x3) ppoll(&(0x7f0000000200)=[{r4, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 4.908347793s ago: executing program 2 (id=870): r0 = socket$xdp(0x2c, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x3}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x7, 0x5}]}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x16) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x2, 0x0, 0x6, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) syz_clone(0x950a0380, 0x0, 0x41, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x28011, r1, 0xac202000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r5 = eventfd(0xb) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) close_range(r5, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x3}, 0x20) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000380)=0x5) r8 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) 4.480892688s ago: executing program 0 (id=873): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0x0, 0x4, 0xfe, 0x16, "ec28a144f13d7607"}) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) (async, rerun: 64) r3 = syz_open_pts(r0, 0x20800) (async, rerun: 64) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000300)={0x0, 0x4a, &(0x7f0000000380)="b9460bdbc112e179b1cf33dcef4e720fa6aabe4740fef7f479a11b8cf7f78320b916708113d2ff747d3458480dcd52a336fbaed3357a775e2ade165175936ced87177687ba673b080a0a"}) (async, rerun: 32) dup3(r3, r0, 0x0) (rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) 4.424560442s ago: executing program 0 (id=874): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'erspan0\x00', r1, 0x80, 0x6, 0x4, 0x100, {{0x1f, 0x4, 0x0, 0x34, 0x7c, 0x68, 0x0, 0x5, 0x2b, 0x0, @private=0xa010100, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x9, [{@local, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x1}]}, @end, @ssrr={0x89, 0x7, 0x3e, [@loopback]}, @ssrr={0x89, 0x17, 0x7c, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010100, @local, @local]}, @end, @ssrr={0x89, 0xb, 0x9, [@dev={0xac, 0x14, 0x14, 0x42}, @empty]}, @lsrr={0x83, 0x1b, 0xbd, [@multicast2, @local, @multicast2, @local, @local, @loopback]}, @end]}}}}}) exit(0x9) r3 = socket(0x1f, 0xa, 0x2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x4, 0x5, 0xe7, 0x8, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x40, 0xe089, 0x7}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0xc) r7 = getpgid(0xffffffffffffffff) setpriority(0x1, r7, 0x8000000000000000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x7c1180, 0x90) getdents(r8, &(0x7f0000000440)=""/124, 0x7c) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r10, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe72}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x8000) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r11 = openat2(r9, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x8001, 0x0, 0x14}, 0x18) sendmsg$nl_route_sched_retired(r3, &(0x7f0000005680)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005640)={&(0x7f0000000700)=@delchain={0x4f08, 0x65, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x2, 0xe}, {0xf, 0x2}, {0x8, 0xfff3}}, [@f_rsvp6={{0xa}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private2}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}]}}, @f_rsvp6={{0xa}, {0x49e0, 0x2, [@TCA_RSVP_ACT={0x4960, 0x6, [@m_simple={0xfc, 0x7, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x4}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x48, 0xffffffffffffffff, 0x101, 0xffffffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x22, 0x3, 0x8, 0x5a0, 0x4}}, @TCA_DEF_DATA={0xc, 0x3, 'ip_vti0\x00'}]}, {0x67, 0x6, "fc1366cc67218b1410d8c0ef83f6f4bc9204641510c7a848dc61f417c7294dc6f059ace41cfef17650f2ba485f911f3a077afc55ccb73aacf2908975b93a7271d89b648593396703a2920368ea3dc75721b3744a2987f12868711bd12a9d3b352440d9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0xe8, 0x1d, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xa9e, 0xffffffffffffffff, 0xa, 0xdeca}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8d}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xcc}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x7b, 0x6, "d2ada9341eaaa60ce24a340932370050301851960ae82d1398f1aa32d98a5d975a0d77ad4c86be0533e01d8bf7c46d308c3f16cdcb768b75e3478a10a411f126963b84db0f276a230ab327c1aaf6f242779782072e9f9d20d41cfd4a7c5b8623f7c0624946f06d8a34b9c88c24c4b8d0f7085832e5abe3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x1bc, 0x18, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="1c358eee6be4"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x34de, 0x8, 0x7}}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xd, 0x4, 0x5, 0x9}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xb, 0x2, 0x1000, 0xc}, 0x1}}]}, {0xdf, 0x6, "f594656fa0835836d836480f74cf23643019d08d74b0bdf3c76f0fd496692b89382a843819946c42bd6bd2a26def0401e62f9d69c371102b6ce5a827234e63866a7e40c57037badd76f1c64caf64e8ac9d9ad99fbb98c913dd01b4eaac28dad827f654d5e474de9249995dc263e3267b9a9d6ff7e5616bd9b3db4fb7e17d1f2c1d20ecad609f25f823774ee68ca5febac2735eef3f196c1bc4bad68dce643a5752cf81b616fd1b9135bd3078a59ed338a755977fa53e41470516eacecd08548371cf360d8e5b5102b403eade4bdc2153835e7f6d1c23980f60714e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0x1d60, 0x0, 0x0, 0x0, {{0xa}, {0x1cec, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xe, 0x5, 0xffffffffffffffff, 0x9, 0x3}, 0x4, 0xc5, [{0x2, 0x8, 0x0, 0x8, 0x7, 0x8}]}, [{0xfffffe00, 0x2, 0x401, 0x0, 0xffff, 0x2}, {0x3, 0x2, 0xfffffffc, 0x149, 0x1, 0x2542}, {0xfffffff4, 0x0, 0x1, 0xae7, 0x1, 0xd2}, {0xb, 0xfffffff8, 0x8, 0x7f, 0x2, 0x3e}, {0x5, 0x8001, 0x1, 0x80, 0x2, 0x9}, {0x2c73a1e7, 0x1, 0x8, 0xc, 0x89b6, 0x10001}, {0xb, 0x400, 0x4, 0x7fff, 0x7e}, {0x2e59b85e, 0xffff823a, 0x8e, 0x2, 0x3, 0xffffffff}, {0x4c1, 0x20000, 0x4, 0x4, 0x9, 0x8}, {0x10001, 0x9, 0x7, 0x2, 0x5, 0x3}, {0x5, 0x401, 0x3, 0x10001, 0x4, 0x8}, {0x2, 0x3, 0x18c9027e, 0x6, 0xfd29, 0x7}, {0x0, 0x4, 0xffff, 0x6, 0x65, 0xb}, {0xffffceb5, 0x6, 0x81, 0x5, 0x7, 0x3}, {0xfffffffe, 0x10000, 0x3, 0x7, 0x2, 0x1}, {0x0, 0x5, 0x6, 0x200, 0x58, 0x7fff}, {0x800, 0x3ff, 0x3, 0x4, 0x5, 0x5}, {0x0, 0x10, 0xffffff46, 0x6, 0x0, 0x3}, {0x0, 0x7f, 0x8, 0x8000, 0x9d, 0x9}, {0x9b0, 0x2, 0x5e, 0x7f800000, 0xe, 0xfffffffc}, {0x9, 0x5, 0x40, 0xa9, 0x0, 0x9}, {0x10001, 0x6, 0x1000, 0x8, 0x62a8, 0x1d0dea49}, {0xffffffff, 0xd301, 0x5, 0x9, 0x4, 0x8001}, {0x7, 0x6, 0xfffffff8, 0x7, 0x1ba9, 0x4cc28610}, {0x1, 0x8, 0x4, 0xfbe, 0x1}, {0x8, 0x962b, 0x200, 0xa, 0x27, 0x9}, {0x7, 0xffffffff, 0xe, 0x8, 0x4, 0x5e3}, {0x7, 0x1, 0xc, 0x4, 0x9, 0x1d}, {0x2, 0x5f68, 0xffff, 0x7, 0xf9, 0x9f}, {0x5, 0x8, 0x1ff, 0x3, 0x8, 0x80000000}, {0x2, 0x200, 0x2, 0xfffffffa, 0x5, 0x4}, {0x8000, 0x80000000, 0x74, 0x1, 0x45eeba0, 0x4}, {0x5, 0x3, 0x6, 0x7, 0x1, 0x3}, {0x0, 0x7, 0x6, 0x2, 0x8001, 0x7}, {0x7, 0x21, 0x8, 0x7, 0x3}, {0x57a, 0x3, 0xfffffff8, 0x6, 0x6, 0x9}, {0x7, 0x6, 0x3, 0x9, 0x8, 0x6}, {0x7, 0xa672, 0x43, 0x7, 0x40000000, 0xffffff41}, {0x10001, 0x4, 0xe60, 0x6, 0x9, 0xc00}, {0x3, 0x3ff, 0x0, 0x5, 0x1000, 0x7}, {0x2bd4, 0x1000, 0x0, 0xb, 0x1, 0x1}, {0x3, 0x450, 0x3, 0x0, 0x10, 0x12}, {0x900, 0x7, 0xf, 0x5, 0x6e, 0x10001}, {0x101, 0x5, 0x6, 0x1, 0x6, 0x4}, {0x4, 0xa1d, 0x6, 0x80000000, 0xffffffff, 0x6}, {0xfffffffb, 0xec6, 0x3, 0x10, 0x59ec, 0x5}, {0x3fc, 0x8, 0xa1, 0x3ff, 0x9, 0x18}, {0x9d, 0x96, 0x6, 0x9, 0x0, 0x9}, {0xe5f32935, 0x4, 0x8, 0x7, 0x0, 0x9}, {0x139, 0x9, 0xe, 0x7, 0x6, 0x6}, {0x3, 0x4, 0x4, 0x8, 0x8, 0x9}, {0x78, 0x0, 0x1cd, 0xff, 0xcc05, 0x6}, {0x2, 0xffff, 0x57e5, 0x0, 0xff, 0x400}, {0x4b0, 0x84cc, 0x5, 0xd, 0x83, 0x6}, {0x5e29, 0x8, 0x80e, 0x9, 0x9, 0x80}, {0x0, 0xd, 0x2, 0x2, 0x3, 0x5}, {0x2, 0x4, 0x9, 0x4d, 0xffff432c}, {0x5, 0xd0, 0x0, 0x8, 0x2, 0x8}, {0x8, 0x3ff, 0xffff, 0x800, 0xfffffff9, 0x278a}, {0x61e5, 0x0, 0x60, 0xcda9, 0x0, 0x2}, {0xe, 0x3, 0x3, 0x5, 0x3, 0xdc}, {0x80000001, 0x6, 0x3, 0xe, 0x7, 0x2}, {0xffffffff, 0x1, 0x4, 0xd, 0x3ff}, {0x1, 0x40, 0x200, 0x7f, 0x7, 0x4}, {0x3, 0x34, 0x4, 0xffffffff, 0x10000}, {0x678, 0xac, 0xfffffff6, 0x1000, 0x0, 0xfffffffb}, {0x1, 0x400, 0x16a1, 0x5, 0x1, 0x5}, {0x9, 0x7, 0xc00, 0xff, 0x5, 0x1}, {0x5, 0x0, 0x3, 0x7fff, 0x5, 0x40}, {0x2, 0x80000001, 0x2, 0xec20, 0x3, 0xfffffffc}, {0x5b, 0x8, 0x1, 0x0, 0x7, 0xb}, {0x4, 0xe, 0xf, 0x0, 0xffff0e95, 0x5}, {0x7, 0x401, 0x3, 0x2, 0x6, 0x2}, {0x43, 0x6, 0x8001, 0x401, 0x7, 0xb}, {0x1, 0x74, 0x9, 0x7, 0xffff, 0x1ff}, {0x100, 0x3, 0x7, 0x2, 0x2, 0x800}, {0x4, 0xd6a9, 0x1, 0x656, 0x5, 0x9}, {0x8001, 0x81, 0x6c7ec1cc, 0x6, 0x14000, 0x5}, {0x2, 0x5, 0x26, 0x9, 0x7, 0x2}, {0x71, 0x1, 0x1f26, 0xfffffffe, 0x8}, {0x101, 0xe, 0x1000, 0x2, 0x9, 0x1}, {0xd228, 0x8, 0x2, 0x6, 0x3, 0xa7}, {0x7f, 0x9, 0x4, 0xfffffff7, 0xffffff2f, 0x6}, {0x2, 0x81, 0x1, 0x81, 0xfffffff7, 0x3}, {0x5, 0x10ed2, 0x5, 0x0, 0x8, 0x5}, {0x6, 0x85b, 0x0, 0x0, 0xfffffc00, 0xff}, {0x4aa0cd9e, 0x8, 0x2, 0x1, 0x6, 0xb1a}, {0x9, 0x1ff, 0x5, 0x6, 0x27, 0x2ac4}, {0x2, 0x3, 0xb, 0x10001, 0x1, 0x7}, {0x100, 0x8, 0x9, 0x8001, 0x5, 0x7}, {0x0, 0x5, 0x7, 0x1, 0x6, 0x9}, {0x8, 0x4, 0x0, 0xbe, 0x400, 0x6}, {0x3, 0x8ac, 0x4, 0x8, 0x7, 0x4}, {0x7, 0x7f, 0x9, 0x611c23c8, 0xffffffde, 0x353}, {0x10, 0x9, 0xfffff6df, 0x8, 0x1ff, 0x6}, {0x5, 0xc, 0x4, 0x3, 0x3, 0x1}, {0x8, 0x10, 0x1ff, 0xd6, 0x2b42, 0x1}, {0x80000000, 0x2, 0x3, 0x1, 0xffff, 0x1}, {0x26c, 0xffff, 0x9, 0x1, 0x10000, 0x4}, {0x3, 0xfffffffc, 0x9, 0x2, 0x4, 0x9}, {0x4c, 0x32, 0x6, 0x46aa1d0, 0x9}, {0x401, 0xd0b, 0x5, 0x6, 0xffff, 0x10001}, {0x0, 0x7fff, 0x0, 0xfffffff8, 0x8, 0x8000}, {0x10000, 0x8, 0x0, 0x7, 0x5, 0x3}, {0x30, 0x3, 0x1, 0x238, 0x68, 0x7ff}, {0x0, 0x8, 0x8, 0x6, 0x1, 0x4}, {0x4, 0x4, 0x7, 0xfffffff7, 0x3, 0x1}, {0x3, 0x1, 0x8, 0xe, 0xff, 0x3}, {0x5, 0x5, 0x5, 0x3000000, 0x5, 0x4cb9}, {0x10001, 0x9, 0xe1, 0x1, 0x5, 0x8}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x8, 0x4, 0x6, 0x7, 0x2, 0xfffffff7}, {0xff5, 0x6, 0x9, 0x0, 0x2, 0x9}, {0x6c, 0x3, 0x2, 0x8, 0x10001, 0x1}, {0x6, 0x10, 0x5, 0xfc, 0x0, 0x5}, {0xff, 0x8, 0x3, 0x5, 0xfffeffff, 0x5}, {0xfffffff9, 0x32, 0x7, 0xcd, 0x3, 0x401}, {0x1, 0x8, 0x9, 0x2, 0x6, 0xf80000}, {0x7, 0x80000000, 0xfff, 0x2800000, 0x1000, 0x2}, {0x8, 0xa, 0x7, 0x1729, 0xbb, 0x400}, {0x3ff, 0x9, 0x7, 0x4, 0x9b, 0x4}, {0x3, 0x2, 0x6, 0x7, 0x8, 0x100}, {0x10000, 0x5, 0xc5, 0x2, 0x9, 0x1}, {0xfff, 0x5c32, 0x3ff, 0x4, 0x3, 0xffff45fc}, {0x4, 0x6, 0x2, 0x9, 0x7ff, 0x7f}, {0xc, 0x7, 0x8, 0x9, 0x1, 0x5}, {0x10, 0x3, 0x0, 0x2, 0x1, 0x8001}, {0x4, 0x40, 0x5, 0x400, 0x7, 0xd096}], [{0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {}, {0x2}, {}, {0x5}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x5, 0xccb8397ae3d87755}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x4}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x1}, {0x4}, {0x5}, {0x5}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7}, {0x5}, {0x2, 0x1}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x6, 0x0, 0x2, 0x1000, 0xfff}, 0x6, 0xc8, [{0x8000, 0xe, 0x100, 0x7, 0x2, 0x6}, {0x6, 0x0, 0x7, 0x4, 0xbea9, 0xd17a}, {0xffff, 0x3, 0x8, 0x0, 0x7ca, 0x7fff}, {0x1, 0xc, 0x7ff, 0x1ff, 0x3, 0x3}]}, [{0x7, 0xfff, 0x4, 0x8, 0x8001, 0x8}, {0x5, 0x5, 0x97, 0x4, 0x2e, 0x8}, {0x2, 0x5, 0xffffff01, 0x2, 0x4, 0x49b}, {0x4, 0x4, 0x63, 0x506, 0xfffffffb, 0x4}, {0x5, 0x3, 0x401, 0xacd2, 0x4, 0x8001}, {0xf6, 0x1, 0x401, 0x80000000, 0xb, 0x2}, {0x1, 0x8001, 0x7fff, 0x2, 0x2, 0x3}, {0x7, 0x40, 0x0, 0x2, 0xf, 0x4cd}, {0x9, 0x9, 0x9, 0x1, 0x7ff, 0x8000}, {0x0, 0x1897ac5f, 0x8, 0x3e, 0x161, 0xfffffffd}, {0x1, 0x3d, 0x1, 0x8, 0x6, 0x8}, {0x7fff, 0xfffffff7, 0x5, 0xf8, 0x1, 0x839}, {0x57, 0xb693, 0x5, 0x10000, 0x5, 0x7}, {0x7, 0x4, 0x7fff, 0x10000, 0xfffffffe, 0x3}, {0x9, 0x3, 0x5, 0xffffffff, 0x8, 0x9}, {0x0, 0x2, 0x67f8, 0x6, 0x5, 0x6}, {0x10, 0x4, 0x80000001, 0xab, 0x8, 0x7}, {0x80, 0x1, 0x0, 0x3, 0x1, 0x3}, {0xc, 0x80000000, 0x5, 0x4, 0x20, 0x1}, {0x7, 0x6, 0x3, 0xe693, 0x6, 0x4}, {0x0, 0x4, 0x63e0, 0xf31, 0x40, 0xa}, {0xff, 0x6, 0x7fff, 0x6, 0x7, 0x5a23}, {0x8, 0x0, 0xc, 0x31, 0xfffffff8, 0x8}, {0xff, 0x8, 0x40, 0x3ff, 0x6, 0x401}, {0x8001, 0x3, 0xd55, 0xdb8, 0x390, 0x7}, {0x5, 0x400, 0x3, 0x5, 0x6, 0x6}, {0x100, 0x374a, 0x0, 0x1, 0x5, 0x4}, {0x80, 0xd48f, 0x8, 0x2, 0x7, 0x5}, {0xdeb, 0x8, 0x7, 0x4, 0x2, 0x3}, {0x81, 0x1, 0x9, 0x3, 0x0, 0x3ff}, {0x401, 0x2, 0x101, 0x261, 0xfffffffd, 0x7fff}, {0xd, 0x2fb, 0xffffffff, 0x196a3e83, 0x8}, {0x1, 0xdea9, 0x9, 0x9, 0x9, 0x6}, {0x401, 0x0, 0x3dd5, 0x1, 0x0, 0x3}, {0x6, 0x7, 0x80000000, 0x8, 0x4, 0x7}, {0xd8a8, 0x1, 0x4, 0x8, 0x8000, 0x5}, {0x10, 0x400, 0x7, 0x80, 0x11, 0x78}, {0x5, 0x800, 0x7, 0x1, 0x4, 0x6}, {0x3, 0xd939, 0x10001, 0x3, 0x1, 0xffff}, {0x252c, 0x80000000, 0x8, 0x9, 0x0, 0x9}, {0x6, 0x4, 0x5, 0xf, 0x400, 0xcb38}, {0x5, 0x200, 0x80000001, 0x5, 0x8, 0x9}, {0xed, 0x9, 0xfffffff9, 0x8, 0xe, 0xa5}, {0x6, 0x200, 0x5, 0x8, 0x76, 0x10}, {0x3, 0x6, 0x80000001, 0x5, 0x4, 0x7}, {0x200, 0x862, 0x5, 0x4c96, 0x321e, 0x977}, {0x7fffffff, 0x2, 0x2, 0x10000, 0x4, 0x5}, {0x6, 0x0, 0x4, 0x0, 0x200, 0x10000}, {0x100, 0x80000001, 0x1, 0x5, 0x6, 0xfff}, {0x7, 0x10001, 0xff000000, 0x2, 0x51, 0xfff}, {0xffffff16, 0xffffff81, 0x7, 0x2, 0x9, 0x3}, {0x7, 0x2, 0x5, 0x7, 0x2c87, 0x5}, {0x0, 0x101, 0x2, 0x0, 0xfffffff8, 0x100}, {0x3, 0x0, 0x4, 0x0, 0x484, 0xe36}, {0x6, 0xffffffff, 0x1, 0x1000, 0x4, 0x200}, {0x3, 0x10, 0x2, 0xbf2, 0x0, 0xfffffff9}, {0x4, 0x8063, 0x57, 0xfffffffe, 0x7}, {0x4, 0x4, 0x7, 0x3, 0x2, 0x5}, {0x7db, 0xfff, 0x9, 0xe4ef, 0x2, 0x438b}, {0xda5, 0x7, 0x80, 0x5, 0x8, 0x9}, {0x7, 0x3, 0x6, 0x4, 0xc, 0x7f}, {0x3, 0x1, 0x2, 0xf, 0x73a, 0x401}, {0x10, 0x4, 0x8, 0x8, 0x8, 0x3ff}, {0x7, 0xffffffd9, 0xfffffd9b, 0x1, 0xa317, 0xed6}, {0x4, 0x9, 0x1, 0x5, 0x4, 0xc975}, {0x5, 0x87, 0xffff, 0x0, 0x9, 0x59d3}, {0x297, 0x5, 0x198, 0x3, 0x4, 0x2}, {0x7f, 0x0, 0x2, 0xfffff437, 0x1, 0x7fffffff}, {0x2, 0x2, 0x200, 0x2c5, 0x1000, 0x95}, {0x1c7, 0x3, 0xa, 0x1, 0x7fff, 0x3}, {0x7f, 0x0, 0xf, 0x0, 0xa7b, 0x3}, {0x9, 0x1, 0x0, 0x10, 0x81, 0xb}, {0x3, 0x80000001, 0x6, 0x6, 0x1ec, 0x4a65}, {0x3, 0x6, 0x3, 0x980, 0x8, 0x4}, {0x101, 0xc9d, 0x4, 0x9, 0x3, 0x4}, {0x8, 0x2, 0x200, 0x2, 0x0, 0xffff}, {0x96, 0x7, 0x4, 0xfc6, 0x1}, {0xcd, 0xe898, 0xbacc, 0x2, 0x9, 0x6}, {0x7, 0x6, 0x8, 0x8001, 0x50000, 0x2}, {0x200, 0x80, 0x3, 0x5, 0x10001, 0xbce5}, {0x200, 0x3, 0x4, 0x5, 0x78, 0x9}, {0xffffff21, 0x3, 0x0, 0x2, 0x8, 0x1}, {0x0, 0x81, 0x9, 0x6, 0xb7c, 0xf30}, {0x7ff, 0x8, 0x6, 0x9, 0x8, 0x3}, {0xffffff4a, 0x52, 0x8, 0x5, 0xf, 0xd}, {0x7, 0xb5, 0xa, 0x40, 0x10}, {0x4, 0x2, 0x7f, 0x7fffffff, 0x5, 0x7}, {0xea, 0xffff4239, 0x7, 0xd, 0x55e1, 0x19dc}, {0xc1, 0x3, 0xd8, 0x9, 0x7fffffff, 0x6}, {0x0, 0xfe, 0xb9, 0x0, 0x5, 0x9}, {0x4, 0x2, 0xb, 0xd, 0xa, 0x10001}, {0x3ff, 0xa0d, 0x3, 0x10000, 0x8, 0xffffffff}, {0x0, 0x7, 0x1ff, 0x1, 0x1, 0xd}, {0x2, 0xc2, 0x3, 0x4, 0x8}, {0x80000000, 0x4, 0x3, 0x80, 0x8, 0xfffffffa}, {0x8ad, 0x8, 0xb, 0x80000001, 0x427b, 0x6}, {0x4, 0x97ee, 0x8, 0xff, 0x2563, 0x10}, {0x7fffffff, 0xf24, 0x8, 0x6, 0x3, 0x401}, {0xe81f, 0x5, 0x8, 0x2, 0x0, 0x8000}, {0x6, 0xffffffff, 0x4, 0xa9da, 0x9, 0xd}, {0xb, 0x0, 0x8, 0xf, 0x4, 0x7}, {0x7fff, 0x3c66, 0x1, 0x8000, 0x1, 0x8001}, {0x3, 0x8, 0x7, 0xef7d, 0x5426, 0x3}, {0x8000000, 0x7fffffff, 0x9, 0x971, 0x4, 0x6}, {0x8, 0x0, 0x8, 0x800, 0x9}, {0x7f, 0x8, 0x8, 0x97d, 0x0, 0x5}, {0x2, 0x7, 0x5d000000, 0x0, 0x3, 0x2}, {0x181e, 0x3, 0x200, 0x8000, 0x3, 0x35cabacf}, {0x2, 0x4, 0xe, 0x8, 0x9, 0x7f}, {0x4, 0xf4d, 0x4a, 0x4, 0x102, 0x4}, {0xfb2c, 0x4f, 0x4, 0xdb7, 0x4, 0x200}, {0x0, 0x2, 0x1, 0x5, 0x0, 0x2}, {0x0, 0x6, 0x62da2ad5, 0xb7, 0x6, 0xfffffffb}, {0x9, 0x200, 0x0, 0x8, 0x4, 0x1000}, {0x9, 0x6, 0xe, 0x0, 0x7fffffff, 0x60}, {0x17800000, 0xff, 0x6, 0x3, 0xfffffc00}, {0x1000, 0x7, 0xfffffff9, 0x9f3, 0x4, 0x8}, {0x7, 0xf4, 0x10001, 0x5, 0xffff, 0x2c}, {0x3, 0x1, 0x1, 0x10, 0x400, 0x3}, {0x80000000, 0x7, 0x0, 0x9, 0x6, 0x3}, {0x5, 0x7fff, 0x3, 0x3, 0x2, 0x1}, {0x80000000, 0xa01b, 0x5, 0x0, 0xf, 0x8000}, {0x1, 0x5, 0x8, 0x8, 0x0, 0x5}, {0xc5f, 0xffffffff, 0x6, 0x4e, 0x6278, 0x6}, {0x1, 0x6, 0x80, 0x8, 0x8000, 0x6}, {0x5a0, 0x7fffffff, 0x3, 0x8, 0x548, 0x8}, {0xfa0a, 0x100, 0x3ff, 0x7, 0x1, 0x4}, {0x7, 0xff, 0xe, 0x2, 0x4, 0x4}], [{0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x7}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0xf, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {}, {0x5}, {0x0, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5}, {}, {0x3}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x5}, {0x3}, {0x5}, {0x1}, {0x4}, {0x3}, {0x4}, {0x2}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x4}, {0x4}, {0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x49, 0x6, "200b08a1e9a153d69173db7a3d7b22f8c4c12c91dae417bf41c95f66ea58da85f22af91ef773b40330ef5130cc59ac2ac8dc06f81840956dd761ef9d051e64944df36d3828"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x94, 0x13, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0x63, 0x6, "e0bac6ab7a01559e31c7a8e324a55df1a24c4e2ee82e4907cd07a5301516ab1eed2d08a970a1edc7f98f47c8498926ff9609fbe2f0ab157838fc67e70b43966ac5552130e23b3a68da1032c00afcb3b06da172baea10566633f66e56742c42"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x1680, 0x1a, 0x0, 0x0, {{0xb}, {0x15f8, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0xfffffc30, 0x2, 0x6, {0x81, 0x0, 0x100, 0x2, 0x7, 0xfffffffd}, {0x3, 0x0, 0x5e4, 0xf97f, 0x929, 0xffff}, 0x21eb, 0x3, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x4, 0xfffffeff, 0x3, 0x5, 0x40, 0x10000, 0x83, 0x7, 0x1, 0x0, 0x8, 0x3, 0x7fff, 0x0, 0x8, 0x101, 0x8, 0x9, 0x4, 0xf, 0x3, 0xfff, 0xbce, 0xfffffffb, 0x5f, 0x8, 0xe, 0x6, 0xffff, 0x9, 0x10, 0x1, 0x4, 0x8, 0x4641dc1, 0x1, 0x6, 0x3, 0x6, 0x9, 0x8000, 0x6, 0x401, 0xf6f, 0x6, 0x7d000, 0x7, 0x9, 0x9, 0xb, 0x90, 0x800, 0x4, 0x3e6322e3, 0x4961, 0xe, 0x7, 0xfff, 0x4a0c, 0x7fff, 0xf2, 0x7fff, 0x0, 0x7f, 0x3, 0x2, 0xd6f, 0x6, 0x40, 0x6, 0x4, 0x2, 0x7f, 0x9, 0x8001, 0x8, 0x7, 0x1, 0x3, 0x487e23df, 0x4, 0x8, 0xb61, 0x8001, 0x9, 0xffff, 0x80000000, 0x2, 0x200, 0x5, 0x8000, 0x80000, 0x8, 0x7ff, 0x6, 0x400, 0xfffffffa, 0x9, 0xe, 0x101, 0xffffffff, 0x9, 0x5, 0x7, 0x7, 0xc, 0x0, 0xffffff7f, 0x7f, 0x1, 0xba, 0x2c37, 0x9, 0xffffffff, 0x800, 0x6, 0x2c5c, 0x9, 0x6, 0x9, 0x4a, 0x3, 0x3, 0x8, 0x8, 0x0, 0x80, 0x0, 0xfffffff9, 0x6, 0xffff, 0x6, 0x3, 0x599, 0xffff8001, 0x4, 0x5, 0x40, 0xa, 0x8, 0x1, 0xffffff46, 0x2, 0x4, 0x38, 0x9, 0x8001, 0x400, 0xffffffff, 0x391b0491, 0x1, 0x4, 0x10000, 0x5, 0x3, 0x2, 0x6, 0x401, 0x8001, 0x2, 0x5, 0xb50, 0x3a9e, 0x9d5, 0x0, 0x8, 0x6, 0xb0, 0x401, 0x3, 0x10000, 0x0, 0x6, 0xfffffff7, 0x8, 0xa629, 0x7ff, 0x7, 0x8000, 0x5, 0x6, 0x7ff, 0x5, 0x3, 0x0, 0x3, 0x0, 0x9, 0x5, 0x6, 0x0, 0x4, 0x8, 0x3eba, 0x2, 0x5, 0xfac9d380, 0x8d5e, 0xffff0000, 0x81, 0x3, 0xff, 0x8, 0xa9ff, 0x400, 0x852c, 0xffff, 0xbc2, 0x4, 0x0, 0x2, 0xe00b, 0x9, 0xd3, 0x8, 0x5, 0x7, 0x0, 0x0, 0x4fb6, 0x81, 0x7, 0xb, 0x4, 0x1, 0xf1, 0xe, 0x0, 0xc223, 0x4, 0xfffffffc, 0x40, 0xe, 0x3, 0x3, 0x200, 0x7fffffff, 0x4, 0xffff0001, 0x9, 0x8000, 0x681, 0x6, 0x2, 0x659, 0xc, 0x8, 0x6, 0x6, 0x4, 0x7, 0x6, 0x467, 0xfff, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x800000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8894, 0xffff, 0x0, 0x1, 0x7f, 0x7, 0x5, 0xf80, 0x4, 0x1, 0xf21, 0x8, 0x0, 0x6, 0xffff, 0x6, 0x5, 0x80, 0x0, 0xf, 0xa, 0xfffffff2, 0x7, 0x3, 0xb2, 0x6, 0x18, 0x2, 0x8, 0x4, 0x8000, 0x1, 0x40, 0xd, 0x200, 0xffffd5bd, 0x8, 0x6, 0xa7a2, 0x2, 0x10000, 0x8, 0x5, 0xa, 0x6, 0xffffffd6, 0x4b09860b, 0x8f72, 0x1, 0x5, 0xfffff45d, 0x7fffffff, 0x1ffc0, 0xd0, 0xfffffff8, 0x9, 0x0, 0x1ec, 0x38f9, 0x75, 0x0, 0x8, 0x5, 0x3, 0x8, 0x1, 0x9, 0x1, 0x4, 0x14, 0x6, 0x4, 0x177, 0xfffffc01, 0x0, 0x400, 0x5, 0x2, 0xffffffff, 0x9, 0xfff, 0x7, 0xffffffde, 0x81, 0x401, 0xae9b, 0x4, 0xc, 0x3, 0x3, 0xc, 0x5, 0xfff, 0x6, 0x3575138f, 0x2, 0x7, 0x9, 0x9, 0x0, 0xe, 0x3, 0xb, 0x9, 0xc7, 0x80000001, 0xffff, 0x3, 0x6, 0x180000, 0x6, 0x6, 0x6, 0x3, 0xc4, 0x6, 0x1, 0xb95d, 0x7, 0x5, 0x4, 0xdd9, 0x193, 0x5, 0x800, 0x9, 0x8, 0x6, 0xc, 0x9, 0x80000001, 0x10, 0xcfd, 0x0, 0xffffff6e, 0x0, 0x10, 0x6, 0xfffffffa, 0xe, 0x7, 0x40, 0x7, 0x6, 0x60, 0x1, 0x2, 0x8, 0x1, 0x6, 0xf5, 0x6, 0x3, 0x2, 0x3, 0x1000, 0x8, 0xffffff01, 0x51ed, 0x10001, 0x9, 0x7, 0x48d88ca7, 0x7, 0xd, 0xffff, 0x9, 0x2, 0xff, 0x5a8d0dac, 0x80, 0x6, 0x5, 0x8, 0x100000, 0xe, 0xffffffff, 0x4, 0x4, 0x2, 0xcf, 0xfff, 0x81, 0x1, 0x1, 0x6, 0x800, 0x7fff, 0x3, 0x3, 0x6, 0xf, 0xa5, 0x1, 0x93b, 0x7fff, 0x9, 0x7, 0x1, 0x80000001, 0x3, 0x101, 0x5, 0x4, 0xff, 0x4, 0xffffffff, 0x9, 0x7, 0x37e9b3c8, 0x2, 0x2, 0xfd8, 0xffffffff, 0x3, 0xfffff800, 0x6, 0x7, 0x5, 0x1, 0x5, 0x3, 0x4c4d, 0x1, 0x5, 0x387, 0xbee, 0x6, 0xd9, 0x3, 0x2e, 0x4, 0x1, 0x401, 0x3, 0x1ef, 0x81, 0x8, 0x7, 0x6, 0x0, 0x7ff, 0x80000001, 0x0, 0xd7, 0x25fa, 0x80, 0x3, 0x4, 0x7ff, 0x0, 0x1, 0x6, 0x5, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3f2, 0x0, 0x101, 0x619d, 0x2, {0x5, 0x0, 0x8, 0x9, 0xb}, {0x40, 0x1, 0x1, 0x9, 0x4, 0x10000}, 0x3e5, 0xfffffff7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x8, 0x7, 0x2, 0x3ff, 0x2, 0x9, 0x8001, 0xffffff00, 0x1, 0x2, 0x2, 0x1, 0x9, 0x5, 0x5, 0x7ff, 0x0, 0x5, 0x9, 0xfffffffa, 0xffff70c0, 0x8001, 0x40, 0x9, 0xf, 0x10001, 0x0, 0x6, 0x2, 0xfffffffa, 0x2, 0x2, 0x9, 0xff, 0x2, 0x4, 0xfffffe00, 0x1, 0x5, 0x7e84, 0x9, 0x0, 0x7f, 0xbb7, 0x9, 0x7, 0x4, 0x5, 0xe3b, 0x0, 0x800, 0x8, 0xc, 0x5, 0x8, 0x0, 0xc, 0x3de, 0xfff, 0x3, 0x6, 0x80000001, 0x75, 0x5, 0x4, 0x3, 0x0, 0x81, 0x2, 0x7, 0x5d5, 0x8001, 0x8, 0x2, 0x7a, 0x7, 0x0, 0xfffffff7, 0x10000, 0x9668, 0x6, 0xfe, 0x4, 0x9, 0x7, 0xfffffeff, 0x81, 0x7, 0x5, 0x6729, 0xb, 0x80000001, 0xb1a, 0x3, 0xfffffff8, 0x0, 0x6, 0x3, 0x40, 0x8, 0x5, 0x7, 0x8, 0x6, 0x81, 0x2, 0x5, 0x82, 0x7, 0xfffffffe, 0x49, 0x9, 0xd9ef, 0xebc1, 0x1, 0x1, 0x4, 0x8001, 0x13c, 0x7fffffff, 0x0, 0xfffffc01, 0x5, 0xe6, 0x7, 0xb, 0x0, 0x6, 0x9e05, 0x7f, 0x4, 0x1, 0x6, 0x259, 0x83, 0xe02, 0x0, 0x9, 0x3, 0x3, 0x1000, 0x6, 0x2, 0x1a00, 0x1, 0x8, 0x8, 0xffff, 0x9, 0xff13, 0xffff8000, 0x9eb4, 0x2f6a1739, 0x9, 0x9, 0xfffffffb, 0xb, 0xf, 0x2, 0x7fffffff, 0xfff, 0x10, 0x7, 0x1, 0x0, 0x0, 0x8, 0x4, 0x5, 0x7, 0xffff612b, 0x1ff, 0xac74, 0x3, 0xb, 0x0, 0x7, 0x7, 0x4f68, 0xe, 0xff, 0x1, 0x80, 0x6, 0x7f, 0xbb2e, 0xbe8, 0x49, 0x6, 0xb000, 0x1, 0xfa38, 0x7, 0x2, 0x0, 0x6, 0x1, 0x8000, 0x3, 0xd, 0xfffffffd, 0x7, 0x6, 0x9, 0x2, 0x100, 0x100, 0x5f30, 0x9, 0x5, 0x0, 0x4, 0x401, 0x2, 0x0, 0xc90, 0xddd, 0x8, 0x1, 0x48, 0x7fff, 0xffffffff, 0x6, 0x7, 0xae3, 0x1000, 0x418cc685, 0x5, 0xfff, 0x5, 0x8, 0x9ed, 0x4, 0x6, 0x0, 0x3, 0x8, 0x2, 0xfbac, 0x4, 0x7, 0x3ff, 0x2ee, 0x2, 0x800, 0x7, 0x401, 0x1, 0xd3b, 0x6, 0xfff, 0x5, 0x2, 0xfffffff4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x1, 0x32f6, 0x6, 0xd1, {0x6, 0x0, 0x200, 0x6, 0xffff}, {0x9, 0x1, 0xef, 0x7f, 0x9, 0x1995}, 0xb69e, 0x7, 0x2e9a}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xe516}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x40, 0xfffffffa, 0x3, 0xfc2, 0xa, 0x100, 0x10001, 0xea4a, 0x0, 0x9, 0x5, 0x8, 0x80000000, 0x7, 0x5, 0x355ff9bd, 0xe3a, 0x3, 0x4, 0x4, 0x8d4, 0x323, 0x3, 0xffff, 0xfffffffa, 0x5, 0x7, 0x40, 0x0, 0x3, 0x9, 0x10000, 0x4, 0x101, 0x3, 0x8, 0x8, 0x6, 0x33, 0xb2b, 0x8, 0x9, 0x80, 0x210, 0x10, 0x9, 0x2, 0x3e, 0x101, 0x6, 0x1c1, 0x1, 0x35, 0x9, 0x2, 0x4, 0x9, 0x3, 0x0, 0x7, 0x8, 0xfffff001, 0x80000001, 0x1, 0xc, 0x10001, 0x7, 0x2, 0xfffffff7, 0x3, 0x814, 0xf, 0x1fe7, 0xfffffffd, 0x0, 0xf61, 0x7, 0x4, 0x8, 0x9, 0xfffffff9, 0x6, 0x10000, 0x3, 0x2, 0xffffffff, 0x6d5, 0x80000000, 0x1, 0x2, 0x3, 0x9, 0x1, 0x9, 0x7855df07, 0xe2d, 0xc00, 0x9, 0x6742, 0x3, 0x2, 0x2, 0x7, 0x1000, 0x300000, 0x3116, 0x5, 0x7, 0x10001, 0x237, 0x7, 0x559b, 0x6, 0x4, 0x7, 0x7, 0x3, 0x1000, 0x2, 0x0, 0x67f9, 0x8, 0x3, 0x2, 0xfffffffb, 0xa7b, 0x3, 0x400, 0x100, 0x2000, 0x1, 0x6b0, 0x1000, 0x8, 0x6, 0x401, 0x6, 0x101, 0x8, 0x5ea4, 0x401, 0xf, 0x4, 0xcb, 0xd, 0x400, 0x0, 0x6, 0x90, 0xfffffff4, 0x1, 0x3, 0x5, 0x3, 0xe831, 0x6acc, 0x7, 0x7fffffff, 0x9, 0xfffffff7, 0x68920, 0x9, 0x2, 0x3ff, 0x2, 0x4, 0x5bf8, 0xb40, 0x4, 0x8001, 0x1, 0x1, 0x72c, 0x19a, 0x3, 0x101, 0x2, 0x81, 0xffff, 0x2c000, 0xa3, 0x3, 0x6, 0x7f, 0x2, 0x3, 0x8, 0x10001, 0x0, 0x6, 0xa8c2, 0x178, 0x800, 0x3, 0x811, 0xdc2f, 0x0, 0x4, 0x8001, 0x0, 0xc6, 0x3, 0x10, 0x4, 0x8, 0x7, 0x2, 0x194, 0x8e, 0x8, 0x213, 0xfffffe01, 0xe, 0x1000, 0x0, 0xfff, 0x0, 0x8, 0x6, 0x5, 0x3, 0x2, 0x6, 0x0, 0x5, 0x401, 0x1, 0x0, 0x2, 0xca, 0x3, 0x3, 0x5, 0x1, 0x8, 0x8, 0x5, 0x7f, 0xfffffffd, 0xa4, 0x2, 0x2, 0x60dfdedb, 0x4, 0x0, 0x7f, 0x1, 0x6, 0x7f, 0xb035, 0x6, 0x3, 0xc, 0x4, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x94, 0x8000, 0xd, {0x2, 0x1, 0xd8, 0x3, 0x9, 0x1}, {0x69, 0x2, 0xc000, 0x57, 0x4, 0xc}, 0x2, 0x55d, 0xc2}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x401}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x2, 0x3, 0x13, 0x3, 0x81, 0x80000000, 0x4, 0x5, 0x80000000, 0x6, 0xfffffffa, 0x3, 0x9, 0x9d, 0x1, 0x1, 0x120000, 0x7, 0x2, 0xca, 0x9, 0x7f, 0x9, 0xe, 0xfffffffa, 0x4c, 0x3, 0x9, 0x8, 0x9, 0x2, 0x205, 0x4, 0x1, 0x8, 0x7f, 0x81, 0x74, 0x400, 0x2, 0x1000, 0x80000001, 0x6, 0x188, 0x1, 0xf99, 0x4, 0xe, 0xc, 0x7fffffff, 0xc6, 0x7, 0x0, 0x2, 0x3, 0x9, 0x2, 0x4, 0xda, 0x8, 0x0, 0x0, 0x80, 0x6, 0x4, 0xfffff001, 0x3ae, 0xb, 0x5, 0x1, 0x51d, 0x7, 0xfffffff7, 0x5, 0x1, 0x2, 0x0, 0x80000000, 0xffffff2d, 0x1, 0x2, 0xf, 0x7, 0x78, 0x8, 0x4, 0x1, 0xfffffffa, 0x0, 0x9, 0x5, 0x7fffffff, 0x4, 0x970, 0x9, 0x0, 0x4, 0x5a78fd6f, 0xbe, 0x0, 0x8, 0xb, 0x7, 0xa5d8, 0x8001, 0x0, 0x81, 0x9, 0x1ff, 0x1, 0x2, 0x1, 0x0, 0x200, 0xd91, 0x493, 0x3, 0xf24a, 0xffff, 0x9c01, 0x8, 0x0, 0x2, 0x8, 0x7ff, 0x7, 0x8, 0xf, 0x5, 0x4, 0x2, 0x59c, 0x6db, 0x4, 0x5, 0xe5aa, 0x1, 0x3, 0x4f6f, 0x101, 0x5, 0x6, 0xfff, 0x40, 0x1, 0x891e, 0xff, 0xa30, 0x37, 0x3a44, 0x10, 0x2, 0x2ab, 0xfffffffc, 0x7f, 0x5, 0xfffffc00, 0x1, 0xa168, 0x56b, 0x9, 0x6, 0x28000, 0x5c, 0x800, 0x7, 0x2, 0x80, 0x4, 0x7, 0x25eac8e6, 0xfffffff7, 0x1, 0x2, 0xf8000000, 0xffff, 0x800000, 0x0, 0x8222, 0xc0, 0x9, 0x6, 0x101, 0x7, 0x5, 0xb5, 0x3, 0x5, 0x100, 0x407c, 0x10000, 0x8, 0x40000, 0x2, 0x8, 0x1, 0x0, 0x6, 0x7, 0xdb, 0x0, 0xc, 0x7, 0x4, 0x9a, 0x6, 0xfffffffd, 0x9, 0x9, 0xd66, 0x4, 0x1, 0x8000, 0x1, 0x9, 0x3, 0x2, 0x2, 0x7f, 0xe04, 0xd, 0x6, 0x80000000, 0xfffffffa, 0x4, 0x8001, 0x0, 0xfffff801, 0x1, 0x77, 0x7f, 0x0, 0x82d, 0x4, 0x3, 0x5, 0xfffffc00, 0xcec, 0x0, 0xffff7be5, 0xe72, 0x0, 0x0, 0x51000, 0x7, 0x100, 0x3, 0x3, 0x7fffffff, 0x5, 0x4, 0x6, 0xc, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x97a}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x7, 0x700, 0x800, 0xaf7f, {0x2, 0x2, 0x40, 0x6, 0xd, 0x3}, {0x7f, 0x0, 0x1000, 0x4307, 0x1000, 0x8e}, 0x8, 0x4c, 0xfffff001}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xad53}], [], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff3e4b}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe4db}]]}, {0x5e, 0x6, "8ad21c43d90a64e8d352535d3763f5895f771ce960e62988cb2a0f1d8abce50315a6b52c0f2224190963e0b15f0c043b849d0394051185adba07c56b51eb58235b73895073eadea63fe187df465214d9cf4a1ed7b6d7aab71172"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1148, 0x19, 0x0, 0x0, {{0xb}, {0x10a0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7ff, 0xd, 0x2, 0x4, 0x8c9, 0x5, 0xb50, 0x5, 0x4c, 0x5, 0x5, 0x0, 0x9, 0xdf, 0xb, 0x4, 0x10001, 0x3, 0x2d2, 0x30b, 0x8, 0x800000, 0x5, 0x80000000, 0x3, 0xce7b, 0xa, 0x80, 0x9, 0x1000, 0x2, 0x3c, 0x8, 0x9, 0x7, 0x3358a155, 0xffffffff, 0x80000000, 0x10001, 0xfffffff8, 0x5, 0x6, 0x0, 0x0, 0x2, 0x200, 0x5, 0x7, 0x0, 0x400, 0x8000, 0x8, 0x400, 0x2, 0x5, 0xff, 0x6, 0x4958, 0x7, 0x7ff, 0x212, 0x0, 0x9, 0x0, 0x401, 0x2, 0x200, 0x6, 0xd61, 0x2, 0x1, 0xfffffffa, 0x7, 0x101, 0x58, 0x0, 0x2, 0x7f, 0x78, 0x9, 0x2, 0x5, 0x2, 0x401, 0xd4, 0x82b2, 0x1c, 0x19ff, 0x3, 0x0, 0x0, 0x3, 0x81, 0x9, 0xa, 0x80000001, 0xfee, 0xb, 0xc, 0x2, 0x80000001, 0x7ff, 0x0, 0x6, 0x6e, 0x9, 0x3a, 0x2, 0x4, 0xf, 0xd, 0x81, 0x7, 0x1, 0x6, 0x2c000, 0x1, 0x9, 0xff, 0x1c0, 0x3, 0x8, 0x2, 0x1, 0x5, 0x400, 0x0, 0xa68, 0x7fffffff, 0x2, 0x7, 0x3, 0x3, 0xd, 0x1, 0x5, 0x80000000, 0x2, 0x7ff, 0x0, 0xff, 0x8, 0x5, 0x8, 0x6, 0x115, 0xfa, 0x9, 0x0, 0x3, 0x2, 0x7, 0x7, 0x5, 0x2, 0x645, 0x8, 0x80000001, 0xb7, 0x0, 0x10000, 0x4, 0x8, 0x8, 0xd, 0x3, 0x8, 0x7ea50f2a, 0x401, 0x2, 0xfffffff9, 0x1, 0x5, 0x4, 0xb2, 0x3, 0x6, 0x7, 0x1, 0x800, 0x8, 0x8001, 0x2, 0x4, 0x7fffffff, 0x2, 0x8, 0xfffffffd, 0xc, 0x0, 0x2, 0x7fffffff, 0xfff, 0x0, 0x2, 0x2b, 0x4, 0x9, 0x3, 0x8f, 0x4, 0x1, 0x0, 0xffffffff, 0x101, 0x7f, 0x800, 0x4, 0x4, 0xfffffffc, 0x0, 0x10001, 0xc50, 0x551f, 0x9, 0x6, 0x61c, 0x7fffffff, 0x8, 0x8, 0x4, 0xffff, 0x7fffffff, 0x8, 0x8, 0x2, 0x6, 0x6, 0x8, 0x0, 0x400, 0x29, 0x7, 0x336, 0x101, 0x2, 0xfffffff8, 0x2, 0x8, 0x401, 0x4d9, 0x7fff, 0x0, 0x1, 0x5, 0x80, 0x8, 0x3, 0x9, 0x401, 0x1, 0xffff, 0x9, 0x7ff, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x8, 0x141, 0x5, {0x8, 0x1, 0x3, 0x6, 0x4, 0x10000}, {0x3, 0x1, 0x0, 0x7f, 0x100, 0x7}, 0x6, 0xf8, 0x56f6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x78d}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffff800, 0x7, 0xffffffff, 0x0, 0x9, 0xae07, 0x8, 0xef, 0x4, 0x101, 0x0, 0x8, 0x5, 0x6, 0x2, 0x4, 0x7, 0x509, 0x8, 0x6, 0xd, 0x8, 0x8, 0x6, 0x3, 0x8, 0x9, 0x3, 0x7fff, 0x200, 0x0, 0x7, 0x3, 0x1, 0x4, 0x809, 0x5, 0x800, 0x9, 0x7, 0x4, 0x8, 0x200, 0x3800, 0x0, 0x6, 0x5, 0x8, 0x0, 0x0, 0x4, 0x3, 0x6, 0x3, 0xb, 0x1, 0xffffffff, 0x5, 0x2, 0xc, 0x3, 0xa36, 0x9, 0x9, 0x1ff, 0x4, 0x3ec9, 0x101, 0x3, 0x10001, 0x5, 0xb0a, 0x6, 0x800, 0xe, 0xfffffffd, 0x8, 0x1, 0x931, 0x10, 0x4, 0x7, 0x5, 0x9, 0x0, 0x0, 0x7, 0xd253, 0x2286, 0x3b, 0x9, 0x3fa, 0x4, 0x1, 0x0, 0x4, 0x4, 0xded1, 0x1, 0x1, 0x4, 0x3, 0x4, 0x9, 0xfc36, 0x200, 0x200, 0x101, 0x3, 0x7, 0x800, 0xffff0000, 0x6, 0x5, 0x768, 0x7f, 0x0, 0x0, 0x7, 0x3, 0x57e2, 0xfffffffc, 0xa6, 0x8, 0x1, 0x7, 0x4, 0xff, 0x2, 0x5, 0x3ff, 0x0, 0x2, 0x3ff, 0x800, 0x9, 0x80, 0xc, 0x7, 0x3, 0xfffffffd, 0x2, 0xfffffffc, 0xfffffff8, 0x6, 0x4, 0x0, 0x6, 0xd, 0x6, 0x6, 0x2, 0x8, 0x3, 0x0, 0x7fffffff, 0x6a5, 0x767, 0xe20, 0x4, 0x401, 0x5, 0xf, 0x1, 0x0, 0x7, 0x7, 0xfffffff8, 0xffffffff, 0x6, 0x6, 0x7, 0x0, 0xb, 0x1, 0xfffffff7, 0x94, 0x7, 0xffffffff, 0x80, 0x1, 0x7ea, 0x80, 0x10001, 0x87cd, 0x5, 0x1000, 0x6, 0x5, 0x1, 0x9, 0x2, 0x3, 0x7, 0x0, 0x7ff, 0x9, 0x8, 0x7, 0xfffffffd, 0xd79, 0x7, 0x1, 0x3, 0x8001, 0x1, 0x7, 0x3, 0xfffffff8, 0xab, 0x0, 0x101, 0x9, 0x80000000, 0x30fed23c, 0x0, 0x8, 0x5ebd, 0x400, 0x4, 0x9, 0xd, 0x1000, 0x5, 0x1, 0x5, 0x4, 0x101, 0x6, 0x8, 0x5, 0x74d, 0x0, 0x2, 0x3, 0x6, 0x4, 0x2, 0x2, 0x3, 0x3, 0x1, 0x9, 0x9, 0x40, 0x40, 0x6, 0x8, 0x1000, 0x10000, 0x2a4, 0xc2, 0xb, 0xcb9f, 0x2, 0xc163]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x99, 0x5, 0x3, 0xa78d, 0x9, 0x7, 0x3, 0x87, 0x6, 0x0, 0x7, 0x0, 0x10, 0x2, 0x6, 0x2, 0xb, 0x5, 0x9, 0x2, 0x64, 0x200, 0xc, 0x2, 0x9, 0x9, 0x5, 0x4a94, 0x2, 0x7f, 0x401, 0xc8f, 0x8, 0x5, 0x5, 0x669, 0x400, 0x0, 0x5, 0x0, 0x5, 0x0, 0x9, 0x5, 0x0, 0x1000, 0x5, 0x7fff, 0x8, 0x4, 0x5, 0xb78, 0xffff4f99, 0x3, 0x0, 0xcc9, 0x5, 0xc, 0x14e, 0x0, 0x3, 0x2, 0x1, 0x8, 0x5, 0x800, 0x5, 0x7, 0x2, 0x8, 0x916, 0x27c8, 0x101, 0x6, 0x0, 0x987, 0x7ce, 0x3, 0x6, 0x100, 0x4, 0x2, 0xb, 0x80, 0x1, 0x8000, 0x8, 0x400, 0x4a, 0xe, 0x7f, 0x960, 0x5, 0x8, 0x101, 0x0, 0x8, 0x1, 0xa, 0x841, 0x578, 0x10000, 0x5, 0x8, 0x8, 0x2c, 0xb16, 0x48eb64ce, 0x800, 0x0, 0xff, 0xd6a, 0x80, 0xd7e9, 0x3ff, 0x7, 0x200, 0x4, 0xc7a8, 0x100, 0x0, 0xdb1b, 0x5, 0x7ff, 0xfffffffd, 0x400, 0xe, 0x296287db, 0xd, 0xb, 0xffffffff, 0xd615, 0x89af, 0xffff54fc, 0x8a, 0x5, 0xfffffff7, 0xc36, 0xd, 0x0, 0x6, 0xf, 0x2, 0x1, 0xe6, 0x9, 0x1f2, 0xffff, 0x5, 0x6, 0xd, 0xffffb73f, 0x10001, 0xeaf, 0x0, 0x2, 0x4b4d, 0x7ff, 0x5, 0x17da, 0x6, 0x9b, 0x2, 0xffff4e78, 0x7, 0x7, 0x7fff, 0x200, 0x7fffffff, 0x3, 0xd675, 0xd, 0x0, 0x2, 0xfff, 0x2, 0xf456, 0x2, 0x0, 0x4, 0xa, 0x4, 0x170, 0x2, 0x81, 0x10000, 0x7, 0x7, 0x0, 0x8, 0x80000000, 0x4, 0x7, 0x8, 0x7f, 0x3, 0x8, 0x6, 0x2f, 0x3, 0x8, 0x56, 0x100, 0x8d, 0x6, 0xd049, 0xe4, 0xfffffffb, 0x3, 0x6, 0x9, 0xcb, 0x3, 0xffff, 0xe630000, 0x3, 0x5, 0x7, 0x8001, 0xd0000000, 0xfffffff4, 0x8, 0x6, 0x2, 0x0, 0x101, 0x400, 0xb, 0xfffffff8, 0x53cc, 0x3, 0x0, 0x7f, 0x0, 0x3, 0x4, 0x8bc, 0x7, 0x6, 0x4, 0xffff, 0x8001, 0x2755fbfc, 0x3, 0x8, 0x0, 0x0, 0x1e67, 0x2d, 0xfffffff7, 0xfffffff8, 0x4, 0x10000, 0x7ff, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x0, 0x4, 0x2, 0x7, 0x4, 0x4, 0x3, 0x8, 0xfffffffc, 0x2, 0x3, 0x3, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x4, 0x7f, 0x8, 0x8, 0x40, 0x2, 0xf8, 0x9, 0x4, 0x80000001, 0x15e, 0x7, 0x0, 0x7, 0x5, 0x400, 0xe, 0x8, 0x7, 0x4, 0xd, 0x8001, 0x9, 0x9, 0x4, 0x0, 0x4, 0x1, 0x0, 0x1, 0x5, 0x7ff, 0x80000000, 0x0, 0x81, 0x7, 0x1ff, 0x7, 0x6be5, 0x0, 0x513, 0x4, 0x8, 0xc, 0x0, 0x2, 0x70, 0x9, 0x8, 0x2, 0x0, 0xfffffffc, 0xf5, 0xc5, 0x3, 0x5, 0x1, 0x7, 0x1, 0x0, 0x8, 0x9, 0x1, 0x8, 0x8, 0x3, 0x3, 0x0, 0x400, 0x3, 0x4, 0x1, 0x6b, 0xf, 0x1, 0x0, 0xc, 0x7, 0x1, 0x4, 0xd, 0x1, 0xdf2, 0x5, 0x8b, 0x1, 0x1, 0x35, 0x401, 0xfffffff2, 0x9, 0x8, 0x1, 0x7, 0x3, 0x80000001, 0x5, 0x9, 0x4, 0x8, 0x7, 0x4, 0x5b3a, 0xc, 0x4, 0x2, 0x3, 0xc69, 0x8001, 0x80000000, 0x80000001, 0x3, 0x9, 0x9, 0x6ed, 0x0, 0x1000, 0x472ed1bd, 0x1, 0x4, 0x79, 0x8, 0x400, 0x1, 0x0, 0x8, 0x10001, 0xb, 0x9, 0x7, 0xa2, 0x10, 0x7ff, 0xf61, 0x6, 0x3, 0x6, 0x400, 0x56a, 0x0, 0x8, 0x5, 0x1c, 0xa, 0xfffffeff, 0x8, 0x7fff, 0x9, 0x10, 0x0, 0x8, 0xa, 0x4, 0xe90, 0xffff8001, 0x89, 0xf3, 0x6, 0x4, 0x7, 0x3, 0x0, 0x8c, 0x9, 0x7, 0x3, 0x8, 0x337adde3, 0x8001, 0x100, 0xffffffff, 0x2, 0x2, 0x5a, 0x2, 0x3f2d, 0x8, 0x6, 0x10001, 0xcce, 0x0, 0x2, 0x0, 0x9c, 0xfff, 0x12, 0x8000, 0x4, 0x18, 0x3, 0x7, 0xffff, 0xfffffffd, 0x6, 0x40, 0x80000001, 0xc, 0x9, 0x2, 0xd, 0xd9, 0x8, 0x2, 0x9, 0x800, 0x7fffffff, 0x8157, 0xf, 0x86e, 0x4, 0x1, 0x1, 0x2, 0xf21, 0x0, 0x3, 0x1, 0x4, 0x4, 0x6, 0xa, 0x100, 0x80000000, 0x0, 0x7, 0x0, 0xa, 0x10001, 0x1, 0x7, 0xfffffffc, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x2]}]]}, {0x7f, 0x6, "b6e4993bbfe65c63fae16116cf677a91a84f1f45c8a62859deafc07609bf08521c1d0a7ec1ee153b974ecdd9e3e2140a6819885df33770307194b72aafae98cda8739b8bf92cca7e03a9379c32975fa6dae3ebb42c6a7f0bb43fea5782b0b8a131cbc46692b74d7b5e6310ecaf357496e72cc2b049a6db12e44539"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_RSVP_POLICE={0x1c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0x1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x3, 0x5}, {0x3, 0x2, 0x4}, 0x16, 0xa, 0x7}}, @TCA_RSVP_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}, @f_tcindex={{0xc}, {0x4b4, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0xc}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x5583}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x4}, @TCA_TCINDEX_POLICE={0x488, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x92, 0x5, 0x40f, 0x1200000, 0xcf, 0x3, 0xfffffff9, 0x290, 0xa, 0x6a, 0x6, 0x4, 0xe, 0xadc7, 0x6, 0x101, 0x401, 0x5, 0x7fd6, 0x2, 0x1, 0xee83, 0x4, 0x0, 0x8f, 0x9, 0x7ff, 0x7f, 0x85, 0x2, 0x6, 0x4, 0xffff, 0x7b, 0xb, 0x2, 0x5, 0x2, 0x2, 0xfde, 0x8091, 0x9, 0x6, 0x5, 0x400, 0x2, 0x1, 0x1, 0x4, 0x8, 0x81ba, 0x3, 0x9, 0x80000001, 0x800, 0x9, 0x4, 0x5, 0x4, 0x2, 0x7894, 0x1, 0x5, 0x5, 0xb, 0xc09, 0xf, 0x3, 0x8, 0x3, 0x3, 0x2, 0x1, 0xf, 0xbca, 0xff, 0x7, 0x9, 0x9, 0x8, 0x8, 0xaf, 0x28, 0xa565, 0xd, 0xc, 0x85, 0x400, 0x0, 0x5c1, 0x2, 0x4, 0x5, 0x9, 0x8, 0x2, 0x1, 0x80000000, 0x3, 0x6, 0x9, 0x51c, 0x5, 0x6, 0xfffffffb, 0x400, 0x8, 0x400, 0x5, 0x9, 0x9, 0x200, 0xbad8, 0x3, 0x2, 0x6eb, 0xf, 0x0, 0xfffffffb, 0x18, 0x0, 0x5, 0x7ff, 0x5, 0x0, 0x1, 0x7, 0x6, 0x8, 0x8, 0x77, 0xe, 0x5, 0xb52, 0xfffffff7, 0x4, 0x1, 0x6, 0x7, 0x7f, 0x7, 0x3, 0x9, 0xc46b, 0x8, 0x5, 0x59, 0x6, 0x3, 0xa, 0xfffffffe, 0x9, 0x9, 0x7, 0x1, 0x6, 0x161, 0x7, 0x9, 0x5, 0x2, 0x5284, 0x5, 0x7, 0x6, 0x79020806, 0x2, 0x6, 0xfff, 0x19277ee6, 0x7e38b704, 0x7, 0x3, 0x8, 0x401, 0x8, 0x2, 0x5, 0xc, 0x1ff, 0x6, 0xaa8e, 0x2, 0x6, 0x2, 0xa, 0xc4d2, 0x0, 0x6, 0x7c, 0x480d, 0x200, 0x0, 0x1, 0x10001, 0x7ff, 0x80000000, 0x10001, 0x10, 0x145f, 0x1, 0x7, 0x0, 0x4, 0x3, 0x1, 0xfffffffa, 0x1, 0x2, 0x4, 0xfff, 0x3ff, 0x10000, 0x1000, 0x9, 0x3, 0xe770, 0x9, 0x4, 0x8, 0x8, 0xe02, 0x7fffffff, 0xffff, 0x1, 0x2, 0x4e, 0x2, 0x3, 0x80000000, 0xee, 0x72bc61b4, 0x400, 0xfffffffd, 0x5, 0x9, 0x7, 0x7, 0xfffffffb, 0xfb, 0x0, 0x3, 0x1, 0x6, 0x322, 0xff, 0xfffffffe, 0x0, 0x8, 0x3, 0x4, 0x401, 0xba55, 0xec, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x5, 0x8, 0x9, {0x3, 0x0, 0x101, 0x98, 0xf, 0x5}, {0x2, 0x2, 0xb, 0x4, 0x4, 0x5}, 0x8, 0x2, 0x100}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x6, 0x1, 0x7272, {0x80, 0x1, 0x6, 0x5, 0x0, 0x6}, {0x2, 0x1, 0x1, 0x2, 0x3, 0x250924ea}, 0x3f18, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x73d}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x5c81}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x4f08}, 0x1, 0x0, 0x0, 0x55}, 0x4000080) r12 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000005980)={0x0, &(0x7f00000056c0)=[@wrmsr={0x1e, 0x20, {0x357, 0x6}}, @code={0xa, 0x61, {"b9dc0a0000b800000000ba000000000f3064420f789d000000008f4ad8128e00000000a3000000b8010000000f01c12e650f79d1c4e1c1fa6f00653e0fc72a0f01df0f20e035010000000f22e0440f06"}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @rdmsr={0x32, 0x18, {0xaf3}}, @code={0xa, 0x4c, {"f3460fbc600436f30f38f610450f01ca66470f3acff30e430f01ca650f07b805000000b95f9400000f01d9c421fc5a7db2d88a190f00000f1c6909"}}, @cpuid={0x14, 0x18, {0xb22, 0x5a99}}, @wr_crn={0x46, 0x20, {0x4, 0x7}}, @rdmsr={0x32, 0x18, {0x336}}, @cpuid={0x14, 0x18, {0x2, 0x2}}, @rdmsr={0x32, 0x18, {0x8b4}}, @rdmsr={0x32, 0x18, {0xbb5}}, @uexit={0x0, 0x18, 0x1}, @cpuid={0x14, 0x18, {0x777, 0x80000001}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x3, 0x4}}, @uexit={0x0, 0x18, 0x80000000}, @code={0xa, 0x4e, {"67f045809f0b000000a5440f20c0350e000000440f22c00f07420f308fa8709f44290000f3450f09400f01cfa7c482f99314f42e460f70350100000000"}}], 0x283}) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = open_tree(r11, &(0x7f00000059c0)='./file0\x00', 0x4dd19a79982db2b3) openat$zero(0xffffffffffffff9c, &(0x7f0000005a00), 0x800600, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005a40)='./file0/file0\x00', &(0x7f0000005a80), 0x800) pipe2(&(0x7f0000005b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000005bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r14, &(0x7f0000005c80)={&(0x7f0000005b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005c40)={&(0x7f0000005c00)={0x28, r15, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x400, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r14, &(0x7f0000005d80)={&(0x7f0000005cc0), 0xc, &(0x7f0000005d40)={&(0x7f0000005d00)={0x34, r15, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7e}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3.980830468s ago: executing program 2 (id=876): socket$inet_udp(0x2, 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x680040, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0xffff, "00f6ff", 0x1, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, 0x0) 3.545366963s ago: executing program 0 (id=878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdir(&(0x7f0000000400)='./file0\x00', 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x14, r2, 0x528ea124191aeb57, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10d800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x5000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@ignoreqv}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@access_uid={'access', 0x3d, r5}}, {@access_any}, {@afid={'afid', 0x3d, 0x925}}, {@debug={'debug', 0x3d, 0x3ff}}, {@posixacl}, {@cache_loose}, {@version_L}]}}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) setuid(0xee00) openat$cgroup_ro(r6, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2003}) fspick(r6, &(0x7f0000000380)='./file0\x00', 0x1) 3.444794871s ago: executing program 0 (id=881): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x4, 0x0, [{0x2, 0x1, 0x7, 0x80000000, 0x6, 0x8000, 0x1000}, {0x7, 0x0, 0x2, 0xfffffff8, 0xffffffee, 0xfff, 0x89e8}, {0x4, 0x7fffffff, 0x3, 0x6, 0xe656, 0x400, 0x6}, {0x80000019, 0x7ff, 0x0, 0x3, 0x7, 0x6, 0xfb1}]}) r1 = dup2(0xffffffffffffffff, r0) write$binfmt_aout(r1, &(0x7f00000000c0)={{0x108, 0x2, 0x8, 0x186, 0x363, 0x7d, 0x1a1, 0x5}, "2214a9febc82df5f1d10f10a8af0f1de22ee80cdc14ede158d368792d236acc05710dc65f81d7e1fae741021b76294de4a71a0c391f9617dfa26f11c0d6ed1b1b6d25c680f513987fc874103b0a75dd60008e4414049a6d5ee5ff8ea3c20ad248fac1405a93aff25fb651a2f9ab18c0b755510dfcf9d7b9ee16b95fce3a0e6e3ef2ed64554c5b239fa58f4798d9cacdcc565cf770a254f1fe146963983f04d4abf44303b48e4148338291a63f2346a131b99c08771f4f9701c5b392d48c7cb95c926a486fe7fc975fcbf9a8a5166c4792bc13b10f5f4ebde395b8b39c6dd40769ef36603f05f88d324ea45", ['\x00', '\x00']}, 0x30b) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000400)={0x20, 0x5, 0x86}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000440)={0xd5, 0x0, 0x9}) r2 = fspick(r1, &(0x7f00000004c0)='./file0\x00', 0x0) r3 = fsmount(r2, 0x0, 0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x8000, 0x700, 0xe, 0x9, {{0xd, 0x4, 0x3, 0x24, 0x34, 0x68, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, {[@rr={0x7, 0x13, 0x5e, [@private=0xa010100, @local, @rand_addr=0x64010102, @loopback]}, @ssrr={0x89, 0xb, 0xd9, [@broadcast, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x31b335eae89c43b9}, 0x80) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000740)) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f00000007c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000800)={0x0, 0x0, "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", "1dc6622fd4208e80731c0e1891a1a37ff63eb1a7bf4418610791c97abd8bbf5e21540736460a0e70539c60f71b41dbdaaa47578552274ef5b9c476dc9ab19c26c439655db9afb5933cb564f177eea7a9253b11e49f5c309fbcd68469bfb37eb1e7f25f54cd8ef96487fa0d9ad1df55e5b74b48a6369474a4469cb3788f72271c0fd2911e469a82af11702dd1d178139e7af8fe53c82ec5499a4939c46b4a1faf265f2e1f2f5a2d7e1bf8fd66aec81c5f94b588f74377803bda5452c6719a82f7f3fa0efb1e22d79832a1957ab5e29d43fd73f1c2cf7c79335ff6bc60de5c8482ec88dc8b2b1b4ee72d21e496cf8f9890f2ab9221349a13a32b037b7da8b834636adfd56393296c63e36f35c26a83aa4ea4fa614cdc73389f130ff958a3fbc7c1f94147e98b7220fd88b91b4bb8969b72f954a4c306576be901ce30fffea2bfdac4085cc6075f344d9e14d3a790d00654d5cf01401052464b67a642d894fcb98c97f86930796e908257997c906fe31f7d23404416f57f17b7f9d5f8e0cafcb38455fc94139ee1ca2af153414ea6ae018804b2dee65db2913c4b7468face8df01cf5e3f8c1e53b196a160ec450e02677a1c46f7717fae6771ae65de55d51d675193537bb7452468e3db9f43c3fb2f4262b7a680f36b47e1b0f3d36f3df691177cda9d92b2617b7b662eec82e4df272aae823692f61930c8924ab4d2efe3522f545eb2976434cb6d5acc941037f4b081652a738d7c6dfc7cd5ba3d5cb738ecf788bf557b35217f73f57779699e73409e39e5d9fe6323238f7ef198c897bd52e741e0557cedaf3050da7847d8bd80a722bbeb56208f6ef825f8355ddb6b5b5eace241b37ffd5619fd2b96875bed37a377cafca499f287492cf98132013391c2f4140d22a778a2003ef6a5359cc1322a5d75dccad81e73bedd784ee6830dbff42d5c6c1690f97961345cef1b065e0e87537165707c7981d15dad6409a7883035ed75e9324c445a6f44bfe15f3f8b73da7bc2d647ddef109c6ead5d96c6dccb1d91036fe0c8656d0372d2c806a08c5587cb0f1c6a72df354dc0150ab278c99971121d14751885fbbc08aa41da9b4ddc6528189fa7320b9bbcdf2b0001c07751ace000a4db633f6e9b76000fc384f80562c1275fee71a83ce902b9f4e34f67744b98cd0263a2a114d81202511fd22590b6ebe67ca9779027406a838abfffb33913ed5969d8bc69c205be643f38b9f20395f39731f7d83dc48993ee6c962ce61cf42f876f012322b9a958f58522f6bccd0b7a23b9576ee7de28bedf0398459cbb6e2809b66297389466f3a7599c210c0ac0697aa96c3aa20eadd5fad743489f9dca202cf0ec1384006ad983170bd2be86723dcfa9ed83ab9c4bdab44d30dd4c2b3f02c1229f9917dd3d4f0dc291bbb137ab36215e8dcf2e408627379a1e865d6524899a6d5bf68122e6e46175e6f786cc00eb3e641bf69834533da7102030706b33b6bb6c1b6e872004a0aaca53d5bb96941fa7a735cece87404c69d36f018b892cdf9bb4f290d323a85f21a677c81e8e9eea1af39559bbe1ed7a5cb7240fc587b00b3aa9041dbc5b84ab3727aae7f473ca7917dcf7551a663eeb68918beff2ef0b1eb2fcad3cf9ad388f1b57c6249026ab2e05615d64465649284a9e4dbab41fa45d6a8926350e183ef33716ec55c643de2a035fe6e1f620ca6f390524f78c5ab7a2ab2e195980bbfbc97c723320703315951cc18aee9add3d646ab5183f74717a963ae2515635abcb428ff9da020f7688b4ef8bfabe0cd6baa59df4559f7bb56507a237ef87489f74e30652906c94e4c895ff1ad9c578628094587b2d6f37ccb986d460b050410779031f065faba44ad6f68d034a0a7f239eb20e418120a0d937977f886f9b2bc1fa23146083fb5703542bfc0637c1d610f3bd59e41f31518fa0bbfe801c1b5577ea97cc374261dc2abfd8aae1db1fa9792abfab48e81239a153cb2df33036b3b5dc4eeb3c2673f555a0226e916e5569e2bff273fe972d98dbbf682069040e892e684b796a70734b6afb9aca1400b65c5e82c28de716af8eda313783ec0c40a40bdf3e9e71cf270b125e4ee4a306572e1a5fea36029f194d6452acf42df4ada8442622e99dbbd50c7febae4f825149345e6aaa46183f76bd7d9e826b4223235273da51ff2a15619a3c1eefa10e729195e6656fca499b300a6f04e586db2e6dd5e34c13bb544ddbf5a9fa7930b1f45bec9cd23d404fd39bd6e35d98292cac61d7bc62ac849ffd42685c1f58f5fd579debb1f931cd22f6e1507b8cfe9947fcc8f4bcf5653340eba60d627adf100a76a45fa8a591a7ec67b2dd1fe17b44c640623fbe19d579ff1ea3a8ddb10b7253b20ebe040246225a3da20d12254be7513231791231d198ebb6b5bc37c5ca6bc5c2cfe076a8c502ad7a360b0b763633ce21bd11e0f9b9ea28cf0b13595349048b3126b6e2f747d01a51b2160621014b81dff00466996b41fc273f3ff892580e41924b03e17c70c137486fe4a0cd562775b76f51635191b1326df5ba8b97a1e2523419542cd30367242191bc41eeca1dca67f35d81bfd1e1fd7a0b632ff421b711c9c93b0347a6c8c393b25d6030256b82182a07b7df52272a51e3125f983d2413daa9388251f090da2f68f7dd53b190e574a03d50a4ff846d9f9bc629117c09730d652b85515dd050b01362b6e95f4fc06ac7abd8bbc4a7f7981c0da4167e7e8ec0cf85ce6028170b1fcf7ce0752093d1feedd0b82716a6b64584a5614e21421f2308527cdf9bc5b82d18356ce3c44a77d11847db0e64fc451f5660bad411280eddcb364ca094f2d24b08ac7724713c44b1f4dc8331d274069e4717b6289fa2a9e749d2b4590d59e929c00aef60b2c112401b696c3cf5eb31ba93cae03b976a283c13cdd425ef78c7d1fcdfebb32b8dee92e825335b7175265b2cb41a90c37d1421961dad7be5e47116b77fc5cce84fabcf721d5136313474a89032390e8fa7cccb4c886262257a56a10f50b0e2037f47373d1d02e4512ab63bc9a516bd04c003770a9692c06f391f9da9fadb1ea85737d0d35867990ca21e3ca5cd5d201a01342c57548e060c147b937f0f5b4c3f9b2af0a87be86ae4b8144d881b9c396b2deb7fdaafc9e9f449ad97a600325fd7694ee827c557d202eca15e3a7ab04bf3cec11c30c0fd6ca6516407ec76422618e768611d8950121a941175f3d66d7296d4fe437ff8dec9543cb1a8ab694d021fe0d4eb605c1495e1f9109ed5f7d0b9cc7893e2308212213f935577b59f31166f558be54df4b79e101847d2e5462334b7a6cf1549cb1c7b2b9bd6e86122d52bec554d1435fca708cde20ba046a0122ddb39d1e6c35389c1f7788ce49d30ff9f35f56f2c2cbfd9f41357d84c5b9ae852c455b3609b59f0164b754c57f81b83e0dadf3806c49c4674a26ca32af0c9fefcc5ba20f11be6901e61d035d08a15fd729b9c296e241f33e02d26666ea5ce9788604375c4293adde90bcee78d45556f4dca40a29bad3b44b97e51e9395dcf21be695a76b403bd16a5a2639cc4b0e1540f8bc43988c8098cb214adf97005908cc0a4a7a837f6ebe9783925b3d0f2d44b8e0678c3ec14282ff5700a72465e0ca76e542f13ed3ddd3bb05baa2638d432db94f43459bc3a0b80872d84b2bbd87073524e7e33571b8a955c80e253408f6c7aa470fc68b3f1dd0cfeff222a2df0175b74ce864c96e6ea45b462a70bcbbb3600c4feed89fd502f907fad393320af7d7c86f95e2172fa00e5b97ceb39d52c474e13e0b2f89b95cea5618b71d0690c12bc575deef0de1462183c6923736aaac686e73c7189931e6d1cd152e678c602c3247d2a586775e69671695a73c765bf56b0ab07b78aa2e12c1f2f03c20aa1225c12641dddb7ad224ffbb3f29def833428ddda15a13b5a0c7b462347c0a042820e116e10cfe080ed560f88d68031687f60dcbc5bcfa850b3ef56de204d633bec8f1da6abf1e8ae8bde12144f2d922856906c8ec793074ba295af4e9d0cf850a3947edf63b5509a8d277836d8819caf222a969c49a6ef50d06bacbff0a2684726ecdf11897f4fd8acd0a6513ba0dad5873d196b65a371acf30b8037bd7345e1c39befcd4d82dfca7f6250d01302a0e8cfe093ebec75437f77a19f05d1b4ce2f2b4f8c05baafd84266a249d10d625a318be14e98acaaf326cacb7ad61e64d3ba0abce452110e684cf6983f1459efcb160702525a7299849435c09a94c132c022f0a7b984f0bb18160ce1326aa44019f2cca64ced3355d47c4978c4ae1095b8e05d2325a39436924730ac99b7f37d913a688f80ad0a4a3e149011463caf3ceee73716e94d0fd193c18b81c8629d07cab8914bdcd7f74e9d95d9d08780762866ffe7785ec5d94e471af8c93b51b239c1b94207a40a939d4e289409e98ce4d201a23fbeeb4b43f1eed63cc9d3d5d5a4736b2b627ae58a4d5b5400dcc6266bade738e23e9b6d8a7980bf7a2ebbdbe1d3ac1a14af20d401a74f09c60fe98e64c5ce89693342d26a2fcc5f0a1d0e2ff825054d8b95f3fd021353ca2f63a1390337804a48e7660d2ee931ea11107fdd8d2a308ef01b81d34fab0bb87c9717dc4d8d007a8383995bb8a41c7ea51b8a077ffb07ec6a4ecb9a37f946bde4b252cddc74b9261578fd9adc3423e8ee61b52dc183f063a6d40a52151dd9b0a45d8dfc9e7c43a40d8d0cbb0571b024ab117a90a076a2ae4df7b1f0f49a7484fdaaa0dc2497b8ed14a3bffab5aefbbfd5d5848a1e55bb9b28c5526467049853963eec7322527c53c75375c4da842e2b8e9382b01d164a71031c7b470aec4292c59398041348d05fea391926d772ebd73212f115440dd64dd94ebd630091b53345296d48d8da345fae937e84996231dc314e46c20ff164e0a3ffdf8c894970accab6ccfec2607c2c3a5aa77d6c41fc009ac5b4dce9de0d17776242cbb0909624f591583d40c30c041adfe8df662f658b2add672aeeee75c05b176f75c0fc23842034215bcc4e1a233be654764a003bad502e83502036a645175411aa45cf6afea45947d392954e0b109b362b607d5ac048d361d7ec59825aa65fe77f448a15e5e545a63bd370a9a355f77cb2bc1cb081763005552c4e9a75935190f3408a2b4538aa73a51fd74608ce4e68e6ab094bd8f03fe6eff0c38cd4d34800800f0898be3cc4d031fd0c0d7197fc597b18aebdce148df6251bedf171abb70100757508c5b7c9a3673dbafdbdb6281496a157bcadfc708b1f72aa93765752ae1221d78ac5d61adb2ba41193a49f9f4b137e682fbd66ae8c92a345cb978ea54021cac7a5fced60ec108ad116ef4612dfdd3541500053a17d3a00fcdd10a34bb3ea76b5393b8b145bcbf0ad77df03adf9c9a59d5"}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001800)={r7, 0x4}) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000002800)) getsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000002840), &(0x7f0000002880)=0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000028c0)=0x9) r8 = syz_open_dev$mouse(&(0x7f0000002900), 0x6, 0x20000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = getpgid(0xffffffffffffffff) sendmsg$nl_generic(r9, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x1c, 0x2d, 0x200, 0x70bd25, 0x25dfdbfe, {0x18}, [@generic, @typed={0x8, 0x6f, 0x0, 0x0, @pid=r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000051}, 0x4000000) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000002a40)={"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"}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r9, 0xf504, 0x0) fsetxattr$security_evm(r1, &(0x7f0000002e40), &(0x7f0000002e80)=@sha1={0x1, "73c27012fcbda6d76d14d9e8abba396898db54e0"}, 0x15, 0x3) getpriority(0x2, r10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r9, &(0x7f0000003140)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003100)={&(0x7f0000002f40)={0x1a8, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0xdc8d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe4}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5354}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x66}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x1}, 0x400c1) 3.3461662s ago: executing program 0 (id=882): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000500)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="402196"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 3.200855991s ago: executing program 1 (id=883): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="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"]) 2.958900861s ago: executing program 1 (id=888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e20, 0x801, @remote, 0x4c}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f00000000c0)=0x2000000, 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='\\\x00', &(0x7f0000000080)='./file1\x00', r6) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2.817789642s ago: executing program 1 (id=889): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902240001000000000904", @ANYBLOB], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004, 0x11, 0xffffffffffffffff, 0xd513d000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r5 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$getflags(r5, 0x401) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[], 0xffdd) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) close_range(r1, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = signalfd(r0, &(0x7f0000000000)={[0xcbae]}, 0x8) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="040000051c000100859a2c560210000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 1.797004875s ago: executing program 4 (id=899): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x101, 0x1) getdents64(r2, 0x0, 0x4f) fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00') lseek(r4, 0xffffffffffff0000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="00001e00210000000000000000000a000000050000000000ff0100000680080000007f0f00000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r7, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r4], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x891f, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000080)=0x2) 1.540839286s ago: executing program 4 (id=900): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x10, &(0x7f0000000100)={[{@stats}, {@stats}, {}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x5}}, {@max={'max', 0x3d, 0xe283}}, {@stats}], [{@appraise}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.420284525s ago: executing program 4 (id=901): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r2 = memfd_secret(0x80000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4084) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x5b8c2000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.278020557s ago: executing program 4 (id=902): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone3(&(0x7f00000005c0)={0x11c103200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x4000, 0xffffffffffffffff}, 0x0, 0xfffffffd}}, 0xb8}}, 0x4004) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) poll(&(0x7f0000002980)=[{r4, 0x3001}, {r3, 0x4004}], 0x2, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000000000000400000000000080000000000000000000000000000000000000000a"], 0xb8}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x6c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @acquire_done={0x40106309, 0x2}, @dead_binder_done], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0xccb3) restart_syscall() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 1.144394978s ago: executing program 4 (id=903): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40, 0x70) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x6b}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x600008c1) syncfs(r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xab9, 0x19}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7571}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) fchdir(r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xecf, 0x60}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x448d0}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'batadv_slave_0\x00', 0x2000}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000580)={@initdev, @local, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000001) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x48004001}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r1, 0x200, 0x539, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x800, 0x36}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x200, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x59}, {0x6, 0x11, 0x2a}, {0x8, 0x15, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd3f}, {0x6, 0x11, 0xbc72}, {0x8, 0x15, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa34}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x400}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1a}, {0x8, 0x15, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x1c00000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xfff7}, {0x8, 0x15, 0x7}}]}, 0x200}, 0x1, 0x0, 0x0, 0x20048041}, 0x20044000) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}}, 0x440c0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x4c, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x2a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x47}}}}, ["", "", "", ""]}, 0x28}}, 0x4) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000f40)='syz0\x00') getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000fc0)={0x0}, &(0x7f0000001000)=0xc) sendmsg$netlink(r4, &(0x7f00000021c0)={&(0x7f0000000f80)=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc, &(0x7f0000002140)=[{&(0x7f0000001040)={0x10c0, 0x12, 0x100, 0x70bd25, 0x25dfdbfe, "", [@generic="223f1c9290fc8f72171b970240d8d51c4bd6a7983167a155a1356edf1877ebb75837c1afaa5213138b9d731e286616fa19e1ae083d4ab5d3", @typed={0x38, 0xb6, 0x0, 0x0, @binary="24554f5101e4e553e2358f638e936d95a80af80dedb4866c9fae4d12a0f852c8b3f9b18ca966db8a01d8f02d831a931335966126"}, @nested={0x1010, 0x22, 0x0, 0x1, [@generic="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", @nested={0x4, 0x3f}, @typed={0x8, 0xf, 0x0, 0x0, @uid=0xee01}]}, @nested={0x30, 0x40, 0x0, 0x1, [@nested={0x4, 0x27}, @typed={0x8, 0x7c, 0x0, 0x0, @fd=r8}, @typed={0x8, 0x80, 0x0, 0x0, @pid=r10}, @nested={0x4, 0x4d}, @typed={0xb, 0x13a, 0x0, 0x0, @str='batadv\x00'}, @nested={0x4, 0xf0}, @nested={0x4, 0xf4}]}]}, 0x10c0}, {&(0x7f0000002100)={0x20, 0x2f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @typed={0x7, 0x117, 0x0, 0x0, @str='\xcc+\x00'}]}, 0x20}], 0x2, &(0x7f0000002180), 0x0, 0x20008061}, 0x2008885) socket$packet(0x11, 0x3, 0x300) r11 = getpid() ptrace$setsig(0x4203, r11, 0x8001, &(0x7f0000002200)={0x19, 0x40, 0x5}) 1.066490634s ago: executing program 4 (id=904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x800, 0x0) eventfd2(0x58, 0x80000) r1 = socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x4) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={r2, r3+10000000}, 0x0) unshare(0x40400) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000040)={0x0, 'erspan0\x00', {0x300}, 0x4b5d}) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x1a) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.024999257s ago: executing program 1 (id=905): r0 = syz_open_dev$loop(&(0x7f0000000500), 0x7, 0x880) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be004429fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x12, r0, 0xffffd000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000540)=0x8) 812.605255ms ago: executing program 2 (id=906): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r3}, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2a00ebf8e56d1e3bc38c79f05f68a60001", @ANYRESHEX=r5, @ANYRESHEX, @ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4002000) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x6000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa1}, {0x6}]}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x200040, 0x0, 0x0, 0x0, 0xc49, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x27}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0) 303.502975ms ago: executing program 0 (id=907): r0 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x10f, 0x15, 0x0, 0x62) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TCFLSH(r2, 0x80045439, 0x40bea7b87a0000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000003c0)={{0x1000, 0x3000, 0x3, 0xa9, 0x3, 0xf3, 0x5, 0xa, 0x0, 0x2d, 0xd}, {0x2000, 0x2, 0x3, 0x20, 0x7, 0x3, 0x7f, 0x6, 0x29, 0x0, 0x1, 0x6}, {0x3000, 0x1, 0x3, 0x5, 0x5, 0x1, 0x2, 0x8, 0x0, 0xa7, 0xd, 0x8a}, {0x80a0000, 0xdddd0000, 0x0, 0xe7, 0x5, 0x2, 0x1, 0xf8, 0x40, 0x7, 0x2, 0x9}, {0x5000, 0x8000000, 0x8, 0x44, 0x5, 0x6, 0xa, 0x7f, 0x10, 0x0, 0xe7, 0x3}, {0x80a0000, 0x80a0000, 0xd, 0x80, 0xb0, 0x8, 0x1, 0xe, 0x80, 0x4d, 0x1, 0x9}, {0xeeee8000, 0x100000, 0xa, 0x1, 0x0, 0x5, 0x81, 0x3, 0x5, 0x81, 0x3, 0xb}, {0x80a0000, 0x10000, 0xb, 0x4, 0x5, 0x3, 0xfd, 0x37, 0x2, 0x0, 0xf2, 0xa}, {0xeeef0000, 0x3}, {0x1, 0x4}, 0x80000031, 0x0, 0x10000, 0x11241e, 0xf, 0x0, 0xe6e54000, [0x6, 0x1, 0x15e, 0x3]}) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r7, 0x400454cc, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) (async) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r6, 0x4068aea3, &(0x7f0000000280)) r9 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="69a4000428bd7000fddbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0600b300000000000600b300030000000600b300000000000600b300010000000600b30002000000"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0xc8d0) mmap$binder(&(0x7f0000040000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1ff) (async) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYRES16=r8], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x009MT'], 0x0}, 0x0) (async, rerun: 64) ftruncate(r9, 0xffff) (async, rerun: 64) fcntl$addseals(r9, 0x409, 0x7) (async) r11 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000000)={r9, 0x0, 0x0, 0x100000000}) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f00000001c0)=0x7) (async, rerun: 32) close_range(r1, r7, 0x0) (rerun: 32) 200.226624ms ago: executing program 1 (id=908): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000000)={0x6, 0x5, 0x800000000000102}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0xffffffffffffffff, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x9c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}]}]}, 0x13c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffc0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@directio}], [], 0x6b}}) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) 0s ago: executing program 1 (id=909): openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setfsuid(0x0) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/113, 0x71) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, &(0x7f0000001100)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x1000) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{0x669, 0x31}, {0xffffffffffffffff, 0x3}, 0x1, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001980)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x13, 0x0, &(0x7f0000002400)) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='qnx4\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ot:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.272427][ T36] audit: type=1400 audit(1754641735.480:3151): avc: denied { write } for pid=994 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.273167][ T393] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 42.320148][ T36] audit: type=1400 audit(1754641735.480:3152): avc: denied { mounton } for pid=999 comm="syz.0.181" path="/40/file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 42.393153][ T36] audit: type=1400 audit(1754641735.480:3153): avc: denied { mount } for pid=999 comm="syz.0.181" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.424854][ T36] audit: type=1400 audit(1754641735.480:3154): avc: denied { read } for pid=994 comm="syz.2.180" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.473685][ T393] usb 2-1: Using ep0 maxpacket: 16 [ 42.487657][ T393] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.498439][ T393] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.521099][ T393] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.533146][ T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.552948][ T393] usb 2-1: Product: syz [ 42.563149][ T393] usb 2-1: Manufacturer: syz [ 42.573207][ T393] usb 2-1: SerialNumber: syz [ 42.813224][ T393] usb 2-1: 0:2 : does not exist [ 42.825467][ T393] usb 2-1: USB disconnect, device number 11 [ 42.911991][ T769] udevd[769]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.466403][ T1027] futex_wake_op: syz.0.191 tries to shift op by -1; fix this program [ 43.474578][ T1028] futex_wake_op: syz.0.191 tries to shift op by -1; fix this program [ 43.498445][ T1027] rust_binder: Error in use_page_slow: ESRCH [ 43.498465][ T1027] rust_binder: use_range failure ESRCH [ 43.505106][ T1027] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 43.510661][ T1027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 43.518902][ T1027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:131 [ 43.608812][ T1031] rust_binder: 196: no such ref 3 [ 43.623396][ T1031] rust_binder: 196: no such ref 3 [ 43.633217][ T394] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 43.785790][ T394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.797321][ T394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.807242][ T394] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 43.816343][ T394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.826620][ T394] usb 2-1: config 0 descriptor?? [ 43.873943][ T1037] __vm_enough_memory: pid: 1037, comm: syz.3.194, bytes: 18014402804453376 not enough memory for the allocation [ 43.903168][ T49] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.045640][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.065007][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 44.078330][ T49] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.099362][ T49] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.111506][ T49] usb 1-1: config 0 has no interfaces? [ 44.113605][ T1066] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.117168][ T1066] rust_binder: Read failure Err(EFAULT) in pid:222 [ 44.118825][ T49] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 44.129616][ T1065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:222 [ 44.137009][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.164468][ T49] usb 1-1: config 0 descriptor?? [ 44.232068][ T1068] __vm_enough_memory: pid: 1068, comm: syz.3.202, bytes: 18014402804453376 not enough memory for the allocation [ 44.252283][ T394] savu 0003:1E7D:2D5A.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 44.371647][ T49] usb 1-1: USB disconnect, device number 9 [ 44.383709][ T1073] overlayfs: failed to resolve './file1': -2 [ 45.013185][ T49] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 45.165325][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.176325][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.186094][ T49] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 45.195176][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.204810][ T49] usb 1-1: config 0 descriptor?? [ 45.352948][ T1086] netlink: 44 bytes leftover after parsing attributes in process `syz.3.206'. [ 45.365257][ T1086] rust_binder: Error in use_page_slow: ESRCH [ 45.365292][ T1086] rust_binder: use_range failure ESRCH [ 45.371545][ T1086] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 45.377119][ T1086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 45.385162][ T1086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:240 [ 45.500076][ T1092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.631837][ T393] rust_binder: 1091: removing orphan mapping 0:1024 [ 45.683190][ T394] usb 2-1: reset full-speed USB device number 12 using dummy_hcd [ 45.718412][ T1099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.718696][ T1099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.103180][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 46.115850][ T410] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.430135][ T49] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 46.455231][ T49] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 46.465107][ T49] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 46.480985][ T49] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 46.489868][ T49] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 46.504341][ T49] usb 1-1: USB disconnect, device number 10 [ 46.696326][ T1121] rust_binder: 155: no such ref 0 [ 47.001326][ T1134] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 47.085095][ T36] kauditd_printk_skb: 610 callbacks suppressed [ 47.085114][ T36] audit: type=1400 audit(1754641740.530:3765): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.175341][ T36] audit: type=1400 audit(1754641740.530:3766): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.233160][ T36] audit: type=1400 audit(1754641740.530:3767): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.233461][ T31] usb 2-1: USB disconnect, device number 12 [ 47.269686][ T36] audit: type=1400 audit(1754641740.530:3768): avc: denied { write } for pid=1139 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 47.343147][ T36] audit: type=1400 audit(1754641740.530:3769): avc: denied { write } for pid=1139 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 47.383149][ T36] audit: type=1400 audit(1754641740.530:3770): avc: denied { create } for pid=1139 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.390757][ T1153] rust_binder: Write failure EFAULT in pid:145 [ 47.464929][ T36] audit: type=1400 audit(1754641740.530:3771): avc: denied { write } for pid=1139 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.493957][ T36] audit: type=1400 audit(1754641740.530:3772): avc: denied { create } for pid=1139 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.527936][ T36] audit: type=1400 audit(1754641740.530:3773): avc: denied { write } for pid=1139 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.549461][ T36] audit: type=1400 audit(1754641740.530:3774): avc: denied { read } for pid=1139 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.569611][ T1161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 48.282016][ T1204] tmpfs: Bad value for 'size' [ 48.318929][ T1204] tmpfs: Bad value for 'size' [ 48.334770][ T1204] tmpfs: Bad value for 'size' [ 48.343482][ T1202] rust_binder: 294: no such ref 0 [ 48.362161][ T1202] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 48.371038][ T1211] 9pnet_fd: Insufficient options for proto=fd [ 48.380784][ T1202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:294 [ 48.681915][ T1219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:301 [ 48.713158][ T394] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 48.729295][ T1221] syzkaller0: entered promiscuous mode [ 48.735519][ T1221] syzkaller0: entered allmulticast mode [ 48.875950][ T394] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.886475][ T394] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.897873][ T394] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 48.907377][ T394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.908055][ T1227] EXT4-fs: Ignoring removed check option [ 48.916486][ T394] usb 1-1: SerialNumber: syz [ 48.921744][ T1227] No source specified [ 49.046790][ T10] rust_binder: 1229: removing orphan mapping 0:1048 [ 49.144087][ T394] usb 1-1: 0:2 : does not exist [ 49.159880][ T394] usb 1-1: unit 5: unexpected type 0x0d [ 49.180951][ T394] usb 1-1: USB disconnect, device number 11 [ 49.257390][ T769] udevd[769]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.443214][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 49.603225][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 49.610872][ T31] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 49.621136][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 49.630797][ T394] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 49.638428][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.650300][ T31] usb 2-1: config 0 descriptor?? [ 49.676919][ T1243] capability: warning: `syz.3.259' uses deprecated v2 capabilities in a way that may be insecure [ 49.793159][ T394] usb 3-1: Using ep0 maxpacket: 32 [ 49.802886][ T394] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 49.817501][ T394] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 49.834365][ T394] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 49.848806][ T1249] rust_binder: Error while translating object. [ 49.848852][ T1249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 49.856027][ T394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.883302][ T1249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:316 [ 49.883898][ T394] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 49.908501][ T394] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.922268][ T394] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 49.932037][ T394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.942646][ T394] usb 3-1: config 0 descriptor?? [ 49.952419][ T1254] netlink: 316 bytes leftover after parsing attributes in process `syz.3.263'. [ 49.962146][ T1254] netlink: 316 bytes leftover after parsing attributes in process `syz.3.263'. [ 49.973538][ T1255] tmpfs: Unknown parameter 'noswaY' [ 49.979652][ T1254] tmpfs: Unknown parameter 'noswaY' [ 50.012477][ T1259] netlink: 64 bytes leftover after parsing attributes in process `syz.3.264'. [ 50.113261][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 50.153810][ T394] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 50.183197][ T394] usb 3-1: USB disconnect, device number 10 [ 50.211552][ T394] usblp0: removed [ 50.266351][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.283164][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 50.292133][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.309485][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.319235][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.327333][ T10] usb 1-1: Product: syz [ 50.331578][ T10] usb 1-1: Manufacturer: syz [ 50.336218][ T10] usb 1-1: SerialNumber: syz [ 50.345895][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 50.363153][ T10] cdc_ncm 1-1:1.0: bind() failure [ 50.375425][ T1272] netlink: 'syz.3.267': attribute type 13 has an invalid length. [ 50.513193][ T394] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 50.566732][ T392] usb 1-1: USB disconnect, device number 12 [ 50.683175][ T394] usb 3-1: Using ep0 maxpacket: 32 [ 50.690290][ T394] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 50.698780][ T394] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 50.707435][ T394] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 50.716499][ T394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 50.726157][ T394] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 50.736384][ T394] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 50.749560][ T394] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 50.758644][ T394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.767896][ T394] usb 3-1: config 0 descriptor?? [ 50.995024][ T394] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 51.023429][ T394] usb 3-1: USB disconnect, device number 11 [ 51.040366][ T394] usblp0: removed [ 51.509339][ T1303] netlink: 'syz.0.276': attribute type 12 has an invalid length. [ 51.528842][ T1303] rust_binder: Error in use_page_slow: ESRCH [ 51.528865][ T1303] rust_binder: use_range failure ESRCH [ 51.537202][ T1303] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 51.548568][ T1303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.558740][ T1303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:178 [ 51.559789][ T1305] 9pnet_fd: Insufficient options for proto=fd [ 51.603166][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 51.652573][ T1312] rust_binder: Error while translating object. [ 51.652623][ T1312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 51.661469][ T1312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:180 [ 51.763159][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 51.780440][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.792039][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.801896][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 51.814890][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 51.826140][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.837048][ T10] usb 4-1: config 0 descriptor?? [ 52.004491][ T1326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.013011][ T1326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.192249][ T36] kauditd_printk_skb: 1094 callbacks suppressed [ 52.192267][ T36] audit: type=1400 audit(1754641745.630:4869): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.235649][ T9] usb 2-1: USB disconnect, device number 13 [ 52.247554][ T36] audit: type=1400 audit(1754641745.630:4870): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.289478][ T36] audit: type=1400 audit(1754641745.630:4871): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.348557][ T1339] SELinux: ebitmap start bit (2099205) is not a multiple of the map unit size (64) [ 52.351189][ T36] audit: type=1400 audit(1754641745.670:4872): avc: denied { read write } for pid=1334 comm="syz.0.285" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.383002][ T1339] SELinux: failed to load policy [ 52.390495][ T36] audit: type=1400 audit(1754641745.670:4873): avc: denied { read write open } for pid=1334 comm="syz.0.285" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.417554][ T10] hid (null): report_id 915 is invalid [ 52.455805][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0005/input/input8 [ 52.463983][ T36] audit: type=1400 audit(1754641745.680:4874): avc: denied { read } for pid=1334 comm="syz.0.285" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.533082][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0005/input/input9 [ 52.562411][ T36] audit: type=1400 audit(1754641745.680:4875): avc: denied { read open } for pid=1334 comm="syz.0.285" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.574600][ T10] kye 0003:0458:5011.0005: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 52.633999][ T36] audit: type=1400 audit(1754641745.680:4876): avc: denied { ioctl } for pid=1334 comm="syz.0.285" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.691647][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 52.698670][ T94] audit: audit_backlog=65 > audit_backlog_limit=64 [ 52.813462][ T1353] rust_binder: inc_ref_done called when no active inc_refs [ 52.813485][ T1353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:184 [ 52.852230][ T1360] rust_binder: inc_ref_done called when no active inc_refs [ 52.853908][ T1357] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 52.871980][ T1359] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.919235][ T1360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:184 [ 52.955470][ T1364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.955468][ T1357] rust_binder: Error while translating object. [ 53.012252][ T1357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.026524][ T1357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 53.141476][ T1367] devpts: called with bogus options [ 53.577837][ T1379] rust_binder: inc_ref_done called when no active inc_refs [ 53.577861][ T1379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:198 [ 53.645728][ C0] kye 0003:0458:5011.0005: usb_submit_urb(ctrl) failed: -1 [ 53.717024][ T1386] SELinux: policydb version -1743547323 does not match my version range 15-33 [ 53.745311][ T1386] SELinux: failed to load policy [ 53.772494][ T1386] SELinux: failed to load policy [ 53.779459][ T1386] netlink: 188 bytes leftover after parsing attributes in process `syz.0.298'. [ 53.798679][ T394] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 53.886491][ T1394] binder: Bad value for 'stats' [ 53.933872][ T394] usb 4-1: device descriptor read/64, error -32 [ 54.171762][ T1408] fuse: Bad value for 'fd' [ 54.183684][ T394] usb 4-1: device descriptor read/64, error -32 [ 54.250000][ T1411] 9pnet_fd: Insufficient options for proto=fd [ 54.323049][ T31] rust_binder: 1407: removing orphan mapping 0:24 [ 54.330470][ T31] rust_binder: 0: removing orphan mapping 24:1120 [ 54.366547][ T1417] cgroup: No subsys list or none specified [ 54.390685][ T1417] rust_binder: Error while translating object. [ 54.390714][ T1417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 54.397740][ T1417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:184 [ 54.423174][ T394] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 54.573877][ T394] usb 4-1: device descriptor read/64, error -32 [ 54.642268][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.712880][ T1427] rust_binder: Error while translating object. [ 54.712907][ T1427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 54.719874][ T1427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:210 [ 54.823793][ T394] usb 4-1: device descriptor read/64, error -32 [ 55.043211][ T394] raw-gadget.1 gadget.3: failed to queue resume event [ 55.103192][ T394] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 55.123406][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.130728][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.138067][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.145252][ T394] usb 4-1: device descriptor read/8, error -32 [ 55.273357][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.280783][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.288061][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.295194][ T394] usb 4-1: device descriptor read/8, error -32 [ 55.403238][ T394] raw-gadget.1 gadget.3: failed to queue suspend event [ 55.410309][ T394] raw-gadget.1 gadget.3: failed to queue reset event [ 55.483181][ T394] raw-gadget.1 gadget.3: failed to queue resume event [ 55.553233][ T394] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 55.573327][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.580634][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.587972][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.595209][ T394] usb 4-1: device descriptor read/8, error -32 [ 55.723394][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.752023][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.773382][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 55.780635][ T394] usb 4-1: device descriptor read/8, error -32 [ 55.876603][ T1446] rust_binder: Write failure EFAULT in pid:223 [ 55.893187][ T394] raw-gadget.1 gadget.3: failed to queue suspend event [ 55.919654][ T392] usb 4-1: USB disconnect, device number 9 [ 55.921690][ T1450] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 55.952254][ T392] raw-gadget.1 gadget.3: failed to queue reset event [ 56.043199][ T392] raw-gadget.1 gadget.3: failed to queue resume event [ 56.045069][ T1452] syzkaller0: entered promiscuous mode [ 56.056173][ T1452] syzkaller0: entered allmulticast mode [ 56.113171][ T392] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 56.123149][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 56.130876][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 56.138242][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 56.145403][ T392] raw-gadget.1 gadget.3: failed to queue reset event [ 56.172328][ T1452] netlink: 104 bytes leftover after parsing attributes in process `syz.0.321'. [ 56.213176][ T392] raw-gadget.1 gadget.3: failed to queue resume event [ 56.293156][ T392] usb 4-1: device descriptor read/64, error -32 [ 56.403355][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 56.410812][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 56.418280][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 56.425499][ T392] raw-gadget.1 gadget.3: failed to queue reset event [ 56.493639][ T392] raw-gadget.1 gadget.3: failed to queue resume event [ 56.553202][ T392] usb 4-1: device descriptor read/64, error -32 [ 56.653207][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 56.653224][ T410] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.665516][ T392] raw-gadget.1 gadget.3: failed to queue suspend event [ 56.672586][ T392] raw-gadget.1 gadget.3: failed to queue reset event [ 56.743167][ T392] raw-gadget.1 gadget.3: failed to queue resume event [ 56.803779][ T392] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 56.811569][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 56.818832][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 56.826786][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 56.833934][ T392] raw-gadget.1 gadget.3: failed to queue reset event [ 56.891295][ T1461] rust_binder: 229: no such ref 1 [ 56.903172][ T392] raw-gadget.1 gadget.3: failed to queue resume event [ 56.963208][ T392] usb 4-1: device descriptor read/64, error -32 [ 57.033272][ T10] rust_binder: 1462: removing orphan mapping 0:24 [ 57.039758][ T10] rust_binder: 0: removing orphan mapping 24:1120 [ 57.074389][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 57.093328][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 57.109212][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 57.116400][ T392] raw-gadget.1 gadget.3: failed to queue reset event [ 57.193176][ T392] raw-gadget.1 gadget.3: failed to queue resume event [ 57.205040][ T36] kauditd_printk_skb: 738 callbacks suppressed [ 57.205056][ T36] audit: type=1400 audit(1754641750.650:5581): avc: denied { read write } for pid=1470 comm="syz.0.326" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.277809][ T36] audit: type=1400 audit(1754641750.650:5582): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.293186][ T392] usb 4-1: device descriptor read/64, error -32 [ 57.338824][ T36] audit: type=1400 audit(1754641750.650:5583): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.356367][ T1478] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.369025][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.370967][ T1478] audit: audit_lost=15 audit_rate_limit=0 audit_backlog_limit=64 [ 57.379147][ T1484] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.391553][ T1484] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 [ 57.393143][ T289] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64 [ 57.399417][ T1484] audit: backlog limit exceeded [ 57.453180][ T392] raw-gadget.1 gadget.3: failed to queue suspend event [ 57.478800][ T392] usb usb4-port1: attempt power cycle [ 57.481457][ T1492] binder: Unknown parameter 'mask' [ 57.500919][ T392] raw-gadget.1 gadget.3: failed to queue disconnect event [ 57.533325][ T392] raw-gadget.1 gadget.3: failed to queue reset event [ 57.603717][ T392] raw-gadget.1 gadget.3: failed to queue resume event [ 57.622449][ T392] raw-gadget.1 gadget.3: failed to queue reset event [ 57.818309][ T1512] rust_binder: 1506 RLIMIT_NICE not set [ 57.825673][ T1506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.831577][ T1506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 57.853173][ T392] raw-gadget.1 gadget.3: failed to queue resume event [ 57.917133][ T1519] netlink: 1351 bytes leftover after parsing attributes in process `syz.2.336'. [ 57.924252][ T1514] exFAT-fs (rnullb0): invalid boot record signature [ 57.940481][ T393] rust_binder: 1510: removing orphan mapping 0:4120 [ 57.953166][ T392] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 57.962408][ T1514] exFAT-fs (rnullb0): failed to read boot sector [ 57.990501][ T1522] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 57.990758][ T1514] exFAT-fs (rnullb0): failed to recognize exfat type [ 58.011464][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.018796][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.026632][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.034428][ T392] usb 4-1: device descriptor read/8, error -32 [ 58.163303][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.170620][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.184763][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.191874][ T392] usb 4-1: device descriptor read/8, error -32 [ 58.303185][ T392] raw-gadget.1 gadget.3: failed to queue suspend event [ 58.310948][ T392] raw-gadget.1 gadget.3: failed to queue reset event [ 58.383563][ T392] raw-gadget.1 gadget.3: failed to queue resume event [ 58.396876][ T1541] random: crng reseeded on system resumption [ 58.453194][ T392] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 58.473341][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.481626][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.489687][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.497652][ T392] usb 4-1: device descriptor read/8, error -32 [ 58.633328][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.640647][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.647990][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 58.655148][ T392] usb 4-1: device descriptor read/8, error -32 [ 58.673173][ T785] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.773158][ T392] raw-gadget.1 gadget.3: failed to queue suspend event [ 58.787224][ T392] usb usb4-port1: unable to enumerate USB device [ 58.823155][ T785] usb 3-1: Using ep0 maxpacket: 16 [ 58.831413][ T785] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.843230][ T785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.856968][ T785] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.866640][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.875989][ T785] usb 3-1: Product: syz [ 58.880358][ T785] usb 3-1: Manufacturer: syz [ 58.886203][ T785] usb 3-1: SerialNumber: syz [ 59.047882][ T1543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 59.047918][ T1543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:275 [ 59.128004][ T785] usb 3-1: 0:2 : does not exist [ 59.166692][ T785] usb 3-1: USB disconnect, device number 12 [ 59.291041][ T769] udevd[769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.474938][ T1561] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4294967295 [ 59.483143][ T1561] rust_binder: Write failure EINVAL in pid:282 [ 59.491516][ T1564] tipc: Started in network mode [ 59.502569][ T1564] tipc: Node identity ee3b0287ff17, cluster identity 4711 [ 59.510793][ T1564] tipc: Enabled bearer , priority 0 [ 59.521266][ T1564] tipc: Disabling bearer [ 59.683524][ T1572] tmpfs: Unknown parameter 'wi [ 59.683524][ T1572] Ͼf' [ 59.956898][ T1588] fuse: Bad value for 'fd' [ 60.047228][ T1591] fuse: Unknown parameter 'rov5~/?otmode' [ 60.111221][ T1595] input: syz1 as /devices/virtual/input/input10 [ 60.723184][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 60.875290][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.886218][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 60.898921][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.908013][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.916294][ T10] usb 2-1: Product: syz [ 60.920482][ T10] usb 2-1: Manufacturer: syz [ 60.925103][ T10] usb 2-1: SerialNumber: syz [ 61.137430][ T1618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 61.224581][ T1636] fuse: Unknown parameter '' [ 61.319129][ T1638] SELinux: failed to load policy [ 61.335111][ T1640] SELinux: failed to load policy [ 61.738383][ T1663] fuse: Bad value for 'fd' [ 61.767504][ T1618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.015966][ T10] cdc_mbim 2-1:1.0: failed to get mac address [ 62.022649][ T10] cdc_mbim 2-1:1.0: bind() failure [ 62.030888][ T10] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 62.040012][ T10] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 62.053229][ T10] usb 2-1: USB disconnect, device number 15 [ 62.422273][ T36] kauditd_printk_skb: 855 callbacks suppressed [ 62.422289][ T36] audit: type=1326 audit(1754641755.860:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca798ebe9 code=0x7fc00000 [ 62.460281][ T36] audit: type=1400 audit(1754641755.900:6438): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.490026][ T36] audit: type=1400 audit(1754641755.930:6439): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 62.523138][ T36] audit: type=1400 audit(1754641755.960:6440): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.579149][ T1667] rust_binder: Error while translating object. [ 62.579202][ T1667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 62.585869][ T1667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:272 [ 62.594129][ T36] audit: type=1400 audit(1754641755.960:6441): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.669880][ T1669] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 62.673159][ T36] audit: type=1400 audit(1754641755.960:6442): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.755824][ T36] audit: type=1400 audit(1754641756.010:6443): avc: denied { create } for pid=1666 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.770529][ T1676] rust_binder: Write failure EFAULT in pid:274 [ 62.803201][ T36] audit: type=1400 audit(1754641756.010:6444): avc: denied { create } for pid=1666 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.863160][ T36] audit: type=1400 audit(1754641756.010:6445): avc: denied { read } for pid=1666 comm="syz.2.385" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.912269][ T36] audit: type=1400 audit(1754641756.010:6446): avc: denied { read open } for pid=1666 comm="syz.2.385" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.945211][ T1681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.945484][ T1681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.952316][ T1681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.165423][ T1692] netlink: 76 bytes leftover after parsing attributes in process `syz.0.392'. [ 63.181484][ T1692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 63.580082][ T1714] /dev/sr0: Can't lookup blockdev [ 63.803371][ T1728] incfs_lookup_dentry err:-13 [ 63.814276][ T1728] incfs: Can't find or create .index dir in ./file0 [ 63.831063][ T1728] incfs: mount failed -13 [ 63.840310][ T1739] netlink: 32 bytes leftover after parsing attributes in process `syz.1.405'. [ 63.903121][ T1743] rust_binder: 310: no such ref 3 [ 63.908652][ T1744] rust_binder: 310: no such ref 3 [ 64.133165][ T785] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 64.283157][ T785] usb 3-1: Using ep0 maxpacket: 16 [ 64.843291][ T1753] kvm: apic: phys broadcast and lowest prio [ 64.890581][ T1757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:359 [ 64.943238][ T1760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:359 [ 65.037629][ T1759] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 65.046908][ T1759] rust_binder: Read failure Err(EFAULT) in pid:315 [ 65.056682][ T1759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 65.063254][ T1759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:315 [ 65.169115][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.855561][ T1776] rust_binder: Failed copying into alloc: EFAULT [ 65.855587][ T1776] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 65.861975][ T1776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 65.870535][ T1776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:367 [ 66.735185][ T785] usb 3-1: unable to get BOS descriptor or descriptor too short [ 66.752671][ T785] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 66.760337][ T785] usb 3-1: can't read configurations, error -71 [ 66.975392][ T1798] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.993174][ T1798] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.006542][ T1798] bridge_slave_0: entered allmulticast mode [ 67.019160][ T1798] bridge_slave_0: entered promiscuous mode [ 67.032209][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.040072][ T1798] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.048777][ T1798] bridge_slave_1: entered allmulticast mode [ 67.055046][ T1798] bridge_slave_1: entered promiscuous mode [ 67.121558][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.128629][ T1798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.136309][ T1798] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.143363][ T1798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.187822][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.195279][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.208447][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.213359][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 67.215526][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.228770][ T410] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.232828][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.241909][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.315535][ T1798] veth0_vlan: entered promiscuous mode [ 67.384513][ T1798] veth1_macvtap: entered promiscuous mode [ 67.393264][ T785] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 67.430842][ T36] kauditd_printk_skb: 662 callbacks suppressed [ 67.430880][ T36] audit: type=1400 audit(1754641760.870:7106): avc: denied { mounton } for pid=1798 comm="syz-executor" path="/root/syzkaller.4EJ044/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.463667][ T36] audit: type=1400 audit(1754641760.870:7107): avc: denied { mount } for pid=1798 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.487059][ T36] audit: type=1400 audit(1754641760.870:7108): avc: denied { mounton } for pid=1798 comm="syz-executor" path="/root/syzkaller.4EJ044/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.514411][ T36] audit: type=1400 audit(1754641760.880:7109): avc: denied { mounton } for pid=1798 comm="syz-executor" path="/root/syzkaller.4EJ044/syz-tmp/newroot/proc" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.541597][ T36] audit: type=1400 audit(1754641760.880:7110): avc: denied { mount } for pid=1798 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.562510][ T1819] netlink: 5308 bytes leftover after parsing attributes in process `syz.1.428'. [ 67.569348][ T36] audit: type=1400 audit(1754641760.880:7111): avc: denied { mounton } for pid=1798 comm="syz-executor" path="/root/syzkaller.4EJ044/syz-tmp/newroot/selinux" dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.599603][ T785] usb 3-1: Using ep0 maxpacket: 8 [ 67.610898][ T1820] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 67.618272][ T785] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.629482][ T785] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.643734][ T1820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 67.659299][ T785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.677465][ T36] audit: type=1400 audit(1754641760.880:7112): avc: denied { mounton } for pid=1798 comm="syz-executor" path="/root/syzkaller.4EJ044/syz-tmp/newroot/selinux" dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.703646][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 67.711943][ T785] usb 3-1: SerialNumber: syz [ 67.717976][ T36] audit: type=1400 audit(1754641760.880:7113): avc: denied { mounton } for pid=1798 comm="syz-executor" path="/root/syzkaller.4EJ044/syz-tmp/newroot/sys" dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.744085][ T36] audit: type=1400 audit(1754641760.880:7114): avc: denied { mounton } for pid=1798 comm="syz-executor" path="/root/syzkaller.4EJ044/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.771553][ T1805] audit: audit_backlog=65 > audit_backlog_limit=64 [ 67.783564][ T785] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 67.791487][ T785] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 67.801013][ T785] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 67.843153][ T393] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 68.005169][ T393] usb 2-1: Using ep0 maxpacket: 32 [ 68.017876][ T393] usb 2-1: unable to get BOS descriptor or descriptor too short [ 68.038461][ T9] usb 3-1: USB disconnect, device number 14 [ 68.046649][ T393] usb 2-1: config 8 has an invalid interface number: 220 but max is 0 [ 68.063809][ T393] usb 2-1: config 8 has no interface number 0 [ 68.078029][ T393] usb 2-1: config 8 interface 220 altsetting 135 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 68.090003][ T393] usb 2-1: config 8 interface 220 has no altsetting 0 [ 68.101718][ T393] usb 2-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=36.82 [ 68.111432][ T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.119546][ T393] usb 2-1: Product: syz [ 68.123825][ T393] usb 2-1: Manufacturer: syz [ 68.128421][ T393] usb 2-1: SerialNumber: syz [ 68.133455][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 68.283177][ T785] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 68.305088][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 68.314360][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.324151][ T10] usb 5-1: config 0 descriptor?? [ 68.350893][ T1819] process 'syz.1.428' launched './file0' with NULL argv: empty string added [ 68.417787][ T393] usb 2-1: USB disconnect, device number 16 [ 68.433196][ T785] usb 1-1: Using ep0 maxpacket: 16 [ 68.440511][ T785] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 68.449851][ T785] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.460027][ T785] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 68.472911][ T785] usb 1-1: config 1 has no interface number 1 [ 68.479602][ T785] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 68.493194][ T785] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.510216][ T785] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.520162][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.528398][ T785] usb 1-1: Product: syz [ 68.532602][ T785] usb 1-1: Manufacturer: syz [ 68.537223][ T785] usb 1-1: SerialNumber: syz [ 68.607255][ T1836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 68.711854][ T1845] can0: slcan on ptm0. [ 68.755851][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.877431][ T10] ryos 0003:1E7D:3232.0006: unknown main item tag 0x0 [ 68.887317][ T10] ryos 0003:1E7D:3232.0006: item fetching failed at offset 3/4 [ 68.896223][ T10] ryos 0003:1E7D:3232.0006: parse failed [ 68.908917][ T10] ryos 0003:1E7D:3232.0006: probe with driver ryos failed with error -22 [ 68.953176][ T393] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 69.113181][ T393] usb 3-1: Using ep0 maxpacket: 8 [ 69.124720][ T393] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.144820][ T393] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 69.160609][ T393] usb 3-1: can't read configurations, error -71 [ 69.170721][ T1845] can0 (unregistered): slcan off ptm0. [ 69.745423][ T1878] SELinux: failed to load policy [ 70.418898][ T1912] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 70.418916][ T1912] rust_binder: Error while translating object. [ 70.427876][ T1912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.434281][ T1912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 70.804547][ T1924] rust_binder: Write failure EFAULT in pid:367 [ 70.813172][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 70.816009][ T410] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.852707][ T785] usb 1-1: USB disconnect, device number 13 [ 70.958460][ T1926] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 70.972346][ T1926] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 70.981199][ T394] usb 5-1: USB disconnect, device number 2 [ 71.000510][ T769] udevd[769]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.013801][ T1926] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 71.026873][ T1926] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 71.160454][ T1932] netlink: 'syz.4.456': attribute type 13 has an invalid length. [ 71.433193][ T393] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 71.463377][ T1945] binder: Unknown parameter '' [ 71.571249][ T1952] rust_binder: Write failure EFAULT in pid:377 [ 71.634096][ T393] usb 1-1: unable to get BOS descriptor or descriptor too short [ 71.662193][ T393] usb 1-1: config 8 has an invalid interface number: 43 but max is 0 [ 71.695155][ T393] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 71.723142][ T393] usb 1-1: config 8 has no interface number 0 [ 71.729259][ T393] usb 1-1: config 8 interface 43 altsetting 255 endpoint 0x4 has invalid maxpacket 32768, setting to 1024 [ 71.756276][ T393] usb 1-1: config 8 interface 43 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 1024 [ 71.772760][ T393] usb 1-1: config 8 interface 43 has no altsetting 0 [ 71.793844][ T393] usb 1-1: New USB device found, idVendor=0582, idProduct=935b, bcdDevice=be.6c [ 71.819009][ T393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=33 [ 71.819950][ T1966] netlink: 'syz.2.466': attribute type 16 has an invalid length. [ 71.837294][ T393] usb 1-1: Product: syz [ 71.849756][ T393] usb 1-1: Manufacturer: syz [ 71.857382][ T393] usb 1-1: SerialNumber: syz [ 71.865185][ T1966] netlink: 'syz.2.466': attribute type 4 has an invalid length. [ 71.885450][ T1966] netlink: 64126 bytes leftover after parsing attributes in process `syz.2.466'. [ 72.018174][ T1981] exFAT-fs (rnullb0): invalid boot record signature [ 72.036539][ T1981] exFAT-fs (rnullb0): failed to read boot sector [ 72.043066][ T1981] exFAT-fs (rnullb0): failed to recognize exfat type [ 72.096115][ T393] usb 1-1: USB disconnect, device number 14 [ 72.106588][ T1985] netlink: 'syz.1.475': attribute type 4 has an invalid length. [ 72.114962][ T1985] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.475'. [ 72.220855][ T1983] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 72.220878][ T1983] rust_binder: Error while translating object. [ 72.239931][ T1983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.251931][ T1983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 72.272254][ T1983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 72.303191][ T1983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:33 [ 72.399172][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.43/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.412373][ T1998] rust_binder: Error while translating object. [ 72.424455][ T1998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 72.439478][ T36] kauditd_printk_skb: 1365 callbacks suppressed [ 72.439496][ T36] audit: type=1400 audit(1754641765.880:8472): avc: denied { unmount } for pid=1798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 72.456267][ T1998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:395 [ 72.488139][ T1999] fuse: Bad value for 'user_id' [ 72.502056][ T1999] fuse: Bad value for 'user_id' [ 72.615407][ T36] audit: type=1400 audit(1754641765.930:8473): avc: denied { read write } for pid=1996 comm="syz.2.477" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.673169][ T36] audit: type=1400 audit(1754641765.930:8474): avc: denied { read write } for pid=1798 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.739561][ T36] audit: type=1400 audit(1754641765.930:8475): avc: denied { read write open } for pid=1996 comm="syz.2.477" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.765428][ T36] audit: type=1400 audit(1754641765.930:8476): avc: denied { read write open } for pid=1798 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.774177][ T2014] bpf: Bad value for 'gid' [ 72.809603][ T2011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 72.823160][ T2018] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.829749][ T2018] audit: audit_lost=22 audit_rate_limit=0 audit_backlog_limit=64 [ 72.829893][ T2019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.845969][ T36] audit: type=1400 audit(1754641765.930:8477): avc: denied { ioctl } for pid=1798 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.882638][ T2014] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.892492][ T2014] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 72.964736][ T2011] /dev/rnullb0: Can't open blockdev [ 73.238256][ T2019] input: syz1 as /devices/virtual/input/input11 [ 73.256156][ T2028] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 73.586867][ T2039] fuse: Bad value for 'fd' [ 73.973153][ T394] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 74.673243][ T2086] binder: Unknown parameter 'fscont^m/2ext' [ 75.001455][ T2091] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 75.040776][ T2095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 75.048926][ T392] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 75.072315][ T2095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:445 [ 75.110024][ T2099] No source specified [ 75.125733][ T2100] No source specified [ 75.254405][ T392] usb 3-1: Using ep0 maxpacket: 16 [ 75.282174][ T392] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.314898][ T392] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 75.340155][ T2106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 75.341863][ T2105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 75.364229][ T392] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 75.373408][ T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.392073][ T392] usb 3-1: Product: syz [ 75.396340][ T392] usb 3-1: Manufacturer: syz [ 75.400992][ T392] usb 3-1: SerialNumber: syz [ 75.408281][ T2108] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.507'. [ 75.419182][ T392] usb 3-1: config 0 descriptor?? [ 75.429785][ T2104] rust_binder: Write failure EINVAL in pid:447 [ 75.430762][ T2104] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 75.577642][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.587986][ T2113] SELinux: failed to load policy [ 75.593433][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.603675][ T2113] SELinux: failed to load policy [ 75.608998][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.619207][ T2113] SELinux: failed to load policy [ 75.624752][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.634954][ T2113] SELinux: failed to load policy [ 75.640354][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.650682][ T2113] SELinux: failed to load policy [ 75.655972][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.666344][ T2113] SELinux: failed to load policy [ 75.671690][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.681973][ T2113] SELinux: failed to load policy [ 75.687421][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.697764][ T2113] SELinux: failed to load policy [ 75.703206][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.713596][ T2113] SELinux: failed to load policy [ 75.718938][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.729272][ T2113] SELinux: failed to load policy [ 75.734683][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.745331][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.755953][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.766590][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.777322][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.788067][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.799315][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.809986][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.820581][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.831217][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.842008][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.852709][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.863771][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.874478][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.881709][ T392] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 75.886822][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.896841][ T392] asix 3-1:0.0: probe with driver asix failed with error -71 [ 75.915150][ T392] usb 3-1: USB disconnect, device number 17 [ 75.931106][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.941783][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.952430][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.963234][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.973949][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.984596][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 75.995304][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.006016][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.016720][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.027532][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.038158][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.048785][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.059456][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.070112][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.080677][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.091375][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.102190][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.112901][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.123736][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.134494][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.145120][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.155853][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.166411][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.177774][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.188671][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.200523][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.218981][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.229783][ T2118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.229812][ T2118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 76.240214][ T2117] rust_binder: 2116 RLIMIT_NICE not set [ 76.243655][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.268815][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.271914][ T10] rust_binder: 2115: removing orphan mapping 0:1048 [ 76.279546][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.298722][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.330254][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.342812][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.354130][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.364825][ T2113] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 76.431213][ T2123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:455 [ 76.521834][ T10] rust_binder: 2119: removing orphan mapping 0:24 [ 76.538130][ T10] rust_binder: 0: removing orphan mapping 24:1120 [ 76.572096][ T2132] can0: slcan on ptm0. [ 76.813435][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.868779][ T2145] rust_binder: Error in use_page_slow: ESRCH [ 76.868801][ T2145] rust_binder: use_range failure ESRCH [ 76.877003][ T2146] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 76.882492][ T2146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 76.891504][ T2145] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 76.902006][ T2146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:420 [ 76.911456][ T2145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 76.921565][ T2145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:420 [ 76.983129][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 77.009046][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.023304][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 77.041193][ T10] usb 5-1: can't read configurations, error -71 [ 77.062395][ T2155] usb usb8: usbfs: process 2155 (syz.0.518) did not claim interface 40 before use [ 77.075672][ T2132] can0 (unregistered): slcan off ptm0. [ 77.260542][ T2164] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 77.274354][ T2166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.453149][ T36] kauditd_printk_skb: 994 callbacks suppressed [ 77.453196][ T36] audit: type=1400 audit(1754641770.890:9443): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.557849][ T36] audit: type=1400 audit(1754641770.890:9444): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.598265][ T36] audit: type=1400 audit(1754641770.910:9445): avc: denied { search } for pid=2183 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.642922][ T36] audit: type=1400 audit(1754641770.910:9446): avc: denied { search } for pid=2183 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.683735][ T2192] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.684670][ T2191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.690760][ T2188] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.703605][ T2192] audit: audit_lost=33 audit_rate_limit=0 audit_backlog_limit=64 [ 77.711389][ T2188] audit: audit_lost=34 audit_rate_limit=0 audit_backlog_limit=64 [ 77.723027][ T36] audit: type=1400 audit(1754641770.910:9447): avc: denied { search } for pid=2183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.747532][ T2192] fuse: Unknown parameter '' [ 77.913654][ T2203] tipc: MTU too low for tipc bearer [ 78.044300][ T2212] fuse: blksize only supported for fuseblk [ 78.190058][ T2222] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 78.621130][ T2256] rust_binder: Failed to allocate buffer. len:12884906128, is_oneway:true [ 78.698314][ T2265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.546'. [ 78.775403][ T2271] tipc: Enabling of bearer rejected, failed to enable media [ 78.873234][ T2276] futex_wake_op: syz.0.549 tries to shift op by -1; fix this program [ 78.894247][ T2276] random: crng reseeded on system resumption [ 78.953138][ T392] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 79.103146][ T392] usb 3-1: Using ep0 maxpacket: 32 [ 79.110772][ T392] usb 3-1: config 2 has an invalid interface number: 28 but max is 0 [ 79.117774][ T2294] overlayfs: failed to clone lowerpath [ 79.121545][ T392] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 79.134744][ T392] usb 3-1: config 2 has no interface number 0 [ 79.140842][ T392] usb 3-1: config 2 interface 28 altsetting 33 has an invalid descriptor for endpoint zero, skipping [ 79.152619][ T392] usb 3-1: config 2 interface 28 altsetting 33 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 79.166036][ T392] usb 3-1: config 2 interface 28 has no altsetting 0 [ 79.177134][ T392] usb 3-1: New USB device found, idVendor=1740, idProduct=0605, bcdDevice=c9.07 [ 79.183167][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 79.186620][ T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.206710][ T392] usb 3-1: Product: syz [ 79.210903][ T392] usb 3-1: Manufacturer: 綿퇪Ԏﹾ뾊쫦풃贇ⷥ⪆芈焘燈㱏䆬뮐궊좲姀ᎃ褎鄱⏻疠퍫襇윢뫗难䣓Ŝᄒ∓ꏺﳼ蕬띆䓕좜齣頢썆꫗᧴꽾剏嘱驗ꮴ㴠弴쇶鼑筿娩苻퓖ސ軔꧍윀糪暿幹滊䩝࿞凡ퟋ沱꛰럨鏊ꘐ㨯襉腂ﱱ맍扛븕鬷痎䧻ꡖ礋锳閈罾 [ 79.243773][ T392] usb 3-1: SerialNumber: syz [ 79.294705][ T2303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 79.294737][ T2303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:489 [ 79.353177][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 79.372654][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.385549][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.404755][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.414248][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.422400][ T10] usb 1-1: Product: syz [ 79.428042][ T10] usb 1-1: Manufacturer: syz [ 79.432794][ T10] usb 1-1: SerialNumber: syz [ 79.466681][ T392] usb 3-1: USB disconnect, device number 18 [ 79.603190][ T785] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 79.651652][ T10] usb 1-1: 0:2 : does not exist [ 79.671706][ T10] usb 1-1: USB disconnect, device number 16 [ 79.719044][ T769] udevd[769]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.763141][ T785] usb 2-1: Using ep0 maxpacket: 32 [ 79.770926][ T785] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 79.779800][ T785] usb 2-1: config 0 has no interface number 0 [ 79.786362][ T785] usb 2-1: config 0 interface 184 has no altsetting 0 [ 79.796291][ T785] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 79.805805][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.813814][ T785] usb 2-1: Product: syz [ 79.817993][ T785] usb 2-1: Manufacturer: syz [ 79.822566][ T785] usb 2-1: SerialNumber: syz [ 79.828700][ T785] usb 2-1: config 0 descriptor?? [ 79.836502][ T785] smsc75xx v1.0.0 [ 79.924307][ T392] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 80.083147][ T392] usb 3-1: Using ep0 maxpacket: 32 [ 80.090325][ T392] usb 3-1: config 2 has an invalid interface number: 28 but max is 0 [ 80.098562][ T392] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 80.108717][ T392] usb 3-1: config 2 has no interface number 0 [ 80.115688][ T392] usb 3-1: config 2 interface 28 altsetting 33 has an invalid descriptor for endpoint zero, skipping [ 80.126575][ T392] usb 3-1: config 2 interface 28 altsetting 33 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 80.139616][ T392] usb 3-1: config 2 interface 28 has no altsetting 0 [ 80.149001][ T392] usb 3-1: New USB device found, idVendor=1740, idProduct=0605, bcdDevice=c9.07 [ 80.158081][ T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.166080][ T392] usb 3-1: Product: syz [ 80.170225][ T392] usb 3-1: Manufacturer: syz [ 80.175627][ T392] usb 3-1: SerialNumber: syz [ 80.229535][ T2334] binder: Bad value for 'max' [ 80.377026][ T2339] syzkaller0: entered promiscuous mode [ 80.382614][ T2339] syzkaller0: entered allmulticast mode [ 80.446194][ T785] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 80.452052][ T2340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.457702][ T785] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.471838][ T2340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.488929][ T392] usb 3-1: USB disconnect, device number 19 [ 80.721139][ T2353] binder: Unknown parameter '+% initial count (148514 ns). Using initial count to start timer. [ 81.627926][ T2382] rust_binder: Write failure EINVAL in pid:469 [ 81.669318][ T2389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.590'. [ 81.686606][ T2389] overlayfs: failed to clone upperpath [ 81.733139][ T392] usb 3-1: device descriptor read/64, error -71 [ 81.812411][ T2398] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 81.985129][ T2411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 81.985157][ T2411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:477 [ 82.023024][ T2413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:375 [ 82.036668][ T2419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.067506][ T2422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.068457][ T2419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:495 [ 82.087697][ T2422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:495 [ 82.289010][ T2439] overlayfs: conflicting options: userxattr,verity=require [ 82.463152][ T785] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 82.471360][ T36] kauditd_printk_skb: 856 callbacks suppressed [ 82.471375][ T36] audit: type=1400 audit(1754641776.916:10249): avc: denied { ioctl } for pid=2433 comm="syz.1.605" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.514598][ T36] audit: type=1400 audit(1754641776.916:10250): avc: denied { ioctl } for pid=2433 comm="syz.1.605" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.548966][ T36] audit: type=1400 audit(1754641776.926:10251): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.574702][ T36] audit: type=1400 audit(1754641776.926:10252): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.606028][ T36] audit: type=1400 audit(1754641776.926:10253): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.633073][ T785] usb 2-1: Using ep0 maxpacket: 32 [ 82.640000][ T36] audit: type=1400 audit(1754641776.926:10254): avc: denied { ioctl } for pid=2433 comm="syz.1.605" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.665963][ T785] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 82.675681][ T785] usb 2-1: config 0 has no interface number 0 [ 82.681904][ T785] usb 2-1: config 0 interface 184 has no altsetting 0 [ 82.690494][ T36] audit: type=1400 audit(1754641776.956:10255): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.718085][ T785] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 82.727266][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.730303][ T36] audit: type=1400 audit(1754641776.956:10256): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.740097][ T785] usb 2-1: Product: syz [ 82.764998][ T36] audit: type=1400 audit(1754641776.956:10257): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.781801][ T785] usb 2-1: Manufacturer: syz [ 82.823138][ T36] audit: type=1400 audit(1754641776.996:10258): avc: denied { ioctl } for pid=2433 comm="syz.1.605" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.833135][ T785] usb 2-1: SerialNumber: syz [ 82.866102][ T785] usb 2-1: config 0 descriptor?? [ 82.891068][ T785] smsc75xx v1.0.0 [ 83.133610][ T2480] 9pnet: Could not find request transport: f [ 83.250275][ T2485] overlayfs: failed to resolve './file1': -2 [ 83.703985][ T785] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 83.746704][ T785] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 83.990046][ T785] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 83.993764][ T2434] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 84.008513][ T785] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 84.035185][ T785] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 84.046286][ T2434] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 84.053710][ T2531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:498 [ 84.065783][ T785] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 84.103138][ T2434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:498 [ 84.146747][ T785] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 84.147992][ T2534] netlink: 'syz.4.636': attribute type 13 has an invalid length. [ 84.182295][ T785] usb 2-1: USB disconnect, device number 18 [ 84.310147][ T2541] netlink: 37 bytes leftover after parsing attributes in process `syz.4.638'. [ 84.418468][ T2550] overlay: ./file0 is not a directory [ 84.568275][ T2555] tipc: Started in network mode [ 84.573515][ T2555] tipc: Node identity ea96b1eea104, cluster identity 4711 [ 84.583212][ T2555] tipc: Enabled bearer , priority 0 [ 84.611026][ T2555] tipc: Disabling bearer [ 84.995423][ T2574] binder: Unknown parameter 'context' [ 85.099447][ T2576] input: syz1 as /devices/virtual/input/input12 [ 85.112484][ T2576] input: failed to attach handler leds to device input12, error: -6 [ 85.393144][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 85.553121][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 85.572759][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.591708][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 85.606031][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.621785][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 85.631971][ T10] usb 2-1: config 1 has no interface number 1 [ 85.639253][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 85.655136][ T10] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.671897][ T10] usb 2-1: config 1 interface 2 has no altsetting 0 [ 85.682580][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.702443][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.720138][ T10] usb 2-1: Product: syz [ 85.729881][ T10] usb 2-1: Manufacturer: syz [ 85.748949][ T10] usb 2-1: SerialNumber: syz [ 85.980129][ T10] usb 2-1: USB disconnect, device number 19 [ 85.989765][ T2607] netlink: 104 bytes leftover after parsing attributes in process `syz.2.658'. [ 86.075773][ T769] udevd[769]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.253564][ T785] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 86.403189][ T785] usb 1-1: Using ep0 maxpacket: 32 [ 86.410158][ T785] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 86.418296][ T785] usb 1-1: config 0 has no interface number 0 [ 86.427279][ T785] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 86.436438][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.444612][ T785] usb 1-1: Product: syz [ 86.448828][ T785] usb 1-1: Manufacturer: syz [ 86.453490][ T785] usb 1-1: SerialNumber: syz [ 86.459500][ T785] usb 1-1: config 0 descriptor?? [ 86.472112][ T785] smsc95xx v2.0.0 [ 86.679827][ T785] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 86.694274][ T785] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 86.793613][ T2649] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 86.923202][ T785] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 86.973171][ T785] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 86.987701][ T785] usb 1-1: USB disconnect, device number 17 [ 87.019817][ T2655] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 87.050956][ T2660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.062528][ T2660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.072257][ T2660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.081671][ T2660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.092923][ T2660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.104328][ T2660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.113925][ T2660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.122763][ T2660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.131141][ T2663] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 87.131533][ T2663] rust_binder: Error while translating object. [ 87.134695][ T2660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.146178][ T2663] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.148167][ T2660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.154967][ T2663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:555 [ 87.493062][ T36] kauditd_printk_skb: 1926 callbacks suppressed [ 87.509620][ T36] audit: type=1400 audit(1754641781.936:12185): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.536001][ T36] audit: type=1400 audit(1754641781.946:12186): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.562660][ T36] audit: type=1400 audit(1754641781.946:12187): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.580381][ T2670] input: syz0 as /devices/virtual/input/input13 [ 87.589325][ T36] audit: type=1400 audit(1754641781.986:12188): avc: denied { read write } for pid=2669 comm="syz.1.678" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.603136][ T392] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 87.631665][ T36] audit: type=1400 audit(1754641781.986:12189): avc: denied { read write open } for pid=2669 comm="syz.1.678" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.657118][ T36] audit: type=1400 audit(1754641781.986:12190): avc: denied { read write } for pid=2669 comm="syz.1.678" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.680486][ T36] audit: type=1400 audit(1754641781.986:12191): avc: denied { read write open } for pid=2669 comm="syz.1.678" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.704667][ T36] audit: type=1400 audit(1754641781.986:12192): avc: denied { ioctl } for pid=2669 comm="syz.1.678" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.729213][ T36] audit: type=1400 audit(1754641782.006:12193): avc: denied { ioctl } for pid=2667 comm="syz.2.677" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.754346][ T36] audit: type=1400 audit(1754641782.006:12194): avc: denied { read } for pid=2669 comm="syz.1.678" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.833171][ T392] usb 3-1: Using ep0 maxpacket: 16 [ 87.840239][ T392] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 87.849010][ T392] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.859319][ T392] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.874066][ T392] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.883213][ T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.891213][ T392] usb 3-1: Product: syz [ 87.895435][ T392] usb 3-1: Manufacturer: syz [ 87.900020][ T392] usb 3-1: SerialNumber: syz [ 87.999902][ T2676] random: crng reseeded on system resumption [ 88.312656][ T392] usb 3-1: 0:2 : does not exist [ 88.313163][ T393] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 88.473192][ T393] usb 1-1: Using ep0 maxpacket: 16 [ 88.482045][ T393] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.492251][ T393] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.505191][ T393] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.514405][ T393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.522397][ T393] usb 1-1: Product: syz [ 88.526620][ T393] usb 1-1: Manufacturer: syz [ 88.531302][ T393] usb 1-1: SerialNumber: syz [ 88.598501][ T2684] rust_binder: Write failure EFAULT in pid:527 [ 88.638072][ T2687] rust_binder: Got transaction with invalid offset. [ 88.644392][ T2687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.651100][ T2687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:530 [ 89.378354][ T2704] rust_binder: Write failure EFAULT in pid:420 [ 89.403154][ T785] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 89.543170][ T785] usb 2-1: device descriptor read/64, error -71 [ 89.783180][ T785] usb 2-1: device descriptor read/64, error -71 [ 90.023156][ T785] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 90.153159][ T785] usb 2-1: device descriptor read/64, error -71 [ 90.395703][ T785] usb 2-1: device descriptor read/64, error -71 [ 90.405804][ T392] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 90.431499][ T393] usb 1-1: 0:2 : does not exist [ 90.436651][ T392] usb 3-1: USB disconnect, device number 22 [ 90.453522][ T393] usb 1-1: USB disconnect, device number 18 [ 90.506091][ T785] usb usb2-port1: attempt power cycle [ 90.526888][ T769] udevd[769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.576539][ T361] udevd[361]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 90.825324][ T2717] /dev/rnullb0: Can't open blockdev [ 90.851730][ T2720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 90.865180][ T785] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 90.895383][ T785] usb 2-1: device descriptor read/8, error -71 [ 91.054172][ T785] usb 2-1: device descriptor read/8, error -71 [ 91.092507][ T2744] rust_binder: 2736 RLIMIT_NICE not set [ 91.107468][ T2736] rust_binder: Write failure EFAULT in pid:565 [ 91.190072][ T10] rust_binder: 2735: removing orphan mapping 0:4248 [ 91.290301][ T2750] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 91.313202][ T785] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 91.326079][ T2750] kvm: Disabled LAPIC found during irq injection [ 91.365388][ T785] usb 2-1: device descriptor read/8, error -71 [ 91.505869][ T785] usb 2-1: device descriptor read/8, error -71 [ 91.566237][ T2768] rust_binder: 2766 RLIMIT_NICE not set [ 91.570875][ T2768] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.582525][ T2769] SELinux: policydb magic number 0x72666c65 does not match expected magic number 0xf97cff8c [ 91.611159][ T2769] sel_write_load: 50 callbacks suppressed [ 91.611177][ T2769] SELinux: failed to load policy [ 91.624344][ T785] usb usb2-port1: unable to enumerate USB device [ 91.667099][ T2774] can: request_module (can-proto-0) failed. [ 91.901744][ T2778] sit0: entered promiscuous mode [ 91.908804][ T2778] netlink: 'syz.4.709': attribute type 1 has an invalid length. [ 91.917717][ T2778] netlink: 1 bytes leftover after parsing attributes in process `syz.4.709'. [ 91.930032][ T2778] binfmt_misc: Unknown parameter 'trans' [ 92.495272][ T36] kauditd_printk_skb: 576 callbacks suppressed [ 92.495289][ T36] audit: type=1400 audit(1754641786.946:12771): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.503736][ T2811] cgroup: No subsys list or none specified [ 92.574496][ T2815] binder: Unknown parameter 'sR7eclabe' [ 92.583178][ T36] audit: type=1400 audit(1754641786.946:12772): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.629643][ T2811] 9pnet_fd: Insufficient options for proto=fd [ 92.665680][ T36] audit: type=1400 audit(1754641786.946:12773): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.783150][ T36] audit: type=1400 audit(1754641786.946:12774): avc: denied { mounton } for pid=2809 comm="syz.4.720" path="/108/file0" dev="tmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.816194][ T2824] rust_binder: Failed copying remainder into alloc: EFAULT [ 92.816219][ T2824] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 92.856561][ T36] audit: type=1400 audit(1754641786.986:12775): avc: denied { sys_module } for pid=2810 comm="syz.0.719" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 92.886072][ T2824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 92.886102][ T2824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:558 [ 92.933148][ T36] audit: type=1400 audit(1754641787.026:12776): avc: denied { mounton } for pid=2814 comm="syz.1.722" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.994975][ T36] audit: type=1400 audit(1754641787.056:12777): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.029304][ T36] audit: type=1400 audit(1754641787.056:12778): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.074316][ T2829] overlayfs: conflicting lowerdir path [ 93.121561][ T36] audit: type=1400 audit(1754641787.056:12779): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.143475][ T2839] audit: audit_backlog=65 > audit_backlog_limit=64 [ 93.318055][ T2840] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 93.643154][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 93.803124][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 93.823711][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 93.842054][ T10] usb 1-1: config 0 has no interface number 0 [ 93.855272][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 93.875390][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 93.894379][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.911115][ T10] usb 1-1: Product: syz [ 93.919673][ T10] usb 1-1: Manufacturer: syz [ 93.928312][ T10] usb 1-1: SerialNumber: syz [ 93.941218][ T10] usb 1-1: config 0 descriptor?? [ 93.961501][ T10] smsc75xx v1.0.0 [ 94.073398][ T2881] /dev/rnullb0: Can't open blockdev [ 94.583865][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 94.595226][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 94.619165][ T2888] tmpfs: Bad value for 'nr_blocks' [ 94.785246][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 94.826468][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 94.836206][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 94.846563][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 94.856111][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 95.053770][ T2906] /dev/rnullb0: Can't open blockdev [ 95.300500][ T2912] SELinux: security_context_str_to_sid () failed with errno=-22 [ 95.543179][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 95.693128][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 95.714745][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.725727][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.736218][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.749459][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.752431][ T2924] syzkaller0: entered promiscuous mode [ 95.758566][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.760427][ T10] usb 3-1: config 0 descriptor?? [ 95.765543][ T2924] syzkaller0: entered allmulticast mode [ 96.005445][ T2941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 96.014580][ T2941] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.022475][ T2941] bridge_slave_0: left allmulticast mode [ 96.028282][ T2941] bridge_slave_0: left promiscuous mode [ 96.033990][ T2941] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.130269][ T49] usb 1-1: USB disconnect, device number 19 [ 96.134891][ T456] rust_binder: 0: removing orphan mapping 0:112 [ 96.192759][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 96.203136][ T393] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 96.217710][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input14 [ 96.264748][ T10] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 96.391800][ T2951] SELinux: security_context_str_to_sid () failed with errno=-22 [ 96.403954][ T393] usb 2-1: Using ep0 maxpacket: 32 [ 96.426673][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.441332][ T10] usb 3-1: USB disconnect, device number 23 [ 96.452548][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.473944][ T393] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 96.500838][ T393] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 96.520662][ T393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.536518][ T393] usb 2-1: config 0 descriptor?? [ 96.663608][ T2959] IPv4: Oversized IP packet from 127.202.26.0 [ 96.824566][ T2966] syz.4.771 uses obsolete (PF_INET,SOCK_PACKET) [ 96.957440][ T393] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0008/input/input16 [ 96.972124][ T393] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0008/input/input17 [ 96.993139][ T49] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 97.003445][ T393] kye 0003:0458:5011.0008: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 97.165531][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 97.177592][ T49] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.193117][ T49] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.202728][ T49] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.212961][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.231314][ T49] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.253136][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.278237][ T49] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.301127][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.318614][ T49] usb 3-1: config 0 descriptor?? [ 97.548181][ T49] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.576346][ T49] usb 3-1: USB disconnect, device number 24 [ 97.584208][ T49] usblp0: removed [ 97.750417][ T36] kauditd_printk_skb: 654 callbacks suppressed [ 97.750448][ T36] audit: type=1400 audit(1754641792.196:13426): avc: denied { read write } for pid=2960 comm="syz.2.769" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.783212][ T36] audit: type=1400 audit(1754641792.196:13427): avc: denied { read write open } for pid=2960 comm="syz.2.769" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.807946][ T36] audit: type=1400 audit(1754641792.196:13428): avc: denied { ioctl } for pid=2960 comm="syz.2.769" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.832904][ T36] audit: type=1400 audit(1754641792.196:13429): avc: denied { ioctl } for pid=2960 comm="syz.2.769" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.857800][ T36] audit: type=1400 audit(1754641792.196:13430): avc: denied { ioctl } for pid=2960 comm="syz.2.769" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.882780][ T36] audit: type=1400 audit(1754641792.196:13431): avc: denied { ioctl } for pid=2960 comm="syz.2.769" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.910112][ T36] audit: type=1400 audit(1754641792.306:13432): avc: denied { ioctl } for pid=2960 comm="syz.2.769" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.941485][ T36] audit: type=1400 audit(1754641792.346:13433): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.966398][ T36] audit: type=1400 audit(1754641792.346:13434): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.977692][ T2987] rust_binder: Write failure EFAULT in pid:602 [ 97.991406][ T36] audit: type=1400 audit(1754641792.346:13435): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.003143][ T49] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 98.083273][ C0] kye 0003:0458:5011.0008: usb_submit_urb(ctrl) failed: -1 [ 98.183151][ T49] usb 3-1: Using ep0 maxpacket: 32 [ 98.204934][ T49] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 98.223222][ T49] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 98.239479][ T49] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 98.249291][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.273177][ T49] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.303798][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.323162][ T49] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.332315][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.343244][ T49] usb 3-1: config 0 descriptor?? [ 98.370558][ T3003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.783'. [ 98.566126][ T49] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.791231][ T10] usb 3-1: USB disconnect, device number 25 [ 98.804583][ T10] usblp0: removed [ 98.857049][ T393] usb 2-1: USB disconnect, device number 24 [ 98.875277][ T13] bridge_slave_1: left allmulticast mode [ 98.880959][ T13] bridge_slave_1: left promiscuous mode [ 98.933193][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.965509][ T13] bridge_slave_0: left allmulticast mode [ 98.971179][ T13] bridge_slave_0: left promiscuous mode [ 98.995159][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.064395][ T3028] 9pnet_fd: Insufficient options for proto=fd [ 99.096973][ T3024] netlink: 'syz.4.792': attribute type 7 has an invalid length. [ 99.115700][ T3024] netlink: 'syz.4.792': attribute type 5 has an invalid length. [ 99.123455][ T3024] netlink: 17 bytes leftover after parsing attributes in process `syz.4.792'. [ 99.142804][ T13] tipc: Left network mode [ 99.165271][ T13] veth1_macvtap: left promiscuous mode [ 99.175709][ T13] veth0_vlan: left promiscuous mode [ 99.370017][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.413331][ T3030] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.420523][ T3030] bridge_slave_0: entered allmulticast mode [ 99.441002][ T3030] bridge_slave_0: entered promiscuous mode [ 99.455282][ T3030] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.463526][ T3030] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.470863][ T3030] bridge_slave_1: entered allmulticast mode [ 99.483691][ T3030] bridge_slave_1: entered promiscuous mode [ 99.550120][ T3045] netlink: 44 bytes leftover after parsing attributes in process `syz.4.798'. [ 99.568792][ T3045] netlink: 'syz.4.798': attribute type 6 has an invalid length. [ 99.576608][ T3045] netlink: 'syz.4.798': attribute type 5 has an invalid length. [ 99.584262][ T3045] netlink: 'syz.4.798': attribute type 4 has an invalid length. [ 99.633128][ T785] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 99.703980][ T3030] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.711065][ T3030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.718378][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.725440][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.744361][ T3045] tipc: Enabling of bearer rejected, failed to enable media [ 99.808842][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.816523][ T785] usb 3-1: Using ep0 maxpacket: 32 [ 99.825110][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.832260][ T785] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.843903][ T785] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 99.852605][ T785] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.873643][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.880694][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.889174][ T785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.904715][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.911760][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.923127][ T393] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 99.937678][ T785] usb 3-1: string descriptor 0 read error: -22 [ 99.951004][ T785] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.973129][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.988882][ T785] usb 3-1: 0:2 : does not exist [ 100.044568][ T3030] veth0_vlan: entered promiscuous mode [ 100.083388][ T393] usb 1-1: Using ep0 maxpacket: 32 [ 100.087353][ T3030] veth1_macvtap: entered promiscuous mode [ 100.109994][ T393] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 100.131403][ T393] usb 1-1: config 0 has no interface number 0 [ 100.160718][ T393] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 100.178607][ T393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.186852][ T393] usb 1-1: Product: syz [ 100.191088][ T393] usb 1-1: Manufacturer: syz [ 100.203138][ T3041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.218073][ T3041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.228183][ T393] usb 1-1: SerialNumber: syz [ 100.248390][ T393] usb 1-1: config 0 descriptor?? [ 100.254447][ T3041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 100.283854][ T393] smsc95xx v2.0.0 [ 100.303831][ T3060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.314327][ T785] usb 3-1: USB disconnect, device number 26 [ 100.409966][ T3061] kvm: kvm [3059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 100.423374][ T3061] kvm: kvm [3059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 100.442578][ T3061] kvm_intel: kvm [3059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 100.455333][ T3061] kvm: kvm [3059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 100.465824][ T3061] kvm: kvm [3059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 100.478960][ T3061] kvm: kvm [3059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x1 [ 100.489875][ T3061] kvm: kvm [3059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1 [ 100.498939][ T3061] kvm: kvm [3059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x6eed [ 100.518708][ T3061] kvm: kvm [3059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x4cc3 [ 100.528875][ T3061] kvm: kvm [3059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xbbae [ 100.541137][ T3061] kvm: kvm [3059]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xe647 [ 100.690583][ T785] rust_binder: 3059: removing orphan mapping 0:1024 [ 100.696797][ T393] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 100.709091][ T393] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 101.126414][ T393] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 101.153163][ T393] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 101.166108][ T393] usb 1-1: USB disconnect, device number 20 [ 101.232171][ T3110] rust_binder: inc_ref_done called when no active inc_refs [ 101.354656][ T3120] rust_binder: 523: no such ref 0 [ 101.408651][ T3125] rust_binder: 3120 RLIMIT_NICE not set [ 101.450198][ T3128] capability: warning: `syz.2.822' uses 32-bit capabilities (legacy support in use) [ 101.466016][ T3127] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 101.475700][ T3127] SELinux: failed to load policy [ 101.623933][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.624117][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.630899][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.637823][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.655961][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.667107][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.683520][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.715826][ T3139] SELinux: Context system_u:object_r:udev_rules_t:s0 is not valid (left unmapped). [ 101.733351][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.733620][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.941614][ T3160] fuse: Unknown parameter 'rootZmode' [ 102.016488][ T3168] rust_binder: Write failure EFAULT in pid:627 [ 102.225928][ T3192] fuse: Unknown parameter 'fN/ʎؖy{6Z;tg*DU%3GG' [ 102.253059][ T3192] overlayfs: missing 'lowerdir' [ 102.341646][ T3199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'. [ 102.351362][ T3200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'. [ 102.365701][ T3200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 102.367901][ T3200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.377865][ T3199] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 102.380324][ T3200] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 102.384972][ T3199] rust_binder: Read failure Err(EFAULT) in pid:33 [ 102.392986][ T3200] rust_binder: Read failure Err(EFAULT) in pid:33 [ 102.408256][ T3199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 102.496222][ T3204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:36 [ 102.753791][ T36] kauditd_printk_skb: 838 callbacks suppressed [ 102.753814][ T36] audit: type=1400 audit(1754641797.206:14274): avc: denied { ioctl } for pid=3212 comm="syz.2.847" path="/dev/binderfs/binder0" dev="binder" ino=25 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.795872][ T3219] rust_binder: Write failure EFAULT in pid:43 [ 102.820966][ T3213] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.834368][ T36] audit: type=1400 audit(1754641797.206:14275): avc: denied { set_context_mgr } for pid=3212 comm="syz.2.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.836521][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.873239][ T3213] audit: audit_lost=56 audit_rate_limit=0 audit_backlog_limit=64 [ 102.881373][ T3213] audit: backlog limit exceeded [ 102.891411][ T3213] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.901866][ T36] audit: type=1400 audit(1754641797.206:14276): avc: denied { sys_module } for pid=3212 comm="syz.2.847" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.911446][ T289] audit: audit_lost=57 audit_rate_limit=0 audit_backlog_limit=64 [ 102.928042][ T3224] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.243188][ T49] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 103.397449][ T49] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 103.406543][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.414571][ T49] usb 1-1: Product: syz [ 103.418726][ T49] usb 1-1: Manufacturer: syz [ 103.423355][ T49] usb 1-1: SerialNumber: syz [ 103.429072][ T49] usb 1-1: config 0 descriptor?? [ 103.436345][ T49] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 103.443872][ T785] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 103.452843][ T49] usb 1-1: Detected FT4232HP [ 103.608716][ T785] usb 2-1: config 0 has an invalid interface number: 159 but max is 0 [ 103.635373][ T785] usb 2-1: config 0 has no interface number 0 [ 103.641656][ T785] usb 2-1: New USB device found, idVendor=17ef, idProduct=3899, bcdDevice=71.0d [ 103.650901][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.661533][ T785] usb 2-1: config 0 descriptor?? [ 103.668624][ T785] usb-storage 2-1:0.159: USB Mass Storage device detected [ 103.688346][ T785] usb-storage 2-1:0.159: Quirks match for vid 17ef pid 3899: 800000 [ 103.764262][ T3264] kvm: pic: non byte read [ 103.768719][ T3264] kvm: pic: non byte read [ 103.773248][ T3264] kvm: pic: non byte read [ 103.777657][ T3264] kvm: pic: non byte read [ 103.782056][ T3264] kvm: pic: non byte read [ 103.786524][ T3264] kvm: pic: non byte read [ 103.790986][ T3264] kvm: pic: non byte read [ 103.795967][ T3264] kvm: pic: non byte read [ 103.800376][ T3264] kvm: pic: non byte read [ 103.804989][ T3264] kvm: pic: non byte read [ 103.815415][ T49] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 103.863219][ T10] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 104.025680][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.036491][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 104.050975][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 104.062649][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.080181][ T10] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 104.089851][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.098509][ T10] usb 3-1: Product: syz [ 104.103819][ T10] usb 3-1: Manufacturer: syz [ 104.109009][ T49] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 104.110539][ T10] usb 3-1: SerialNumber: syz [ 104.127541][ T10] usb 3-1: config 0 descriptor?? [ 104.129975][ T49] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 104.136674][ T3269] overlayfs: failed to clone upperpath [ 104.147977][ T3260] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 104.159772][ T49] usb 1-1: USB disconnect, device number 21 [ 104.168111][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 104.169030][ T49] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 104.192468][ T49] ftdi_sio 1-1:0.0: device disconnected [ 104.445886][ T393] usb 3-1: USB disconnect, device number 27 [ 104.481944][ T3282] 9pnet_fd: Insufficient options for proto=fd [ 105.019347][ T3305] netlink: 'syz.0.871': attribute type 4 has an invalid length. [ 105.042023][ T3305] netlink: 'syz.0.871': attribute type 4 has an invalid length. [ 105.125231][ T3309] netlink: 328 bytes leftover after parsing attributes in process `syz.0.872'. [ 105.734822][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.062256][ T49] usb 2-1: USB disconnect, device number 25 [ 106.151325][ T3328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 106.192832][ T3330] binder: Unknown parameter 'context' [ 106.361517][ T3338] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 106.589140][ T3344] binder: Unknown parameter '00000000000000000000000)פd>Uě0GVN`:yƪZ<\I?1rZAH8Mk@9f}DG'Q2 Uno2w:0?~IUO}V70: ؕ.A ~L!-"p:oGl}OFc}s"3Zɨ HIᝤdNG̪1~Y{pCq;?߅lH˔-C'ReJ6 UHa/[' [ 107.223147][ T393] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 107.395761][ T393] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.424065][ T393] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.444333][ T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.462556][ T393] usb 2-1: Product: syz [ 107.472674][ T393] usb 2-1: Manufacturer: syz [ 107.483600][ T393] usb 2-1: SerialNumber: syz [ 107.497609][ T393] usb 2-1: config 0 descriptor?? [ 107.527496][ T393] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 107.664356][ T769] udevd[769]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.686324][ T3385] netlink: 64 bytes leftover after parsing attributes in process `syz.4.898'. [ 107.746523][ T3385] netlink: 'syz.4.898': attribute type 13 has an invalid length. [ 107.783114][ T410] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.790390][ T36] kauditd_printk_skb: 611 callbacks suppressed [ 107.790407][ T36] audit: type=1400 audit(1754641802.236:14826): avc: denied { relabelfrom } for pid=3357 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 107.895852][ T3359] syzkaller0: entered promiscuous mode [ 107.903129][ T36] audit: type=1400 audit(1754641802.236:14827): avc: denied { relabelto } for pid=3357 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 107.939859][ T3359] syzkaller0: entered allmulticast mode [ 107.964043][ T36] audit: type=1400 audit(1754641802.346:14828): avc: denied { create } for pid=3357 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.012801][ T36] audit: type=1400 audit(1754641802.346:14829): avc: denied { setopt } for pid=3357 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.059829][ T36] audit: type=1400 audit(1754641802.446:14830): avc: denied { read } for pid=3357 comm="syz.1.889" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.122036][ T9] usb 2-1: USB disconnect, device number 26 [ 108.162207][ T36] audit: type=1400 audit(1754641802.446:14831): avc: denied { read open } for pid=3357 comm="syz.1.889" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.232207][ T36] audit: type=1400 audit(1754641802.676:14832): avc: denied { create } for pid=3389 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.274181][ T36] audit: type=1400 audit(1754641802.676:14833): avc: denied { ioctl } for pid=3389 comm="syz.4.900" path="socket:[23043]" dev="sockfs" ino=23043 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.326701][ T36] audit: type=1400 audit(1754641802.676:14834): avc: denied { setopt } for pid=3389 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.367484][ T36] audit: type=1400 audit(1754641802.796:14835): avc: denied { create } for pid=3391 comm="syz.4.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.464131][ T3394] netlink: 104 bytes leftover after parsing attributes in process `syz.4.902'. [ 108.483398][ T49] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 108.708331][ T3324] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 109.546833][ T3410] rust_binder: 3407 RLIMIT_NICE not set [ 109.547608][ T3410] rust_binder: 569: no such ref 3 [ 109.562546][ T3405] dump_vmcs: 55 callbacks suppressed [ 109.562564][ T3405] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.595729][ T3410] rust_binder: inc_ref_done called when no active inc_refs [ 109.635394][ T3407] ------------[ cut here ]------------ [ 109.648246][ T3407] WARNING: CPU: 0 PID: 3407 at mm/page_alloc.c:5225 __alloc_pages_noprof+0xe8/0x7b0 [ 109.657706][ T3407] Modules linked in: [ 109.661634][ T3407] CPU: 0 UID: 0 PID: 3407 Comm: syz.2.906 Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 109.675070][ T3407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.685514][ T3407] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 109.691574][ T3407] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 61 03 ee 05 00 0f 85 be 00 00 00 c6 05 54 03 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 109.711409][ T3407] RSP: 0018:ffffc9001091f5a0 EFLAGS: 00010246 [ 109.717511][ T3407] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000 [ 109.725590][ T3407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001091f658 [ 109.733686][ T3407] RBP: ffffc9001091f6c8 R08: ffffc9001091f657 R09: 0000000000000000 [ 109.741701][ T3407] R10: ffffc9001091f640 R11: fffff52002123ecb R12: ffffc9001091f5e0 [ 109.749808][ T3407] R13: dffffc0000000000 R14: 1ffff92002123eb8 R15: 0000000000000000 [ 109.757814][ T3407] FS: 00007f59bf9816c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 109.766874][ T3407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.773663][ T3407] CR2: 0000200000005000 CR3: 000000010d75a000 CR4: 00000000003526b0 [ 109.781663][ T3407] Call Trace: [ 109.784969][ T3407] [ 109.787897][ T3407] ? do_syscall_64+0x58/0xf0 [ 109.792512][ T3407] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.798620][ T3407] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 109.804375][ T3407] ? hashtab_init+0xdb/0x1f0 [ 109.808985][ T3407] ___kmalloc_large_node+0x9c/0x1d0 [ 109.814239][ T3407] ? hashtab_init+0xdb/0x1f0 [ 109.818846][ T3407] __kmalloc_large_node_noprof+0x1e/0xe0 [ 109.824692][ T3407] ? hashtab_init+0xdb/0x1f0 [ 109.829314][ T3407] __kmalloc_noprof+0x26d/0x450 [ 109.834193][ T3407] hashtab_init+0xdb/0x1f0 [ 109.838626][ T3407] ? common_read+0x16d/0x480 [ 109.843249][ T3407] symtab_init+0x44/0x70 [ 109.847556][ T3407] common_read+0x1de/0x480 [ 109.851994][ T3407] ? __cfi_common_read+0x10/0x10 [ 109.856981][ T3407] ? hashtab_init+0x105/0x1f0 [ 109.861707][ T3407] policydb_read+0xaab/0x28c0 [ 109.866490][ T3407] ? kasan_save_alloc_info+0x40/0x50 [ 109.871805][ T3407] ? __cfi_policydb_read+0x10/0x10 [ 109.876981][ T3407] ? security_load_policy+0x128/0x12f0 [ 109.882486][ T3407] security_load_policy+0x162/0x12f0 [ 109.887854][ T3407] ? irqentry_exit+0x4a/0x60 [ 109.892460][ T3407] ? exc_page_fault+0x66/0xc0 [ 109.897200][ T3407] ? asm_exc_page_fault+0x2b/0x30 [ 109.902249][ T3407] ? __cfi_security_load_policy+0x10/0x10 [ 109.908028][ T3407] ? rep_movs_alternative+0x4a/0xa0 [ 109.913289][ T3407] sel_write_load+0x298/0x5e0 [ 109.918178][ T3407] ? __cfi_sel_write_load+0x10/0x10 [ 109.923424][ T3407] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 109.929591][ T3407] ? bpf_lsm_file_permission+0xd/0x20 [ 109.935043][ T3407] ? __cfi_sel_write_load+0x10/0x10 [ 109.940260][ T3407] vfs_write+0x3c0/0xe80 [ 109.944596][ T3407] ? __cfi_vfs_write+0x10/0x10 [ 109.949401][ T3407] ? __kasan_check_write+0x18/0x20 [ 109.954613][ T3407] ? mutex_lock+0x92/0x1c0 [ 109.959137][ T3407] ? __cfi_mutex_lock+0x10/0x10 [ 109.964031][ T3407] ? __fget_files+0x2c5/0x340 [ 109.968720][ T3407] ksys_write+0x141/0x250 [ 109.973185][ T3407] ? xfd_validate_state+0x68/0x150 [ 109.978332][ T3407] ? __cfi_ksys_write+0x10/0x10 [ 109.983242][ T3407] ? __kasan_check_write+0x18/0x20 [ 109.988373][ T3407] ? fpregs_restore_userregs+0x11d/0x260 [ 109.994083][ T3407] __x64_sys_write+0x7f/0x90 [ 109.998700][ T3407] x64_sys_call+0x271c/0x2ee0 [ 110.003438][ T3407] do_syscall_64+0x58/0xf0 [ 110.007886][ T3407] ? clear_bhb_loop+0x50/0xa0 [ 110.012576][ T3407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.018502][ T3407] RIP: 0033:0x7f59beb8ebe9 [ 110.022937][ T3407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.042630][ T3407] RSP: 002b:00007f59bf981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.051079][ T3407] RAX: ffffffffffffffda RBX: 00007f59bedb6090 RCX: 00007f59beb8ebe9 [ 110.059084][ T3407] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000006 [ 110.067091][ T3407] RBP: 00007f59bec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 110.075099][ T3407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.083068][ T3407] R13: 00007f59bedb6128 R14: 00007f59bedb6090 R15: 00007fffabfaa5d8 [ 110.091085][ T3407] [ 110.094179][ T3407] ---[ end trace 0000000000000000 ]--- [ 110.104627][ T3407] SELinux: failed to load policy