last executing test programs: 2m20.295078887s ago: executing program 3 (id=607): unshare(0x20020280) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x23, @local, 0x23}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000140015022bbd7000fbdbdf250a0604004e244e2320000000c900002c0600800003000000feffffff03e7000041000000678a0000", @ANYRES32=0x0, @ANYBLOB="030000000210000092050000ffffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x26040811}, 0x404c814) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r8, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x2, 0x3, 0x400, 0x3f, 0x8, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xe, [0x4000000, 0xff]}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000500)='./file0\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r8], 0x24}, 0x1, 0x0, 0x0, 0x20000058}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) 2m19.493059762s ago: executing program 3 (id=618): unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x9f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) getsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, &(0x7f0000000000)) close(r2) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="00571ddeb35e504ab630ed1d6148a2000000106f8c15862d2d527315e5608556f90ca6daa7fc7790db07e154b7fcea4554f1f36914c7ecd49e43eaa004fa0542dae04e99b62e5f88b16237"]) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)=0x9) unshare(0x22020600) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') (async) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x9f, 0x0) (async) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) (async) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) socket$inet6(0xa, 0x802, 0x0) (async) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) (async) getsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, &(0x7f0000000000)) (async) close(r2) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="00571ddeb35e504ab630ed1d6148a2000000106f8c15862d2d527315e5608556f90ca6daa7fc7790db07e154b7fcea4554f1f36914c7ecd49e43eaa004fa0542dae04e99b62e5f88b16237"]) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)=0x9) (async) 2m19.477395793s ago: executing program 3 (id=619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000240)={0x3, 0x0, [{0x80000019, 0x800, 0x1, 0x3, 0x80, 0x7, 0xffffff00}, {0x7, 0x8, 0x4, 0x1, 0x0, 0xbdc, 0x6}, {0xb, 0x3ff, 0x5, 0x0, 0x80000001, 0x0, 0x7f}]}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4004011}, 0x20040810) socket$inet6_icmp(0xa, 0x2, 0x3a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 2m19.38330617s ago: executing program 3 (id=620): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "249500dff324d3404fd374a282ea07907bf0cbab527d412f6530996429e2d6e0064d883c1a9f1cf3161e4ba13962a0a99d4f993e9ea066c301150c47b26912a9", 0x38}, 0x48, 0x0) keyctl$revoke(0x3, r0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000001040), 0x282d) io_setup(0x4f1c, &(0x7f0000000000)) 2m19.382331031s ago: executing program 3 (id=621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000100)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="747bdb006f816335f431b245dc81dc2b"]}]}, 0x38}], 0x1}, 0xcc000) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 2m19.379450521s ago: executing program 3 (id=622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x1802, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be12442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r5], 0xfdef) write$P9_RVERSION(r5, &(0x7f0000000400)=ANY=[@ANYRES64=r1], 0x15) r7 = dup(r3) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb4, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102000000406b1d01014000010203010902a20003010500000904000000010100000a24010500e10201020d2406020303060001000900800c2408020000089a02e00fd709240705030040288909240806560007d428090401000001020000090401010101020000082402012f04030109050109000407080207250183010300090402000001020000090402010101020000072401050a011009240202f8ffffff3409058209ff0377e1070725231d"], &(0x7f00000001c0)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) mount(&(0x7f0000000000)=@rnullb, 0x0, &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r12 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r12, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) close_range(r0, 0xffffffffffffffff, 0x0) 2m4.378724993s ago: executing program 32 (id=622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x1802, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be12442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r5], 0xfdef) write$P9_RVERSION(r5, &(0x7f0000000400)=ANY=[@ANYRES64=r1], 0x15) r7 = dup(r3) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb4, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102000000406b1d01014000010203010902a20003010500000904000000010100000a24010500e10201020d2406020303060001000900800c2408020000089a02e00fd709240705030040288909240806560007d428090401000001020000090401010101020000082402012f04030109050109000407080207250183010300090402000001020000090402010101020000072401050a011009240202f8ffffff3409058209ff0377e1070725231d"], &(0x7f00000001c0)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) mount(&(0x7f0000000000)=@rnullb, 0x0, &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r12 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r12, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) close_range(r0, 0xffffffffffffffff, 0x0) 2m3.648067002s ago: executing program 2 (id=770): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b009a34751f1cbe27", 0x12, 0x4000, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x3e27, 0x0, 0x0, 0x0, 0xffffffff}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002ac0), 0x40080, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, 0x0) (async) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000100)=""/247, 0xf7}, {&(0x7f0000001a40)=""/260, 0x104}, {&(0x7f0000000880)=""/4091, 0xffb}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000000380)=""/215, 0xd7}], 0x7}, 0xa}, {{0x0, 0xffffffb5, 0x0}, 0x4}], 0x2, 0x40012100, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000200)={0x80, 0x0, 0x9}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x6, 0x0, 0x0, 0x6}, 0x1c) (async) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x3, {0xa, 0x4e23, 0xa, @private1, 0x4}}}, 0x32) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000286000/0x1000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x438000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 2m3.646941413s ago: executing program 2 (id=771): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="75e90a6ca6a19490817e2a4f353869643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0xab318091, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xab318091, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'lo\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x60000006}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x2, 0x51) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000740)=""/228, 0xe4}], 0x1, 0x472, 0x41009) (async) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000740)=""/228, 0xe4}], 0x1, 0x472, 0x41009) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0xc, 0x77, 0x7, 0x5}]}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0xc, 0x77, 0x7, 0x5}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r7, &(0x7f0000000400)="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", 0x1f000) 2m3.641564013s ago: executing program 2 (id=772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='2\x00\x00\n\x00\x00\x00\x00\x00\x00'], 0x18}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='utf8', &(0x7f00000001c0)='\x00\x00\xf2qE', 0x0) sendto$inet6(r5, &(0x7f00000002c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d11867768f1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853e8cb8ec2803682e0a041c89a00e3e26ef4ce40a11b734850902889019fce24b6df6021053ca240beed68eb1b4bad963790b6ec60dae8f30aba87ea50ceda7d3953", 0xea, 0x8800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x109, &(0x7f0000000080)='z'}, {0x2, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x6bc, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m3.595134147s ago: executing program 2 (id=773): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x2406c0, 0x0) read$FUSE(r2, 0x0, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x4, {0x2, 0x4e20, @multicast1=0xe000cc02}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000200), 0x4) getsockopt$sock_timeval(r5, 0x1, 0x15, 0x0, &(0x7f0000000440)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x8000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000690000/0x2000)=nil, 0x2000, 0x19) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0080"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m3.499056655s ago: executing program 2 (id=778): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@getpolicy={0x5c, 0x15, 0x1, 0x70bd2a, 0x25dfdbfc, {{@in6=@loopback, @in6=@loopback, 0x4e21, 0x27, 0x4e20, 0x3, 0x2, 0x20, 0x20, 0x8}, 0x6e6bc0}, [@mark={0xc, 0x15, {0x350759, 0x80}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000440) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x10}, 0x461}, 0x1c) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_raw(r4, 0x0, 0x0) bind$can_raw(r4, &(0x7f0000000140), 0x10) close(r0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in=@rand_addr=0x64010102, 0x0, 0x32}, @in6=@loopback, {0x4, 0x7, 0x0, 0x40000000000001, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7d}, {0x0, 0x8, 0xcc, 0xfffffffffffffffc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe, 0x35}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x804) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@getpolicy={0x5c, 0x15, 0x1, 0x70bd2a, 0x25dfdbfc, {{@in6=@loopback, @in6=@loopback, 0x4e21, 0x27, 0x4e20, 0x3, 0x2, 0x20, 0x20, 0x8}, 0x6e6bc0}, [@mark={0xc, 0x15, {0x350759, 0x80}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000440) (async) syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x10}, 0x461}, 0x1c) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) (async) bind$can_raw(r4, 0x0, 0x0) (async) bind$can_raw(r4, &(0x7f0000000140), 0x10) (async) close(r0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in=@rand_addr=0x64010102, 0x0, 0x32}, @in6=@loopback, {0x4, 0x7, 0x0, 0x40000000000001, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7d}, {0x0, 0x8, 0xcc, 0xfffffffffffffffc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe, 0x35}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x804) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) (async) 2m3.479317806s ago: executing program 2 (id=779): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x110, r0, 0x147a5000) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x101, 0x0, 0x0, 0x0, 0x50ea, 0x0, 0x8, 0x5, 0x4}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "d9f0a3d4", {0x3, 0x104, 0x0, 0xfe, 0x3ff, 0x14, 0x2c}}) 1m54.812570106s ago: executing program 0 (id=913): clock_gettime(0xfffffffffffffffb, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES8=r0, @ANYRESHEX=r0], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) 1m54.27455165s ago: executing program 0 (id=919): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @empty, 0x1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x4000001}], 0x0, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m54.256514471s ago: executing program 0 (id=920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_clone(0xab318091, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x60000006}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x2, 0x51) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000740)=""/228, 0xe4}], 0x1, 0x472, 0x41009) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x1, 0x7, {{0x2a, 0x4, 0x3, 0x1, 0xa8, 0x68, 0x0, 0x9, 0x4, 0x0, @empty, @private=0xa010100, {[@ssrr={0x89, 0x27, 0x2d, [@loopback, @broadcast, @remote, @local, @empty, @empty, @rand_addr=0x64010102, @local, @empty]}, @rr={0x7, 0xf, 0xe1, [@broadcast, @private=0xa010100, @multicast2]}, @ssrr={0x89, 0xf, 0x78, [@empty, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0xb2, 0x1, 0x0, [{@broadcast}, {@remote, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@empty, 0x7}, {@broadcast, 0x380000}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x85}, {@multicast1, 0x9}]}, @rr={0x7, 0x7, 0x6b, [@private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x0, 0x50, 0x2, 0x8, {{0xd, 0x4, 0x1, 0x39, 0x34, 0x67, 0x0, 0x48, 0x29, 0x0, @multicast2, @private=0xa010100, {[@ssrr={0x89, 0x13, 0xac, [@multicast1, @broadcast, @empty, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0xc, 0x1c, 0x1, 0x3, [{@rand_addr=0x64010102, 0x7f}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x7, 0x10, 0x47ef, 0xcb8a, {{0xf, 0x4, 0x2, 0x5, 0x3c, 0x65, 0x0, 0xb, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010102, {[@timestamp={0x44, 0x20, 0xa2, 0x0, 0xd, [0x5, 0x7, 0x0, 0x1, 0x2, 0x4, 0x5a6a8148]}, @ssrr={0x89, 0x7, 0x4e, [@rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x7, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xa}, 0x20, 0x10, 0x5bdab941, 0x2}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r6, 0x714, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r13 = syz_kvm_setup_syzos_vm$x86(r12, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r13, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='2\x00\x00\n\x00\x00\x00\x00\x00\x00'], 0x18}) ioctl$KVM_X86_SET_MSR_FILTER(r12, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x109, &(0x7f0000000080)='z'}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x1, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.182281327s ago: executing program 0 (id=924): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00') r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) dup(0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m54.051136018s ago: executing program 0 (id=926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x800) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="0cc72af6ec87772fb5d29c1e57ef82d19d98523ff9f5b9de64f261662407c6ec27cb231a72358b0badb84609478423128934f942910b52244b85d5d8c2c14c40bd89e45a5a313c736bffba1758f9e51f5681d04087dbccc1db5a9e23c583418c833d07477d2313eff8bda130da273202d724d83b228e421b5a293c0a62c1ae2bcd588d2798139647bd133a589072c64c347d5bf47b47f4abe930293ee4871df93aedc2d82c13d08cd06f68c6c7a9c889f3331c2fecc755e5deb183b417ad322e3146a65e82df225a377c6bdec0d24300884be3b55c", 0xd5}], 0x1) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000540)=0x10, 0x80000) r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000000c0)=""/154, 0x9a) getdents64(r5, &(0x7f0000000280)=""/158, 0x9e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00443cfffe80000000000000000000003c0000aaff020000000000000000000000000001"], 0x7a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x40) connect$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x2, 0x1}, 0x4}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f00000002c0)={@fda={0x66646185, 0x4, 0x2, 0x1d}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x0, 0x32}, @flat=@binder={0x73622a85, 0xb, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m53.976414164s ago: executing program 0 (id=927): r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ppoll(&(0x7f00000003c0)=[{r2, 0x544}, {0xffffffffffffffff, 0xb005}], 0x2, &(0x7f0000000400), &(0x7f0000000440)={[0x98]}, 0x8) 1m53.956585655s ago: executing program 33 (id=927): r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ppoll(&(0x7f00000003c0)=[{r2, 0x544}, {0xffffffffffffffff, 0xb005}], 0x2, &(0x7f0000000400), &(0x7f0000000440)={[0x98]}, 0x8) 1m48.278978494s ago: executing program 34 (id=779): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x110, r0, 0x147a5000) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e23, @private=0xa010102}, {0x2, 0x4e22, @multicast1}, 0x101, 0x0, 0x0, 0x0, 0x50ea, 0x0, 0x8, 0x5, 0x4}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000000100)=@conn_svc_rsp={0x0, 0x0, 0xa, "d9f0a3d4", {0x3, 0x104, 0x0, 0xfe, 0x3ff, 0x14, 0x2c}}) 1m4.769820588s ago: executing program 5 (id=1487): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008014) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl$EVIOCGABS0(r4, 0x80184540, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r11, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_INTERRUPT(r11, 0x4004ae86, &(0x7f0000000080)=0xe0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r12 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r12, &(0x7f0000001940)={0x8, {"316ed428af1dc918c3ad43f48e3565565296af0d319fed400db1dcb5b0e4fe1783c844f90c111fada64eb4e74ca22d95269ba004118ed5d7f168f05a008cdd691d1555bd022f6b3eb2239f1f2b7e73730bb7668e87278a0135767ea43482cf3fa4dd5eb08e61aa04239b98dbf85a326a3756fcd7b7cff6bd2b75202fe5cd18ac7629742ce98b9ac7dbe3e24886cdd4b0aa7831311f4c4616bf0d9f6101bf97491782a48ef5e0db83453c77d34e94fa467dc09eb68c74fd1edf1037e5e790119638d0ffe4fb8b83f2897ae3a458c6492445299cc1634d95f1c1bef1fc594c822c7ad50eb326a8c3a238783c350bd9aad88d1998bf2f78b04484d56dd0516765db00fed7e91e6cf96e57727a0089a0d4b1e7e8d73e60ead5c2b1c81573bce8ee5da2829d0ae821e14420fc156dbbbbcf930eb67c47b3d687358b049ff976e9f4ab312d84fb4120cf8ec40edb681947b4e0e57032eeef6fe21a5fccc0ab284fec5daa52f237b2b5340e8f9ad0f267fe33b1e1883071fc1d5ae5672986067e9db5fc47fcef9b201e052bc590357b6eaca83a6756ced908d8dbca51bd5519099dfc25e6bb428ebfc0dd903947cef56c4e5301fe778fe1d2ae3f41fc9cfe364b68bc142f7a0d3dca36d063ed63cc5d0a57541cadb237effd3e3e296eb4667994704247be242d9a924ad9184f227a3940a464e7dd7831c59c4ad9c25b8578c12898e8604a18e5b6cfaeba0b3b668c88bd239430916a5e24ff7fd231f95b74d6f26d9768906e602d508a7a80c1da0a78bd369853f51ea8bb4a784182983b23ce44e622ec36a841a89ba9f73f2bc7cbe567309937abb192a705c53d6320e1dc7b424fa2e64fba98e10bb887a6c7a2c04fe08ea63ff45a6023d7a0f542c06b4f81d66616b77925823c821bca01331c11d3a9ac33dc97e800002af6f5f793b5ea35074c16c550bd14d00973178deef1dd81987c1008dc4c4ac9b649c21206b8eb02773c8ef7de5d281e427db262dc9477f6907dd3f46a2b52c50dc1f4fbd80d92b12a2203ca4622de217b98051a0d50fced466920ecbff0564de6d8609925ee837bf9d7ed7c69820627a578ce1fffd258c75622de6520e9ce712acdcc991b724c7319cfb9cd01904e59b083715bacdcffcc9c3c91dc922d2fc37ae67c3c3fb3d664c43f62122904d1cf640e1a7afbd5702ea8eebfaf06cf6871214bee7b1499971d4ccc0b9a36839ab014ff3495d69be2661c17018ace26f9f9cce17b396fdc157d37cfeb48c291654944b8e5153ed5d80a3da6fa246ef66d351209515606d21687bc9d57650a1be34220fa84ba056f1e047dbc2dfb3682ab0340ec8e765aaf9c06d085d9bb5ace83fc7eeb5851acd7ab5300abed6f800fce243b9d621a8c639af69445791af059c772e313ecb98b0d88015ed25d6b2114fbe6f9566257d8636a068a438e06a8017e150dc4699ae0f3e4f0ca4cd9ebf4f963d9d5e4bacabbfd08a43013370ee02e2798a8fa30b9fce8d056cb6deb677f39804c97efacdf101255943cdf835001bfc7c20e54fecb5eb9ed17082926408a5bc96e1a3ed075ff749799c7904f0ac8eb853720db562ae1a1225540e0fc9c0494a79a2fe6302df04a72d4d3b48091f82e544a8446623d137955d2b4cf22e1666a4db0c1863b7d5162a41df15f9230cdb09e08df09497d1dd1b77db856d502179cc2e9085e5ea59be2eb615320a27cb6ce64b7bcc89255181bfe7d9576c4cd15baf25a9c742d18bdfc5981ba16626795034b5040069f96369d3744a2c8221002f15af168d90a7f6f7643904d7498ae2836e5045a10e45149b6e403829b4b6b53f3cb345fcfd67052ccf65b2d5944b8481c17a6568847975e33f499210307a13932f335599cf608c78f99fa79cf3831895e5afce59d0ab9300d009cfe5ccc4240570dae9b6eed24bae235e6eff5a58fc291826ee6e85dd048583beebba6f66ff3965daf04ed75729d2e143c24faadfe2d53ee581ea142dc0af0160e10659012bf28f2cf300082a1f0eadd1a1116e24be6383ab1bedb013652c2914c0bb00f99ff3621c054cd845e16b4ee0449c3f00b85b24dd6e83cf334417d48087854aa70a3afc83098380201322e99364c81bf865f7a033713818a6cee96079628b43bd15e02385d5a925ca5684d25f3e1f92d2c2ce6337beced9310ef8d7ac14c7a70ce30d43a25f0e8873f00e6bcb5885c57a63ad7ef4a1fb8218348fd1ff6071bc9c5c716415243b9a2d3faf92988de9b1df8fb00a5d749455581164f91f8cdd63a5a468445535248f4e31d9b138ae08d637443be6d1a720408ce189ed30033c8e09989256b5853a0b318cd51fc6b01f2b4d69e1b2e06aa35a7725a6d84dfaa0f612d37aea08547ca8052ef5f8552ee94b592d287ea00232fcbe15bde02e54338566da7afa654ef8f5101abe95b58dd5abad784856d419caaf866ff39092fe44660f59f2d4c7dbd196ae47fb3521bbcf8e6a39ff7f94c77fa75157b87014d056f6326f1ad2ac5be4effdbce92b3f8f5bbe50981fc0b1767a30f797720cadd4ab6fc45c9efcf3bd94a932ff2daeecee2eef7269d948bf7ee833e9f5bff63522c4c2a6c612c318cbe4cd1df7fa17fd90d6a835ec812678258e34fd971313dcb5001ac20e955f20eb053c5c4f85ae0df6c668463912b899f6437993e99019e96262bf9b6670ff3ccea49745b9a0efa015a778029b5a0cbc1e09a37114bc1ea1e6e0994ee09925188a2a03d6e02f468fdafe241eb8b92aa85225284b160effc84afbad6f5eadf35856e115485c390c4f2dae8c819ff291e8d3d4d5f9a59e6d817ffd3caae6de235722e111c959414752e2992458e498d856b1efff574d495c263814c0ba5cb91c72a4df99c660059a11364e8bb495f2b5fe9a1bf85529e60dfbfa80554e53fa2bd5fe5ec02262e662414a03bc181f716c6b878cd7ed5ac3ae266228d5f9ad666c5232ff08570cef435afd3ebd38ae76564450e48b9bf758637a88d493be1610070c114b488b82696251fc57e2ed9061cd1defc4463b552721b2c59dd35b537cb517a88eb769a2456b726f37dd2338d575913850cccbc59b905011c233c4840f6f30f7a836e320b744ac9ba8c018fefaf6a9acef82253be93ec36d3ea3d876fd0e6fdce1735a14c747adc11132e1ab457faa88977df6c249691f7babb81513e6a82712ef0652ceb5652d909b3aa69c99ce8dfa7d584760219f41f3d8bbf7d3dea13cd359f51e5d45ae8b0f736dedd2db692ea5918daf744033ee44bba5662f805804f78f3c0303cf9b9bc1963ddd96aade4590add52015f3895095b013161af449383d1e2b2fe88ff569f5f0930fe92d0b33c1ea40600f8cf423b1e3612c437122a22940d248752297f2d637352bcde6d18d765232effd9f1746fd5c1c3f7c9d558ab28907356904040fe1b5103d24ac2c23ffdc68bd29987a8e3731dea3360bfe4175f56eb4c5dd892136b9f82055aa7784bf2ca5de06449409aca67aceae5e1bd1aed94bc1aad9e72599c584dceb2f9704a356755cfa3eb0aa1080bca9629a724e5f1fed2797b1e97eb6f3be436f20a2b620c6502b0eed575c0e39ea1b3fc1b258b80e544866a6a16a3027e764b0fe86f3620ba50b2d4d1de986acd2cc8bd623c00fbad9e9e8809f519cd14d3558b1793bd9cd78d1a171410b890e4114bbc9f20136b2773e716d466bf9ba18f7aef35afb182c75786934b62d7eb6aaffc9059fa0036ba0b07599ae2a623d97f71f097fbcbe1195fc2e831e82732b858915f9bcdfec368495c65fd0615ab9743ba0e8f8ed078a7651f9073a7638b7aecda390fe6f230823759c6ce367ccf46a8d198c405f260191660d29481205ca780e406ca698d007b82837789680619f840b207b6c0ba5e51490e8dc9cacc36d10d85990373f936ac0279255a11fe1eda3e58ee82baa9f1bebb2b328120b40eac84242de519a6e67b980d25389e304ce52d906366b5f383a338021a57a0ea8d3f06e61cf5e53e4d555c9d264fadefab99e8e020b70bc678db1ac3341900b0d54e6512bf0d89c1ad0104787169ed1a6b3b4edbe7a57fc7e9ef9e75000af4a44b5b1ecd640303e551d4ac2ce07cfb590eca48dcb32244541910b14f0a987e2e61793b787770e673bea24a9bbca1ee028b0f92c23f44f4d8dc166aa895fb076116dcf9f3fea1135fb32aa5ee1fe712066cbb797faaec4b049636833029090955b2e20ae0e4c2e7990085a1688951c2e593ae645e511ea2cfb02e7b5b75ebf93ec8dcef09885f61e94ad1a7d94fcdc7e51e3aa457485c4371c0c17e9b01ce3e851b090d9f17d29a1a00dd0b1904c5948c5491b1decca6310c70435bfc5766d36997f8cf13722181a3873fbde6a08db03d42db0eb8e08c401ba6a325ff8831f0b5fb75301188449dfdc44a5495e1cc0570ebb985581ceb709527b0b2f24ee62ad1b80def4af60c3000ad2d7608e017aef623c2a62db5d439239fa18681fdbe1466273a93053fef234002b8ae3958ffb24b4235cfc78f0b2e834b4bbc62b0cd597fe69d5a4e625f5860ff4ffe807dfbbba302a657e928ae5396260bb1393981bffd711bb80ad9a4ec81bea23dddca0baf2c2f3254fb77df8ec8b2604889997279f49dec40c3fa1e1d6637fa8be1597b00a5d60c97fe99162fda91aff1384cf63152600a14dd672e4e73f4f71b4569374a0dcbc3dba5631dc5fb34163dddae86e6f033d575b7a936333188f3c7d286bf6cec61d8abd7c932dbdff4d04e4aaf6a5ae60e5061a8bc538576c7a81c4b5a9a2f0f9039cd1e9443ee8ebb807687170281141c6fdeb33d36925610bfbed82bec1676b6e69e52b0ab00b3a3e52f916080013b3629a8c2239b138679fc3fadd0abaebf000f1bb3bd4ab59b1b1c7be35359af879aa8488ed519ccdc854fc42ecb9ee8c5ba357942f3e22741509dc4ff8b71a006fe2173bbec2b93a56ad33792b635dbcdc8b9f76b2c1df905926ff14876483911a66babcb6b5e534c6bfdfc042a8874050430af7f08eef6f97ca2a321dc60dd1781cfff96a0ac76e305379e11205efd9d0eda8abec9b332e5a97727444e738dfdf0d6a3bf684ab6c580d57ec72f706b7a9f9733c6d64b05e460034e3cbd80fe35c951e133362b1b25b19caa9e1876507920b2a7a904ffc5463745431d19991f4b189dd8e5f12e5eee6bc6997b4dab8ed5a5cd4eab596e43029a6cbc153ffe55ae6f86fa1073314f87f361ccd01f10bd441744e1894e63b6b9299efcc7dec061a9353021a4f75a4779e66fb25db058c99b411f00647946aef38c38421214f56fa0d3a97f6f4f24e2d46fc6a6a5163968c3c8a44e2890254f3346f1543551ca9b03085bbe365a505dfbbd41a94a4728947c4775333bd79ae19f98285facd284075ba25f7e11de604ff6497b22211c9803dfbed8b92844f4429deeb771d793df5c6eb9c6e46363b534f187e755f150fea0bc2f44d11b9ff6136926c85e1839a9640966df5b2ee5f3b13ddfece4a7b7be25d441604f7b4a6606add5a3d5f69549c9b08435900fd85372b93d528aad5564a6eb0ef3433c02b62a9204a9a44701339bc1aa1a84f8e18da0cbf5613e43d5acebb7861b5dc4434e11435842ac7b3a7af6cc9478ec9eddd4d97d6146e956620ed0f1e3034fb5e8e6e903fa5df7c95f316ce50b20d23d9b0c9dbfb34a106dff2b6c258771fb301b4fd786ba9f58062517749eec716672c4a3acc82f859e25e1008a9b13240e7b810feb79183924fca4f7af2e248f040954a37667ee5c562b4aba4ac2901ba272", 0x1000}}, 0x1006) 1m4.511517479s ago: executing program 5 (id=1492): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x0, 0xdddd0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e20, @remote}, {0x6, @multicast}, 0x38, {0x2, 0xe25, @broadcast}, 'veth1_to_hsr\x00'}) r4 = dup3(r2, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m4.49887625s ago: executing program 5 (id=1493): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="660fc7b00080f029483aba4100b8f21fef66b8e00000000f23d00f21f86635100000090f23f866b9800000c00f326635000400000f30f30fd6d8f30f00d866b8147e00000f23c80f21f866350c0020000f23f80f080f01bf0028", 0x5a}], 0x1, 0x41, &(0x7f0000000100)=[@cstype3={0x5, 0xb}, @cr4={0x1, 0x250240}], 0x2) socket$inet6(0xa, 0xa, 0xffff) ioctl$KVM_GET_SREGS2(r1, 0x8140aecc, &(0x7f0000000240)) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000140)={0x9, 0x4, 0x7, 0x0, 0x2fa6}) 1m4.439222475s ago: executing program 5 (id=1494): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffc, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="3303120081fd120000007ef52f555f2a0c09000000fd88a800f788a83baa99000f8588a832f4", 0xfeba, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0xcf}, 0x14) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8", 0x32) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0, 0xf000}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x20, r6, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xaff8bdaa61d5c595}]}]}, 0x20}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x109080) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000100)={{{0x3, 0x1}}, 0x8b, 0x4, &(0x7f0000000040)="9a54c620ed9a292740e1484ccff627d942cf93c6e6b231fbb4ea8937465ebe460061dee01192b560572c4a2fc9f4c47b47714cf9b67cd669584a91cf1f5dcf5e88ae32bdf72776b3ed6884732851382a643de299be6674a1916f1cc31c76e7ff89ec98880e22af5d23804d1a1c47db9eb4a96bb09a33cbb92af2aedf9b880d74cfd01659ccbce71acda543"}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400000102060000052406000105240000000d240f0100000000000000000006241a000000090581030000000000090401"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m2.745243432s ago: executing program 5 (id=1524): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000240), &(0x7f0000000440)=0x0, &(0x7f0000000480)) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000002500)={[{@gid={'gid', 0x3d, r0}}, {@gid={'gid', 0x3d, r1}}, {@uid={'uid', 0x3d, r2}}, {@mode={'mode', 0x3d, 0x6}}, {@gid={'gid', 0x3d, r3}}, {@uid={'uid', 0x3d, r4}}, {@mode={'mode', 0x3d, 0x25f}}], [{@seclabel}, {@fowner_lt}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_type={'subj_type', 0x3d, 'binder\x00'}}, {@seclabel}, {@dont_hash}, {@euid_gt={'euid>', r5}}]}) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) (async) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000002680)) (async) getegid() (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in6=@local}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) (async) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)) (async) getresuid(&(0x7f0000000240), &(0x7f0000000440), &(0x7f0000000480)) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) (async) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000002500)={[{@gid={'gid', 0x3d, r0}}, {@gid={'gid', 0x3d, r1}}, {@uid={'uid', 0x3d, r2}}, {@mode={'mode', 0x3d, 0x6}}, {@gid={'gid', 0x3d, r3}}, {@uid={'uid', 0x3d, r4}}, {@mode={'mode', 0x3d, 0x25f}}], [{@seclabel}, {@fowner_lt}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_type={'subj_type', 0x3d, 'binder\x00'}}, {@seclabel}, {@dont_hash}, {@euid_gt={'euid>', r5}}]}) (async) 1m2.743843212s ago: executing program 5 (id=1525): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57788000) r1 = socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff807000000180000000400000008", 0x1d) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) read(r8, &(0x7f00000002c0)=""/200, 0x39) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 45.875092714s ago: executing program 35 (id=1525): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57788000) r1 = socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff807000000180000000400000008", 0x1d) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) read(r8, &(0x7f00000002c0)=""/200, 0x39) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 40.462083572s ago: executing program 1 (id=1732): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) memfd_create(0x0, 0x18) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @pic={0x3, 0x81, 0xf, 0x4, 0x7, 0x0, 0x1, 0x61, 0x2, 0x85, 0xba, 0x5, 0x7, 0xff, 0x4, 0x5}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{0x37, 0x7f, 0x1, 0x0, 0x0, 0x71, 0xc, 0x60, 0x10, 0xe, 0x5, 0xd, 0xffffffffffff8000}, {0x0, 0x1, 0x3, 0x0, 0x7, 0xf4, 0x5, 0x0, 0x1, 0x9, 0x0, 0x6, 0x6}, {0x5, 0x8, 0xa1, 0x0, 0xc, 0x3, 0x8, 0x5, 0x4a, 0xa1, 0x5, 0x21, 0x2}], 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 40.403259576s ago: executing program 1 (id=1733): r0 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x1) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='source', 0x0, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xffffff3b, 0x0, &(0x7f00000001c0)=[@clear_death], 0x0, 0x200000000000000, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x1, 0xfff, 0x24, @dev={0xfe, 0x80, '\x00', 0x3c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x73f, 0x2, 0x614}}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) ioctl$SIOCSIFHWADDR(r5, 0x40305828, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000480)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r8, 0x8008}, {r7, 0x600}, {r3, 0x1000}, {r4, 0x1}], 0x4, &(0x7f0000000540), &(0x7f0000000580)={[0x1]}, 0x8) write$cgroup_int(r9, &(0x7f00000000c0), 0x12) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) setuid(0xee01) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x6, 0xf, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x7ff, 0x6, 0x5, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0x4, 0xa}}) ioctl$VHOST_SET_LOG_FD(r11, 0x4004af07, &(0x7f0000000180)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 39.894446658s ago: executing program 1 (id=1741): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x9, &(0x7f0000000400)=[{0x8, 0xb, 0x2, 0x100}, {0x9, 0xd, 0x7f, 0x81}, {0x5, 0x4e, 0xe8, 0x6}, {0x2800, 0x6, 0x7, 0x5}, {0xcb99, 0x2, 0xf5, 0x9}, {0x1, 0x5, 0x74, 0x9}, {0xffc0, 0x4, 0x7, 0x8}, {0x1000, 0x1, 0x0, 0x7}, {0x81, 0x7, 0x0, 0x5}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x1000, 0x5, 0x1}) 39.893663917s ago: executing program 1 (id=1742): syz_usb_connect(0x1, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x26, 0xa6, 0x9, 0x8, 0x7a6, 0x7c2, 0x3712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xf9, 0x10, 0x4, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x6f, 0xaa, 0xd}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x16, &(0x7f0000001080)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x80, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xf, 0x5aec}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x86a305) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000004c0)={{0x2, 0x1, 0x12000, 0x0, 0xfffffffa, 0x4}, 0x142, [0xffffffef, 0x80000001, 0x7f, 0xffffffc0, 0x6, 0x8, 0x53, 0x5, 0x4, 0x2, 0x8, 0x4, 0x6, 0x9, 0xfffffffd, 0x0, 0x1a, 0x2, 0x6, 0x91d5, 0x2, 0x3ff, 0x9, 0x0, 0x4, 0x5, 0x684, 0x401, 0x6, 0x6, 0x0, 0x9, 0x2, 0x5, 0x6, 0x9000, 0x2, 0xbb, 0x2, 0x80, 0x7, 0x5, 0x4, 0x9, 0x8, 0xb, 0x4, 0x6f, 0x9, 0x3, 0x10001, 0x3ff, 0xff, 0x80000001, 0xc, 0x5, 0x0, 0x6, 0xffffffff, 0x7ff, 0x3, 0x5, 0x0, 0x5, 0x4, 0x0, 0xfffffffe, 0x1, 0x1, 0xffffff01, 0xecce, 0x5, 0x0, 0x4, 0x1, 0x2, 0x5, 0x40, 0x5, 0x8, 0x6, 0x101, 0x5, 0x5, 0x7, 0x8001, 0x9, 0x1000, 0xf, 0x1, 0x9, 0x4, 0x100, 0x1, 0x10001, 0x9, 0x6, 0x1, 0x3, 0x8000, 0x10, 0xe, 0x800, 0x2000000, 0x2, 0x8, 0x9, 0xa, 0xffffff81, 0x4, 0x2, 0x80000000, 0x6423, 0x8000, 0x0, 0x5, 0x5, 0x2, 0x7, 0x8, 0x80000001, 0x5, 0x80000000, 0x1, 0x6, 0x6, 0x7, 0x7, 0x7, 0x7, 0x6, 0x0, 0x80, 0x5, 0x2, 0x6, 0x7, 0x2, 0x8, 0x45, 0x3, 0xc15c, 0x1, 0x8901, 0x5, 0xc, 0x7ff, 0x6, 0x101, 0x9, 0x6, 0x7, 0x100, 0x6, 0x5b37, 0x8, 0x3ff, 0x7, 0xc, 0x11, 0xe, 0xa9, 0x4a08, 0x10, 0x80000001, 0x6, 0x3ff, 0x8001, 0x10001, 0x0, 0x52, 0x800, 0x1, 0x1, 0x5, 0x200, 0x6, 0x8, 0x8, 0xd8, 0x103e, 0x160, 0xff, 0x7, 0x7907, 0x1, 0xfffffffd, 0x7, 0x7fffffff, 0x7, 0xfffffffe, 0xd, 0x3, 0x5, 0x80000000, 0x6, 0x6, 0x9, 0x9, 0x10, 0x4, 0x5, 0x6fe, 0x40, 0x400, 0xfffffffb, 0xb, 0x0, 0x1, 0x3, 0x7fff, 0xe, 0x2, 0x1ff, 0x1, 0x55, 0x4, 0x1, 0x2, 0x5, 0x800, 0xe, 0x1, 0x8, 0x2, 0x2, 0x9, 0x6, 0xffb, 0x3, 0xe, 0x8000, 0x4, 0x0, 0xfe, 0x5, 0x1ff, 0x7, 0xfffffffb, 0x4, 0x200, 0x2, 0x2, 0x7, 0x0, 0x80000000, 0xfffffeff, 0x1, 0x7, 0x2, 0x4, 0x1, 0x7f1, 0xfb25, 0xfffffffb, 0xa1, 0x8, 0x8, 0x6, 0xffff315d, 0x5, 0xffff8001, 0x2, 0x7, 0x9bb7, 0x1, 0xb80, 0x1497, 0x5, 0x7, 0x3, 0x401, 0x9, 0x10000, 0x1ff, 0x1000, 0x6, 0x3, 0x3ff, 0xf22, 0x9b, 0x2, 0x5, 0x5, 0x4, 0x3, 0xa, 0x200, 0x7fff, 0x967b, 0x7ff, 0xa7d3, 0xa8c2, 0x4d, 0xc34, 0x9, 0x6, 0xfffffffb, 0xffff, 0x4, 0x9, 0x6, 0x7ff, 0xff, 0x101, 0x306c4e2c, 0x8, 0x5, 0x5, 0x8, 0x6, 0x26, 0x6, 0x200, 0x6, 0x80000001, 0xffff, 0x6, 0x9, 0x513, 0x2, 0x4, 0x5, 0xe6, 0x1, 0x0, 0x9, 0xfffffffc, 0x5, 0x6, 0x7, 0x81, 0x10, 0xff30, 0x8, 0xa, 0x0, 0x9a, 0x99, 0x2, 0x8, 0xffffffff, 0xfffffff8, 0x8, 0x2, 0xa10a, 0x8, 0x800, 0x8, 0x100, 0x266d, 0xfffffffa, 0x96e7, 0x6, 0x6, 0x5, 0x800, 0x10, 0x0, 0x9, 0x3059, 0xfffffff7, 0x8, 0xec, 0x5, 0x7, 0x8, 0x3, 0xfffffff9, 0xffffffff, 0x7, 0x2, 0xebb, 0x3, 0x5, 0x5, 0xd581, 0x198, 0x8, 0xfffffc01, 0xe3de, 0x6, 0x57284783, 0x9f, 0x0, 0x69d5, 0x5, 0x3, 0x100, 0x7, 0x3, 0xfffffff7, 0x7fff, 0x0, 0x4bbb, 0x6, 0x8, 0xffff, 0xf4f, 0x5, 0x8000000, 0x7, 0xfffffff8, 0x7fffffff, 0x6, 0x200, 0x4, 0x5, 0xd, 0x3, 0xfffffffd, 0x10000, 0x6, 0x7, 0x8, 0x2, 0x11168f61, 0x57, 0x4, 0x4, 0x1d, 0x7, 0x2, 0x7fffffff, 0x3f1f6f4f, 0x6ea, 0x3, 0x7f, 0x1, 0x7f, 0x0, 0x0, 0x1000, 0x80, 0x7fffffff, 0x8000, 0x6, 0x8459, 0x0, 0x5, 0x6, 0x6, 0x1ba, 0x1, 0x9, 0x6, 0x6, 0xb687, 0x8001, 0x9, 0x9, 0x66b, 0x7, 0xe, 0x7fff, 0x6, 0x7fffffff, 0xfffffcba, 0xffffff49, 0xc, 0x1e246e09, 0x6, 0x6, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8e3, 0x200, 0x1, 0x2ece, 0x5, 0x28c4, 0x8, 0x2, 0x157, 0x6, 0x3, 0x8, 0xdc2d, 0x9, 0x7fffffff, 0xc, 0xc, 0x80000000, 0xe1a, 0x9, 0xfffffffe, 0xf, 0xe000, 0x1, 0x1, 0xf19, 0x90cf, 0x0, 0x100000, 0xf, 0xfffff000, 0x8, 0x1ff, 0x0, 0x8, 0x100, 0x8, 0xfffffffd, 0x80, 0xffffffff, 0x5, 0xc, 0x9, 0x9, 0x3, 0x200, 0x1, 0xff, 0x0, 0x5, 0x1, 0xffff0000, 0x8, 0x111, 0x8, 0x81, 0x5, 0x8, 0x3d02, 0x6, 0x7, 0x2, 0x9, 0x81, 0xea000000, 0x80, 0x7fff, 0xffffed04, 0x6, 0x7, 0x5, 0x50c023f, 0x4, 0x3, 0x3, 0x9, 0x800, 0x8, 0x7, 0x86f0bcc, 0x8, 0x0, 0xf7e6, 0x2, 0xbd9, 0x3, 0x400, 0x2, 0x6, 0x5, 0x0, 0x7f, 0x8001, 0x0, 0x401, 0x88b4, 0xffff, 0x101, 0x1ff, 0x6, 0x3, 0x3, 0xc8, 0x1000, 0x3, 0xfffffffa, 0x80, 0x3, 0xffff, 0x3ff, 0x401, 0xffffffff, 0x1, 0x8000, 0xa, 0xe7e, 0x6, 0x1, 0x3, 0x5, 0x48d2, 0x7fffffff, 0xea, 0x8001, 0x7ff, 0xffffffff, 0x7, 0xfffffffb, 0x8, 0x6, 0x0, 0x1000, 0x27, 0x39d, 0x8, 0x2, 0x352a, 0x0, 0x39, 0x8, 0x401, 0x8, 0x5, 0x8, 0x0, 0x10000, 0x7c, 0x9, 0x5, 0x48b, 0x4, 0x4, 0xe95, 0x200, 0x4, 0x4, 0x6, 0x0, 0x7fff, 0x8, 0x4, 0xff, 0xffffa948, 0xd417, 0x6, 0xdb, 0x8, 0x10, 0x419, 0x8, 0x401, 0x3, 0x101, 0xfffffffa, 0x9, 0x7f, 0x5c48, 0xc, 0xffffffff, 0x4, 0x9, 0x2, 0x43, 0x7, 0x2, 0x9, 0x4, 0x7, 0x98, 0x6, 0xc0000000, 0x6, 0x8, 0x1, 0x4, 0xca, 0x1, 0x2, 0x5, 0x8, 0x5, 0xde9, 0x9, 0x4, 0x92e1, 0x6, 0xfff, 0x401, 0x4ad, 0x9, 0x7fff, 0x1, 0xfffffff7, 0x4103, 0x9, 0x7, 0x3, 0xfffffff5, 0x9, 0xb, 0xfffffffc, 0x80000001, 0xfffffffe, 0x8, 0xf, 0x9, 0x2, 0x6d7a, 0x4, 0x7ff, 0xfc, 0xff, 0x81, 0x5, 0xfff, 0xfff, 0x4, 0x0, 0x3ff, 0x2, 0xcf, 0x5, 0x1, 0x0, 0x7, 0x7f, 0x0, 0x1a3, 0x4, 0xfffffffd, 0x6, 0x2, 0x7ff, 0x10, 0x85ed, 0xffff8000, 0x2, 0x80, 0x390c, 0x777aae8d, 0x40, 0xfffffffb, 0x2, 0x600c, 0x3, 0x0, 0x2, 0x8000, 0x401, 0x1, 0xcc6, 0x5, 0x4, 0x2, 0x5, 0x5, 0x0, 0x7, 0x2, 0x9, 0x8, 0x401, 0xffffffb9, 0x7, 0xa, 0xf, 0x5, 0x8, 0xc, 0x9, 0x4, 0x7ff, 0x4, 0x4, 0x0, 0x438, 0x2, 0xfff, 0xfffffc01, 0x1ff, 0xffffffff, 0x0, 0x2f1, 0x8, 0xffffffff, 0xb7, 0x5, 0x0, 0x1, 0x6, 0x6, 0xfffffffa, 0x8, 0x7, 0x10000, 0xffffff47, 0x1, 0x7fff, 0x4, 0x1, 0xffffffa6, 0x3, 0x8, 0x3, 0x9, 0x4, 0x0, 0x2, 0x7, 0xffffffff, 0x241, 0x10000, 0x6, 0x400, 0x400, 0x7ff, 0x4, 0xfffffffc, 0x1, 0x81, 0x7fffffff, 0x0, 0x80, 0xc5a, 0x10, 0x3, 0x0, 0x2, 0x9, 0xfffffff1, 0x6, 0x8, 0x10, 0x1, 0x3, 0x51b1fea8, 0x5, 0x3, 0x1ff, 0x8000, 0x7, 0x3, 0x6, 0x4, 0x3c0000, 0x8, 0x80000000, 0x40, 0xfffffff7, 0x80, 0x10, 0x7, 0x2d, 0x5255, 0x6, 0x9, 0x0, 0xb, 0x0, 0x6, 0xb, 0x1, 0x6, 0xcf, 0x9, 0xfffffffb, 0x2, 0x2, 0x9, 0x4, 0xa2bc, 0x7, 0x3, 0xd59f, 0x6, 0x8, 0xfffffffd, 0xffff, 0x3cd, 0x7fffffff, 0x9, 0x5, 0x8, 0x52b, 0xc9aa, 0x4, 0x5, 0x200, 0x7, 0x0, 0x7fffffff, 0x0, 0x6, 0x4, 0x6, 0x5, 0x7, 0xf23, 0x0, 0x0, 0x7, 0xff, 0x80000000, 0x7, 0xe7e0, 0xb, 0x9, 0x668, 0x982d, 0x80, 0x6, 0x5, 0x6, 0x3, 0xc, 0x3, 0x7c, 0x7fff, 0x6a6da77, 0x3, 0x3ff, 0x4, 0xa, 0x1, 0x1, 0x80000000, 0x7, 0xff, 0x9, 0x7fffffff, 0x2d4, 0x9, 0x98a49690, 0x0, 0x2, 0x9, 0x1, 0x5, 0xc6d1, 0x5, 0x1, 0x4, 0x9, 0x2, 0x4, 0x2, 0x8, 0xc, 0x7, 0x0, 0x3, 0x5, 0x3b, 0x4c78, 0x9, 0x7, 0x7, 0xc, 0x6, 0x912, 0x1, 0x2, 0xa, 0x2, 0x5, 0x7, 0x1, 0x1, 0x6, 0x7, 0xd6e, 0x2, 0x200000, 0x5, 0x8, 0x4, 0xa, 0xcfa3, 0x9, 0xf, 0x5, 0xffff0001, 0xd, 0xc, 0x8, 0x1000, 0x3, 0x8, 0x9, 0x1bda, 0x9, 0xe2, 0x1, 0x7, 0xfffffff8, 0x80000000, 0x6, 0x10000000, 0x5, 0x7459ea6d, 0x6, 0x7, 0x55e3, 0x5, 0xfffffffd, 0x7, 0x40, 0xa, 0xfffffffd, 0x1, 0xebf, 0x2, 0x2ef67bb0, 0xd1, 0x5, 0xdac000, 0x6, 0x2, 0x2217038e, 0x8, 0x5, 0x4, 0x8001, 0x5, 0x7fff, 0xca, 0x2cbb, 0xa3, 0xe, 0x0, 0xa, 0x4, 0x8, 0x0, 0xffffffff, 0x3]}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/134, 0x86}, {&(0x7f0000000240)=""/180, 0xb4}], 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000000)='veth0\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYRES8=r0]) r4 = accept4$nfc_llcp(r0, &(0x7f0000000300), &(0x7f0000000380)=0x60, 0x80000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000001640)={[0x8, 0x4, 0x97c3, 0x6e56, 0x9, 0x4, 0x5, 0x1, 0x401, 0x4bb, 0x1, 0x4, 0x1, 0x3d6be482, 0x7, 0x9], 0xffff1000, 0x18480}) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000001500)={{0x6, 0x40}, 0x100, './file0\x00'}) 39.401451887s ago: executing program 1 (id=1743): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40c0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) lsm_set_self_attr(0x65, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0, @ANYBLOB="053bdda06f180e276c4dc458b41ca99bf17d317ea0a49aca72fc60e3d27aba437ee6a4272e78b24882d8407364e9d980fee010bce0ab48791b24d634da58e089f4ab804f50022f1f83d5ad06ec33dab33e09bf455c449be7eb250aa69723424ef0870c3811c87d8df9f4f1847e8df9b93dcb895d9ea94846b7e28b1c5ba17b734710bff5d8acbdf1c46bd4d930fc204bf0f247f229d5fb79d22c1944dfed7ec22fbca36f2494df6875be90dc24541551b1819de5df55903c696b0ca0ad1a423b732df15039"], 0x20, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) (async) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='hugetlb'}]}) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x1e) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000a00)={0x8, 'vlan0\x00', {'ipvlan1\x00'}}) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x282802, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close_range(r6, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) 39.328311493s ago: executing program 1 (id=1744): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x47ff, 0x8, 0x5}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010400000000000000000a000000040000000c000a"], 0x24}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x88143) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000000c0)={r5, 0x0, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x1b, 0x15, "2e7da51a8dc4b9505dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x80, 0x8000000000000000]}}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) write(r3, &(0x7f0000000000)="673aaa44fa73c2d18f929b3e9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e5b73c75144e4c3ed16c852112472af5d7ae09d2016a306c0ffd644c4d152b280d4e3b1f7cd11f2d1c2042ff6a2e11b785aee9410d5d1a6f9aff56d9ec4ccd13d56c", 0x73) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000004c0)={0x2, 0x800, 0xffffffff, 0x6, 0x7, "1d4ab83637370f2d2afc0633dcb36307484c97", 0x7fffffff, 0xfffffffe}) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0xec}) 39.303326315s ago: executing program 36 (id=1744): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x47ff, 0x8, 0x5}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010400000000000000000a000000040000000c000a"], 0x24}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x88143) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000000c0)={r5, 0x0, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x1b, 0x15, "2e7da51a8dc4b9505dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x80, 0x8000000000000000]}}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) write(r3, &(0x7f0000000000)="673aaa44fa73c2d18f929b3e9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e5b73c75144e4c3ed16c852112472af5d7ae09d2016a306c0ffd644c4d152b280d4e3b1f7cd11f2d1c2042ff6a2e11b785aee9410d5d1a6f9aff56d9ec4ccd13d56c", 0x73) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000004c0)={0x2, 0x800, 0xffffffff, 0x6, 0x7, "1d4ab83637370f2d2afc0633dcb36307484c97", 0x7fffffff, 0xfffffffe}) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0xec}) 3.419248423s ago: executing program 7 (id=2142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12d06154e6000040f30455070000000000010902bd09bd14c3e094447c240001000040b109040000010b00010009070000000122850009058103ff030c0000"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x8, 0x7, {0x7, 0x30, "00f4040000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 3.182869443s ago: executing program 6 (id=2146): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x82, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x82, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) (async) 3.0903845s ago: executing program 6 (id=2147): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) (rerun: 64) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (rerun: 64) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3a) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x2004cb, 0x2010, 0x0, 0x3, 0xfffffffffffffffd, 0x400000000, 0x5, 0x0, 0x0, 0xfffffffffffffffe], 0xdddd1000, 0x200}) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x100000a, 0x13, r6, 0xffffe000) (async) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) (async, rerun: 32) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000081000040"]) (async, rerun: 32) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x22e7c000) (rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) 3.025600075s ago: executing program 6 (id=2148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000000000077, 0x141181) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000440)={0x80, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) close(r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f0000001a80)='\x00', &(0x7f0000001ac0)='.\x00', &(0x7f0000001b00), 0x81, &(0x7f0000001dc0)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r3, 0x1, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000000000077, 0x141181) (async) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000440)={0x80, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0}) (async) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mount$9p_unix(&(0x7f0000001a80)='\x00', &(0x7f0000001ac0)='.\x00', &(0x7f0000001b00), 0x81, &(0x7f0000001dc0)) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r7) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2.914128724s ago: executing program 6 (id=2152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}]}]}, 0x24}}, 0x0) 2.911024495s ago: executing program 6 (id=2154): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x80, 0x100021) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) capset(0x0, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x7}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) fcntl$getflags(r0, 0x3) 2.745230278s ago: executing program 6 (id=2156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/6, 0x6}, {0x0, 0x56}], 0x2, 0x0, 0x5245) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x40010, r3, 0xdace7000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000000)=@generic={0x2, 0x1}) r5 = socket$inet6(0xa, 0x2, 0xa) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @mcast2, 0x51dd}, 0x16) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfffffe3e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0xeb8bc3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) openat$tun(0xffffffffffffff9c, 0x0, 0xa0800, 0x0) ioctl$TCSETSW(r7, 0x5403, 0x0) syz_usb_connect(0x0, 0xf5, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.060142393s ago: executing program 8 (id=2172): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x20000000) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x926139, 0x101200) ioctl$BLKSECDISCARD(r1, 0x127d, 0x0) (async) syz_io_uring_setup(0x11d39, &(0x7f0000000180)={0x0, 0x2079d6, 0x3ffd, 0x1, 0x29d}, 0x0, 0x0) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 1.175336625s ago: executing program 8 (id=2174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}]}]}, 0x30}}, 0x0) 1.155760556s ago: executing program 8 (id=2175): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r1, r0, 0x0, 0xef97) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x3}, 0x10) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/71, 0x47}], 0x1}, 0x2}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) chdir(&(0x7f0000000140)='./file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140), &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'sha256-arm64\x00'}}, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}]}]}, 0x30}}, 0x0) 1.150123867s ago: executing program 8 (id=2176): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfff}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x10f8}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) write$FUSE_IOCTL(r4, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x5, 0x4, 0x9, 0x7}}, 0x20) copy_file_range(r4, 0x0, r4, 0x0, 0xfffffffffffffffe, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000640)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0x400, 0x4) recvfrom(r5, 0x0, 0x0, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000011000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x170}) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000140)="aa", 0x1}], 0x1}}], 0x1, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xff}]}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40804) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x40, 0x8, 0x8001, 0x8, {{0x20, 0x4, 0x0, 0x3, 0x80, 0x68, 0x0, 0x2, 0x2f, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x2c, 0x79, 0x1, 0x2, [{@remote, 0x5}, {@rand_addr=0x64010102, 0x8}, {@local, 0x7fff}, {@private=0x2, 0xe1}, {@local, 0x3}]}, @ssrr={0x89, 0x7, 0x97, [@local]}, @timestamp={0x44, 0x18, 0x28, 0x0, 0xc, [0x6, 0x8, 0x100, 0x5, 0x0]}, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0x1, [0x8, 0x20009, 0x3, 0x9, 0x8, 0x9]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f00000004c0)={0xa, 0x6e20, 0x5, @remote, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000580)="48e3b22831165bb0217683fda0dd3d008435ccc5632ed687405f3e56316206d0d132", 0x22}, {&(0x7f0000000740)="ef7e8223eb1b495dbcc67b1e923f3fa35f8f3f493a390a264b9911560d1374297890af2f893ce09dcdf369edfb063ea62c9114edd08ab356df791fc769e59cb7305bad28b80719042985bc450d2e7d4138b47cd63262d0b99c8a421ef82ed4e563851218ede82a2ce1fabb65c780762650866bd39acf4664262a2424b5f482fd22ef14d4ce", 0x85}, {&(0x7f0000000880)="e758c4cd0955dcfc940435fc056969507482d1f1003aa55ab0303ffefa75ffd1def811a504fffb986969cb623c5c5ab5420f8a80d3e0e905bfca3b2265a347a65f18e84ab7e9165ccdadd99d5e7fe66a98bcb5f1787a6d33a9c46879fbcddef2e0d111f5b931f398bf894e927c66f3992bba5fcdcd4cf2ce702a5c0246", 0x7d}], 0x3, &(0x7f0000002740)=[@dstopts={{0x1110, 0x29, 0x37, {0xa6599df90494d1e7, 0x21e, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x101}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x81}, @generic={0x5, 0x1000, "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"}, @generic={0x1d, 0xbc, "b278f0b40e72bf91366ed2092371833df292bf15fb719899207ff43cda93d59d4e1e4850cbec34bb2abe2c72eecfd5b6bcb66151f753f39cb267de5ad3b6cff84b784435782ad459e152dd0ec34706cd2283524491acba01830a49b6650c978ba005b7cf5e213ceaa83840560eea5da31246a3b864e438ebbe68bb66380a5f4c1097f8e0716959d50adc44cc243d53e94bc13c4fc1d0fcfc1e00b931695737a0b458aebb4fa0a6e6aa420fa71869520a9705b9312d7abee6dc62b89f"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x34}}]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x3b, 0x7, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x15e}, @generic={0xe, 0x12, "856d84293ba90f813d9f56c300702f6a98f9"}, @hao={0xc9, 0x10, @remote}, @jumbo, @ra={0x5, 0x2, 0x2}]}}}, @dstopts={{0x60, 0x29, 0x37, {0x87, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x1ff, [0x4, 0xee0, 0x8001, 0x401, 0x4, 0x8000, 0xfffffffffffffeff]}}]}}}], 0x11c8}}, {{&(0x7f0000000800)={0xa, 0x4e24, 0x80000001, @rand_addr=' \x01\x00', 0xffff}, 0x1c, &(0x7f0000000c80)=[{&(0x7f00000009c0)="f4ea0d1e0f4bd3dced63f81226824a23e069e0bc9c836d5e53bd309fd822f50bc2e0f7a4d2a978f6a967a8a8f17944c1599b92cc88b2e30c83fe35bfc59a054abf266fbe62bdb880f5f02a37703d7bf4e5ce6a77174b9cf0c59a7ff311f6fe70b74fa65e96e785ccb4e48f58d4675736cc5e314b58d5fc8addb36b3b8bc2853628749ffb3256524440df25b0aa6d6463d3a921bdffbe2e6dedb3d51e6d28ec5fda67d5c9d62e57325f316ef67dec6c88593d0353db68eab652470447a4234cf77a11ea324278", 0xc6}, {&(0x7f0000000ac0)="9d7657775e3d2392cf903cea32bb937a89af305af3bd2394aef618d333f5211bced6ed702650f47f3de5aa95afb48d4a77907f5fa0243edbc8a539b8530744bb660bdde88d57b5387728ffb0ce61cf4e85fd19921bbe25b7b6072edbe4d3394b88795b5e0494e4db9796b35b34fb6f4a9c035a0fcfd418782893dd45cde85c3658571612a2a8c992c6f49242b402492cb0f2ad42ba", 0x95}, {&(0x7f0000000900)='|', 0x1}, {&(0x7f0000000b80)="cf1bfa110285282b514d0d5b14f3b9a4399fe9b0edd04ec18fcd90402bab42e251b56ef437887617cf8faa737c5eeabc6fa614143ddb44b0649fcdbb0a4ad615ae797d0d93997f607dcf05c92d716ccf906084ad1e184a58358b8bd7c21a90b2dcf7a9701b74d80b5a3dcedbb4466c8c76f1f73ac420a657fa5cec3617", 0x7d}, {&(0x7f0000000c00)="26dccb14b72805f35b64ec8e2ca744d6349fe0ec6b711b2eec3ea2cbe10e03067b23417e50745e78b8139e7ed20b2a02cff8d9b4e46caf413810536f02188712b194d36b6d66179bb141df9aaa66a6ecb470d012a5daf7bfbad3788b779efa49f93620957a1e", 0x66}, {&(0x7f0000000940)='[', 0x1}], 0x6}}, {{&(0x7f0000000d00)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000000d40)}, {&(0x7f0000000d80)="eb2d6eb842a15d4a215d0fed52b9c6631c3049505995c1c80650272bd2f833f4c55e396c29f64e101d194ed0e33ac1a874ef9c053e754c812c58859c26826122b19e3f188c87ab765fed86546f8b0853545d14693d77ecb2af6b57e9090d7366ae67d55ddc57ff9b909065437aaf79c3debb32d76075cb14bb5d309558d43cd29493c97ee9d6962de0bb3f5363f6", 0x8e}, {&(0x7f0000000e40)="67ff125b62ee079b7498e0cf34e96cf132758983981882c5af8daf69044ea3d0d18e762b3ce40e7e5ca322ff3e03", 0x2e}, {&(0x7f0000003940)="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", 0x1000}, {&(0x7f0000000e80)="d4a0c6458b058ccc7cac0576374b65ae536bc8a2ff41837f26cc3f6024b4e0ca598d72eaabfc4be68d9a18579d818be7cd489c0cb676a74991a5e603f22ba91c75497aa5c37c1fb42f9004639ce605ef090782c10ae6f39aa75c95cc79b63131a9b29d0a1307d1bf16c82e3badd2a358668a1c87bc68a2235065badd8bd4b127789202927a4aa8d38b3a4a243c075a160290badaf7e04aa9458f750b93d75a5cf1ac80e41e92a3e63b8b6dbcf0643a2578ead88ff72a40a36d90c633cd70377dec3491b498500b9f9e502f75596baaf7348f54673ae25588cfc7c05ec6c773f9a54368b7523c9893fbb5e60191fd5b", 0xef}, {&(0x7f00000020c0)="503d353bd9a18a3dfa28807e7aec735ac7f7738f07f83b8a8eaf1012ca03d83d21f464b70e34c938ff18506e28784180ab31857ced34389524afbdb4cc14baf3f47b21bd71f1048c6d0e9ed8f6e1e102883f6b3c6abf7a5efa33b8264b6f31b0054d41f7d43dcf781444ef8c71888ab91f45949f99858c8860367f73c8ca", 0x7e}], 0x6, &(0x7f00000021c0)=[@hopopts={{0x58, 0x29, 0x36, {0x3c, 0x7, '\x00', [@generic={0x2, 0x25, "e45317009793f4798e3c5e6ba55afff6688ae243b468ba8901d1f5f12bf28f00c5487710f9"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3d}}, @ra]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x10001}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3b, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x6}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x0, 0x2, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x33, 0x4, 0x0, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @local]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x0, 0xd, 0x0, [@private2, @mcast1]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}}}, @hopopts={{0xf0, 0x29, 0x36, {0xd3, 0x1a, '\x00', [@jumbo={0xc2, 0x4, 0xffff}, @generic={0x7, 0x65, "c55ad3b4884c1986826b151f0ff7f59152cec450e9d4ef4b8f553ac5f3535b1f86181ebf52cce885ea5f3e22585b0a92a300d9cb3b246e1d0f4b894f4cc1f1098ea7e124995f922e8a15c1cf48710e4d5e6369974b8d646ddbf71afb968387535d04940d90"}, @ra={0x5, 0x2, 0xfc15}, @calipso={0x7, 0x58, {0x3, 0x14, 0x6, 0x5, [0xffff, 0x2, 0x7, 0x1493c145, 0x896c, 0x2, 0x6, 0xffffffffffffff01, 0x5, 0x4]}}, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x2b0}}], 0x3, 0x4000095) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 1.058486344s ago: executing program 4 (id=2179): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000a73af12540012000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x4, 0xbc, {0xbc, 0x8, "77a3d8e0c1fddf2e8f01f4d6d540bd70d3c28eb6eef1f48fb5cf0e2567c27b8ac47a0e1656ad31b19558de420f920c363c4bb5a1627dc4425b3b80087c2471aab5147b2a0b5c897b6073829a44da6a736d0a15f1f9034abc929aed450b8e45185cee61fbb8c41f8a233b9c86c757d21847914b2d8a7a77e030e29546c272b9a418a7caf58ad1e2bc78145416faf34bc16b94ad668b7a302bf33b3780ede66ac375ef6ee2eb9894435aa5523c8b8a5442bfed0b443527eeb4113c"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000640)={0x34, &(0x7f0000000440)={0x20, 0x7, 0x4f, "a5c9bbe1cdacd1d2c981e29b9b23d2775653d0b90f6f079e5be7dfbb68236ef83157386030d09e334bb2790689b3c4307e74a53cb31a83cd65bd4e53ad3376365792e0124ba29d3e99e462d4511a71"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000780)={0x20, 0x0, 0xf8, {0xf6, "2ae48b2a7b59d91dfe2ec094b585f305894d648231afb0e695f5b09629d69befa8d488a0f44b97ebc4676b66755150c61edbc70641cdba166885cdb4ec80b7caec78ff70bac9379f6f6f5e82bc3b73ce3c10cd25cff941661baa8491ba2b5b0cd8f123e98eabf1056a2cc21fe8c7aeb16e25e363dd72ab65dfe1194973fa8b7922956fe24dd0f4fc0ed42b687478bc0e32764bd97ad013103465828ccaf404cd20c3653d7b10e4ea8da75d41f7d41632b11430aa22b393fb572228ab4ad50369a806f6e7eccbc6f34faaff45544d01c15f866f57f62b0b637474b4992e2eeeb2256c6b55efc78997d55e681f50a5b9d2f691ab2c32ae"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x5}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) 359.258851ms ago: executing program 7 (id=2180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="0f2255c4e1fa7078f6e766ba410066b8090066ef460f3266470ff7d9460f017a3ac422fd22150300000066430f01f866ba430066ed470f01c9", 0x39}], 0xaaaaaaaaaaaab8c, 0x4c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r5, @ANYBLOB=',\x00']) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r7, r7, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setresuid(r5, r6, r7) r8 = getpid() syz_pidfd_open(r8, 0x0) syz_pidfd_open(r8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 340.014802ms ago: executing program 4 (id=2181): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x1000, 0x0) mmap(&(0x7f00003c9000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x3a, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RRENAMEAT(r4, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="3d4077e50823258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db1790111e7", 0x20}, {&(0x7f0000000240)="b28231adddba8ed6f23bf98ca8caa015ab797f57353ec4ceacbd4995a9a6", 0x1e}], 0x2, 0x0) recvmmsg(r9, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r10, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x1}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, r10, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x880) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$FICLONE(r1, 0x40049409, r1) 277.465837ms ago: executing program 4 (id=2182): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x127a, 0x3) r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r2, r0, 0x0, 0x80000000) 239.67308ms ago: executing program 4 (id=2183): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x80284504, &(0x7f0000000000)=""/56) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_int(r3, 0x29, 0x24, 0x0, &(0x7f0000000100)) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x103001, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x8000}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000002c0)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x44}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1c00}}], [{@appraise_type}]}}) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x1ece) 239.30438ms ago: executing program 4 (id=2184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, &(0x7f0000000140)="f8200b6e93f6ae3e0cbddda78b7488da38db61948220bffe4729f7b4b5715b788a1e76a2774a4e0bc0183d4ed22818952f178da81e3eee65177ce2391ba6f4d5e6b25b0abdeff083223b5f090f4d02f5e31f9659a2e024969c83a11da3561c6c50a72bb62cc825903d9a67661bfe0c5555b57db4988c962edbef8866c4e9694fff3245b75fc34b6d90ba04d5971e267cdf5f34bcfbe3e516a98e24ed65a377e72f8e3237deaa9bfef275c7ce3996393eecc05e45323d69e8725700b78bf48003c4b9f1a4104b0152", 0xc8, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}]}]}, 0x30}}, 0x0) 214.913982ms ago: executing program 7 (id=2185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}]}]}, 0x30}}, 0x0) 151.269998ms ago: executing program 4 (id=2186): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f"], 0x48}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0]) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000001c0)={0x51, 0x3, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x7, 0xffff, 0x5, 0x8cb, {0x2, 0x5, 0x6, 0x9}}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0xc0046209, 0x0) 151.020838ms ago: executing program 8 (id=2187): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x2}}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=ANY=[@ANYBLOB="fc0100001900010000000000000000304762b9b5f48300fc0200000000000000000000000000000000000000000000000000000000000000000040000000000a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1\x00'}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 129.281119ms ago: executing program 7 (id=2188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00001ba000/0x2000)=nil, 0x3, 0x0, 0x0, 0x401, 0x1a, 0x0, 0x0, 0x59}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r1}, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) 128.702129ms ago: executing program 8 (id=2189): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbc, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x0, 0xf5}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x5, 0x2}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x1, 0x8, 0x2, 0xff, 0x9}, 0x50, &(0x7f0000000200)={0x5, 0xf, 0x50, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x1a, 0x9, 0x1, 0x7, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xf, 0x8a, 0x59}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "cf0ec678b71a1e76849c0c6f1049f6a2"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x0, 0xf0f, 0x200, [0x3fa0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x5, 0xc03}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xb, 0x4}]}, 0x1, [{0x3b, &(0x7f0000000180)=@string={0x3b, 0x3, "ebe86b7e495e34f6da1cad83f62f527b8731808374a6f1ef2fa6c8eb5e5dfeb7b5259e8ec638ef171881ea7b66035687c65842bf3116734f99"}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x4, 0xbc, {0xbc, 0x8, "77a3d8e0c1fddf2e8f01f4d6d540bd70d3c28eb6eef1f48fb5cf0e2567c27b8ac47a0e1656ad31b19558de420f920c363c4bb5a1627dc4425b3b80087c2471aab5147b2a0b5c897b6073829a44da6a736d0a15f1f9034abc929aed450b8e45185cee61fbb8c41f8a233b9c86c757d21847914b2d8a7a77e030e29546c272b9a418a7caf58ad1e2bc78145416faf34bc16b94ad668b7a302bf33b3780ede66ac375ef6ee2eb9894435aa5523c8b8a5442bfed0b443527eeb4113c"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000640)={0x34, &(0x7f0000000440)={0x20, 0x7, 0x4f, "a5c9bbe1cdacd1d2c981e29b9b23d2775653d0b90f6f079e5be7dfbb68236ef83157386030d09e334bb2790689b3c4307e74a53cb31a83cd65bd4e53ad3376365792e0124ba29d3e99e462d4511a71"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000780)={0x20, 0x0, 0xf8, {0xf6, "2ae48b2a7b59d91dfe2ec094b585f305894d648231afb0e695f5b09629d69befa8d488a0f44b97ebc4676b66755150c61edbc70641cdba166885cdb4ec80b7caec78ff70bac9379f6f6f5e82bc3b73ce3c10cd25cff941661baa8491ba2b5b0cd8f123e98eabf1056a2cc21fe8c7aeb16e25e363dd72ab65dfe1194973fa8b7922956fe24dd0f4fc0ed42b687478bc0e32764bd97ad013103465828ccaf404cd20c3653d7b10e4ea8da75d41f7d41632b11430aa22b393fb572228ab4ad50369a806f6e7eccbc6f34faaff45544d01c15f866f57f62b0b637474b4992e2eeeb2256c6b55efc78997d55e681f50a5b9d2f691ab2c32ae"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x5}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) 59.004895ms ago: executing program 7 (id=2190): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0]) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 0s ago: executing program 7 (id=2191): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async, rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (rerun: 64) write$tcp_congestion(r1, &(0x7f0000000180)='westwood\x00', 0x9) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x65, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000000c0)=@x86={0xc, 0x6, 0x0, 0x0, 0xfb, 0x5d, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7b, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x9d, '\x00', 0xa, 0x2000000000000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (rerun: 64) dup2(r8, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) (async, rerun: 32) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r11 = dup3(r10, r9, 0x0) r12 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r12, 0x0, 0x0, 0x800) (async) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x2}], 0xfffffffffffffe42, 0x0, 0x0}) kernel console output (not intermixed with test programs): 3939][ T3816] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.298551][ T3829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1132'. [ 130.356081][ T3841] SELinux: Context system_u:object_r:watchdog_device_t:s0 is not valid (left unmapped). [ 130.356082][ T36] audit: type=1400 audit(1754972465.670:501): avc: denied { relabelfrom } for pid=3840 comm="syz.1.1136" name="RAWv6" dev="sockfs" ino=29291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.389257][ T36] audit: type=1400 audit(1754972465.700:502): avc: denied { relabelto } for pid=3840 comm="syz.1.1136" name="RAWv6" dev="sockfs" ino=29291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:watchdog_device_t:s0" [ 130.521620][ T3852] fuse: Bad value for 'fd' [ 132.538696][ T363] usb 6-1: USB disconnect, device number 9 [ 139.060384][ T3858] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 139.069554][ T3858] rust_binder: Write failure EINVAL in pid:86 [ 139.110096][ T3865] netlink: 656 bytes leftover after parsing attributes in process `syz.4.1144'. [ 139.181453][ T3876] rust_binder: 95: no such ref 1 [ 139.370571][ T64] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 139.430402][ T363] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 139.521580][ T64] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 139.530685][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.539203][ T64] usb 7-1: config 0 descriptor?? [ 139.580382][ T363] usb 6-1: Using ep0 maxpacket: 16 [ 139.586611][ T363] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.596925][ T363] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.605960][ T363] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 139.615043][ T363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.623975][ T363] usb 6-1: config 0 descriptor?? [ 139.816946][ T3883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1150'. [ 140.032740][ T3899] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 140.049263][ T3899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.058536][ T3899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.280382][ T2142] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 140.410396][ T2142] usb 5-1: device descriptor read/64, error -71 [ 140.554965][ T3867] veth1: entered allmulticast mode [ 140.560664][ T3867] veth1: left allmulticast mode [ 140.565901][ T64] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 140.576174][ T64] asix 7-1:0.0: probe with driver asix failed with error -71 [ 140.584431][ T64] usb 7-1: USB disconnect, device number 3 [ 140.650383][ T2142] usb 5-1: device descriptor read/64, error -71 [ 140.817966][ T3907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1159'. [ 140.900404][ T2142] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 141.030375][ T2142] usb 5-1: device descriptor read/64, error -71 [ 141.280390][ T2142] usb 5-1: device descriptor read/64, error -71 [ 141.348147][ T3918] overlayfs: failed to clone upperpath [ 141.390537][ T2142] usb usb5-port1: attempt power cycle [ 141.412565][ T3928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1168'. [ 141.458147][ T3935] 9pnet_fd: Insufficient options for proto=fd [ 141.620376][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 141.740364][ T2142] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 141.760370][ T9] usb 7-1: device descriptor read/64, error -71 [ 141.767749][ T2142] usb 5-1: device descriptor read/8, error -71 [ 141.901468][ T2142] usb 5-1: device descriptor read/8, error -71 [ 142.000397][ T9] usb 7-1: device descriptor read/64, error -71 [ 142.140410][ T2142] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 142.161476][ T2142] usb 5-1: device descriptor read/8, error -71 [ 142.205411][ T10] usb 6-1: USB disconnect, device number 10 [ 142.250416][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 142.291659][ T2142] usb 5-1: device descriptor read/8, error -71 [ 142.380564][ T9] usb 7-1: device descriptor read/64, error -71 [ 142.410476][ T2142] usb usb5-port1: unable to enumerate USB device [ 142.506378][ T3957] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1177'. [ 142.585857][ T3960] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=36 [ 142.585884][ T3960] rust_binder: Error while translating object. [ 142.594668][ T3960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.601011][ T3960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 142.620425][ T9] usb 7-1: device descriptor read/64, error -71 [ 142.740504][ T9] usb usb7-port1: attempt power cycle [ 143.048174][ T3245] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.080567][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 143.101578][ T9] usb 7-1: device descriptor read/8, error -71 [ 143.231614][ T9] usb 7-1: device descriptor read/8, error -71 [ 143.470437][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 143.494415][ T9] usb 7-1: device descriptor read/8, error -71 [ 143.631610][ T9] usb 7-1: device descriptor read/8, error -71 [ 143.704726][ T3995] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1190'. [ 143.740470][ T9] usb usb7-port1: unable to enumerate USB device [ 144.096635][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1195'. [ 144.726333][ T36] audit: type=1400 audit(1754972480.040:503): avc: denied { connect } for pid=4030 comm="syz.1.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.746555][ T36] audit: type=1400 audit(1754972480.060:504): avc: denied { read } for pid=4030 comm="syz.1.1203" laddr=172.20.20.170 lport=5 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.080378][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.086592][ T677] Bluetooth: hci0: command 0x1003 tx timeout [ 145.431460][ T4041] rust_binder: 127: no such ref 2 [ 145.615125][ T4051] binder: Bad value for 'max' [ 145.636757][ T4055] binder: Bad value for 'defcontext' [ 145.642912][ T4056] binder: Bad value for 'defcontext' [ 145.652228][ T36] audit: type=1400 audit(1754972480.970:505): avc: denied { create } for pid=4057 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.730349][ T36] audit: type=1400 audit(1754972481.040:506): avc: denied { execute } for pid=4063 comm="syz.4.1216" path="/proc/222/task/223/smaps" dev="proc" ino=30818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 145.764175][ T4066] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.770363][ T36] audit: type=1400 audit(1754972481.080:507): avc: denied { associate } for pid=4040 comm="syz.6.1207" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 145.816783][ T4069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1217'. [ 145.830800][ T4070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1217'. [ 145.974224][ T64] rust_binder: 4065: removing orphan mapping 0:1024 [ 146.106343][ T4094] rust_binder: Error while translating object. [ 146.106373][ T4094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 146.112629][ T4094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:169 [ 146.221278][ T36] audit: type=1400 audit(1754972481.540:508): avc: denied { sqpoll } for pid=4110 comm="syz.1.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 146.226126][ T4111] netlink: 'syz.1.1232': attribute type 2 has an invalid length. [ 147.100390][ T2142] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 147.181185][ T36] audit: type=1400 audit(1754972482.500:509): avc: denied { getopt } for pid=4134 comm="syz.5.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.181601][ T4135] x_tables: duplicate underflow at hook 1 [ 147.242400][ T4135] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 147.242424][ T4135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 147.250554][ T4135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:191 [ 147.260365][ T2142] usb 7-1: Using ep0 maxpacket: 8 [ 147.275953][ T2142] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 147.284504][ T2142] usb 7-1: config 179 has no interface number 0 [ 147.290922][ T2142] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 147.302107][ T2142] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 147.305439][ T36] audit: type=1400 audit(1754972482.620:510): avc: denied { write } for pid=4139 comm="syz.5.1243" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 147.320689][ T2142] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.353202][ T2142] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 147.370369][ T2142] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 147.383885][ T2142] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 147.389232][ T4153] tipc: Enabling of bearer rejected, failed to enable media [ 147.393188][ T2142] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.411093][ T4123] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 147.830442][ T31] usb 7-1: USB disconnect, device number 8 [ 147.830457][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 147.830491][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 148.093320][ T4187] rust_binder: Write failure EINVAL in pid:254 [ 148.142754][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.170090][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.177333][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.184413][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.191584][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.198825][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.205973][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.213121][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.220437][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.227967][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.235909][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.243867][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.252003][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.260802][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.269823][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.279269][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.289085][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.311612][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.321316][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.330997][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.343326][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.355537][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.385555][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.403498][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.419384][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.426859][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.434567][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.441733][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.448855][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.456885][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.467460][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.475412][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.487420][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.487548][ T4208] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 148.497773][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.509952][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.521649][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.529867][ T4208] rust_binder: Write failure EINVAL in pid:137 [ 148.530869][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.558311][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.573047][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.580583][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.590230][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.605486][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.612657][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.625099][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.635200][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.640806][ T4232] overlayfs: failed to clone upperpath [ 148.642492][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.655355][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.662621][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.670813][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.678097][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.696394][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.715593][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.716580][ T4236] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.722940][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.740496][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.740948][ T4236] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.747225][ T4236] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.754294][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.780227][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.787927][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.795414][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.802759][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.811205][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.821638][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.835335][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.842882][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.850046][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.863150][ T4197] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 148.923790][ T4247] rust_binder: 153: no such ref 0 [ 148.934452][ T4247] rust_binder: 153: no such ref 0 [ 148.939784][ T4247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153 [ 149.187838][ T4260] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 149.200391][ T36] audit: type=1400 audit(1754972484.500:511): avc: denied { relabelfrom } for pid=4259 comm="syz.4.1285" name="NETLINK" dev="sockfs" ino=31390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 149.242472][ T36] audit: type=1400 audit(1754972484.520:512): avc: denied { relabelto } for pid=4259 comm="syz.4.1285" name="NETLINK" dev="sockfs" ino=31390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 149.277228][ T4262] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 149.285692][ T4262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 149.570385][ T420] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 149.600368][ T363] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 149.730405][ T363] usb 6-1: device descriptor read/64, error -71 [ 149.741668][ T420] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.751951][ T420] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.761653][ T420] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 149.770817][ T420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.778797][ T420] usb 5-1: SerialNumber: syz [ 149.857863][ T3388] cgroup: fork rejected by pids controller in /syz6 [ 149.913181][ T3245] bridge_slave_1: left allmulticast mode [ 149.918923][ T3245] bridge_slave_1: left promiscuous mode [ 149.924849][ T3245] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.938568][ T3245] bridge_slave_0: left allmulticast mode [ 149.946732][ T3245] bridge_slave_0: left promiscuous mode [ 149.952683][ T3245] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.970409][ T363] usb 6-1: device descriptor read/64, error -71 [ 149.990383][ T4267] mmap: syz.4.1288 (4267) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.018191][ T420] usb 5-1: 0:2 : does not exist [ 150.035613][ T420] usb 5-1: USB disconnect, device number 29 [ 150.048606][ T4281] overlayfs: failed to clone upperpath [ 150.053478][ T3862] udevd[3862]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 150.075303][ T3245] veth1_macvtap: left promiscuous mode [ 150.087684][ T3245] veth0_vlan: left promiscuous mode [ 150.135125][ T4289] 9pnet_fd: Insufficient options for proto=fd [ 150.199646][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.206801][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.214468][ T4282] bridge_slave_0: entered allmulticast mode [ 150.221696][ T4282] bridge_slave_0: entered promiscuous mode [ 150.228171][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.230385][ T363] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 150.240343][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.250540][ T4282] bridge_slave_1: entered allmulticast mode [ 150.257076][ T4282] bridge_slave_1: entered promiscuous mode [ 150.320367][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.327455][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.334886][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.342007][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.361681][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.368972][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.376729][ T363] usb 6-1: device descriptor read/64, error -71 [ 150.385089][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.392166][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.401874][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.408939][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.432673][ T4282] veth0_vlan: entered promiscuous mode [ 150.443731][ T4282] veth1_macvtap: entered promiscuous mode [ 150.532728][ T36] audit: type=1400 audit(1754972485.850:513): avc: denied { execute } for pid=4318 comm="syz.4.1308" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 150.620420][ T363] usb 6-1: device descriptor read/64, error -71 [ 150.710420][ T31] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 150.730757][ T363] usb usb6-port1: attempt power cycle [ 150.821187][ T36] audit: type=1326 audit(1754972486.140:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.1310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3298b8ebe9 code=0x0 [ 150.861609][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 150.872645][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.885515][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 150.894881][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.904350][ T31] usb 7-1: config 0 descriptor?? [ 150.909735][ T4317] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 151.080387][ T363] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 151.101297][ T363] usb 6-1: device descriptor read/8, error -71 [ 151.119709][ T4317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.128493][ T4317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.137320][ T4317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.145988][ T4317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.154797][ T4317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.163453][ T4317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.231422][ T363] usb 6-1: device descriptor read/8, error -71 [ 151.376639][ T4317] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1294'. [ 151.388294][ T36] audit: type=1400 audit(1754972486.700:515): avc: denied { unmount } for pid=2739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 151.420638][ T36] audit: type=1400 audit(1754972486.730:516): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=677 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 151.444472][ T36] audit: type=1400 audit(1754972486.730:517): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=677 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 151.445409][ T4343] Invalid ELF header magic: != ELF [ 151.467003][ T36] audit: type=1400 audit(1754972486.740:518): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=677 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 151.496438][ T363] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 151.499094][ T36] audit: type=1400 audit(1754972486.760:519): avc: denied { module_load } for pid=4342 comm="syz.1.1317" path="/421/bus" dev="tmpfs" ino=2382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 151.528487][ T363] usb 6-1: device descriptor read/8, error -71 [ 151.611567][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 151.618099][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 151.629275][ T31] usb 7-1: USB disconnect, device number 9 [ 151.661499][ T363] usb 6-1: device descriptor read/8, error -71 [ 151.770575][ T363] usb usb6-port1: unable to enumerate USB device [ 152.128812][ T4369] 9pnet_fd: Insufficient options for proto=fd [ 152.634069][ T4413] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 152.651050][ T36] audit: type=1400 audit(1754972487.970:520): avc: denied { relabelto } for pid=4412 comm="syz.4.1339" name="105" dev="tmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 152.697708][ T36] audit: type=1400 audit(1754972487.970:521): avc: denied { associate } for pid=4412 comm="syz.4.1339" name="105" dev="tmpfs" ino=608 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 152.800357][ T31] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 152.890370][ T64] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 152.951436][ T31] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 152.970597][ T31] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 152.978764][ T31] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 152.989898][ T31] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 153.007556][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 153.017750][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 153.033388][ T31] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 153.045954][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.054019][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 153.069336][ T31] usb 6-1: Product: syz [ 153.074042][ T31] usb 6-1: Manufacturer: syz [ 153.079001][ T64] usb 7-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 153.090837][ T64] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 153.111235][ T31] usb 6-1: SerialNumber: syz [ 153.116431][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.125108][ T31] usb 6-1: config 0 descriptor?? [ 153.138126][ T31] hub 6-1:0.0: bad descriptor, ignoring hub [ 153.145429][ T64] hub 7-1:32.0: bad descriptor, ignoring hub [ 153.158517][ T64] hub 7-1:32.0: probe with driver hub failed with error -5 [ 153.166097][ T31] hub 6-1:0.0: probe with driver hub failed with error -5 [ 153.347538][ T4415] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 153.354875][ T4415] rust_binder: Read failure Err(EAGAIN) in pid:10 [ 153.440460][ T2142] usb 6-1: USB disconnect, device number 15 [ 153.460545][ T335] usb 7-1: USB disconnect, device number 10 [ 153.505998][ T36] audit: type=1400 audit(1754972488.820:522): avc: denied { write } for pid=2739 comm="syz-executor" name="105" dev="tmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 153.986856][ T4436] fuse: Bad value for 'fd' [ 154.023998][ T4438] overlayfs: upper fs does not support tmpfile. [ 154.035461][ T4440] 9pnet_fd: Insufficient options for proto=fd [ 154.399458][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1355'. [ 154.409622][ T4464] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 154.409643][ T4464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 154.417842][ T4464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:227 [ 154.465502][ T4468] fuse: Bad value for 'fd' [ 154.489448][ T4470] binder: Bad value for 'max' [ 154.495110][ T4470] binder: Bad value for 'max' [ 154.750412][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 154.886638][ T31] usb 6-1: device descriptor read/64, error -71 [ 155.074557][ T4492] overlayfs: failed to clone upperpath [ 155.091670][ T4494] fuse: Bad value for 'fd' [ 155.100508][ T64] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 155.119616][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 155.130377][ T31] usb 6-1: device descriptor read/64, error -71 [ 155.250366][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 155.256693][ T64] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.266956][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.279887][ T64] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 155.289001][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.297971][ T64] usb 7-1: config 0 descriptor?? [ 155.304079][ T64] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 155.370444][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 155.500365][ T31] usb 6-1: device descriptor read/64, error -71 [ 155.740395][ T31] usb 6-1: device descriptor read/64, error -71 [ 155.850526][ T31] usb usb6-port1: attempt power cycle [ 156.200428][ T31] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 156.221697][ T31] usb 6-1: device descriptor read/8, error -71 [ 156.353207][ T31] usb 6-1: device descriptor read/8, error -71 [ 156.438420][ T4574] 9pnet_fd: Insufficient options for proto=fd [ 156.495842][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 156.495863][ T36] audit: type=1400 audit(1754972491.810:534): avc: denied { bind } for pid=4583 comm="syz.4.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.600419][ T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 156.621825][ T31] usb 6-1: device descriptor read/8, error -71 [ 156.667241][ T4615] overlayfs: failed to clone upperpath [ 156.673485][ T4615] overlayfs: failed to clone upperpath [ 156.679482][ T4615] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 156.688349][ T4615] overlayfs: missing 'lowerdir' [ 156.695040][ T4615] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 156.751468][ T31] usb 6-1: device descriptor read/8, error -71 [ 156.860554][ T31] usb usb6-port1: unable to enumerate USB device [ 157.085471][ T4631] overlayfs: failed to resolve './file1': -2 [ 157.647537][ T4648] tc_dump_action: action bad kind [ 157.675852][ T36] audit: type=1400 audit(1754972492.990:535): avc: denied { sys_module } for pid=4655 comm="syz.4.1424" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 157.876086][ T2142] usb 7-1: USB disconnect, device number 11 [ 157.896480][ T36] audit: type=1400 audit(1754972493.203:536): avc: denied { append } for pid=4664 comm="syz.6.1426" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 157.916900][ T4665] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1426'. [ 157.975270][ T36] audit: type=1400 audit(1754972493.283:537): avc: denied { ioctl } for pid=4664 comm="syz.6.1426" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 158.214596][ T4689] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 158.340387][ T2142] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 158.490384][ T2142] usb 6-1: Using ep0 maxpacket: 8 [ 158.496693][ T2142] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 158.505255][ T2142] usb 6-1: config 179 has no interface number 0 [ 158.511589][ T2142] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 158.522797][ T2142] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 158.534268][ T2142] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 158.545614][ T2142] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 158.557074][ T2142] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 158.570343][ T2142] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 158.579497][ T2142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.588519][ T4682] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 158.753172][ T4697] 9pnet_fd: Insufficient options for proto=fd [ 158.772015][ T4703] overlayfs: failed to resolve './file4': -2 [ 158.779424][ T36] audit: type=1400 audit(1754972494.083:538): avc: denied { mounton } for pid=4702 comm="syz.1.1438" path="/466/bus/file0" dev="tmpfs" ino=2640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.803855][ T36] audit: type=1400 audit(1754972494.103:539): avc: denied { write } for pid=4702 comm="syz.1.1438" name="file4" dev="tmpfs" ino=2639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.853681][ T4717] overlayfs: failed to clone upperpath [ 158.950368][ T31] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 159.003285][ T4754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4754 comm=syz.4.1454 [ 159.017142][ T4754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4754 comm=syz.4.1454 [ 159.031788][ T4755] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4755 comm=syz.4.1454 [ 159.059400][ T4759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1455'. [ 159.100394][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 159.106915][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.122653][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.140785][ T31] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 159.149977][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.167131][ T31] usb 7-1: config 0 descriptor?? [ 159.173165][ T31] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 159.303493][ T31] usb 6-1: USB disconnect, device number 20 [ 159.303625][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 159.318728][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 159.561803][ T36] audit: type=1400 audit(1754972494.873:540): avc: denied { watch } for pid=4775 comm="syz.1.1459" path="/471/file0" dev="tmpfs" ino=2666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.725292][ T4793] fuse: Bad value for 'fd' [ 159.824015][ T4801] rust_binder: 264: no such ref 0 [ 159.829138][ T4801] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 159.847323][ T36] audit: type=1400 audit(1754972495.153:541): avc: denied { ioctl } for pid=4803 comm="syz.5.1467" path="socket:[34053]" dev="sockfs" ino=34053 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.915852][ T36] audit: type=1400 audit(1754972495.223:542): avc: denied { execute } for pid=4805 comm="syz.5.1468" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.955630][ T4810] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 159.955663][ T4810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 159.963949][ T4810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:273 [ 160.220376][ T482] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 160.367084][ T4816] overlayfs: failed to clone upperpath [ 160.381912][ T482] usb 6-1: not running at top speed; connect to a high speed hub [ 160.382501][ T4819] fuse: Bad value for 'fd' [ 160.390969][ T482] usb 6-1: config 8 has an invalid interface number: 229 but max is 1 [ 160.402388][ T482] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 160.413127][ T482] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 160.422451][ T482] usb 6-1: config 8 has no interface number 0 [ 160.428757][ T482] usb 6-1: config 8 interface 229 altsetting 85 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 160.442308][ T482] usb 6-1: config 8 interface 229 has no altsetting 0 [ 160.450927][ T482] usb 6-1: New USB device found, idVendor=19d2, idProduct=1077, bcdDevice=f3.24 [ 160.460171][ T482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.468506][ T482] usb 6-1: Product: 昍竡쵒옻즗搸㉩繈㰃䢎㓝┰⭥鄐⃡뗵ᨾ衪㚮Ⴒ㦱镺贅륾ᕁ컒뿼颫礽㫩陊캐㸊␇ꮳ譥鱰⻤Ｂꛤ瓉擺鶗羂更亍䱅▻짖掦ٮ㧯嬺草喝⇪㯣疄콥ꡝ瞦 [ 160.489491][ T482] usb 6-1: Manufacturer: 笴韣쳿辍憖૬ᴚꍭ♀⿈ꌇ簄믝淳탁⿷辰懌䲪ִ◤嘕醙䛗㮡⤫໓꘭ꀑ㭭搲蛏≗ᇇ꣊Ὰ椙ӺḬ狲⹄毪귷钖兀퓥눅⬵㚁ᆚ퀿ጅﰛ䆴鹳巽误噰ݠ벯얢骮ሪ뒣峝⢎걤봔뼶儚邑ꪾ쒔㊵䋚칊嬀覻ᾙ [ 160.516877][ T482] usb 6-1: SerialNumber: ᐁ [ 160.532121][ T4824] 9pnet_fd: Insufficient options for proto=fd [ 160.624006][ T4834] netlink: 'syz.4.1479': attribute type 1 has an invalid length. [ 160.631902][ T4834] netlink: 'syz.4.1479': attribute type 2 has an invalid length. [ 160.639938][ T4835] netlink: 'syz.4.1479': attribute type 1 has an invalid length. [ 160.647808][ T4835] netlink: 'syz.4.1479': attribute type 2 has an invalid length. [ 160.700152][ T4841] tipc: Can't bind to reserved service type 1 [ 160.729165][ T4845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.737632][ T36] audit: type=1326 audit(1754972496.043:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.4.1484" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d2b78ebe9 code=0x0 [ 160.743106][ T4845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.775832][ T2142] usb 6-1: USB disconnect, device number 21 [ 160.788507][ T4850] cgroup: Unknown subsys name 'euid>18446744073709551615' [ 160.790111][ T4852] __vm_enough_memory: pid: 4852, comm: syz.5.1485, bytes: 18014402804453376 not enough memory for the allocation [ 160.817056][ T4854] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 161.151912][ T4870] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 161.173562][ T4873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1491'. [ 161.233996][ T4874] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 161.400400][ T2142] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 161.551546][ T2142] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.561406][ T2142] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 161.574405][ T2142] usb 6-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 161.583670][ T2142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.595810][ T2142] usb 6-1: config 0 descriptor?? [ 161.678265][ T482] usb 7-1: USB disconnect, device number 12 [ 161.845275][ T4891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=4891 comm=syz.6.1501 [ 161.877351][ T4893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 161.899349][ T4895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 161.908650][ T4895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:49 [ 161.932285][ T4897] fuse: Unknown parameter 'dd' [ 161.947093][ T4897] netlink: 'syz.6.1504': attribute type 58 has an invalid length. [ 161.967836][ T4899] netlink: 'syz.1.1505': attribute type 1 has an invalid length. [ 161.976539][ T4899] netlink: 'syz.1.1505': attribute type 2 has an invalid length. [ 161.984563][ T4897] netlink: 'syz.6.1504': attribute type 58 has an invalid length. [ 162.003977][ T2142] wacom 0003:056A:0003.0023: unknown main item tag 0x0 [ 162.016650][ T2142] wacom 0003:056A:0003.0023: unknown main item tag 0x0 [ 162.027004][ T4903] rust_binder: Write failure EFAULT in pid:53 [ 162.027104][ T2142] wacom 0003:056A:0003.0023: unknown main item tag 0x0 [ 162.040416][ T2142] wacom 0003:056A:0003.0023: unknown main item tag 0x0 [ 162.047636][ T2142] wacom 0003:056A:0003.0023: unknown main item tag 0x0 [ 162.057309][ T2142] wacom 0003:056A:0003.0023: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 162.067811][ T2142] wacom 0003:056A:0003.0023: hidraw0: USB HID vff.fc Device [HID 056a:0003] on usb-dummy_hcd.5-1/input0 [ 162.088120][ T2142] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0003.0023/input/input16 [ 162.206642][ T4872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.215434][ T4872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.240868][ T64] usb 6-1: USB disconnect, device number 22 [ 162.400363][ T2142] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 162.550352][ T2142] usb 7-1: Using ep0 maxpacket: 16 [ 162.639310][ T2142] usb 7-1: config 0 has no interfaces? [ 162.653958][ T2142] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.676103][ T2142] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.712441][ T2142] usb 7-1: SerialNumber: syz [ 162.730560][ T2142] usb 7-1: config 0 descriptor?? [ 162.836487][ T4954] binder: Bad value for 'max' [ 163.240358][ T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 163.401451][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.420353][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.430250][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.440095][ T4972] vcan0: entered allmulticast mode [ 163.443547][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.449462][ T4972] vcan0: left allmulticast mode [ 163.457775][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.466061][ T4972] overlayfs: failed to resolve './file0': -2 [ 163.474366][ T31] usb 6-1: config 0 descriptor?? [ 163.514240][ T4979] netlink: 'syz.1.1532': attribute type 1 has an invalid length. [ 163.522051][ T4979] netlink: 'syz.1.1532': attribute type 2 has an invalid length. [ 163.937198][ T31] plantronics 0003:047F:FFFF.0024: unknown main item tag 0xd [ 163.945614][ T31] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 163.955524][ T31] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 165.221875][ T9] usb 7-1: USB disconnect, device number 13 [ 165.360450][ T2142] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 165.650857][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 165.800487][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 165.806842][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.817967][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.827795][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.836867][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.845585][ T9] usb 7-1: config 0 descriptor?? [ 165.853815][ T9] hub 7-1:0.0: USB hub found [ 166.051728][ T9] hub 7-1:0.0: 1 port detected [ 166.654867][ T9] hub 7-1:0.0: activate --> -90 [ 166.756886][ T5045] overlayfs: failed to clone upperpath [ 166.839189][ T5050] netlink: 'syz.1.1559': attribute type 3 has an invalid length. [ 167.631562][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 167.631582][ T36] audit: type=1400 audit(1754972502.943:547): avc: denied { read } for pid=5051 comm="syz.1.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.721242][ T9] hub 7-1:0.0: hub_ext_port_status failed (err = -32) [ 168.164818][ T36] audit: type=1400 audit(1754972503.473:548): avc: denied { setopt } for pid=5077 comm="syz.4.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.353601][ T5097] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 168.441015][ T9] usb 7-1: USB disconnect, device number 14 [ 169.088547][ T36] audit: type=1326 audit(1754972504.393:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.4.1577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d2b78ebe9 code=0x0 [ 169.386266][ T5119] fuse: Unknown parameter 'defaUo _permissions' [ 169.994876][ T5136] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1588'. [ 170.004061][ T5135] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1588'. [ 170.011252][ T5136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1588'. [ 170.033842][ T5139] netlink: 'syz.4.1589': attribute type 40 has an invalid length. [ 170.570379][ T2142] usb 6-1: device descriptor read/64, error -110 [ 170.810348][ T2142] usb 6-1: device descriptor read/64, error -32 [ 171.050436][ T2142] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 171.180387][ T2142] usb 6-1: device descriptor read/64, error -32 [ 171.423146][ T2142] usb 6-1: device descriptor read/64, error -32 [ 171.582576][ T5172] overlayfs: failed to clone lowerpath [ 171.600422][ T2142] raw-gadget.1 gadget.5: failed to queue resume event [ 171.670398][ T2142] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 171.693394][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 171.700967][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 171.708259][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 171.730342][ T2142] usb 6-1: device descriptor read/8, error -32 [ 171.860529][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 171.867898][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 171.875207][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 171.882366][ T2142] usb 6-1: device descriptor read/8, error -32 [ 171.990368][ T2142] raw-gadget.1 gadget.5: failed to queue suspend event [ 171.997479][ T2142] raw-gadget.1 gadget.5: failed to queue reset event [ 172.004952][ T5191] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1608'. [ 172.015221][ T5191] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1608'. [ 172.070398][ T2142] raw-gadget.1 gadget.5: failed to queue resume event [ 172.150385][ T2142] usb 6-1: reset high-speed USB device number 23 using dummy_hcd [ 172.170622][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.177889][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.185207][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.192498][ T2142] usb 6-1: device descriptor read/8, error -32 [ 172.320680][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.327993][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.335224][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.342307][ T2142] usb 6-1: device descriptor read/8, error -32 [ 172.450375][ T2142] raw-gadget.1 gadget.5: failed to queue suspend event [ 172.457408][ T335] usb 6-1: USB disconnect, device number 23 [ 172.467608][ T335] raw-gadget.1 gadget.5: failed to queue reset event [ 172.540446][ T335] raw-gadget.1 gadget.5: failed to queue resume event [ 172.600431][ T335] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 172.608386][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.615726][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.623155][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.630276][ T335] raw-gadget.1 gadget.5: failed to queue reset event [ 172.710420][ T335] raw-gadget.1 gadget.5: failed to queue resume event [ 172.770366][ T335] usb 6-1: device descriptor read/64, error -32 [ 172.880674][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.888049][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.895303][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 172.902538][ T335] raw-gadget.1 gadget.5: failed to queue reset event [ 172.970449][ T335] raw-gadget.1 gadget.5: failed to queue resume event [ 173.030518][ T335] usb 6-1: device descriptor read/64, error -32 [ 173.140439][ T335] raw-gadget.1 gadget.5: failed to queue suspend event [ 173.147442][ T335] raw-gadget.1 gadget.5: failed to queue reset event [ 173.220500][ T335] raw-gadget.1 gadget.5: failed to queue resume event [ 173.280447][ T335] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 173.288234][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 173.295713][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 173.303053][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 173.310168][ T335] raw-gadget.1 gadget.5: failed to queue reset event [ 173.380583][ T335] raw-gadget.1 gadget.5: failed to queue resume event [ 173.440457][ T335] usb 6-1: device descriptor read/64, error -32 [ 173.550673][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 173.557976][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 173.565307][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 173.572572][ T335] raw-gadget.1 gadget.5: failed to queue reset event [ 173.640494][ T335] raw-gadget.1 gadget.5: failed to queue resume event [ 173.700529][ T335] usb 6-1: device descriptor read/64, error -32 [ 173.810607][ T335] raw-gadget.1 gadget.5: failed to queue suspend event [ 173.817583][ T335] usb usb6-port1: attempt power cycle [ 173.823095][ T335] raw-gadget.1 gadget.5: failed to queue disconnect event [ 173.830541][ T335] raw-gadget.1 gadget.5: failed to queue reset event [ 173.900450][ T335] raw-gadget.1 gadget.5: failed to queue resume event [ 173.907439][ T335] raw-gadget.1 gadget.5: failed to queue reset event [ 174.120518][ T335] raw-gadget.1 gadget.5: failed to queue resume event [ 174.180421][ T335] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 174.200548][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.207820][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.215681][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.222771][ T335] usb 6-1: device descriptor read/8, error -32 [ 174.350655][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.358112][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.365402][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.372511][ T335] usb 6-1: device descriptor read/8, error -32 [ 174.480463][ T335] raw-gadget.1 gadget.5: failed to queue suspend event [ 174.487466][ T335] raw-gadget.1 gadget.5: failed to queue reset event [ 174.560461][ T335] raw-gadget.1 gadget.5: failed to queue resume event [ 174.620509][ T335] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 174.640712][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.648024][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.655431][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.662548][ T335] usb 6-1: device descriptor read/8, error -32 [ 174.790628][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.797949][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.805384][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 174.812535][ T335] usb 6-1: device descriptor read/8, error -32 [ 174.920567][ T335] raw-gadget.1 gadget.5: failed to queue suspend event [ 174.927709][ T335] usb usb6-port1: unable to enumerate USB device [ 179.927928][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.935334][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.942707][ T5228] bridge_slave_0: entered allmulticast mode [ 179.949157][ T5228] bridge_slave_0: entered promiscuous mode [ 179.956287][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.956721][ T36] audit: type=1400 audit(1754972515.263:550): avc: denied { accept } for pid=5241 comm="syz.4.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.963567][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.004934][ T5228] bridge_slave_1: entered allmulticast mode [ 180.018419][ T5228] bridge_slave_1: entered promiscuous mode [ 180.050337][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 180.157437][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.164580][ T5228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.171938][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.178990][ T5228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.209077][ T3245] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.218084][ T3245] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.226701][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.239876][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.252175][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 180.261466][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 180.273402][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.280525][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.288712][ T9] usb 7-1: SerialNumber: syz [ 180.294704][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.301807][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.337544][ T5228] veth0_vlan: entered promiscuous mode [ 180.355426][ T5228] veth1_macvtap: entered promiscuous mode [ 180.513819][ T5208] rust_binder: Write failure EINVAL in pid:97 [ 180.515307][ T9] usb 7-1: 0:2 : does not exist [ 180.526982][ T9] usb 7-1: unit 5 not found! [ 180.538652][ T9] usb 7-1: USB disconnect, device number 15 [ 180.549700][ T5294] veth1_macvtap: left promiscuous mode [ 180.555467][ T5294] macsec0: entered promiscuous mode [ 180.556994][ T5216] udevd[5216]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 180.560752][ T5294] macsec0: entered allmulticast mode [ 180.591748][ T5295] veth1_macvtap: entered promiscuous mode [ 180.597526][ T5295] veth1_macvtap: entered allmulticast mode [ 180.604366][ T5295] macsec0: left promiscuous mode [ 180.609382][ T5295] macsec0: left allmulticast mode [ 180.614463][ T5295] veth1_macvtap: left allmulticast mode [ 180.861015][ T5303] rust_binder: Read failure Err(EAGAIN) in pid:20 [ 180.895148][ T36] audit: type=1400 audit(1754972522.211:551): avc: denied { create } for pid=5304 comm="syz.4.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 181.123518][ T5322] overlayfs: failed to resolve './file0': -2 [ 181.251805][ T5345] fuse: Bad value for 'user_id' [ 181.262207][ T5345] fuse: Bad value for 'user_id' [ 181.370643][ T5359] rust_binder: Error while translating object. [ 181.370677][ T5359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 181.376889][ T5359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:106 [ 181.438550][ T5370] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 181.484749][ T5376] fuse: Bad value for 'user_id' [ 181.497788][ T5376] fuse: Bad value for 'user_id' [ 181.600893][ T5388] 9pnet_fd: Insufficient options for proto=fd [ 181.653073][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1667'. [ 181.712926][ T5400] rust_binder: Failed copying remainder into alloc: EFAULT [ 181.712950][ T5400] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 181.720276][ T5400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 181.729086][ T5400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:23 [ 181.753478][ T5403] fuse: Bad value for 'user_id' [ 181.768933][ T5403] fuse: Bad value for 'user_id' [ 182.059907][ T5423] overlayfs: failed to clone lowerpath [ 182.065561][ T482] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 182.094150][ T5427] fuse: Bad value for 'fd' [ 182.118702][ T36] audit: type=1400 audit(1754972523.431:552): avc: denied { bind } for pid=5430 comm="syz.1.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.231943][ T482] usb 7-1: unable to get BOS descriptor or descriptor too short [ 182.240036][ T482] usb 7-1: not running at top speed; connect to a high speed hub [ 182.248774][ T482] usb 7-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.261667][ T482] usb 7-1: config 1 interface 0 has no altsetting 0 [ 182.271973][ T482] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 182.281242][ T482] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.289317][ T482] usb 7-1: Manufacturer: 탈ᖩ쒸阡翀⎇碭밨񦅡 [ 182.296224][ T482] usb 7-1: SerialNumber: syz [ 182.719175][ T5449] fuse: Bad value for 'fd' [ 183.667844][ T36] audit: type=1400 audit(1754972524.981:553): avc: denied { append } for pid=5472 comm="syz.7.1696" name="userfaultfd" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 183.712718][ T36] audit: type=1400 audit(1754972525.031:554): avc: denied { ioctl } for pid=5472 comm="syz.7.1696" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.741447][ T5479] fuse: Bad value for 'fd' [ 183.767708][ T36] audit: type=1400 audit(1754972525.081:555): avc: denied { accept } for pid=5482 comm="syz.4.1700" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.010481][ T5488] binder: Bad value for 'stats' [ 184.151400][ T36] audit: type=1400 audit(1754972525.471:556): avc: denied { create } for pid=5493 comm="syz.7.1703" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 184.171795][ T36] audit: type=1400 audit(1754972525.471:557): avc: denied { associate } for pid=5493 comm="syz.7.1703" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 184.339321][ T36] audit: type=1400 audit(1754972525.651:558): avc: denied { listen } for pid=5500 comm="syz.7.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.432482][ T5506] tipc: Enabling of bearer rejected, failed to enable media [ 184.685933][ T5525] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 184.693739][ T5525] netlink: 'syz.4.1714': attribute type 2 has an invalid length. [ 184.735256][ T5523] /dev/rnullb0: Can't open blockdev [ 184.769672][ T482] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 184.783188][ T482] usb 7-1: USB disconnect, device number 16 [ 184.800449][ T482] usblp0: removed [ 184.874260][ T5535] syzkaller0: entered promiscuous mode [ 184.879771][ T5535] syzkaller0: entered allmulticast mode [ 184.966087][ T5541] netlink: 316 bytes leftover after parsing attributes in process `syz.7.1720'. [ 184.975638][ T5541] netlink: 316 bytes leftover after parsing attributes in process `syz.7.1720'. [ 184.984864][ T5539] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.333337][ T36] audit: type=1400 audit(1754972526.646:559): avc: denied { setattr } for pid=5572 comm="syz.4.1734" name="/" dev="configfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 185.370350][ T36] audit: type=1326 audit(1754972526.676:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5572 comm="syz.4.1734" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d2b78ebe9 code=0x0 [ 185.682379][ T5589] /dev/rnullb0: Can't open blockdev [ 185.687979][ T5589] binder: Bad value for 'max' [ 186.408378][ T5603] rust_binder: Write failure EINVAL in pid:138 [ 186.409289][ T5602] rust_binder: Failed to allocate buffer. len:1344, is_oneway:true [ 186.441925][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.457127][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.464282][ T5600] bridge_slave_0: entered allmulticast mode [ 186.470633][ T5600] bridge_slave_0: entered promiscuous mode [ 186.477561][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.484770][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.492024][ T5600] bridge_slave_1: entered allmulticast mode [ 186.498258][ T5600] bridge_slave_1: entered promiscuous mode [ 186.504574][ T3245] bridge_slave_1: left allmulticast mode [ 186.510441][ T3245] bridge_slave_1: left promiscuous mode [ 186.516237][ T3245] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.523839][ T3245] bridge_slave_0: left allmulticast mode [ 186.529493][ T3245] bridge_slave_0: left promiscuous mode [ 186.535252][ T3245] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.662323][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.669407][ T5600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.676880][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.683969][ T5600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.706901][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.714213][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.724750][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.731865][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.742721][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.749789][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.757408][ T3245] tipc: Left network mode [ 186.769127][ T3245] veth1_macvtap: left promiscuous mode [ 186.775507][ T3245] veth0_vlan: left promiscuous mode [ 186.839385][ T5600] veth0_vlan: entered promiscuous mode [ 186.856070][ T5600] veth1_macvtap: entered promiscuous mode [ 186.952342][ T5621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.952378][ T5621] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 186.962119][ T5621] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:2 [ 187.154014][ T9] rust_binder: 5620: removing orphan mapping 0:24 [ 187.275967][ T482] rust_binder: 5623: removing orphan mapping 0:24 [ 187.288093][ T482] rust_binder: 0: removing orphan mapping 24:1120 [ 187.580431][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 187.730363][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 187.736801][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.747968][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.757774][ T9] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 187.766855][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.775604][ T9] usb 9-1: config 0 descriptor?? [ 187.840374][ T2142] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 187.970387][ T2142] usb 8-1: device descriptor read/64, error -71 [ 188.183924][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 188.189981][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 188.198820][ T9] usb 9-1: USB disconnect, device number 2 [ 188.210359][ T2142] usb 8-1: device descriptor read/64, error -71 [ 188.304431][ T5657] cannot load conntrack support for proto=3 [ 188.320006][ T5660] 9pnet_fd: Insufficient options for proto=fd [ 188.450480][ T2142] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 188.480401][ T335] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 188.580380][ T2142] usb 8-1: device descriptor read/64, error -71 [ 188.640443][ T335] usb 7-1: Using ep0 maxpacket: 32 [ 188.646866][ T335] usb 7-1: config 0 has an invalid interface number: 202 but max is 1 [ 188.655158][ T335] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.665318][ T335] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 188.674209][ T335] usb 7-1: config 0 has no interface number 0 [ 188.680898][ T335] usb 7-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 188.692428][ T335] usb 7-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 188.703749][ T335] usb 7-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 188.717106][ T335] usb 7-1: config 0 interface 202 has no altsetting 0 [ 188.725686][ T335] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 188.734807][ T335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.745552][ T335] usb 7-1: Product: syz [ 188.749734][ T335] usb 7-1: Manufacturer: syz [ 188.754352][ T335] usb 7-1: SerialNumber: syz [ 188.759925][ T335] usb 7-1: config 0 descriptor?? [ 188.850394][ T2142] usb 8-1: device descriptor read/64, error -71 [ 188.859596][ T5673] raw_sendmsg: syz.4.1765 forgot to set AF_INET. Fix it! [ 188.954868][ T36] audit: type=1400 audit(1754972530.266:561): avc: denied { mounton } for pid=5682 comm="syz.4.1768" path="/282/file0" dev="tmpfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 188.972450][ T482] usb 7-1: USB disconnect, device number 17 [ 188.978509][ T2142] usb usb8-port1: attempt power cycle [ 189.009938][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1771'. [ 189.020550][ T5692] binder: Bad value for 'stats' [ 189.022511][ T5694] binder: Bad value for 'stats' [ 189.095741][ T5697] rust_binder: Read failure Err(EFAULT) in pid:31 [ 189.269188][ T5707] 9pnet_fd: Insufficient options for proto=fd [ 189.320387][ T2142] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 189.327943][ T36] audit: type=1400 audit(1754972530.636:562): avc: denied { create } for pid=5710 comm="syz.4.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 189.348552][ T36] audit: type=1400 audit(1754972530.636:563): avc: denied { sys_admin } for pid=5710 comm="syz.4.1778" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 189.350457][ T363] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 189.371032][ T2142] usb 8-1: device descriptor read/8, error -71 [ 189.511446][ T2142] usb 8-1: device descriptor read/8, error -71 [ 189.534321][ T363] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.547120][ T363] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.563266][ T363] usb 9-1: Product: syz [ 189.567691][ T363] usb 9-1: Manufacturer: syz [ 189.572415][ T363] usb 9-1: SerialNumber: syz [ 189.750416][ T2142] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 189.771496][ T2142] usb 8-1: device descriptor read/8, error -71 [ 189.790361][ T1019] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 189.901413][ T2142] usb 8-1: device descriptor read/8, error -71 [ 189.920357][ T1019] usb 7-1: device descriptor read/64, error -71 [ 189.999296][ T363] cdc_ncm 9-1:1.0: bind() failure [ 190.005176][ T363] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 190.010486][ T2142] usb usb8-port1: unable to enumerate USB device [ 190.012508][ T363] cdc_ncm 9-1:1.1: bind() failure [ 190.025550][ T363] usb 9-1: USB disconnect, device number 3 [ 190.160380][ T1019] usb 7-1: device descriptor read/64, error -71 [ 190.163183][ T5722] netlink: 'syz.4.1781': attribute type 4 has an invalid length. [ 190.175397][ T5723] netlink: 'syz.4.1781': attribute type 4 has an invalid length. [ 190.183404][ T5722] netlink: 'syz.4.1781': attribute type 4 has an invalid length. [ 190.396002][ T5736] 9pnet_fd: Insufficient options for proto=fd [ 190.402269][ T1019] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 190.544266][ T1019] usb 7-1: device descriptor read/64, error -71 [ 190.602544][ T5752] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 190.608807][ T5752] tipc: Started in network mode [ 190.621655][ T5752] tipc: Node identity 2d00000800400000002e, cluster identity 4711 [ 190.800404][ T1019] usb 7-1: device descriptor read/64, error -71 [ 190.880411][ T2142] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 190.910475][ T1019] usb usb7-port1: attempt power cycle [ 190.948099][ T5756] input: syz1 as /devices/virtual/input/input21 [ 191.010409][ T2142] usb 9-1: device descriptor read/64, error -71 [ 191.250408][ T2142] usb 9-1: device descriptor read/64, error -71 [ 191.256712][ T1019] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 191.282103][ T1019] usb 7-1: device descriptor read/8, error -71 [ 191.326958][ T5766] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 191.411409][ T1019] usb 7-1: device descriptor read/8, error -71 [ 191.496730][ T2142] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 191.630435][ T2142] usb 9-1: device descriptor read/64, error -71 [ 191.650372][ T1019] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 191.671605][ T1019] usb 7-1: device descriptor read/8, error -71 [ 191.801702][ T1019] usb 7-1: device descriptor read/8, error -71 [ 191.870383][ T2142] usb 9-1: device descriptor read/64, error -71 [ 191.910639][ T1019] usb usb7-port1: unable to enumerate USB device [ 191.980529][ T2142] usb usb9-port1: attempt power cycle [ 192.320415][ T2142] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 192.341647][ T2142] usb 9-1: device descriptor read/8, error -71 [ 192.471633][ T2142] usb 9-1: device descriptor read/8, error -71 [ 192.710412][ T2142] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 192.731574][ T2142] usb 9-1: device descriptor read/8, error -71 [ 192.861753][ T2142] usb 9-1: device descriptor read/8, error -71 [ 192.970556][ T2142] usb usb9-port1: unable to enumerate USB device [ 199.460398][ T1019] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 199.470501][ T524] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 199.610384][ T1019] usb 7-1: Using ep0 maxpacket: 32 [ 199.616877][ T1019] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.626850][ T1019] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 199.630324][ T524] usb 9-1: Using ep0 maxpacket: 16 [ 199.635942][ T1019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.642833][ T524] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.656818][ T1019] usb 7-1: config 0 descriptor?? [ 199.660538][ T524] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.675016][ T524] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 199.684117][ T524] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.692936][ T524] usb 9-1: config 0 descriptor?? [ 199.902710][ T1019] usbhid 7-1:0.0: can't add hid device: -71 [ 199.909059][ T1019] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 199.918691][ T1019] usb 7-1: USB disconnect, device number 22 [ 200.101615][ T524] hid-multitouch 0003:1FD2:6007.0025: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 200.154860][ T5805] 9pnet_virtio: no channels available for device syz [ 200.186631][ T5815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 200.186673][ T5815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:169 [ 200.192158][ T5817] fuse: Bad value for 'fd' [ 200.227799][ T5822] netlink: 'syz.4.1814': attribute type 1 has an invalid length. [ 200.235642][ T5822] netlink: 'syz.4.1814': attribute type 2 has an invalid length. [ 200.306725][ T64] usb 9-1: USB disconnect, device number 8 [ 200.357591][ T5831] netlink: 'syz.4.1818': attribute type 4 has an invalid length. [ 200.407997][ T5840] fuse: Bad value for 'fd' [ 200.426502][ T36] audit: type=1326 audit(1754972541.736:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.4.1823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d2b78ebe9 code=0x0 [ 200.450337][ T2142] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 200.600349][ T2142] usb 7-1: Using ep0 maxpacket: 32 [ 200.606630][ T2142] usb 7-1: config 1 interface 0 altsetting 19 bulk endpoint 0x82 has invalid maxpacket 32 [ 200.616697][ T2142] usb 7-1: config 1 interface 0 altsetting 19 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 200.629865][ T2142] usb 7-1: config 1 interface 0 has no altsetting 0 [ 200.637920][ T2142] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.647010][ T2142] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.655041][ T2142] usb 7-1: Product: 꿍䲳竏䖡✆㣨㦣喚鎍ｋ㒤ᑩ㜭➲拀俿諼빵≕䭇⌧梅ᨬⰆꘝⰘ㌭䉵讹團삱毿쐌뇄쌸뉚됕聩ﻝ뒇튬뽵흸菪㬀謖벇ૼꑍ쉌㹞⮚鮲欻も濜㟐 [ 200.676791][ T2142] usb 7-1: Manufacturer: 鲂崍卂ﲓꐹᅱᑵ闵对햐ꊿ㔺첼䐖惒ꪘ덋锠苄䒧㷇۶脾鞴鼽碈ᡤ襉ú뼖箘ꮵᆫ氳漑ꈢ楇踺孡惯ꃆ罝譏飭灪⻼ཊ수╼ﳿ嶵靈鱫 [ 200.697412][ T2142] usb 7-1: SerialNumber: Ѕ [ 200.703243][ T5819] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 200.829196][ T36] audit: type=1400 audit(1754972542.136:565): avc: denied { map } for pid=5844 comm="syz.8.1824" path="socket:[38546]" dev="sockfs" ino=38546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.911295][ T36] audit: type=1400 audit(1754972542.226:566): avc: denied { nlmsg_write } for pid=5818 comm="syz.6.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 200.933323][ T2142] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 200.944614][ T2142] usb 7-1: USB disconnect, device number 23 [ 200.952530][ T5856] rust_binder: Write failure EFAULT in pid:65 [ 200.958603][ T36] audit: type=1400 audit(1754972542.266:567): avc: denied { read } for pid=5855 comm="syz.8.1827" path="socket:[38569]" dev="sockfs" ino=38569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 201.046543][ T5870] sit0: entered promiscuous mode [ 201.054656][ T5870] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1832'. [ 201.063809][ T5870] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1832'. [ 201.076771][ T5870] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1832'. [ 201.086527][ T5870] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1832'. [ 201.097111][ T5870] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1832'. [ 201.106141][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 201.113224][ T5870] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1832'. [ 201.287506][ T5888] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1837'. [ 201.572079][ T328] tipc: Subscription rejected, illegal request [ 201.580513][ T5895] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1839'. [ 201.879870][ T36] audit: type=1400 audit(1754972543.186:568): avc: denied { setopt } for pid=5902 comm="syz.4.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 201.880344][ T524] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 201.899438][ T36] audit: type=1400 audit(1754972543.186:569): avc: denied { getattr } for pid=5902 comm="syz.4.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 201.926299][ T36] audit: type=1400 audit(1754972543.226:570): avc: denied { getopt } for pid=5902 comm="syz.4.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 202.027216][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1848'. [ 202.036401][ T5922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1848'. [ 202.050347][ T524] usb 8-1: Using ep0 maxpacket: 16 [ 202.057139][ T524] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.067485][ T524] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.077971][ T524] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.087077][ T524] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.095227][ T524] usb 8-1: Product: syz [ 202.099581][ T524] usb 8-1: Manufacturer: syz [ 202.104187][ T524] usb 8-1: SerialNumber: syz [ 202.283910][ T36] audit: type=1400 audit(1754972543.596:571): avc: denied { create } for pid=5926 comm="syz.6.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 202.312503][ T524] usb 8-1: 0:2 : does not exist [ 202.322523][ T524] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 202.336838][ T524] usb 8-1: USB disconnect, device number 6 [ 202.350795][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 202.350874][ T5931] tipc: Started in network mode [ 202.371773][ T5931] tipc: Node identity 92169e93ca6a, cluster identity 4711 [ 202.379057][ T5931] tipc: Enabled bearer , priority 0 [ 202.393542][ T5931] syzkaller0: entered promiscuous mode [ 202.399110][ T5931] syzkaller0: entered allmulticast mode [ 202.405013][ T5931] tipc: Resetting bearer [ 202.465953][ T5931] tipc: Resetting bearer [ 202.476609][ T5931] tipc: Disabling bearer [ 202.544150][ T5940] /dev/rnullb0: Can't open blockdev [ 202.596348][ T5951] fuse: Bad value for 'fd' [ 202.600695][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.607270][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.613954][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.620638][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.627135][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.633671][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.640135][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.646622][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.653394][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.660039][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.666572][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.673607][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.680163][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.687267][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.694079][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.700890][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.707445][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.714197][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.726156][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.732823][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.739308][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.745961][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.752648][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.759132][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.765977][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.772620][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.779373][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.786404][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.793415][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.799943][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.806458][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.813093][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.819594][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.826128][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.833031][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.837789][ T5984] : renamed from lo (while UP) [ 202.839952][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.851642][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.858348][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.864874][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.871443][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.877931][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.884944][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.891499][ T5947] fuse: Unknown parameter '128 92 0:6 / /dev rw' [ 202.930796][ T36] audit: type=1400 audit(1754972544.246:572): avc: denied { create } for pid=5988 comm="syz.6.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 203.150390][ T2142] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 203.160364][ T677] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.160599][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 203.183160][ T5991] 9pnet_fd: p9_fd_create_unix (5991): problem connecting socket: ./file0: -111 [ 203.192733][ T5991] devpts: called with bogus options [ 203.225209][ T5995] fuse: Bad value for 'fd' [ 203.242048][ T36] audit: type=1400 audit(1754972544.556:573): avc: denied { write } for pid=5999 comm="syz.8.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.302302][ T2142] usb 8-1: Using ep0 maxpacket: 32 [ 203.308702][ T2142] usb 8-1: config 0 has an invalid interface number: 230 but max is 0 [ 203.317139][ T2142] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.327470][ T2142] usb 8-1: config 0 has no interface number 0 [ 203.333629][ T2142] usb 8-1: config 0 interface 230 has no altsetting 0 [ 203.335180][ T6006] overlayfs: failed to clone upperpath [ 203.342144][ T2142] usb 8-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.01 [ 203.355151][ T2142] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.363272][ T2142] usb 8-1: Product: syz [ 203.367503][ T2142] usb 8-1: Manufacturer: syz [ 203.372157][ T2142] usb 8-1: SerialNumber: syz [ 203.380186][ T2142] usb 8-1: config 0 descriptor?? [ 203.415181][ T6024] 9pnet_fd: Insufficient options for proto=fd [ 203.583575][ T6042] x_tables: unsorted underflow at hook 3 [ 203.590895][ T5984] /dev/rnullb0: Can't open blockdev [ 203.596870][ T524] usb 8-1: USB disconnect, device number 7 [ 203.700438][ T31] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 203.850373][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 203.857040][ T31] usb 7-1: config 0 has no interfaces? [ 203.863497][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.872605][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.881136][ T31] usb 7-1: SerialNumber: syz [ 203.886433][ T31] usb 7-1: config 0 descriptor?? [ 204.115876][ T2142] usb 7-1: USB disconnect, device number 24 [ 204.140115][ T6055] binder: Binderfs stats mode cannot be changed during a remount [ 204.212505][ T6067] usb usb4: usbfs: process 6067 (syz.8.1892) did not claim interface 0 before use [ 204.280240][ T1019] rust_binder: 6066: removing orphan mapping 0:4120 [ 204.530430][ T363] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 204.676365][ T6097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 204.688963][ T6098] 9pnet_fd: Insufficient options for proto=fd [ 204.704616][ T363] usb 9-1: Using ep0 maxpacket: 32 [ 204.712045][ T363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.723842][ T363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.734148][ T363] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 204.743765][ T363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.753389][ T363] usb 9-1: config 0 descriptor?? [ 204.766389][ T363] hub 9-1:0.0: USB hub found [ 204.786413][ T6111] overlayfs: failed to clone lowerpath [ 204.798971][ T6116] tipc: Enabling of bearer rejected, failed to enable media [ 204.963416][ T363] hub 9-1:0.0: 1 port detected [ 205.017091][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.017126][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.025056][ T6146] fuse: Invalid rootmode [ 205.041092][ T6147] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 205.048394][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.048423][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.054989][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.061581][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.068104][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.075421][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.082456][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.089123][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.095787][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.102665][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.109211][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.115983][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.122601][ T6144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.199296][ T6151] rust_binder: 6150 RLIMIT_NICE not set [ 205.221407][ T1019] rust_binder: 0: removing orphan mapping 0:4248 [ 205.389800][ T6158] 9pnet_fd: Insufficient options for proto=fd [ 205.568332][ T363] hub 9-1:0.0: activate --> -90 [ 205.970527][ T363] usb 9-1-port1: cannot disable (err = -71) [ 205.970726][ T373] usb 9-1: USB disconnect, device number 9 [ 206.040837][ T1019] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 206.128445][ T6177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:241 [ 206.142716][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 206.142736][ T36] audit: type=1400 audit(1754976899.456:578): avc: denied { map } for pid=6178 comm="syz.6.1927" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.165363][ T6179] SELinux: security_context_str_to_sid (sytem_uGй000000000000,version=9p2000,k) failed with errno=-22 [ 206.201647][ T1019] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.211985][ T1019] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.222078][ T1019] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 206.231438][ T1019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 206.239506][ T1019] usb 8-1: SerialNumber: syz [ 206.450429][ T1019] usb 8-1: 0:2 : does not exist [ 206.458564][ T1019] usb 8-1: USB disconnect, device number 8 [ 206.466803][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 206.770404][ T373] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 206.886542][ T6207] __nla_validate_parse: 2 callbacks suppressed [ 206.886564][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1940'. [ 206.930340][ T373] usb 9-1: Using ep0 maxpacket: 8 [ 206.936596][ T373] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 206.945089][ T373] usb 9-1: config 179 has no interface number 0 [ 206.951641][ T373] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 206.963900][ T6208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 206.963929][ T6208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:249 [ 206.973370][ T373] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 206.995742][ T373] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.007707][ T373] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 207.035275][ T373] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 207.048888][ T373] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 207.058388][ T373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.066597][ T6212] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 207.066622][ T6212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 207.074685][ T6212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:205 [ 207.089368][ T6187] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 207.319498][ T373] usb 9-1: USB disconnect, device number 10 [ 207.325496][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 207.325534][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 207.342353][ T2142] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 207.500335][ T2142] usb 8-1: Using ep0 maxpacket: 32 [ 207.507098][ T2142] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 207.515932][ T2142] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 207.524716][ T2142] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.535064][ T2142] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 207.544214][ T2142] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 207.553840][ T2142] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.563218][ T2142] usb 8-1: config 0 descriptor?? [ 207.680338][ T373] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 207.750205][ T6228] overlay: Unknown parameter 'fowner' [ 207.777634][ T64] usb 8-1: USB disconnect, device number 9 [ 207.831565][ T373] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 207.840810][ T373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.849959][ T373] usb 9-1: config 0 descriptor?? [ 208.257075][ T6245] netlink: 'syz.6.1954': attribute type 4 has an invalid length. [ 208.282711][ T6250] tipc: Enabled bearer , priority 0 [ 208.300347][ T6250] tipc: Disabling bearer [ 208.357640][ T6258] rust_binder: 280: no such ref 3 [ 208.363034][ T6258] rust_binder: 280: no such ref 4294967295 [ 208.369010][ T6258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 208.383223][ T36] audit: type=1400 audit(1754976901.696:579): avc: denied { read } for pid=6259 comm="syz.6.1958" name="/" dev="configfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.414542][ T36] audit: type=1400 audit(1754976901.696:580): avc: denied { open } for pid=6259 comm="syz.6.1958" path="/" dev="configfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.598991][ T6276] SELinux: security_context_str_to_sid () failed with errno=-22 [ 208.645991][ T6280] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 208.753932][ T6288] tipc: Started in network mode [ 208.758929][ T6288] tipc: Node identity fee8c6dd8c32, cluster identity 4711 [ 208.766630][ T6288] tipc: Enabled bearer , priority 0 [ 208.774397][ T6287] tipc: Disabling bearer [ 208.828109][ T6296] SELinux: security_context_str_to_sid () failed with errno=-22 [ 209.075323][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 209.136657][ T6321] overlayfs: failed to clone upperpath [ 209.276553][ T373] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 209.288368][ T373] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 209.299451][ T373] asix 9-1:0.0: probe with driver asix failed with error -71 [ 209.307796][ T373] usb 9-1: USB disconnect, device number 11 [ 209.600368][ T2142] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 209.750404][ T2142] usb 8-1: Using ep0 maxpacket: 32 [ 209.755827][ T373] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 209.764803][ T2142] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.775955][ T2142] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.789487][ T2142] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 209.798730][ T2142] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 209.807937][ T2142] usb 8-1: Product: syz [ 209.812271][ T2142] usb 8-1: Manufacturer: syz [ 209.819991][ T2142] hub 8-1:4.0: USB hub found [ 209.920367][ T373] usb 7-1: Using ep0 maxpacket: 16 [ 209.926670][ T373] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.937795][ T373] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.947782][ T373] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 209.956885][ T373] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.965707][ T373] usb 7-1: config 0 descriptor?? [ 210.018692][ T2142] hub 8-1:4.0: 2 ports detected [ 210.140361][ T482] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 210.270415][ T482] usb 9-1: device descriptor read/64, error -71 [ 210.399421][ T6369] $: renamed from bridge_slave_0 (while UP) [ 210.418441][ T6371] 9pnet_fd: Insufficient options for proto=fd [ 210.434775][ T373] usbhid 7-1:0.0: can't add hid device: -71 [ 210.441585][ T373] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 210.453036][ T373] usb 7-1: USB disconnect, device number 25 [ 210.478219][ T6381] can: request_module (can-proto-3) failed. [ 210.510408][ T482] usb 9-1: device descriptor read/64, error -71 [ 210.626172][ T2142] usb 8-1: USB disconnect, device number 10 [ 210.750377][ T482] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 210.880347][ T482] usb 9-1: device descriptor read/64, error -71 [ 210.947125][ T6387] overlayfs: maximum fs stacking depth exceeded [ 211.060516][ T64] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 211.120384][ T482] usb 9-1: device descriptor read/64, error -71 [ 211.210344][ T64] usb 8-1: Using ep0 maxpacket: 32 [ 211.216777][ T64] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.227984][ T64] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.238063][ T482] usb usb9-port1: attempt power cycle [ 211.240336][ T2142] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 211.244802][ T64] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 211.260212][ T64] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 211.268567][ T64] usb 8-1: Product: syz [ 211.272756][ T64] usb 8-1: Manufacturer: syz [ 211.279591][ T64] hub 8-1:4.0: USB hub found [ 211.410379][ T2142] usb 7-1: Using ep0 maxpacket: 16 [ 211.417024][ T2142] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 211.427936][ T2142] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.437641][ T2142] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.450172][ T2142] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.459300][ T2142] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.467367][ T2142] usb 7-1: Product: syz [ 211.471588][ T2142] usb 7-1: Manufacturer: syz [ 211.476297][ T2142] usb 7-1: SerialNumber: syz [ 211.481698][ T64] hub 8-1:4.0: config failed, hub has too many ports! (err -19) [ 211.580451][ T482] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 211.601671][ T482] usb 9-1: device descriptor read/8, error -71 [ 211.731735][ T482] usb 9-1: device descriptor read/8, error -71 [ 211.790460][ T64] usb 8-1: USB disconnect, device number 11 [ 211.886523][ T2142] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 211.970389][ T482] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 211.991641][ T482] usb 9-1: device descriptor read/8, error -71 [ 212.121463][ T482] usb 9-1: device descriptor read/8, error -71 [ 212.210305][ T6399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 212.230424][ T482] usb usb9-port1: unable to enumerate USB device [ 213.048975][ T6407] tipc: Enabled bearer , priority 0 [ 213.070816][ T6407] syzkaller0: entered promiscuous mode [ 213.076395][ T6407] syzkaller0: entered allmulticast mode [ 213.082844][ T6407] tipc: Resetting bearer [ 213.089112][ T6407] tipc: Resetting bearer [ 213.089495][ T6409] devpts: called with bogus options [ 213.107594][ T6407] tipc: Disabling bearer [ 213.163314][ T2142] raw-gadget.1 gadget.5: failed to queue reset event [ 213.231015][ T31] usb 7-1: USB disconnect, device number 26 [ 213.240757][ T2142] raw-gadget.1 gadget.5: failed to queue resume event [ 213.320380][ T2142] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 213.328149][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 213.335456][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 213.342718][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 213.349822][ T2142] raw-gadget.1 gadget.5: failed to queue reset event [ 213.420359][ T2142] raw-gadget.1 gadget.5: failed to queue resume event [ 213.480406][ T2142] usb 6-1: device descriptor read/64, error -32 [ 213.590574][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 213.597884][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 213.605004][ T420] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 213.612889][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 213.620137][ T2142] raw-gadget.1 gadget.5: failed to queue reset event [ 213.690396][ T2142] raw-gadget.1 gadget.5: failed to queue resume event [ 213.750405][ T2142] usb 6-1: device descriptor read/64, error -32 [ 213.760418][ T420] usb 9-1: Using ep0 maxpacket: 32 [ 213.766947][ T420] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.777883][ T420] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.789068][ T420] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 213.798261][ T420] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 213.806702][ T420] usb 9-1: Product: syz [ 213.810926][ T420] usb 9-1: Manufacturer: syz [ 213.819278][ T420] hub 9-1:4.0: USB hub found [ 213.821372][ T6431] rust_binder: Error while translating object. [ 213.824145][ T6431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 213.830510][ T6431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:315 [ 213.853467][ T6433] binder: Unknown parameter '' [ 213.860359][ T2142] raw-gadget.1 gadget.5: failed to queue suspend event [ 213.881495][ T2142] raw-gadget.1 gadget.5: failed to queue reset event [ 213.950326][ T2142] raw-gadget.1 gadget.5: failed to queue resume event [ 214.010921][ T2142] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 214.018931][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 214.026201][ T420] hub 9-1:4.0: 2 ports detected [ 214.031427][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 214.038751][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 214.046038][ T2142] raw-gadget.1 gadget.5: failed to queue reset event [ 214.120446][ T2142] raw-gadget.1 gadget.5: failed to queue resume event [ 214.190363][ T2142] usb 6-1: device descriptor read/64, error -32 [ 214.300566][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 214.307855][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 214.315167][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 214.322354][ T2142] raw-gadget.1 gadget.5: failed to queue reset event [ 214.390368][ T2142] raw-gadget.1 gadget.5: failed to queue resume event [ 214.450406][ T2142] usb 6-1: device descriptor read/64, error -32 [ 214.560357][ T2142] raw-gadget.1 gadget.5: failed to queue suspend event [ 214.567481][ T2142] usb usb6-port1: attempt power cycle [ 214.572954][ T2142] raw-gadget.1 gadget.5: failed to queue disconnect event [ 214.580320][ T2142] raw-gadget.1 gadget.5: failed to queue reset event [ 214.629755][ T420] usb 9-1: USB disconnect, device number 16 [ 214.650386][ T2142] raw-gadget.1 gadget.5: failed to queue resume event [ 214.657471][ T2142] raw-gadget.1 gadget.5: failed to queue reset event [ 214.771801][ T6469] tmpfs: Unsupported parameter 'mpol' [ 214.778287][ T6469] 9pnet: p9_errstr2errno: server reported unknown error [ 214.870399][ T2142] raw-gadget.1 gadget.5: failed to queue resume event [ 214.930376][ T2142] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 214.939601][ T6488] overlayfs: failed to clone upperpath [ 214.950538][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 214.957847][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 214.965462][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 214.989230][ T2142] usb 6-1: device descriptor read/8, error -32 [ 215.070374][ T64] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 215.120553][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 215.127851][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 215.135201][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 215.142278][ T2142] usb 6-1: device descriptor read/8, error -32 [ 215.220345][ T64] usb 9-1: Using ep0 maxpacket: 32 [ 215.226694][ T64] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.237797][ T64] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.248908][ T64] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 215.258047][ T64] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 215.260357][ T2142] raw-gadget.1 gadget.5: failed to queue suspend event [ 215.266446][ T64] usb 9-1: Product: syz [ 215.273817][ T2142] raw-gadget.1 gadget.5: failed to queue reset event [ 215.277706][ T64] usb 9-1: Manufacturer: syz [ 215.290932][ T64] hub 9-1:4.0: USB hub found [ 215.350371][ T2142] raw-gadget.1 gadget.5: failed to queue resume event [ 215.410431][ T2142] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 215.430552][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 215.437910][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 215.445515][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 215.452635][ T2142] usb 6-1: device descriptor read/8, error -32 [ 215.491040][ T64] hub 9-1:4.0: config failed, can't read hub descriptor (err -22) [ 215.511099][ T64] usb 9-1: USB disconnect, device number 17 [ 215.580540][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 215.587833][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 215.595474][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 215.602574][ T2142] usb 6-1: device descriptor read/8, error -32 [ 215.710403][ T2142] raw-gadget.1 gadget.5: failed to queue suspend event [ 215.717408][ T2142] usb usb6-port1: unable to enumerate USB device [ 215.750995][ T6514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:246 [ 215.965707][ T6538] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2055'. [ 216.752430][ T6580] netlink: 'syz.4.2070': attribute type 5 has an invalid length. [ 216.762816][ T6580] 9pnet_fd: Insufficient options for proto=fd [ 216.777774][ T6582] bridge0: entered allmulticast mode [ 216.783529][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2071'. [ 216.792578][ T6582] bridge_slave_1: left allmulticast mode [ 216.798336][ T6582] bridge_slave_1: left promiscuous mode [ 216.804417][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.812443][ T6582] $: left allmulticast mode [ 216.817498][ T6582] $: left promiscuous mode [ 216.822615][ T6582] bridge0: port 1($) entered disabled state [ 216.830642][ T6582] bridge0 (unregistering): left allmulticast mode [ 216.950587][ T6594] netlink: 'syz.7.2075': attribute type 16 has an invalid length. [ 216.958453][ T6594] netlink: 'syz.7.2075': attribute type 3 has an invalid length. [ 216.966443][ T6594] netlink: 'syz.7.2075': attribute type 1 has an invalid length. [ 216.975399][ T6596] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 216.979656][ T6594] netlink: 'syz.7.2075': attribute type 1 has an invalid length. [ 216.981356][ T6596] rust_binder: Read failure Err(EFAULT) in pid:156 [ 216.987724][ T6594] netlink: 'syz.7.2075': attribute type 2 has an invalid length. [ 217.018691][ T6594] netlink: 64006 bytes leftover after parsing attributes in process `syz.7.2075'. [ 217.037212][ T6606] netlink: 436 bytes leftover after parsing attributes in process `syz.4.2079'. [ 217.102292][ T36] audit: type=1400 audit(1754976910.421:581): avc: denied { map } for pid=6617 comm="syz.6.2083" path="socket:[44295]" dev="sockfs" ino=44295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.148563][ T6626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.148897][ T6626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 217.161599][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.187094][ T6635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.209296][ T6640] incfs: Error accessing: ./file0. [ 217.221011][ T6640] incfs: mount failed -2 [ 217.270368][ T31] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 217.273463][ T6647] fuse: Bad value for 'fd' [ 217.313932][ T6654] tipc: Enabling of bearer rejected, failed to enable media [ 217.420340][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 217.426860][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.437974][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.447800][ T31] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 217.456973][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.465612][ T31] usb 8-1: config 0 descriptor?? [ 217.870755][ T6663] fuse: Bad value for 'fd' [ 217.876702][ T31] hid-multitouch 0003:1FD2:6007.0026: item fetching failed at offset 1/5 [ 217.885679][ T31] hid-multitouch 0003:1FD2:6007.0026: probe with driver hid-multitouch failed with error -22 [ 217.923716][ T6678] tipc: Enabling of bearer rejected, failed to enable media [ 217.942535][ T6680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=6680 comm=syz.4.2103 [ 218.021628][ T36] audit: type=1400 audit(1754976911.341:582): avc: denied { remount } for pid=6690 comm="syz.6.2106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 218.041573][ T36] audit: type=1400 audit(1754976911.341:583): avc: denied { mounton } for pid=6690 comm="syz.6.2106" path="/122/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 218.071148][ T6693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.071369][ T6693] rust_binder: Write failure EINVAL in pid:371 [ 218.079946][ T31] usb 8-1: USB disconnect, device number 12 [ 218.081117][ T6694] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 218.113377][ T6696] input: syz1 as /devices/virtual/input/input22 [ 218.123107][ T373] raw-gadget.1 gadget.5: failed to queue reset event [ 218.145439][ T6701] netlink: 'syz.6.2110': attribute type 16 has an invalid length. [ 218.153413][ T6701] netlink: 'syz.6.2110': attribute type 3 has an invalid length. [ 218.161439][ T6701] netlink: 64054 bytes leftover after parsing attributes in process `syz.6.2110'. [ 218.200395][ T373] raw-gadget.1 gadget.5: failed to queue resume event [ 218.260385][ T373] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 218.268292][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 218.275590][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 218.284140][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 218.291331][ T373] raw-gadget.1 gadget.5: failed to queue reset event [ 218.360383][ T373] raw-gadget.1 gadget.5: failed to queue resume event [ 218.420344][ T373] usb 6-1: device descriptor read/64, error -32 [ 218.530391][ T64] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 218.530558][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 218.545352][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 218.552645][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 218.559812][ T373] raw-gadget.1 gadget.5: failed to queue reset event [ 218.630344][ T373] raw-gadget.1 gadget.5: failed to queue resume event [ 218.682110][ T64] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 218.690377][ T373] usb 6-1: device descriptor read/64, error -32 [ 218.690647][ T64] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 218.707135][ T64] usb 7-1: config 220 has no interface number 2 [ 218.713465][ T64] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 218.726965][ T64] usb 7-1: config 220 interface 0 has no altsetting 0 [ 218.733773][ T64] usb 7-1: config 220 interface 76 has no altsetting 0 [ 218.740749][ T64] usb 7-1: config 220 interface 1 has no altsetting 0 [ 218.749246][ T64] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 218.758382][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.766904][ T64] usb 7-1: Product: syz [ 218.771195][ T64] usb 7-1: Manufacturer: syz [ 218.775840][ T64] usb 7-1: SerialNumber: syz [ 218.800399][ T373] raw-gadget.1 gadget.5: failed to queue suspend event [ 218.807570][ T373] raw-gadget.1 gadget.5: failed to queue reset event [ 218.880415][ T373] raw-gadget.1 gadget.5: failed to queue resume event [ 218.940367][ T373] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 218.948258][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 218.955566][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 218.962983][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 218.970141][ T373] raw-gadget.1 gadget.5: failed to queue reset event [ 218.986063][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.994700][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.011614][ T64] usb 7-1: selecting invalid altsetting 0 [ 219.017555][ T64] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 219.024277][ T64] usb 7-1: No valid video chain found. [ 219.032753][ T64] usb 7-1: USB disconnect, device number 27 [ 219.040418][ T373] raw-gadget.1 gadget.5: failed to queue resume event [ 219.053374][ T6720] kvm: pic: non byte read [ 219.057927][ T6720] kvm: pic: level sensitive irq not supported [ 219.058005][ T6720] kvm: pic: non byte read [ 219.110386][ T373] usb 6-1: device descriptor read/64, error -32 [ 219.133158][ T6723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.198331][ T6724] fuse: Unknown parameter '000000010000000024000000x000000000000000b0000000000000000000000000000000000000000000' [ 219.221050][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 219.228361][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 219.236340][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 219.243917][ T373] raw-gadget.1 gadget.5: failed to queue reset event [ 219.320354][ T373] raw-gadget.1 gadget.5: failed to queue resume event [ 219.380358][ T373] usb 6-1: device descriptor read/64, error -32 [ 219.465950][ T6731] rust_binder: Write failure EFAULT in pid:276 [ 219.483412][ T36] audit: type=1400 audit(1754976912.801:584): avc: denied { shutdown } for pid=6732 comm="syz.7.2119" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.483441][ T3245] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.520391][ T373] raw-gadget.1 gadget.5: failed to queue suspend event [ 219.535029][ T373] usb usb6-port1: attempt power cycle [ 219.540727][ T373] raw-gadget.1 gadget.5: failed to queue disconnect event [ 219.548064][ T373] raw-gadget.1 gadget.5: failed to queue reset event [ 219.620324][ T373] raw-gadget.1 gadget.5: failed to queue resume event [ 219.627234][ T373] raw-gadget.1 gadget.5: failed to queue reset event [ 219.840346][ T373] raw-gadget.1 gadget.5: failed to queue resume event [ 219.900349][ T373] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 219.920480][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 219.927825][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 219.935205][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 219.942420][ T373] usb 6-1: device descriptor read/8, error -32 [ 219.981728][ T36] audit: type=1400 audit(1754976913.301:585): avc: denied { create } for pid=6734 comm="syz.6.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 220.009528][ T6737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.010535][ T6737] input: syz1 as /devices/virtual/input/input23 [ 220.028072][ T6737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.070555][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 220.084571][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 220.092273][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 220.099372][ T373] usb 6-1: device descriptor read/8, error -32 [ 220.210396][ T373] raw-gadget.1 gadget.5: failed to queue suspend event [ 220.217450][ T373] raw-gadget.1 gadget.5: failed to queue reset event [ 220.290372][ T31] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 220.290382][ T373] raw-gadget.1 gadget.5: failed to queue resume event [ 220.360570][ T373] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 220.380534][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 220.387820][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 220.395111][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 220.402191][ T373] usb 6-1: device descriptor read/8, error -32 [ 220.440388][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 220.446688][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.457824][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.467618][ T31] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 220.476701][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.485338][ T31] usb 7-1: config 0 descriptor?? [ 220.530545][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 220.537959][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 220.545460][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 220.552663][ T373] usb 6-1: device descriptor read/8, error -32 [ 220.660408][ T373] raw-gadget.1 gadget.5: failed to queue suspend event [ 220.667571][ T373] usb usb6-port1: unable to enumerate USB device [ 220.717164][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 220.892349][ T31] hid-multitouch 0003:1FD2:6007.0027: item fetching failed at offset 2/5 [ 220.901083][ T31] hid-multitouch 0003:1FD2:6007.0027: probe with driver hid-multitouch failed with error -22 [ 220.986219][ T6748] 9pnet_fd: Insufficient options for proto=fd [ 221.010419][ T2142] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 221.093171][ T31] usb 7-1: USB disconnect, device number 28 [ 221.161638][ T2142] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 221.172195][ T2142] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 221.181291][ T2142] usb 9-1: config 220 interface 0 has no altsetting 0 [ 221.189868][ T2142] usb 9-1: New USB device found, idVendor=8069, idProduct=0b07, bcdDevice=6c.b9 [ 221.198985][ T2142] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.207020][ T2142] usb 9-1: Product: syz [ 221.211204][ T2142] usb 9-1: Manufacturer: syz [ 221.215806][ T2142] usb 9-1: SerialNumber: syz [ 221.560377][ T677] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.560387][ T6745] Bluetooth: hci0: command 0x1003 tx timeout [ 221.615979][ T6754] rust_binder: Error while translating object. [ 221.616014][ T6754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.622373][ T6754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:402 [ 221.644224][ T6756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.654085][ T6756] rust_binder: Error while translating object. [ 221.662343][ T6756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 221.668592][ T6756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:404 [ 221.690780][ T6759] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.714815][ T36] audit: type=1400 audit(1754976915.031:586): avc: denied { mount } for pid=6760 comm="syz.6.2131" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 221.746913][ T36] audit: type=1400 audit(1754976915.031:587): avc: denied { append } for pid=6760 comm="syz.6.2131" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.784340][ T6767] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2133'. [ 221.829949][ T6772] overlayfs: failed to clone upperpath [ 221.836140][ T6771] SELinux: failed to load policy [ 221.837637][ T36] audit: type=1326 audit(1754976915.151:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6770 comm="syz.4.2135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d2b78ebe9 code=0x0 [ 221.841729][ T6771] rust_binder: Write failure EFAULT in pid:413 [ 221.881304][ T36] audit: type=1400 audit(1754976915.201:589): avc: denied { getopt } for pid=6773 comm="syz.6.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 222.447142][ T6807] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.470352][ T64] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 222.548819][ T6809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:426 [ 222.610393][ T64] usb 8-1: device descriptor read/64, error -71 [ 222.682453][ T6819] tipc: Enabling of bearer rejected, failed to enable media [ 222.705671][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2151'. [ 222.760378][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 222.766552][ T677] Bluetooth: hci1: command 0x1003 tx timeout [ 222.790531][ T2142] usb 9-1: Found UVC 7.01 device syz (8069:0b07) [ 222.815079][ T2142] usb 9-1: No valid video chain found. [ 222.825409][ T2142] usb 9-1: USB disconnect, device number 18 [ 222.860348][ T64] usb 8-1: device descriptor read/64, error -71 [ 222.970046][ T36] audit: type=1400 audit(1754976916.281:590): avc: denied { setattr } for pid=6853 comm="syz.4.2161" name="NETLINK" dev="sockfs" ino=45304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.994137][ T36] audit: type=1400 audit(1754976916.291:591): avc: denied { accept } for pid=6853 comm="syz.4.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.120344][ T64] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 223.163009][ T6870] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2166'. [ 223.183519][ T6873] tipc: Enabling of bearer rejected, failed to enable media [ 223.201851][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2168'. [ 223.212680][ T6876] overlayfs: failed to clone upperpath [ 223.250434][ T64] usb 8-1: device descriptor read/64, error -71 [ 223.330357][ T1019] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 223.429109][ T6880] rust_binder: Error while translating object. [ 223.429138][ T6880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 223.435579][ T6880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:192 [ 223.460342][ T1019] usb 7-1: device descriptor read/64, error -71 [ 223.490429][ T64] usb 8-1: device descriptor read/64, error -71 [ 223.600535][ T64] usb usb8-port1: attempt power cycle [ 223.710469][ T1019] usb 7-1: device descriptor read/64, error -71 [ 223.730662][ T36] audit: type=1326 audit(1754976917.051:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6925 comm="syz.4.2173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d2b78ebe9 code=0x0 [ 223.832902][ T6927] fuse: Bad value for 'fd' [ 223.838202][ T6927] netlink: 'syz.4.2173': attribute type 29 has an invalid length. [ 223.940370][ T64] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 223.960351][ T1019] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 223.961399][ T64] usb 8-1: device descriptor read/8, error -71 [ 224.090416][ T1019] usb 7-1: device descriptor read/64, error -71 [ 224.101530][ T64] usb 8-1: device descriptor read/8, error -71 [ 224.330376][ T1019] usb 7-1: device descriptor read/64, error -71 [ 224.350403][ T64] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 224.371392][ T64] usb 8-1: device descriptor read/8, error -71 [ 224.440517][ T1019] usb usb7-port1: attempt power cycle [ 224.501705][ T64] usb 8-1: device descriptor read/8, error -71 [ 224.536150][ T36] audit: type=1326 audit(1754976917.851:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.8.2176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7718ebe9 code=0x0 [ 224.610433][ T64] usb usb8-port1: unable to enumerate USB device [ 224.780386][ T1019] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 224.801482][ T1019] usb 7-1: device descriptor read/8, error -71 [ 224.931390][ T1019] usb 7-1: device descriptor read/8, error -71 [ 225.170371][ T1019] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 225.191396][ T1019] usb 7-1: device descriptor read/8, error -71 [ 225.271526][ T6942] tmpfs: Unknown parameter '0x00000000000000050x00000000ffffffff' [ 225.321575][ T1019] usb 7-1: device descriptor read/8, error -71 [ 225.430515][ T1019] usb usb7-port1: unable to enumerate USB device [ 225.497632][ T6958] /dev/rnullb0: Can't open blockdev [ 225.570184][ T6963] rust_binder: 6960 RLIMIT_NICE not set [ 225.571007][ T6960] rust_binder: 308: no such ref 3 [ 225.581725][ T6960] rust_binder: inc_ref_done called when no active inc_refs [ 225.637552][ T6968] ------------[ cut here ]------------ [ 225.650661][ T6968] WARNING: CPU: 1 PID: 6968 at arch/x86/kvm/x86.c:11569 kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 225.660978][ T6968] Modules linked in: [ 225.664885][ T6968] CPU: 1 UID: 0 PID: 6968 Comm: syz.7.2191 Not tainted 6.12.38-syzkaller-gb632dc2e1d79 #0 9921eaa9ec7b66c9f160f95d92f0c8099666722b [ 225.678365][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.688447][ T6968] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 225.695060][ T6968] Code: 7e 3b e8 34 05 6a 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 4c 8b 64 24 40 48 8b 5c 24 28 e9 26 fd ff ff e8 11 05 6a 00 <0f> 0b e9 e4 fc ff ff e8 05 05 6a 00 0f 0b e9 0e fd ff ff e8 f9 04 [ 225.714974][ T6968] RSP: 0018:ffffc90006dd79c0 EFLAGS: 00010293 [ 225.721156][ T6968] RAX: ffffffff811bd81f RBX: ffff88811462c300 RCX: ffff88811dcf8000 [ 225.729155][ T6968] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 225.737175][ T6968] RBP: ffffc90006dd7c70 R08: ffff88811dcf8007 R09: 1ffff11023b9f000 [ 225.745232][ T6968] R10: dffffc0000000000 R11: ffffed1023b9f001 R12: ffff888142984000 [ 225.753343][ T6968] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88811462c378 [ 225.761408][ T6968] FS: 00007fcbcf9ca6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 225.770327][ T1019] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 225.770515][ T6968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.784683][ T6968] CR2: 000000005200000c CR3: 000000011a088000 CR4: 00000000003526b0 [ 225.792710][ T6968] Call Trace: [ 225.796042][ T6968] [ 225.798983][ T6968] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 225.805026][ T6968] ? __mutex_unlock_slowpath+0x48a/0x740 [ 225.810727][ T6968] ? ioctl_has_perm+0x1aa/0x4d0 [ 225.815593][ T6968] ? ioctl_has_perm+0x3e0/0x4d0 [ 225.820619][ T6968] ? has_cap_mac_admin+0xd0/0xd0 [ 225.825775][ T6968] ? __mutex_lock_killable_slowpath+0xe/0x20 [ 225.831828][ T6968] ? mutex_lock_killable+0x104/0x1c0 [ 225.837145][ T6968] ? __cfi_mutex_lock_killable+0x10/0x10 [ 225.842821][ T6968] ? futex_wait+0x29a/0x7a0 [ 225.847356][ T6968] kvm_vcpu_ioctl+0x96f/0xee0 [ 225.852077][ T6968] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 225.857308][ T6968] ? do_futex+0x309/0x500 [ 225.861696][ T6968] ? __cfi_do_futex+0x10/0x10 [ 225.866396][ T6968] ? kvm_sched_clock_read+0x15/0x30 [ 225.871628][ T6968] ? sched_clock_noinstr+0xd/0x30 [ 225.876671][ T6968] ? __fget_files+0x2c5/0x340 [ 225.881464][ T6968] ? bpf_lsm_file_ioctl+0xd/0x20 [ 225.886424][ T6968] ? security_file_ioctl+0x34/0xd0 [ 225.891570][ T6968] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 225.896799][ T6968] __se_sys_ioctl+0x132/0x1b0 [ 225.901528][ T6968] __x64_sys_ioctl+0x7f/0xa0 [ 225.906145][ T6968] x64_sys_call+0x1878/0x2ee0 [ 225.910869][ T6968] do_syscall_64+0x58/0xf0 [ 225.915324][ T6968] ? clear_bhb_loop+0x50/0xa0 [ 225.920038][ T6968] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 225.926030][ T6968] RIP: 0033:0x7fcbceb8ebe9 [ 225.930507][ T6968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.940320][ T1019] usb 9-1: Using ep0 maxpacket: 32 [ 225.950311][ T6968] RSP: 002b:00007fcbcf9ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.957154][ T1019] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.963983][ T6968] RAX: ffffffffffffffda RBX: 00007fcbcedb6090 RCX: 00007fcbceb8ebe9 [ 225.975280][ T1019] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.982950][ T6968] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000048 [ 226.000784][ T6968] RBP: 00007fcbcec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 226.001253][ T1019] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 226.008958][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.008981][ T6968] R13: 00007fcbcedb6128 R14: 00007fcbcedb6090 R15: 00007fff9dbff008 [ 226.009001][ T6968] [ 226.009011][ T6968] ---[ end trace 0000000000000000 ]--- [ 226.018459][ T1019] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 226.051282][ T1019] usb 9-1: Product: syz [ 226.055473][ T1019] usb 9-1: Manufacturer: syz [ 226.065449][ T1019] hub 9-1:4.0: USB hub found [ 226.265585][ T1019] hub 9-1:4.0: 2 ports detected [ 226.875135][ T1019] usb 9-1: USB disconnect, device number 19 [ 227.310344][ T1019] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 227.460354][ T1019] usb 9-1: Using ep0 maxpacket: 32 [ 227.466598][ T1019] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.477520][ T1019] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.488323][ T1019] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 227.497473][ T1019] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 227.505854][ T1019] usb 9-1: Product: syz [ 227.510009][ T1019] usb 9-1: Manufacturer: syz [ 227.516782][ T1019] hub 9-1:4.0: USB hub found [ 227.716533][ T1019] hub 9-1:4.0: config failed, hub has too many ports! (err -19) [ 228.030461][ T1019] usb 9-1: USB disconnect, device number 20