last executing test programs: 7.342609147s ago: executing program 3 (id=149): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000003c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY\t\x00\x00\x00\x00\x00\x00\x003\x1f\xc5!\xb2\x1bs\xfc\x00\x00\x00\x00\x00\x00\x0f\xff\xfc\t\x9c\xda\xf2\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8cfV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\x88\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12J\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xe8H\xc3\x9a\xfdNak\x99\x87\n\x1d\xb22m\xdd\xa9\xc1\x9a\xac\xd2\xda\xed\xab\xa2J\xf7e_\xe6\xd5\xcf\x8a\x13sF\xc3\x83\x0e=\x00\x00\x00\x00\x00\x00\xf1\xff\xff\xff\xff\xff\xff\xff\x00\x00\xb8Y\xd0\x13F4$6\xb0I\xc3\xfas\xdcnq\\\x19~\xcd\xc27D\v\xe6v\xe3\xd4\xb8\x15LW\xad\xb5S\t\x9d$D9Q_\xa7\xd0\xe8\xe7\xa4\xee\x19\x86/j\xb7A\xd7\xfb\x13\xbf\xcd\xb2m\x9f\x1e\xe4l\xa7x\x1d\xe3\xca/\x8d%\x90\t\x1d\x9bV\xeb{\xd8\x1d7\xa8v\xfch\xe65\xb4W\xa4PY\xac\xfbK`~N\xea\x87\x92\xd7\x11\xc4\xe9ME.\v\x97 t\x92}\xfd\xa1\xfaQX\x13\x9bMU,\x88\x8b\xcf\xb4\x92\xe4\xf5\x85/\xd9\x8b/\xcf\f\x1b\xf8\xf9\x12\xe0') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) 6.461655384s ago: executing program 3 (id=162): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e25, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.461224054s ago: executing program 3 (id=163): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pread64(r0, &(0x7f0000000800)=""/246, 0xf6, 0x6ac701f1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, 0x0) socket$netlink(0x10, 0x3, 0x7) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000900)="02d021157b3a5e56c73c7c6002d45dbcdbb919c5d94ddd54910eaf60e7dc8de48dbf790f5140aec8732c5e19cf82e16a953151c5360bbc262a67ecc9c0fdc8c9f25778e012895d60d302384ee37c02aca26390ca37e330600020e537442d17994fd56f8e998da0e546b7e701be5a2b96487b3e190ac05ef5654aeef6afc2f437167acd") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x20, 0xa, 0x0, 0x80, 0xd8, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x7ffffffffffffff}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x6, 0x1, 0x1}]}]}, 0xfc}}, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x60, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x60}}, 0x0) creat(&(0x7f00000000c0)='./file1/file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000000)=0xfffffffb, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="cb91f8016e6f3d7daff2ce430f42f90019a44b9bf61b5ca889a120c30fb4a83d94281f6698e3f45f43c4a324a30ecaff8d7cc3f95f268cbaefd87d4db424514d832b91de81d434e2506df02d5b0593e8f53c051e8febe263fe363184331ed6d9ba775b4c1a477fc07969a39fb896277129dd7305b480d48cf76087bc5445ad85f5adb78b9925104cc3e662a5fe776f3a866f82785f9c71bd73", @ANYRESHEX=r7, @ANYBLOB=',directio,\x00']) lstat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r7, 0xffffffff80000400, r9, &(0x7f0000000200)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x111) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)={[{@index_on}]}) read$FUSE(r10, &(0x7f00000029c0)={0x2020}, 0x2020) 5.597595741s ago: executing program 3 (id=166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000280)={{0x80000001, 0x7}, {0xa08, 0x4}, 0x5}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) 5.240996198s ago: executing program 1 (id=179): setuid(0xee01) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="e4000000130001000000000000000000100000000c0000000000000000000000c4002e"], 0xe4}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf119, 0x21}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000002c0)=0xf, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000002a40)={{0x12, 0x1, 0x201, 0x2c, 0x90, 0xe8, 0x40, 0x403, 0xda72, 0xd8b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x4, 0x80, 0x3, [{{0x9, 0x4, 0xa8, 0x4, 0x0, 0xf5, 0x29, 0xf1, 0xe}}]}}]}}, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x28, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x7, 0x3e, 0x0, 0x0, @str='\x13\x00\x00'}, @nested={0x10, 0x10c, 0x0, 0x1, [@nested={0xc, 0x122, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@multicast1}]}]}]}, 0x28}], 0x1}, 0x200080c0) pipe2(&(0x7f00000004c0), 0x800) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x3ff) syz_open_dev$char_usb(0xc, 0xb4, 0x9) sendfile(r1, r5, 0x0, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x345, 0x0, 0xffffffff}]}) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100002, 0xf36, 0x8, "f494bfeba3162200160000000000006d004000"}) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000001b80)={0x158, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 4.679180158s ago: executing program 1 (id=180): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200010001001a00002b0000", 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x3a, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="b16b6e000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000aa3c0400000200000002000200", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="a0000000210001000000000000000000fc02000000000000000000000000000064f8d3fe0206f4e61741e45001010200000000000000000000000a00000000000000", @ANYRES64=r3], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f000001b000/0x2000)=nil, 0x2000, 0x100000e, 0x12, r0, 0x3ed04000) 4.678597908s ago: executing program 1 (id=181): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r6, 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) utimensat(r6, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340)={{}, {r7, r8/1000+60000}}, 0x100) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$sock_int(r2, 0x1, 0x8, 0x0, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) modify_ldt$write2(0x11, &(0x7f0000000640)={0x7ec935bf, 0x0, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x101, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/137, 0x89, 0x0, 0x3e}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.572056761s ago: executing program 1 (id=182): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a0001002257b34dd5bda9a809000000"], 0x14}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6070000009332f5", "0fd33c68cf7995313c09de00fd6ded74", "62266bd8", "1e001d0000000900"}, 0x28) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close_range(0xffffffffffffffff, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x4e24, 0x57, 0xa, 0x80, 0x20, 0x1d}, {0x9, 0xfffffffffffffffa, 0xe3, 0x9, 0x0, 0x1, 0xbd3d, 0x100000000}, {0x6, 0xef3, 0x10000, 0x1}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x1, 0x3}, {{@in6=@remote, 0x4d3, 0xff}, 0x2, @in=@empty, 0x3505, 0x1, 0x1, 0x4, 0x8, 0x7fff, 0x4}}, 0xe8) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f00000001c0)) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000140)}, 0x10) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000040)=0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) r6 = syz_open_procfs(r1, &(0x7f0000000200)='net/xfrm_stat\x00') preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/130, 0x82}], 0x1, 0xb, 0xe) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x400017e) socket$nl_route(0x10, 0x3, 0x0) inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 3.968138943s ago: executing program 3 (id=185): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb78a405e0483020b9901020301090224000100000000090400"], 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000005480)={0x9b2, 0xbf1e, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x1f) quotactl_fd$Q_SYNC(r2, 0xffffffff80000102, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x8, 0x0, 0x0, 0x1, 0xe, "0062ba7d02000000000000f7ffffff00"}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x7, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "dffa62"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x0, 0xd0}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@acm={0x4, 0x24, 0x2, 0xc}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xf0}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x3c, 0x7, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x3, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0xa4, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x9, 0x3}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0x8, 0xc, 0x20, 0x9}, 0x31, &(0x7f0000000140)={0x5, 0xf, 0x31, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "e636c3ff5cec33948199576b9b548522"}, @ssp_cap={0x18, 0x10, 0xa, 0x14, 0x3, 0x80, 0x0, 0x8000, [0xc0, 0x30, 0xffc0f0]}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x459}}, {0x1b, &(0x7f0000000200)=@string={0x1b, 0x3, "e23c4f1e3be90d1a03b0892cd24543dbc01c81d44f41691fad"}}]}) 3.909110994s ago: executing program 0 (id=187): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x98af02) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000180)=0xffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) (async) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0x4, 0x300, 0x1dafa}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000fc0)={{r4}, r5, 0x10, @inherit={0x60, &(0x7f00000001c0)={0x1, 0x3, 0x2, 0x20000000, {0x0, 0x9, 0x1, 0x2}, [0xf, 0x9, 0x5e65223a]}}, @name="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"}) (async) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000000000/0x3000)=nil, 0x3000}}) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000040)=0xb, 0x8) (async) gettid() (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 3.823030335s ago: executing program 0 (id=188): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) fsopen(0x0, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r3, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001840)=""/4066, 0xfe2}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000002bc0)=""/90, 0x5a}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x55, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"}) 3.768445527s ago: executing program 0 (id=190): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl$EVIOCGABS0(r3, 0x80184520, 0x0) (async, rerun: 32) getgroups(0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff]) (rerun: 32) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000006c0)='cpuset.memory_pressure\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1, 0xf, 0x1) (async) setreuid(0x0, 0x0) read$FUSE(r6, &(0x7f0000002b40)={0x2020}, 0x2020) (async) r7 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000629bd70000e0000000e0000000c000a800800038004000180"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x41) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000005c0)=r2) r9 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c0108"], 0x1d8}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) syz_usb_disconnect(r4) (async, rerun: 64) r10 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) (rerun: 64) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) (async, rerun: 32) r11 = syz_usb_connect(0x4, 0xe8f, &(0x7f0000004b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)={0xa, &(0x7f0000000040)={0xa, 0x6, 0xb85ac179ade49728, 0x2, 0x9, 0x2, 0x40, 0x9}, 0xc7, &(0x7f00000003c0)={0x5, 0xf, 0xc7, 0x3, [@generic={0xb1, 0x10, 0x9bbac402accbf5c8, "0b8fde32ccf25c43346e1bb9caeb1183e3c4df60acc63226c31a9f87c318fd4797ddf65a2207da61359db44b26388837be6acec3d6c7ce2e6b2680a55b9733142659eab8ebbf4da26dfed0247c0ef35425c267369a3cad4c3db2e9ec6d904d68424bd1524d27e36f3d1fdb91890abe1d82c4900efefeadfbd65f664a0408a5aa1263b13b0d6e965e8102fd316da05aabd7200be289f853efbf5f390f427877149ae7477c27dc1c094c022bc01de3"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x0, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0x3, 0x400}]}, 0x8, [{0x1b, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3401}}, {0xd8, &(0x7f00000004c0)=ANY=[@ANYBLOB="d903b72a126ef499b3c3a1b66707107b047f7d17ecc6f02e8b46a627d58fe030afdcf6f55e3bc55f997a05a0418cd9b37175731d166ce03b46fa40ba5943b127876eae77dbae1e2cd73e0fa3506ee2e3ca31479bc62fbe45ae301af433b70ede9dfca596eca14633521f4ac3051b8324eb584230ab778f5c864cf6626ba5432be496c9651ced0f4e79c1212d6cfc5aa7f9c88c20a2ec94cac021c527995eb5ed2e4f9e96388833315b5f949e1f22d8f0015494edb62c47828970d57a6f6779f3242532ca707e8d17f7067ce563da40e3235bb4723d9c4d2c"]}, {0xab, &(0x7f0000000840)=ANY=[@ANYBLOB="ab035b143c797e0a15f95f2713e5abf8645b9e85704fd2c588bf6298ebc93740d1216b9db925b8e40534933af6916d9b1ac4fe5fa947697457629cfd1c1f6dcb22df593e3ae766f129222e83bb47de985692bef122e2c668795b95ee30ae6b728f25117789b7e859ecca252d0dadb587e695a2287862ed3202f0b79ebc6a8395a6fd69b80bb3c3765622a48b3dfc0e18447c5147cbcf75d8059e43458f8c9ab2f7469260b12631c2c332e5662ba759bd3fd82457aa953a02b07b903fdf482fb9ea1cb5a1ec297aa88ef021001683e57bd9de6e1715872dbf3753fd0e6e51998f24603c77918e389905a0416f604dcc3be65786e5c6926d05c37afe99257b80a5d1a4f2029cc9cc60ccdd3ec8117347a60695d4727fa3c025ad6487bb63be8a140ba819d3b0f52b5e25d3dfce0bd82c96f4923d19722084492a4cfd12c9a17e7b29703503082f86a7ca5d5b6aeeb1a0cdc8e72af8d540b074af20f10a079299491184b85ea6db9d17872c31aa91bf87748c7a19a3"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40a}}, {0x52, &(0x7f0000000680)=ANY=[@ANYBLOB="520347b02ab4bb457310413411e0f8bc6a1a489759e3b5f9b1f055d7559273124f7ccdf20c09e127a1f7a5b5f5ec6e939dcc1eae4f689e99f55cd759e53aabe2e905c6fbf622579f6aca2a643802e906ddb6"]}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x415}}]}) (rerun: 32) syz_usb_ep_write(r11, 0x3, 0x6, &(0x7f0000000800)="a9ca33dc31d1") 1.51506031s ago: executing program 1 (id=200): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000500)="1c0000001a009b8a14e500"/28, 0x1c) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be5406d04230848390102030109025200010000000009044000000e0400070003"], 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x909, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="571807"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x400) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r4 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x40, 0x0, 0x0) r5 = signalfd4(r1, &(0x7f0000000200)={[0x4]}, 0x8, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) ioctl$HIDIOCSREPORT(r7, 0x81044804, 0x0) connect$can_bcm(r5, &(0x7f0000000080), 0x10) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f00000000c0)=0x5, 0x4) 1.108286148s ago: executing program 2 (id=202): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) readlink(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000400)="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", 0x1f000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x34e7, 0x7f, 0x9, 0x5}, {0x6c, 0x2, 0x81, 0x8000000}, {0x6, 0x31, 0x40, 0x9}, {0x9, 0x2, 0x7, 0x4}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000003c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r3, 0x9, 0x5}) 1.047209109s ago: executing program 2 (id=203): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0xa4, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x7, 0x2, 0x800000000001f}, @flat=@binder={0x73622a85, 0xa, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0xfffffffe}], 0x0, 0x0, 0x0}) 1.0464495s ago: executing program 2 (id=204): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40002, 0x151) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/21, 0x15}], 0x1) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r3, &(0x7f0000000b00), 0x91) splice(r2, 0x0, r1, &(0x7f0000000140)=0x8008, 0x4, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000540)=""/238, 0xee}], 0x1, 0xfffffffd, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) listen(0xffffffffffffffff, 0x15) close_range(r4, 0xffffffffffffffff, 0x0) 964.638921ms ago: executing program 3 (id=205): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000400)={0x0, 0x1, 0x5, {0x5, 0x21, "3cc1e0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x48) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x3fe, @empty, 0x200}, 0x1c) (async, rerun: 32) listen(r3, 0x0) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902780003010000060904000000010100000a24010200000201020a24080304004000000009040100000102000009040101010102000009050109100001fc0b0725018107010809040200000102000009040201010102000008240201002647ba0724010604021009058209000410070707"], 0x0) (async, rerun: 64) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (rerun: 64) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x42) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) listen(r3, 0x80000002) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000010d40)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @global=@item_4={0x3, 0x1, 0x1, "f3c48d62"}, @global=@item_4={0x3, 0x1, 0x0, '\x00\x00\b\x00'}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) close_range(0xffffffffffffffff, r6, 0x2) 925.875772ms ago: executing program 2 (id=206): unshare(0x24060400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2401) syncfs(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103040, 0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/34, 0x22}], 0x1, 0x3, 0xa) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x1c3041, 0x196) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41) socket$inet(0x2, 0x4000000000000001, 0x0) close_range(r1, r1, 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x105443) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000180)) 699.554116ms ago: executing program 0 (id=207): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) pipe2$9p(&(0x7f0000000000), 0x4000) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x40000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0xfffffffffffffe44, 0x0, 0x0, 0xffffffffffffff3f) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000380)={{0x2, 0x4e23, @remote}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 'veth0_to_bridge\x00'}) write$P9_RLERRORu(r2, &(0x7f0000000100)={0x43, 0x7, 0xfffd, {{0x36, '\x95\xb3X\xb6*\xfd\xfb\xf3\x83afz6\x97%\x9dU\xb7&\r\xe0\xd0\xa56\xde\xc5\xad\x90}\x01v\x0e\x8f\x9a\x9e\xe8\x13\x0f\x99\xfc\x17\x14\x01\xca\x1b\xa0\xaf,\xf4\xb2\xaf\xe9\xec7'}, 0x7}}, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0xb, 0x6}) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000000)={0x7905, 0x5, [{0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0xf, 0x1}, {0xd}]}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) fcntl$getown(r6, 0x9) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000095000040"]) sendfile(r0, r0, 0x0, 0x6) rmdir(&(0x7f0000000440)='./file0\x00') rmdir(&(0x7f0000000140)='./file0\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) 612.562278ms ago: executing program 0 (id=208): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r1 = socket(0x10, 0x803, 0x0) pread64(r1, &(0x7f0000000280)=""/255, 0xff, 0x10001) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000042000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001e40)=""/241, 0xf1}, {&(0x7f0000001a40)=""/196, 0xc4}, {&(0x7f0000000940)=""/4104, 0x1008}, {&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/123, 0x7b}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0x40a}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x2800) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000040)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x7b, 0x1, 0xd19, 0x3, 0x7, 0x1ff, 0x4, 0x1ff, 0x9, 0x1, 0x2, 0xf, 0x3, 0x2, 0x29a, 0x4], 0x10000, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x1, 0x4008000) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 582.085149ms ago: executing program 0 (id=209): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x22}, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000000080), 0x400000, &(0x7f00000002c0)) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) close(r2) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200e77"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x10, 0x7, 0x6, 0x8, 0x0, 0x6}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x20, 0x40}}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0xf, 0x2}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, '_X'}, 0x0, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x5}, 0x0, &(0x7f0000000640)={0x40, 0x21, 0x1, 0xa}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, &(0x7f0000000200)=[{0x0, 0x100000be63, 0x9}], 0x1, 0x8000e5}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000100)={0x10001, 0xe7, 0x2, 0xff, 0x7, "ea71061d0000000001000200", 0x0, 0xb52}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x2) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(r2, &(0x7f0000000600)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 72.005088ms ago: executing program 1 (id=210): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/40, 0x28) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000680), 0x97) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000400000200000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000003f01"], 0x48}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) (async) bind$bt_hci(r5, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_eeprom={0xb, 0x6, 0x80000000}}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, &(0x7f0000000480)) (async) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, &(0x7f0000000480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r2, 0xffffffffffffffff, 0x0) 42.734829ms ago: executing program 2 (id=211): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000100)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) setuid(0xee01) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r1, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f0000000100)={0x40, 0xf, 0x46, "f63e12d474b343087e9eb73f3588d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000080)={0x21, 0x0, 0x1, "93"}}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/custom1\x00', 0x800, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f00000006c0)=0xd000) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (rerun: 32) syz_usb_control_io$printer(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000b80)={0x40, 0x11, 0xb4, {0xb4, 0x22, "3e9f3795560faf1c785000eb3e40f984e9abc45f328e2ebc0322c87e94c880ef156b278a82d8f2d2aa30219c0e09328af445a2b7e1289348844d2db2688238511ec12b66e57645976829ac366ba84b26787e842730e940a60fc73ca092fd173fe699c4b9c92f554c9e0227a901128bb4593c3a5600ce568dbb838cb56c515091fd71ab843e73e93c5d2f5fc98cb50094fa920858dbda54c16d3eb04b9309756a9f9cfccc86b02d0ebf2ebd90e06d3a535232"}}, &(0x7f0000000280)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "d94d7b9b743d5d1376172ee6e4d0bf9bfb3d98ba875cc147420b8a99141fccc97c99ad65a687d9091c4e0b2015ed02c314e8f16e84d52882fbf5258d0005137c899ac07b752b226eadc9b8797d363d44657994499a7ff1cab9dcaef2637ddbe0bb4c4b97477521e0702b46d81b4f1a72169c5a8eeff46a1134ef8568b8a818a2256cabdafbd62f32c932762c861c12f9d53165a09a22e8f277bd3bc6c8d30c11edb27253ccd417bda70bec81100a2860959c1d4d813540509c4776304ac6abcc200cf35e9d2734283e427a77f08ee70d9fd6f200bd22ee30b7debdaf1e970a97b7fbf80e41f7efe3683161c9fd813e3c8f3e95ac75d4"}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000380)={0x0, 0x7, 0x2, "bcc1"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x30}, &(0x7f0000000440)={0x0, 0x8, 0xfffffffffffffe2e, 0x2}, &(0x7f0000000580)={0x20, 0x0, 0x68, {0x66, "e913347a095afaa500246dcd4db9f2f41f69dbc45e45fb9714685d777f4dc72c16e00c167d093c5958ca3c1c4191ee3bb327be22080bcb3543516a9b1ede4886da6f04a5879052fa0d257c541c7865ef63fad9e8e903076a8d7ac85b97538115d82c377ddcac"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x6}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xc354955c4b7aeb58}) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x8, 0x4) (async) r8 = socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_control_io$uac1(r2, &(0x7f00000007c0)={0x14, &(0x7f0000000b40)={0x20, 0x4, 0x2b, {0x2b, 0xb, "828148ea35906977641b968a9c141f920190992ed76db22ec819680e85d26462498facc727e2d45908"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000800)={0x20, 0x8, 0x24, "edaccf716d1a7d185639a3098c8502426909ac018ef53f224969b40f1040a783bb205003"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x60}, &(0x7f00000008c0)={0x20, 0x81, 0x3, '\x00\x00\x00'}, &(0x7f00000009c0)={0x20, 0x82, 0x1, "c6"}, &(0x7f00000006c0)=ANY=[], &(0x7f0000000a40)={0x20, 0x84, 0x3, "db3072"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "b1dec6"}}) (async, rerun: 32) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000418e00000004fcff", 0x58}], 0x1) (rerun: 32) mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x4000000) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x94, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}, 0x1000}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0xa, 0x1, 0x30}, @flat=@weak_binder={0x77622a85, 0x81}, @flat=@binder={0x73622a85, 0xa}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. [ 24.887107][ T36] audit: type=1400 audit(1757235572.870:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.889191][ T281] cgroup: Unknown subsys name 'net' [ 24.909947][ T36] audit: type=1400 audit(1757235572.870:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.937260][ T36] audit: type=1400 audit(1757235572.900:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.937596][ T281] cgroup: Unknown subsys name 'devices' [ 25.120895][ T281] cgroup: Unknown subsys name 'hugetlb' [ 25.126515][ T281] cgroup: Unknown subsys name 'rlimit' [ 25.263714][ T36] audit: type=1400 audit(1757235573.250:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.287010][ T36] audit: type=1400 audit(1757235573.250:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.311764][ T36] audit: type=1400 audit(1757235573.250:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.332092][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.343667][ T36] audit: type=1400 audit(1757235573.330:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.369099][ T36] audit: type=1400 audit(1757235573.330:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.387116][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.395010][ T36] audit: type=1400 audit(1757235573.370:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.429025][ T36] audit: type=1400 audit(1757235573.370:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.580059][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.587211][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.608674][ T288] bridge_slave_0: entered allmulticast mode [ 26.615137][ T288] bridge_slave_0: entered promiscuous mode [ 26.626162][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.633262][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.640383][ T288] bridge_slave_1: entered allmulticast mode [ 26.646634][ T288] bridge_slave_1: entered promiscuous mode [ 26.797424][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.804649][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.811810][ T292] bridge_slave_0: entered allmulticast mode [ 26.818045][ T292] bridge_slave_0: entered promiscuous mode [ 26.824614][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.831769][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.838860][ T292] bridge_slave_1: entered allmulticast mode [ 26.845147][ T292] bridge_slave_1: entered promiscuous mode [ 26.851271][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.858314][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.865421][ T293] bridge_slave_0: entered allmulticast mode [ 26.871695][ T293] bridge_slave_0: entered promiscuous mode [ 26.889595][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.896654][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.903769][ T293] bridge_slave_1: entered allmulticast mode [ 26.910098][ T293] bridge_slave_1: entered promiscuous mode [ 26.916133][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.923224][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.930314][ T294] bridge_slave_0: entered allmulticast mode [ 26.936625][ T294] bridge_slave_0: entered promiscuous mode [ 26.950574][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.957719][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.964832][ T294] bridge_slave_1: entered allmulticast mode [ 26.971136][ T294] bridge_slave_1: entered promiscuous mode [ 27.003099][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.010168][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.017478][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.024539][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.163423][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.170504][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.177790][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.184841][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.193196][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.200270][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.207558][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.214612][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.229190][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.236468][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.244090][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.251965][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.259164][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.266344][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.299109][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.306182][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.321184][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.328316][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.362099][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.369178][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.377067][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.384136][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.392296][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.399390][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.406916][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.414015][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.444456][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.451545][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.473534][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.480614][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.497419][ T294] veth0_vlan: entered promiscuous mode [ 27.505673][ T288] veth0_vlan: entered promiscuous mode [ 27.518342][ T293] veth0_vlan: entered promiscuous mode [ 27.541728][ T294] veth1_macvtap: entered promiscuous mode [ 27.553612][ T288] veth1_macvtap: entered promiscuous mode [ 27.563022][ T293] veth1_macvtap: entered promiscuous mode [ 27.608783][ T292] veth0_vlan: entered promiscuous mode [ 27.617261][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.652406][ T292] veth1_macvtap: entered promiscuous mode [ 27.669002][ T334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.864024][ T356] netlink: 'syz.0.9': attribute type 32 has an invalid length. [ 27.925438][ T363] batadv_slave_1: entered promiscuous mode [ 28.009691][ T363] batadv_slave_1: left promiscuous mode [ 28.107379][ T367] rust_binder: Failed to allocate buffer. len:192, is_oneway:false [ 28.107421][ T367] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 28.116024][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x6 [ 28.132235][ T367] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 28.132710][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x7 [ 28.150737][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.158255][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.166927][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.174693][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.182385][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.190006][ T329] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.197677][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.205737][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.213779][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.221485][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.229093][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.236530][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.246291][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.254063][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.261790][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.269500][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.277050][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.285109][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.292925][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.300602][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.308020][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.315855][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.324475][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.332082][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.339853][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.347280][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.354974][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.362424][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 28.367970][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.375726][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.383489][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.391113][ T329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.403575][ T329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.412575][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.420275][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.427845][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.435476][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.443179][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.450684][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.458633][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.466435][ T329] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.475572][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.488763][ T329] usb 2-1: Product: syz [ 28.493010][ T329] usb 2-1: Manufacturer: syz [ 28.497627][ T329] usb 2-1: SerialNumber: syz [ 28.502378][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.509938][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.517353][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.525342][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.537011][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.544473][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.552068][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.562717][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.570203][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.577723][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.585410][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.592880][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.600636][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.609439][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.617213][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.628300][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.635903][ T375] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 28.647922][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.655584][ T375] rust_binder: 13: no such ref 1 [ 28.660803][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.668237][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.676802][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.691883][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.699516][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.707004][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.714958][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.732641][ T377] ======================================================= [ 28.732641][ T377] WARNING: The mand mount option has been deprecated and [ 28.732641][ T377] and is ignored by this kernel. Remove the mand [ 28.732641][ T377] option from the mount to silence this warning. [ 28.732641][ T377] ======================================================= [ 28.768099][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.777287][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.789683][ T329] usb 2-1: 0:2 : does not exist [ 28.794752][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.805713][ T377] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 28.815379][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.822913][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.833732][ T329] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 28.841273][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.854475][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.864376][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.872913][ T329] usb 2-1: USB disconnect, device number 2 [ 28.892413][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.900048][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.900525][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.907467][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.932211][ T379] rust_binder: Error while translating object. [ 28.932247][ T379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 28.940050][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.958860][ T379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:15 [ 28.963233][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.982242][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.991232][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 28.998808][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 29.006218][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 29.015255][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 29.028818][ T9] hid-generic 0003:0008:000F.0001: unknown main item tag 0x0 [ 29.045307][ T9] hid-generic 0003:0008:000F.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 29.059423][ T386] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 29.059449][ T386] rust_binder: Error while translating object. [ 29.069070][ T386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.075926][ T386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 29.093872][ T9] rust_binder: 0: removing orphan mapping 0:96 [ 29.116291][ T385] fido_id[385]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 29.199422][ T394] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 29.213963][ T389] syzkaller0: entered promiscuous mode [ 29.219700][ T389] syzkaller0: entered allmulticast mode [ 29.226407][ T394] rust_binder: Write failure EINVAL in pid:24 [ 29.320133][ T401] rust_binder: Write failure EFAULT in pid:7 [ 29.464846][ T411] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 29.484100][ T411] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 29.484936][ T413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 29.495723][ T411] rust_binder: Write failure EINVAL in pid:22 [ 29.534860][ T415] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.567957][ T415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 29.603302][ T417] syzkaller0: entered promiscuous mode [ 29.618140][ T417] syzkaller0: entered allmulticast mode [ 29.701221][ T438] pim6reg1: entered promiscuous mode [ 29.706584][ T438] pim6reg1: entered allmulticast mode [ 29.834906][ T443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:48 [ 29.926439][ T36] kauditd_printk_skb: 102 callbacks suppressed [ 29.926482][ T36] audit: type=1400 audit(1757235833.908:176): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.968162][ T458] rust_binder: validate_parent_fixup: new_min_offset=36028797018963986, sg_entry.length=238 [ 29.968181][ T458] rust_binder: Error while translating object. [ 29.978405][ T458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.984786][ T458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 30.007041][ T36] audit: type=1400 audit(1757235833.988:177): avc: denied { create } for pid=459 comm="syz.3.42" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.037698][ T36] audit: type=1400 audit(1757235833.988:178): avc: denied { map } for pid=459 comm="syz.3.42" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.061849][ T36] audit: type=1400 audit(1757235833.988:179): avc: denied { read write } for pid=459 comm="syz.3.42" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.086389][ T36] audit: type=1400 audit(1757235834.048:180): avc: denied { bind } for pid=459 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.105623][ T36] audit: type=1400 audit(1757235834.048:181): avc: denied { listen } for pid=459 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.124929][ T36] audit: type=1400 audit(1757235834.078:182): avc: denied { connect } for pid=459 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.144304][ T36] audit: type=1400 audit(1757235834.078:183): avc: denied { write } for pid=459 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.163802][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 30.195697][ T36] audit: type=1400 audit(1757235834.178:184): avc: denied { bind } for pid=459 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.329735][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.339925][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.349565][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 30.358690][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 30.366695][ T9] usb 1-1: SerialNumber: syz [ 30.375340][ T9] usb 1-1: 0:2 : does not exist [ 30.538644][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.547819][ T36] audit: type=1400 audit(1757235834.528:185): avc: denied { getopt } for pid=466 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.578939][ T9] usb 1-1: USB disconnect, device number 2 [ 30.585896][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.690201][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.701210][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.714245][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.727916][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.737033][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.746262][ T45] usb 4-1: config 0 descriptor?? [ 30.798666][ T73] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 30.949678][ T73] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.960929][ T73] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.968647][ T329] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.971039][ T73] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 30.987448][ T73] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.996248][ T73] usb 2-1: config 0 descriptor?? [ 31.100544][ T12] tipc: Subscription rejected, illegal request [ 31.111256][ T473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 31.128624][ T329] usb 3-1: Using ep0 maxpacket: 8 [ 31.135184][ T329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.143630][ T329] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 31.154100][ T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.163735][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.166779][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 31.174059][ T329] usb 3-1: Product: syz [ 31.181574][ T45] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 31.183493][ T329] usb 3-1: Manufacturer: syz [ 31.193327][ T45] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 31.206207][ T329] usb 3-1: SerialNumber: syz [ 31.506348][ T329] usb 3-1: USB disconnect, device number 2 [ 31.532575][ T490] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 241) [ 31.532601][ T490] rust_binder: Error while translating object. [ 31.543317][ T490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.549614][ T490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 31.578003][ T493] rust_binder: Failed to vm_insert_page(35184372101120): vma_addr:35184372097024 i:1 err:EFAULT [ 31.587330][ T493] rust_binder: Error in use_page_slow: EFAULT [ 31.597839][ T493] rust_binder: use_range failure EFAULT [ 31.604149][ T493] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 31.609804][ T493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.617942][ T493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:59 [ 31.629549][ T73] usbhid 2-1:0.0: can't add hid device: -71 [ 31.648393][ T73] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 31.657433][ T73] usb 2-1: USB disconnect, device number 3 [ 31.694249][ T505] 9pnet_fd: Insufficient options for proto=fd [ 31.970463][ T470] usb 4-1: USB disconnect, device number 2 [ 32.191182][ T526] rust_binder: Failed copying remainder into alloc: EFAULT [ 32.191559][ T526] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 32.200011][ T526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.208359][ T526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:33 [ 32.318625][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.478617][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 32.484981][ T45] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 32.496424][ T45] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 32.505739][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.528675][ T470] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.695670][ T470] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 32.696829][ T553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.68'. [ 32.705121][ T470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.724585][ T470] usb 4-1: Product: syz [ 32.729186][ T470] usb 4-1: Manufacturer: syz [ 32.734078][ T470] usb 4-1: SerialNumber: syz [ 32.739851][ T470] usb 4-1: config 0 descriptor?? [ 32.810588][ T45] usb 3-1: string descriptor 0 read error: -71 [ 32.817170][ T45] hub 3-1:32.0: USB hub found [ 32.823132][ T45] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 32.858890][ T45] usb 3-1: USB disconnect, device number 3 [ 33.038843][ T468] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 33.189633][ T468] usb 1-1: config 16 has an invalid interface number: 19 but max is 0 [ 33.198095][ T468] usb 1-1: config 16 has no interface number 0 [ 33.205771][ T468] usb 1-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 33.215075][ T468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.223142][ T468] usb 1-1: Product: syz [ 33.227325][ T468] usb 1-1: Manufacturer: syz [ 33.231966][ T468] usb 1-1: SerialNumber: syz [ 33.329403][ T562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 33.484607][ T468] usb 1-1: USB disconnect, device number 3 [ 33.491473][ T559] udevd[559]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.552171][ T540] tipc: Started in network mode [ 33.557111][ T540] tipc: Node identity ce5f203946db, cluster identity 4711 [ 33.566680][ T540] tipc: Enabled bearer , priority 0 [ 33.587567][ T540] syzkaller0: entered promiscuous mode [ 33.593183][ T540] syzkaller0: entered allmulticast mode [ 33.599253][ T540] tipc: Resetting bearer [ 33.640125][ T540] tipc: Resetting bearer [ 33.653535][ T540] tipc: Disabling bearer [ 33.700644][ T470] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 33.710634][ T470] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 33.721011][ T470] asix 4-1:0.0: probe with driver asix failed with error -71 [ 33.729594][ T470] usb 4-1: USB disconnect, device number 3 [ 33.996762][ T569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.411956][ T575] capability: warning: `syz.2.75' uses deprecated v2 capabilities in a way that may be insecure [ 34.448621][ T470] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.598628][ T470] usb 4-1: Using ep0 maxpacket: 32 [ 34.604966][ T470] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.616442][ T470] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 34.625541][ T470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.633586][ T470] usb 4-1: Product: syz [ 34.637765][ T470] usb 4-1: Manufacturer: syz [ 34.642380][ T470] usb 4-1: SerialNumber: syz [ 34.647649][ T470] usb 4-1: config 0 descriptor?? [ 34.653484][ T470] plusb 4-1:0.0: probe with driver plusb failed with error -22 [ 34.856253][ T573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.867641][ T573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.877207][ T329] rust_binder: 583: removing orphan mapping 0:96 [ 34.892089][ T589] rust_binder: Write failure EINVAL in pid:106 [ 34.983581][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 34.983600][ T36] audit: type=1400 audit(1757235838.968:218): avc: denied { map } for pid=593 comm="syz.0.80" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.347179][ T602] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 35.347946][ T36] audit: type=1400 audit(1757235839.328:219): avc: denied { getopt } for pid=600 comm="syz.2.82" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.376028][ T36] audit: type=1400 audit(1757235839.328:220): avc: denied { create } for pid=600 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.493582][ T605] raw_sendmsg: syz.1.83 forgot to set AF_INET. Fix it! [ 36.141946][ T608] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.180420][ T36] audit: type=1400 audit(1757235840.168:221): avc: denied { transfer } for pid=614 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 36.181139][ T615] rust_binder: Error while translating object. [ 36.199648][ T615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 36.205907][ T615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:81 [ 36.227416][ T36] audit: type=1400 audit(1757235840.208:222): avc: denied { mounton } for pid=619 comm="syz.2.87" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.227432][ T621] binder: Bad value for 'stats' [ 36.264112][ T36] audit: type=1400 audit(1757235840.238:223): avc: denied { lock } for pid=622 comm="syz.2.88" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.290762][ T36] audit: type=1400 audit(1757235840.248:224): avc: denied { lock } for pid=622 comm="syz.2.88" path="socket:[5861]" dev="sockfs" ino=5861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.290836][ T625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=625 comm=syz.2.89 [ 36.326335][ T36] audit: type=1400 audit(1757235840.288:225): avc: denied { append } for pid=627 comm="syz.1.90" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.329049][ T625] netlink: 'syz.2.89': attribute type 4 has an invalid length. [ 36.358981][ T630] rust_binder: Write failure EFAULT in pid:34 [ 36.371209][ T36] audit: type=1400 audit(1757235840.358:226): avc: denied { block_suspend } for pid=631 comm="syz.2.92" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.406031][ T638] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 36.416977][ T638] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.417769][ T638] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 36.678608][ T329] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.838601][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 36.844862][ T329] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 36.853144][ T329] usb 2-1: config 0 has no interface number 0 [ 36.860718][ T329] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 36.869831][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.877846][ T329] usb 2-1: Product: syz [ 36.882050][ T329] usb 2-1: Manufacturer: syz [ 36.886657][ T329] usb 2-1: SerialNumber: syz [ 36.891980][ T329] usb 2-1: config 0 descriptor?? [ 37.158631][ T329] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 37.165110][ T329] usb 2-1: No valid video chain found. [ 37.171430][ T329] usb 2-1: USB disconnect, device number 4 [ 37.226534][ T9] usb 4-1: USB disconnect, device number 4 [ 37.239445][ T36] audit: type=1400 audit(1757235841.228:227): avc: denied { write } for pid=647 comm="syz.3.96" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.295155][ T651] IPv6: NLM_F_CREATE should be specified when creating new route [ 37.344920][ T655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=655 comm=syz.3.98 [ 37.806595][ T674] overlay: filesystem on ./file1 not supported as upperdir [ 37.986413][ T676] netlink: 'syz.0.106': attribute type 4 has an invalid length. [ 38.047595][ T689] rust_binder: Write failure EFAULT in pid:127 [ 38.149711][ T699] 2N: renamed from vcan0 (while UP) [ 38.189919][ T703] Zero length message leads to an empty skb [ 38.260307][ T711] rust_binder: 114: no such ref 3 [ 38.265910][ T711] rust_binder: Write failure EINVAL in pid:114 [ 38.303134][ T720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.328662][ T723] cgroup: release_agent respecified [ 38.329714][ T721] rust_binder: Error while translating object. [ 38.335491][ T724] rust_binder: Error while translating object. [ 38.340511][ T721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 38.347194][ T724] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 38.353132][ T721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:59 [ 38.364977][ T724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:59 [ 38.414001][ T728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 38.449288][ T733] mmap: syz.3.125 (733): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 38.528632][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.605625][ T45] hid (null): unknown global tag 0xc [ 38.612003][ T45] hid-generic 0008:0009:0000.0003: unknown global tag 0xc [ 38.619399][ T45] hid-generic 0008:0009:0000.0003: item 0 0 1 12 parsing failed [ 38.627269][ T45] hid-generic 0008:0009:0000.0003: probe with driver hid-generic failed with error -22 [ 38.658611][ T9] usb 3-1: device descriptor read/64, error -71 [ 38.898963][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.138607][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.268610][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.298613][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.448630][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 39.454908][ T45] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.465978][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 39.472657][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 39.481739][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.493884][ T45] usb 2-1: config 0 descriptor?? [ 39.507567][ T765] rust_binder: Write failure EFAULT in pid:77 [ 39.508735][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.545011][ T770] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.545472][ T770] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 181) [ 39.552170][ T770] rust_binder: Error while translating object. [ 39.562827][ T770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.569069][ T770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 39.580662][ T770] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.633102][ T9] usb usb3-port1: attempt power cycle [ 39.901965][ T45] logitech 0003:046D:C295.0004: item fetching failed at offset 0/1 [ 39.910095][ T45] logitech 0003:046D:C295.0004: parse failed [ 39.916146][ T45] logitech 0003:046D:C295.0004: probe with driver logitech failed with error -22 [ 39.938605][ T470] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.988641][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.009651][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.098617][ T470] usb 4-1: Using ep0 maxpacket: 8 [ 40.105468][ T470] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 40.115669][ T470] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.124588][ T470] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 203, using maximum allowed: 30 [ 40.135465][ T470] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 40.149680][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.150053][ T470] usb 4-1: New USB device found, idVendor=6def, idProduct=b2a7, bcdDevice= 0.c2 [ 40.165056][ T470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.173089][ T470] usb 4-1: Product: syz [ 40.177262][ T470] usb 4-1: Manufacturer: syz [ 40.181887][ T470] usb 4-1: SerialNumber: syz [ 40.388634][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.395134][ T774] process 'syz.3.139' launched './file1' with NULL argv: empty string added [ 40.409679][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.445819][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 40.445838][ T36] audit: type=1400 audit(1757235844.428:256): avc: denied { bind } for pid=773 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.446727][ T775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.472603][ T776] rust_binder: Write failure EFAULT in pid:57 [ 40.539685][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.588896][ T470] usb 4-1: USB disconnect, device number 5 [ 40.659284][ T9] usb usb3-port1: unable to enumerate USB device [ 41.394242][ T784] binder: Bad value for 'stats' [ 41.415232][ T788] 9pnet: p9_errstr2errno: server reported unknown error [ 41.466158][ T36] audit: type=1400 audit(1757235845.448:257): avc: denied { append } for pid=789 comm="syz.2.144" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.523842][ T793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.972665][ T810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 41.979307][ T810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:160 [ 42.005985][ T36] audit: type=1400 audit(1757235845.988:258): avc: denied { write } for pid=811 comm="syz.0.152" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 42.006076][ T813] random: crng reseeded on system resumption [ 42.015522][ T36] audit: type=1400 audit(1757235845.988:259): avc: denied { open } for pid=811 comm="syz.0.152" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 42.060824][ T813] Restarting kernel threads ... done. [ 42.077499][ T10] usb 2-1: USB disconnect, device number 5 [ 42.089248][ T36] audit: type=1400 audit(1757235846.048:260): avc: denied { ioctl } for pid=811 comm="syz.0.152" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 42.126815][ T817] 2N: renamed from vcan0 (while UP) [ 42.133844][ T36] audit: type=1400 audit(1757235846.118:261): avc: denied { read } for pid=816 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.225616][ T36] audit: type=1400 audit(1757235846.208:262): avc: denied { connect } for pid=820 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.230141][ T821] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 42.245508][ T36] audit: type=1400 audit(1757235846.208:263): avc: denied { ioctl } for pid=820 comm="syz.1.155" path="socket:[6787]" dev="sockfs" ino=6787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.276564][ T36] audit: type=1400 audit(1757235846.208:264): avc: denied { write } for pid=820 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.310295][ T823] 9pnet_fd: Insufficient options for proto=fd [ 42.368605][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.426840][ T36] audit: type=1400 audit(1757235846.408:265): avc: denied { write } for pid=826 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.529665][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.539900][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 42.548941][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 42.564334][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.573464][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.581585][ T9] usb 1-1: Product: syz [ 42.585779][ T9] usb 1-1: Manufacturer: syz [ 42.590517][ T9] usb 1-1: SerialNumber: syz [ 42.606041][ T9] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 42.613103][ T9] cdc_ncm 1-1:1.0: bind() failure [ 42.617979][ T848] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 42.626779][ T848] overlayfs: missing 'lowerdir' [ 42.678621][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 42.806712][ T470] usb 1-1: USB disconnect, device number 4 [ 42.830026][ T45] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 42.838166][ T45] usb 2-1: config 0 has no interface number 0 [ 42.845648][ T45] usb 2-1: New USB device found, idVendor=0499, idProduct=1058, bcdDevice= c.57 [ 42.854830][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.863970][ T45] usb 2-1: config 0 descriptor?? [ 43.071158][ T45] usb 2-1: string descriptor 0 read error: -71 [ 43.080354][ T45] snd-usb-audio 2-1:0.65: probe with driver snd-usb-audio failed with error -2 [ 43.083410][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.090216][ T45] usb 2-1: USB disconnect, device number 6 [ 43.323620][ T850] netlink: 'syz.2.165': attribute type 1 has an invalid length. [ 43.332047][ T850] rust_binder: Error while translating object. [ 43.332083][ T850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.338465][ T850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 43.447091][ T864] tmpfs: Cannot retroactively limit inodes [ 43.514484][ T870] rust_binder: Error while translating object. [ 43.514529][ T870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.520939][ T870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 43.542023][ T875] rust_binder: Write failure EFAULT in pid:188 [ 43.571689][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.572100][ T877] rust_binder: Error while translating object. [ 43.578738][ T877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 43.585113][ T877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 43.609439][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.627349][ T73] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.643005][ T884] netlink: 32 bytes leftover after parsing attributes in process `syz.1.178'. [ 43.666610][ T882] rust_binder: Write failure EFAULT in pid:193 [ 43.778617][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 43.791243][ T73] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 43.800448][ T45] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 43.808538][ T45] usb 4-1: config 0 has no interface number 0 [ 43.808594][ T73] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.822747][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.834014][ T45] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.844060][ T73] usb 3-1: config 0 descriptor?? [ 43.849118][ T45] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 43.858265][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.867894][ T45] usb 4-1: config 0 descriptor?? [ 43.898619][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.049641][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 44.057973][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 44.068444][ T10] usb 1-1: config 220 has no interface number 2 [ 44.074768][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 44.088071][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 44.094922][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 44.101903][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 44.110200][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 44.119292][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.127290][ T10] usb 1-1: Product: syz [ 44.131509][ T10] usb 1-1: Manufacturer: syz [ 44.136613][ T10] usb 1-1: SerialNumber: syz [ 44.261060][ T891] veth1: entered allmulticast mode [ 44.267851][ T890] veth1: left allmulticast mode [ 44.311246][ T894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 44.347823][ T10] usb 1-1: selecting invalid altsetting 0 [ 44.364993][ T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 44.371393][ T10] usb 1-1: No valid video chain found. [ 44.379601][ T10] usb 1-1: USB disconnect, device number 5 [ 44.477883][ T853] rust_binder: Write failure EFAULT in pid:99 [ 44.479691][ T45] usbhid 4-1:0.1: can't add hid device: -71 [ 44.492028][ T45] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 44.500839][ T45] usb 4-1: USB disconnect, device number 6 [ 44.674901][ T73] usb 3-1: Cannot set autoneg [ 44.679693][ T73] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 44.691936][ T73] usb 3-1: USB disconnect, device number 8 [ 44.708616][ T470] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 44.838653][ T470] usb 2-1: device descriptor read/64, error -71 [ 44.970339][ T905] fuse: Bad value for 'fd' [ 45.031873][ T910] tipc: Started in network mode [ 45.036930][ T910] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 45.046177][ T910] tipc: Enabled bearer , priority 10 [ 45.053081][ T910] support for the xor transformation has been removed. [ 45.074886][ T914] rust_binder: Failed copying into alloc: EFAULT [ 45.074903][ T914] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 45.078643][ T470] usb 2-1: device descriptor read/64, error -71 [ 45.081579][ T914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 45.095904][ T914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:205 [ 45.167271][ T916] rust_binder: 916 RLIMIT_NICE not set [ 45.184698][ T73] rust_binder: 915: removing orphan mapping 0:1168 [ 45.201998][ T918] ./cgroup: Can't lookup blockdev [ 45.225392][ T925] netlink: 'syz.2.191': attribute type 63 has an invalid length. [ 45.228637][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.233479][ T925] netlink: 5 bytes leftover after parsing attributes in process `syz.2.191'. [ 45.328656][ T470] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.385104][ T941] rust_binder: Write failure EFAULT in pid:181 [ 45.408598][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 45.421298][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.429679][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.438392][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.447402][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.457141][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.468363][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.481665][ T470] usb 2-1: device descriptor read/64, error -71 [ 45.481701][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.497008][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.511028][ T10] usb 4-1: config 0 descriptor?? [ 45.513665][ T951] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 45.523572][ T951] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967295 [ 45.531667][ T952] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 45.538914][ T952] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967295 [ 45.547025][ T951] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 45.554323][ T952] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 45.718623][ T470] usb 2-1: device descriptor read/64, error -71 [ 45.725704][ T908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.734259][ T908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.745777][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.758375][ T10] usb 4-1: USB disconnect, device number 7 [ 45.765147][ T10] usblp0: removed [ 45.818599][ T73] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 45.828762][ T470] usb usb2-port1: attempt power cycle [ 45.978590][ T73] usb 3-1: Using ep0 maxpacket: 32 [ 45.984839][ T73] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.993245][ T73] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 46.002157][ T73] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 46.011483][ T73] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 46.021155][ T73] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 46.030818][ T73] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 46.043822][ T73] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 46.053199][ T73] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.062029][ T73] usb 3-1: config 0 descriptor?? [ 46.158630][ T329] tipc: Node number set to 4269801494 [ 46.168626][ T470] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 46.178600][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.189580][ T470] usb 2-1: device descriptor read/8, error -71 [ 46.269869][ T73] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 46.282213][ T73] usb 3-1: USB disconnect, device number 9 [ 46.288875][ T73] usblp0: removed [ 46.319754][ T470] usb 2-1: device descriptor read/8, error -71 [ 46.328711][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 46.334932][ T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 46.343337][ T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 46.352169][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 46.361152][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 46.370933][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 46.380633][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 46.393618][ T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 46.402713][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.411518][ T45] usb 4-1: config 0 descriptor?? [ 46.558624][ T470] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 46.579902][ T470] usb 2-1: device descriptor read/8, error -71 [ 46.708638][ T73] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.717179][ T470] usb 2-1: device descriptor read/8, error -71 [ 46.820152][ T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 46.832516][ T470] usb usb2-port1: unable to enumerate USB device [ 46.839054][ T45] usb 4-1: USB disconnect, device number 8 [ 46.845865][ T45] usblp0: removed [ 46.858610][ T73] usb 3-1: Using ep0 maxpacket: 32 [ 46.864893][ T73] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 46.873275][ T73] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 46.881910][ T73] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 46.890971][ T73] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 46.900790][ T73] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 46.910457][ T73] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 46.923448][ T73] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 46.932520][ T73] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.941308][ T73] usb 3-1: config 0 descriptor?? [ 47.148626][ T45] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 47.278638][ T45] usb 4-1: device descriptor read/64, error -71 [ 47.349324][ T73] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 47.361693][ T73] usb 3-1: USB disconnect, device number 10 [ 47.368506][ T73] usblp0: removed [ 47.518847][ T45] usb 4-1: device descriptor read/64, error -71 [ 47.758604][ T45] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 47.808622][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.863273][ T961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:196 [ 47.890916][ T45] usb 4-1: device descriptor read/64, error -71 [ 47.892617][ T969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 47.919414][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 47.919440][ T36] audit: type=1400 audit(1757235851.908:286): avc: denied { write } for pid=970 comm="syz.2.204" name="file0" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.969646][ T31] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 47.977828][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.988016][ T31] usb 2-1: config 0 has no interface number 0 [ 47.995481][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 48.018451][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.026909][ T31] usb 2-1: Product: syz [ 48.036443][ T31] usb 2-1: Manufacturer: syz [ 48.041136][ T31] usb 2-1: SerialNumber: syz [ 48.046406][ T31] usb 2-1: config 0 descriptor?? [ 48.235404][ T36] audit: type=1400 audit(1757235852.218:287): avc: denied { create } for pid=978 comm="syz.0.207" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.256019][ T36] audit: type=1400 audit(1757235852.218:288): avc: denied { link } for pid=978 comm="syz.0.207" name="#5" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.278083][ T36] audit: type=1400 audit(1757235852.218:289): avc: denied { rename } for pid=978 comm="syz.0.207" name="#6" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 48.300827][ T959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.309544][ T959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.320938][ T959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.329501][ T959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.341002][ T31] usb 2-1: USB disconnect, device number 11 [ 48.368602][ T45] usb 4-1: device descriptor read/64, error -71 [ 48.478722][ T45] usb usb4-port1: attempt power cycle [ 48.648613][ T329] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 48.799694][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.810861][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.820632][ T329] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 48.828619][ T45] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 48.829739][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.846198][ T329] usb 1-1: config 0 descriptor?? [ 48.862148][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.863773][ T36] audit: type=1400 audit(1757235852.848:290): avc: denied { setopt } for pid=984 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.873507][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.894882][ T36] audit: type=1400 audit(1757235852.878:291): avc: denied { bind } for pid=984 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.912906][ T45] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 48.938826][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.957526][ T45] usb 4-1: config 0 descriptor?? [ 48.959874][ T36] audit: type=1400 audit(1757235852.938:292): avc: denied { getopt } for pid=987 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.982455][ T985] ------------[ cut here ]------------ [ 48.988050][ T985] WARNING: CPU: 0 PID: 985 at arch/x86/kvm/x86.c:11569 kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 48.998299][ T985] Modules linked in: [ 49.002264][ T985] CPU: 0 UID: 0 PID: 985 Comm: syz.1.210 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 49.013692][ T985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.023816][ T985] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x12af/0x1aa0 [ 49.030298][ T985] Code: 7e 3b e8 14 0c 6a 00 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 4c 8b 64 24 40 48 8b 5c 24 28 e9 26 fd ff ff e8 f1 0b 6a 00 <0f> 0b e9 e4 fc ff ff e8 e5 0b 6a 00 0f 0b e9 0e fd ff ff e8 d9 0b [ 49.050074][ T985] RSP: 0018:ffffc9000efff9c0 EFLAGS: 00010293 [ 49.056202][ T985] RAX: ffffffff811bd81f RBX: ffff88811a710000 RCX: ffff888118f50000 [ 49.064263][ T985] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 49.072277][ T985] RBP: ffffc9000efffc70 R08: ffff888118f50007 R09: 1ffff110231ea000 [ 49.080300][ T985] R10: dffffc0000000000 R11: ffffed10231ea001 R12: ffff88810d78d000 [ 49.088293][ T985] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88811a710078 [ 49.096370][ T985] FS: 00007f9a0ad686c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 49.105381][ T985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.112009][ T985] CR2: 0000000000000000 CR3: 0000000106ea8000 CR4: 00000000003526b0 [ 49.120161][ T985] Call Trace: [ 49.123483][ T985] [ 49.126883][ T985] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 49.132915][ T985] ? try_to_wake_up+0xe40/0x1b00 [ 49.137877][ T985] ? plist_del+0x3e3/0x400 [ 49.142358][ T985] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 49.147691][ T985] ? ioctl_has_perm+0x1aa/0x4d0 [ 49.152596][ T985] ? __cfi_autoremove_wake_function+0x10/0x10 [ 49.158709][ T985] ? ioctl_has_perm+0x3e0/0x4d0 [ 49.163582][ T985] ? has_cap_mac_admin+0xd0/0xd0 [ 49.168601][ T985] ? synchronize_rcu+0x77/0x2e0 [ 49.173482][ T985] ? __cfi_synchronize_rcu+0x10/0x10 [ 49.178820][ T985] ? __kasan_check_write+0x18/0x20 [ 49.183970][ T985] kvm_vcpu_ioctl+0x96f/0xee0 [ 49.188703][ T985] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 49.193934][ T985] ? do_futex+0x356/0x500 [ 49.198281][ T985] ? __cfi_do_futex+0x10/0x10 [ 49.203162][ T985] ? __fget_files+0x2c5/0x340 [ 49.207871][ T985] ? bpf_lsm_file_ioctl+0xd/0x20 [ 49.212921][ T985] ? security_file_ioctl+0x34/0xd0 [ 49.218080][ T985] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 49.223342][ T985] __se_sys_ioctl+0x132/0x1b0 [ 49.228049][ T985] __x64_sys_ioctl+0x7f/0xa0 [ 49.232686][ T985] x64_sys_call+0x1878/0x2ee0 [ 49.237398][ T985] do_syscall_64+0x58/0xf0 [ 49.241861][ T985] ? clear_bhb_loop+0x50/0xa0 [ 49.246572][ T985] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.252501][ T985] RIP: 0033:0x7f9a09f8ebe9 [ 49.257034][ T985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.277133][ T985] RSP: 002b:00007f9a0ad68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.285598][ T985] RAX: ffffffffffffffda RBX: 00007f9a0a1c5fa0 RCX: 00007f9a09f8ebe9 [ 49.293623][ T985] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000d [ 49.301644][ T985] RBP: 00007f9a0a011e19 R08: 0000000000000000 R09: 0000000000000000 [ 49.309662][ T985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.317659][ T985] R13: 00007f9a0a1c6038 R14: 00007f9a0a1c5fa0 R15: 00007ffc5e772698 [ 49.325671][ T985] [ 49.328749][ T985] ---[ end trace 0000000000000000 ]--- [ 49.336164][ T329] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 49.343024][ T329] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 49.349901][ T329] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 49.357201][ T329] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 49.358891][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 49.364056][ T329] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 49.378482][ T329] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 49.383389][ T45] uclogic 0003:28BD:0042.0006: interface is invalid, ignoring [ 49.385503][ T329] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 49.402380][ T329] isku 0003:1E7D:319C.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 49.538613][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 49.544969][ T31] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 49.553243][ T31] usb 3-1: config 0 has no interface number 0 [ 49.559514][ T31] usb 3-1: config 0 interface 184 has no altsetting 0 [ 49.567748][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 49.576976][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.580489][ T973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.585097][ T31] usb 3-1: Product: syz [ 49.594391][ T973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.597808][ T31] usb 3-1: Manufacturer: syz [ 49.611388][ T31] usb 3-1: SerialNumber: syz [ 49.614209][ T329] usb 4-1: USB disconnect, device number 11 [ 49.616877][ T31] usb 3-1: config 0 descriptor?? [ 49.629494][ T31] smsc75xx v1.0.0 [ 49.749485][ T983] tmpfs: Too few inodes for current use [ 49.755908][ T9] usb 1-1: USB disconnect, device number 6 [ 49.840436][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 49.852497][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 49.862344][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 49.872687][ T31] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 49.882390][ T31] usb 3-1: USB disconnect, device number 11