last executing test programs: 8m28.765557156s ago: executing program 32 (id=211): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="001d81c57c2030093f254aea526e732388a8", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 7m56.85229462s ago: executing program 0 (id=576): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000081, 0x0, 0x4}]}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x75}) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 7m56.813935431s ago: executing program 0 (id=577): mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x5, &(0x7f0000000100)={0x0, 0x2, 0x93, 0x7fff, r2}) 7m56.794669931s ago: executing program 0 (id=578): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$notify(r2, 0x402, 0x29) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r4, 0xffffffffffffffff, 0x5a) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c23003f) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01feffffff0000000000062c1a0000000905810300040100000904"], 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="c021"], 0x5) getdents64(r1, &(0x7f0000000100)=""/10, 0xa) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f00000008c0)={0x0, 0x9, 0x25, {0x25, 0x11, "d0b87a8d8e69bd9b0801a226bd3791c7475c1c388aaefd93c4d7584187dea84a12515b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7m55.129296206s ago: executing program 0 (id=584): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002480)="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", 0x2000, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x4891, &(0x7f0000005040)={0xa, 0x4e21, 0x1, @remote, 0x3}, 0x1c) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, r2, 0x7) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) 7m55.109973236s ago: executing program 0 (id=585): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000225bd7000fddbdf251400000008000300", @ANYRES32=r3, @ANYBLOB="c7bd4196baade425a85eba7e63c2507d7d345d335d1df91ab05316e03472457a31440dd6440773e009d4964a74a4f8cfb329b76b4a20ce09be96ac0795632d66037e64f98e7a38b90c5c1b0adc7b2f1ee937899bf25ac12f5cf89f498061ec1ac456c0cb522ba48f770220813ed80bb53996f8cb09a0b5c6142208ff8a12b28a052e3d4b65d9f6593254233efde46d541e090c16b9bc9d86ed7491b5d649905093b9c747b751"], 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x840) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGLCKTRMIOS(r4, 0x5435, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000280)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x1b, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 7m55.051770847s ago: executing program 0 (id=586): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000002300)={{0x2, 0x4e23, @private=0xa010102}, {0x6, @local}, 0x10, {0x2, 0x4e22, @remote}, 'ip6gre0\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000002380)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x3, {0xa, 0x4e24, 0xc4c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}}, 0x3a) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ed0000003d03004c70ed568056b12026cdd616f026f2388a"], 0x18}, 0x1, 0x0, 0x0, 0xc860}, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1fe, 0xa001) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000023c0)=0x3, 0x4) read$FUSE(r8, &(0x7f00000002c0)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) keyctl$set_reqkey_keyring(0xe, 0x6) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x500) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002480), r6) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x74, r10, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x882}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$HIDIOCGUSAGES(r9, 0xd01c4813, 0x0) sendfile(r5, r4, &(0x7f0000002400)=0x7fffffff, 0x101) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 7m39.915899172s ago: executing program 33 (id=586): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000002300)={{0x2, 0x4e23, @private=0xa010102}, {0x6, @local}, 0x10, {0x2, 0x4e22, @remote}, 'ip6gre0\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000002380)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x3, {0xa, 0x4e24, 0xc4c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}}, 0x3a) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ed0000003d03004c70ed568056b12026cdd616f026f2388a"], 0x18}, 0x1, 0x0, 0x0, 0xc860}, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1fe, 0xa001) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000023c0)=0x3, 0x4) read$FUSE(r8, &(0x7f00000002c0)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) keyctl$set_reqkey_keyring(0xe, 0x6) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x500) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002480), r6) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x74, r10, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x882}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$HIDIOCGUSAGES(r9, 0xd01c4813, 0x0) sendfile(r5, r4, &(0x7f0000002400)=0x7fffffff, 0x101) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 7m38.550565562s ago: executing program 2 (id=699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4be}, 0x1c) listen(r0, 0x1000000) 7m38.538338723s ago: executing program 2 (id=700): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0xafa, 0x0, "e32401186a9ed9a9"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0xa) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0xd, r4, 0x1, 0x7, 0x6, @random="eb68e3f58965"}, 0x14) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000007000000897d22d0b9000000000000"], 0x18}, 0xc804) iopl(0x2) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) read(r7, &(0x7f0000000200)=""/36, 0x24) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000000440)={{0x2, 0x4e20, @private=0xa010100}, {0x6, @broadcast}, 0xb, {0x2, 0x4e1e, @empty}, 'dvmrp1\x00'}) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x35, &(0x7f0000000000)=0x5232, 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x10a}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x8000000002, 0x40000000010}, @flat=@binder={0x73622a85, 0x100b, 0x3}}, &(0x7f0000000280)={0xffffffffffffffa6, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 7m38.315939046s ago: executing program 2 (id=701): setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000200), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) pread64(r0, &(0x7f0000004200)=""/236, 0xec, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x0, 'group_id'}}, 0x29) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r2, 0x0, 0x0) read(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x24, 0x0, &(0x7f0000000040)) 7m37.498326088s ago: executing program 2 (id=710): mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x10800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f000009df00)={0x79, 0x0, 0x1}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd) 7m37.3709134s ago: executing program 2 (id=711): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x16) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x200a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) 7m37.159987963s ago: executing program 2 (id=712): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 7m23.034296633s ago: executing program 5 (id=806): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f00000000c0)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='.\'\'\x00', &(0x7f00000001c0)='])(\x1f\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x190e}, @flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x7, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) 7m22.928405614s ago: executing program 5 (id=807): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt(r0, 0x90, 0x1, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) fsmount(r2, 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0xc, 0x0, &(0x7f0000000000)) 7m22.844131026s ago: executing program 5 (id=808): syz_clone(0x102460c538b227e, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 7m22.840537086s ago: executing program 5 (id=809): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file2\x00', &(0x7f0000000300)='./bus\x00') r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4000000, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r6) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x1100000000f337, 0x6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) 7m22.725488318s ago: executing program 5 (id=811): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = dup(r0) r2 = openat2(r1, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x40, 0x24}, 0x18) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000f00), 0x300, 0x0) mount$9p_fd(0x0, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e40), 0xd00c0, &(0x7f00000023c0)=ANY=[@ANYBLOB="746e6f0000bc789c01f2c300000000000000", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,debug=0x0000000000000001,noextend,cache=none,permit_directio,func=MODULE_CHECK,appraise,obj_type=\x00,seclabel,fsuuid=504bbbf9-ab0a-049\x00-dc13-75\x0030fec,defcontext=user_u,\x00']) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000024c0)) 7m22.56382665s ago: executing program 5 (id=812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000fdffdfffffffff0700"/24]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x164}, 0x1, 0x0, 0x0, 0x4c09d}, 0x6004091) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r6, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8000000000000000, 0xf6, 0x4, 0x6, 0x400000200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0x81, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f100, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r6) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x402800}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="6c018000", @ANYRESHEX=r5], 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x840) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000600)=r6) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r11, 0x4, 0xc0) setreuid(0xee00, 0x0) r12 = getuid() setreuid(0x0, r12) getpid() 7m22.55851133s ago: executing program 34 (id=812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000fdffdfffffffff0700"/24]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x164}, 0x1, 0x0, 0x0, 0x4c09d}, 0x6004091) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r6, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8000000000000000, 0xf6, 0x4, 0x6, 0x400000200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0x81, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f100, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r6) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x402800}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="6c018000", @ANYRESHEX=r5], 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x840) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000600)=r6) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r11, 0x4, 0xc0) setreuid(0xee00, 0x0) r12 = getuid() setreuid(0x0, r12) getpid() 7m22.053740008s ago: executing program 35 (id=712): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 2m21.425335727s ago: executing program 7 (id=3492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r0, 0x6000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peek(0x1, r2, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done={0x40106309, 0x100}], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/custom0\x00', 0x1002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000840)="8508635416e028e4e1b139b9de87c93bcd6cc036a260bbcd063e0d6d5e584efd472976f466b77df60e3db5f480e450ed76d0370482e0d7fef5b04abd0ead133fb0781e6a57cca879ba7b75417c9bec09a70c3dcdd52ebe8cec418668be15ab6918bb7dfacb07fe38a995914de3a3d9f9b4b50beb05c0bacef4d625cb97a60d170a12c749c6822149d05bd148fd88c4a814ab81481b9d5b4e8b4bd5d07d91d0a75e9df39f231437e226fd2e144d0ab771ef9ece1019ffa63d1184127b5de91feef0b5683b53af036802ef12c290aa367a7bed0e01b3a96422e1baf9f8320f70db80ae8c0eb2f311f5bea369a05e1b7d85a3", 0xf1, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000004c0)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000b00)={@fda={0x66646185, 0x1, 0x1, 0x3c}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x20, 0xfffffffffffffcf9}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x4, 0x0, 0x2}]}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000007c0)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg$inet(r7, &(0x7f0000000080)=[{{&(0x7f0000000800)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1}, 0x1c) sendto$inet(r7, &(0x7f0000000940)="e8e93143288c6064f73c28d8c561216ea1fe652d2078b478187dbedaf937333f20945f58363caac078242878a7933c13b13321454962899ece72f76dd6768e621860a0e8c7a501a52d4c88014e4ea12aaf9418706242d76e9b897becd71f572eb94a382d91f3e576255fe77366f4cfe89a1adfdfb97408171167cef241121230e48fb429f227e192254050a250ef18e0293d4554a708eec40b0fa059acd69f5fcaa246bbb687dbf1fe1059560e55826e8eb332818d45f2130e80a125f2f7df2084d650fae1146548b8879682db", 0xcd, 0x12000000, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200a82, 0x0) 2m21.21187779s ago: executing program 7 (id=3493): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400000, 0x40) move_mount(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x2) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8) symlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000000080)=0xe9, 0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x142) connect$vsock_stream(r0, &(0x7f0000000500)={0x28, 0x0, 0x2711, @local}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0xc0080, 0x1) renameat2(r0, &(0x7f0000000380)='./file0\x00', r7, &(0x7f00000004c0)='./file0\x00', 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x8e402, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r9, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8004) sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004004) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000880)={0x0, @private, @dev}, &(0x7f00000008c0)=0xc) renameat2(r7, &(0x7f0000000580)='./file1\x00', r8, &(0x7f00000005c0)='./file0\x00', 0x1) dup(r5) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000900)=ANY=[@ANYRES8=r0, @ANYRESHEX=r6, @ANYBLOB="2c5bef30306f3d8af3ea247a6759515060c675d01d59bedd5e0feca8b7ed1a242a8e95b028426f29ae139e62bd1db7e9628856f32659dcd61b0d38be59a9dfd0926eb2836041df8ca0ead9a58aac4b8ca2f974606a08918cea0e1c3cc18b7910a3fddefe0dd2f67d2b2d2534799ad9410b7ef7aacdffbab9f58991327720b59b2c98f713c4c96a00981bbedff1ff5b0b2b57628c29f0bc077584503466fedba5895aaade4970345d063e90ab69a98d19705dff276dbfe1870284459a67c06dd0bd42355aa11f27a18b853abb9c1903e0cec74d0dd3c1404c35df621f6065f1800000", @ANYRESDEC]) sendto$inet(r2, &(0x7f0000000000)="ad18cd493d415a4908705a12cb25ed72781711d1f89c6b62afe32464b13c6a42db1a80139b4e2feb67e18148779247ac5bf9", 0x32, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d298cdc18000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) r10 = socket(0x1, 0x5, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, 0x0, 0x0) 2m21.183401271s ago: executing program 7 (id=3495): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r3, 0x88}, {0xffffffffffffffff, 0xa2a1}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x7c, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0xffffffff}, @free_buffer={0x40086303, r2}, @decrefs, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x6, 0x0, 0x9}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}], 0x52, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002c73a1e55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m20.211993025s ago: executing program 7 (id=3506): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x114) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0xe6242, 0x4ebfac6bbaf7949) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) io_pgetevents(0x0, 0x4, 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000080)={&(0x7f0000000000)={[0xc]}, 0x8}) ptrace(0x10, r1) fcntl$lock(r0, 0xa, &(0x7f00000019c0)={0x1, 0x0, 0x2000000000000001, 0x2}) 2m20.036097788s ago: executing program 7 (id=3509): setuid(0xee01) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80000) (async) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2043, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 2m19.988291649s ago: executing program 7 (id=3511): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) read(r0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) r5 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_test={0x1a, 0x4, 0x4}}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) 2m19.9134582s ago: executing program 36 (id=3511): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) read(r0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) r5 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_test={0x1a, 0x4, 0x4}}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) 1m55.747865969s ago: executing program 8 (id=3739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1, 0x3, 0x0, 0x1000, &(0x7f000000c000/0x1000)=nil}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x408, 0x210, 0x100, 0x100, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@multicast1, @multicast2, 0x0, 0xffffffff, 0x10, 0xd, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0x7f, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x9, 0x3, 0x5, 0x1bc, 0x5, 'veth0_to_bond\x00', 'dummy0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "39db3a550fcaab438400000000b64093e6072fc889bea60bdd26beacd802"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0x8, 0x1}}}, {{@arp={@loopback, @empty, 0xff000000, 0xff, 0x5, 0xd, {@mac, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x5, 0x5, 0x0, 0x6, 0x40, 0x12, 'veth1_to_bridge\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @remote, @rand_addr=0x64010100, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa, &(0x7f0000000480)=ANY=[@ANYBLOB="d4a61c62f50b31f2207a"]) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 1m55.452037813s ago: executing program 8 (id=3740): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000600", @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf250c00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x400c400}, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) syz_clone3(&(0x7f0000001280)={0x3004000, 0x0, 0x0, 0x0, {}, 0x0, 0x6, 0x0, 0x0}, 0xffffffffffffffc6) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000000)}, 0x3c0, &(0x7f0000000140)={&(0x7f0000000100)}}, 0x18) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) syz_open_procfs(0x0, &(0x7f00000002c0)='status\x00') (async) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000600", @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf250c00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x400c400}, 0x800) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) (async) syz_clone3(&(0x7f0000001280)={0x3004000, 0x0, 0x0, 0x0, {}, 0x0, 0x6, 0x0, 0x0}, 0xffffffffffffffc6) (async) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000000)}, 0x3c0, &(0x7f0000000140)={&(0x7f0000000100)}}, 0x18) (async) 1m55.445410413s ago: executing program 8 (id=3741): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)={0x40, 0x14, 0x17, "0000e4ff4cdc274d87647622b0ca5c8d027c0554e379e9"}, 0x0, 0x0}) 1m52.192319012s ago: executing program 8 (id=3757): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5b0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') read(r3, &(0x7f0000000240)=""/120, 0x78) creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000580)={{0xc, 0x9}, 0x100, './file0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000480)=0x23, 0x4) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getenv(0x4201, r6, 0x0, &(0x7f0000000080)) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2040, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r7, 0x40087705, 0x0) 1m51.983810265s ago: executing program 8 (id=3760): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40) (async, rerun: 32) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4000000000006, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x46]}, 0x30) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40004, 0x40, 0x5, 0x0, 0x35a, 0x40010020, r7}) (async) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000240)={0x2, r2}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/241, 0xf1, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}], 0x9d, 0x0, &(0x7f0000000440)="86a26c9da618d909bce30b7cf1cd8e3cd67bebed2f51f050b192202dc79a841f2307e8a18d200c24f92523c2e73cd5d0392854de671d87310511c3173d65868163dae6dca81ce9330e7f8083114ca0336d334fce1f60203ec29a53e0f3109b5f95a1f5a20b1ee8f1d39b9660a40c44c98093ce8a73170e7bde42b3d6635738d31f142a3cc29ae231a13c3312602d24a87dd2633985828593c874478e39"}) 1m51.107472868s ago: executing program 8 (id=3762): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/mnt\x00') mount$binderfs(0x0, 0x0, 0x0, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, r3, 0x0) setns(r1, 0x0) 1m50.749072983s ago: executing program 37 (id=3762): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/mnt\x00') mount$binderfs(0x0, 0x0, 0x0, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, r3, 0x0) setns(r1, 0x0) 24.032282363s ago: executing program 3 (id=4319): rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000480)={0x0, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0xff06, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x8000, 0x484800) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000140)={0x17, "79d38585ea1814cd71ae46a6f2ba5b7408edc2d6c0dd9e"}) 23.843831885s ago: executing program 3 (id=4322): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000002300)={@local}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000140018"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 23.758509387s ago: executing program 3 (id=4323): iopl(0x3) r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0xe94, 0x9}) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x800000}}], 0x18}, 0x4044) 23.575536979s ago: executing program 3 (id=4324): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext']) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000000000000024d564b000000007f00002000000049"]) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x1a066042, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x11) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5001000000000000000000000000000006000000000000000200000000000000060000000000000006000000000000000500"], 0x0, 0x0, 0x0}) r5 = dup3(r0, r1, 0x80000) read$usbmon(r5, &(0x7f0000000600)=""/4096, 0x1000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x4207, r6) ioctl$KVM_RUN(r5, 0xae80, 0x0) chdir(&(0x7f0000000080)='./file0\x00') 22.632940954s ago: executing program 3 (id=4327): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc537, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0xa6, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x2, 0xa, 0x1, {0x22, 0xfc4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0xb8, 0x9}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 22.436017736s ago: executing program 3 (id=4329): r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='cgroup\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) 22.295684388s ago: executing program 38 (id=4329): r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='cgroup\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) 4.00780057s ago: executing program 1 (id=4490): r0 = socket$inet_icmp(0x2, 0x2, 0x1) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000cc0)=@report={0x4c, 0x20, 0x1, 0x70bd2a, 0x25dfdbff, {0x32, {@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x3b}}}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x9, {{0x2, 0x4e23, @broadcast}}}, 0x88) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0xffffc000) 3.835785483s ago: executing program 1 (id=4492): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="34000000000000000200000007"], 0x38}, 0xc804) 3.615833926s ago: executing program 1 (id=4494): timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) clock_gettime(0x3, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}, {r2, r3+60000000}}, 0x0) timer_gettime(r0, &(0x7f0000000540)) 3.443067928s ago: executing program 1 (id=4498): prctl$PR_SET_FPEMU(0xa, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x1080) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, 0x32) epoll_create(0x2) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002800)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004d40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf254a0000fa070003"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 3.275420371s ago: executing program 1 (id=4501): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)={0x40, 0x14, 0xc, "0000e4ff4cdc274d87647622"}, 0x0, 0x0}) 2.116296668s ago: executing program 4 (id=4510): sched_setscheduler(0x0, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x5a80, 0x2, 0xfc, 0x3, 0x400, 0x536}, 0x20) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d04, 0x0, 0x5}]}) read$FUSE(r2, &(0x7f0000000c40)={0x2020}, 0x2020) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, 0x0) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x5a80, 0x2, 0xfc, 0x3, 0x400, 0x536}, 0x20) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d04, 0x0, 0x5}]}) (async) read$FUSE(r2, &(0x7f0000000c40)={0x2020}, 0x2020) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000000)) (async) 2.01737007s ago: executing program 4 (id=4511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "2c9bf624d607a5a9e2843fe8ae6632d02ffd8f9dd4c5e64fc65ac033b7a87c1f", "1c1e66c29869bf688917a2ed3835dc1d9e81b84960aca558453c4565abe3dcd8", "d1157590637541abeca20b9ca73977b269091c8aca21e3a616010dc44053ec09", "0f83ee263df12a6401579dcd55e31d69df95ecfcd41b0b75ef367a2297d352fc", "eef1d2fa3c932f1f8ebfc1874010684213066050ad07a2af725a1cc11d7e0bd6", "ce579275bc602e7bd0597b59", 0xa, 0xfffffffd, 0x1c, 0x3, 0x6}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$AUTOFS_IOC_FAIL(r6, 0x40187542, 0x200000000000) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000, 0x0) r8 = socket$inet6(0xa, 0x6, 0x7ff) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000700)={0x9, r4, 'id1\x00'}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000780)={'\x00', 0x1, 0x9, 0xe, 0x2, 0x10001, 0x0}) fstat(r3, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000800), &(0x7f0000000900), &(0x7f0000000940)=0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000b00)=r5) r13 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x81800) sendmmsg$unix(r5, &(0x7f0000000a80)=[{{&(0x7f00000000c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)="21b868d0b44c258c0e599ac11494be07ee23a37acd2b5304ef600172a4c590aa557ac07d492403e690ed89b34d7d30ee012d3bcf2781a55e0b096483925edf8d1bccc52e86bef00d5d379dcad2c0", 0x4e}, {&(0x7f0000000200)="95b15a6fb47eaea50c6f9306", 0xc}, {&(0x7f0000000240)="bedd62daf7854acc75e8f7935cf71067672f12af5457660a6deb0567fbc1d86e010b2777a4945e49e7d6057c964f28cdbe9de9c8a097276401fee231d837a4273ee6a3f62e1bc4d013b7b0f2024b", 0x4e}, {&(0x7f00000002c0)="d7098e30c5b70b18273dd57438a98ae05f984e25e1eefea6b469a303d888d9d4b61e81ab10b23c155d04575ae9d51b3eca5da100c58ba47289e1f59aa5bba083518c02040d326ec138594f7046100d9109a62d65c7dcb3109a6b", 0x5a}, {&(0x7f0000000340)="05b13c4756e73723523e006d85a4773ecdba82dd1d19124dfdd576d951dc55bc0baf6c280db8e7bab6960b2488394e841fd68d0e7648967048ff580cfd679104ad00adfc6a5e51d00c9417296ade2938b3868a58f334231e16f032281d636a2a949f39e5753ffdfd47f03f104e913a9f627b26d04c60756474aced3dbbd24a25992abd7a86fa37a669d0b7038267cf7528068c82dd822fea698dc9a98b842137622ba7806327525d0f2b18b9d6ee5904555ea354f85a9fa89362687f49f3a7a9b36e1d4b66fbc7944a", 0xc9}], 0x5, 0x0, 0x0, 0x4000010}}, {{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000540)="4b0904765c1c20e948", 0x9}, {&(0x7f0000000580)="4f7b54f66e0aafc4a4e086b604dabdfa8eef0895cb72efed853d8ac163b3968197d2168330f6a99b9e038adae275082ed6c1f97b46bb72bbabba9ac8ae2cc877008c8c8bb47845fa812fc0c51ca9fde103828255810af44017b5ada631d74753cfb915", 0x63}, {&(0x7f0000002140)="775c1aeeb2ea7e73e73fa1aa2dd3c16076220551339bc229fad4ea1afa63be6400e4d7ddc8c39c0f6b8d64a8619f73e21ac27fb552c14d3129b3b4f783a90cb928b3c70754ce55271408349b3ddd4d36ae980e99393d926d97862008095a5bad9c2985140f4d33e66a6bbc8eb5044cb206b3004d6ee744b48017b57a45c20a9026de3277473881e38b425b232bc8c7aaa1cf3fb44ad804c0255cabc265513767ced58a14cc13ec94ec5bbd2784e32634c1badccc1e5b2a3c8347dbee8756bbac60ed9439a72ec43c3b70554df1972e41a8e6b1fb07e235cb4a246ca11e9b7b0b47172e349b8f6253e768fa51198f90c1aab3bbba88103563ba0b730d29b0bb48e7a851b2214a5cfaddf990170ffd0542fdb65d87745762bd40a2c27fc847e50e5e4c99dfa210f07e34a9411227b24a781a97effb660212202f421b721fa936e32a1a1a8cb3ba5252de2a61b162e1fbddc5bccbf17233f78dda9b928c8f72006b4d9fca37b79ca7bc0137bf067e495858f48d689563a187d348e5918cda1679b126b2a13e0841316a4daad52f003ffab0faf69536f9af07f70c91cfde01aef8b1142e99e940cef93c2251032b258ca49476faed43eabb6df0e94afe121fdf83cfc724235c151103d4f0f2652655831e50f701304f253b9139d9c2b256740411997e5f4d58279063693825e5c7aa6aa47f82a3344e1ee432e2b737e34f47879a3f864f9342708ceaf25d49fa7ba3f522ab366ce5dc7384fdf27b75cba69a40f4aede9bb9e86256cc6beb1763bbfa0e0258ca090634a7503cb9f63536ce9edb2b8f739cc7afc082ab0f0133c49ec8a0b42a2442cfc732e4929aa5aee3777f818d723ae0aa7ddbf1a6dfcd7c45c05f51d3768e53f0fed279c5a291eb51ba693cad593dcb6a3158ffb1f361ad8ef32c4df89473a668f4ff56725b1e02a258d90df92264c1feea054ed71c00402d0cbb4ee5a74923c8d226d23b91c243590d86813a41befb0efd901ea1d75ba6d9b3166b918982c87291435ac583eba56caae85f14442e29787887a71f1d7c34e5de1f3bafb269be1397312b5088c6e3e84a19e1d173550cb700610a781e3d745e68336ebb5cfa631bb29d9bc96e3a383882d25ea18399caa68c0a38c03962d1c3bc3dc9819d948f96c1ca9721168f58b8825675194970f83ea2c40aa42421f1874f5e2e9cd6432e564fbff6e5661a7441ee4e84e99bd276f4f0128fde6f9335c5f37584c38a2997681ed43eaee6828ffb0d07456031c32832920ec3f8fa4bd2fe796db3b5c7f12cc7d0336a1fe0357c1fad9c633123ae8e321bae52a851857fb3043ad4eabfdf2fb2701dfcdcb2b892cdbd7fbbb93346145b806fcd8e3cc98249d856deda2ece2691719f18f1eabded32b3c9901db83c24067ad274c4132ec0d56ceae3100e3bc46072278f9f2bae4b13e68d17edc4e103a754662b6872d9c90e0ed7bd76476d4250a2bccffa62693c867d48b63d82801dbf30c3a070b9609f5e8d06f1ae9984c91acbc79c7299fb152737c14f6300fce1e7bd512d01593c752062edfbf59ceda4465c87f6ed5b5b0540ced6f86d2225d770c7dbaae842af15f0e4e3712f1f08b85368740f815ae45edc60336932a125e27fca75a0aa9afde64af61c0a9e2a3bc95cdae34a7cef2f82a19c5598422864b8dc8853df7a2113fa1ae84e518d56657e56650040ec4eff69f73385c747249f89ad8e61c3dca92efe522d0e5232488636132efa357020281b3cb214043717f93958e970500b53974be05f01c224915ea51806d044cfe315d018af79e30575d039ae65c1feac9f6bdc58ce3572be37e7a9d6ce26a1bd2ab633d6958f11ff34437b40e1c15ea7560842ef9de9d940c04af2ae028b89245b5fcc4947ed1a36dcc3fd41a273e7b9eecee1f347737001cdbe107919e9a2b6c73d24bf3944be6e4aa9a5a5a866ff142bd0b96e743d9154678640890e63a518237be798c34285f4c8eaae445ea03548e42ba71b1a29b506c731bca44a6197b639f2b669a06b35540e22796c20e4886e9ee0b6d1ffcbf16e8557bb079c7e3845959654e8696c37ec60cd5a6e68f4dfb07f84c45c6cb7495170bb07a882cd10a95f382a0b5a736e84f570b9c921f1f32fbbf22795a965cacb2844c10a8b54903140cfb7f97dc232e5d32090c1c65979955562c9d5528363a2e4a582a9cb629db064323999d78aeea5054b432a459cb5de86adff0b2c73693fce5bd4ecdff9b24864443bf5b92e06917de4516d81774f9c521b3539332afe2871a0237069311312683ae1c8805f6035e3d06664df44521590904c3397f7ba06dc8df947617761627e675737b62b7a14d58545714cafd35e78c2d9759eb4f01f7992047a0cfa12ce44fa53dfdd698db502a9197af67863f0f3af1318569b61d241b268d5f416d2e3caa42185a7f83914945cc883e346677bf5ab8638ccda9c57f51920c3e378763995de602490d5eaeb77533bd21d2377aaa745832028651199bfbfcc93ac6c6ee25f3e94c4ea42a8f330e120495d6acfb1453aeaa047cf50894b5176f5c10745c895bf5afc5a1aca88416e52110a8e3f47df628566a729bd372c3b5f71247a0cd506a2e9b22030ab813907b3be5d300405e0b0259af77b5398f022fc583ec54733b22234e4b2173073f8aa4e883167deb27e4492affdf31e981c8ca6358a80017ccbc467e1c2a8f6ef4957cdda08c01eb86ac056f520906b3a5ec83348fcd5d32fbd450c2063b8eacde276d3a7eef4b3019d25ed9b524d6a5a7412223264982e2a2e176e4c5d140aac7be657113cf42bfdb4841395c2394da19ad4e5d6e6885f8af6dd43497b52ce6442a35e7e6318c15b653dfa7a4e46dcb11c33f78634b4d9b19d5daf248c5db91fbb392ced7834db0dc2160f938fdcb12e4aebe8bdc796b065479a23530c7fbcb156a6c0dfe9a1b8c54c591cc6b4a46b3b434917d4de1a389e800a6ee0d916adb3a7e505806317aac8c82e379318ebfcd4c5fb123e13ed6144d598aaa35d296026b880e3c3b1b85b9d957bf7876716b915187b531aebcf1842e5b8dd693aec9923e460b7ebd13f5f882acbd093552ce8c54a1e44acd3bb0983fca5b610232722e81eb036b5c04c71254bf27e404b61e15b6d05e63cd801061c3b7eed6efab3834d2adb770276b6aebfbb7a4a0544181be639742eb9889e56a9640bbbc9c03d4e2226e0463286bae7d74dd052e1fe6b7147f6471e6b7876e70555b91cd7e3dbfbdf5a35adedfe97a5cd60b07605c0ee30fbd2240e20034a18a5b2e39cb78bc8f1468b126ecc042e11a510ced3ef2da8d7b1ca7669a45860db4da3ad7eac9c9e90e28e7f1b35f756c5e0e4032a9645ebb06d727479b2ecd1f90a065cf221d6c1de2cb5e5446fa9e39fa67fbf38f172aeb3ac782e75a5caf680f05cf07852a1329efb836b8d5ea92a17f8a56a1f8593f723c55f43d1db66dd15652b137ef0c401ad22ccfddda2ddd8c1e934223fae8b76bf120a1b08747a077f24487fd731577bd5d906bc8e18a4b6b38560ce2eeb61184ba0dad110018278337983225c0dae3a07653e064f3779a757c06abb01dc592c78adeb5a28430759eaa41c59f0b699e83853becaee0c5f2c77842b42546f254e3570f17d6811862dc2d4e4cffdd31aca9aabe229354b142f48cd29c5795ff1d8698c1b71e9555563b9088353174e42fc0d195429f4ccbd19bb408a9e28cdf37850ac1686064fe9d107623d9328b7f4fe0a6ba69f61f2e7c7dfbc2115f081fe88ef29189ea30c065a48e640a21345712e5f0952380e5f4682bccc4a78b62cf70d6ee2459a406b79e1c89702134af89c41aacbab64c334f211a6dd9462a796dcc1d5721dde3cf18f3e1d9682dec59dd8ec9c7792eedeba2cd6a5159f3f073e481190ed555ad679e7bcf9983d3e3768d7fa3b2f0091bde141e1015d4553b6b13997ff518383b323f2822a536521cb24047b15975d210fe890797f35979b9a3c177b44a659a506c70d6648b30318b14f23a89c604b697fdfc834ec7d4e2fd541eb35b1d32010e3beea6ad8acd9e58e3a9c3ffb8f6c61a36f103c3a06d8d53416bab344046172946d43a41e10faa7750ca9ee57abe2c47404e78f9f6813b499e8a524fadc90b5c0653cff6d919fbdcd7c49efce7a3b866aa73b18ff58b5149241ee49df2a7fbbdc66bf21d0607ac92553ca87f0fc6261cf38c23ec1ad9b2daa8fe44caf1d402416b006ec1cac3986847d57baee8a58624ee6d42ee59c56bad0374b8b9814a60893a8b0adc701051892a971e60c1459e2b87fa3ffb49e035cc4cb5ffbc09b72d16d23bf57472c70c3447bb2e7b9cc4f612590fbb36c5e76a5cf579ac38d20b266968af00f9dc7b56eccf1b8ec554a63e7bdaa7ec1eba981310313676e4877315b6a0257fbae6fa0aa3d837cf29af0da6f475c66412b4368dac1e86615ece7e995a4aac9fae1575fc98ccefef20703cf4f7ef39abb2949534f169a5adf5e49284ad5fa32a96383371087b3b340cfdc06c601d59485cd9656181cbe55b37be9eb25dbbf0af42083abcc62d43dfc63345474889a7f7b625afea29718cc1b34068368b1b90acaa1ff40c3e49e8eeeb855bda116fd78e5a83dc22a07820647e30629fb6e54401c15263f69004165ab94ea4db568d92b6d7a117abc4489b6e0c952af994e32616c96b6b24d55610d0ac66b00360560356634db8f185a203d8759d7ab8c52b5cf184aee3d3b42a743373b200e9020c36095253d07bcad140349daaaa43a61a567775a29e7b999db0ea39e4808ee3dace45958f3c3565c771a7c441e748e923adf9095906534fec5647bac4a08f87d3423492f78f3f905a349429960a8d5178c5ae36e2c62049e3943f73fa9b2a8299e2f1e26b2b30d5273e96513efece984eb406d32a67be553b9fe5042e74a8f94ebfc45faf959e0e31c888200c4a7e8e2cb3e9e8b5c0173af400723c616caf76d9849a932b5b4d9ac8ac288cb480b7d0753fde57748fa90a65171d4c11f8d93a2a96c4074ca3ad1abee8b45d614a62a1b28fafbcdf4dba00f0f10a6dd2cb37fd21071231931e45cdd39adbc27068f16e60c4c51126e621496b2db2b12b239f97326e4b5b4a1a90d728e33dc4ce229a239d17027972b559a651ffb105d338d5dba05a41c165d85ac84f9d6ce3e11197512fd032c86c9b707d10e5ed448947f9a1f8eee4bef0b36358b9989f29c5eb09e826e44c110e5e7c0ebbe8f9e8dfc486580954d468def5d661706a88b6e71051daa8199dd8ec65df091ce668356ee5f3446ea2d6bb19a803dcdb9ceea372c7cef395ee6dd9d5ac2e5aee10f8f85cf1426dc7d8667e8deac180e0a1f666def61a0f29f41ad2d6ac53c8d5fcb9264d10f0c539cd8ca7ccd61164efb04ecbdad446853ac9e8dc320979da6e9eaee7a2a892ec49ba35c56cb9772b8dc2a45ad60946439dcda132359f5c8fa6c286612e4a8a6145ff1f58ed59869979cf9bf323bada74eb343fadcf30ba94fd83ac7c79a97917b643eea3912e899231cffc5620dcddb8f1b713bd3c8abdb0d92039c3a3e481fd54763380815e112280f96b8abf420d250efa6393a2c4679dccfd1c512aaeed161e3046afe18a294d4ee076a483137aa0be80da76f75a9f74125a947d4776042ca8edaf1d1511db967ac4aaba1ca7cf16f257bc2fc16ce7e0331357a344025fa245da715559054c888f824a8ef2da52bb23661f5944be34a5251015f0f20978b3e21be6860e17717af76c4de8251bb93f893090a71f8b2b4d04d4c47d4083d", 0x1000}, {&(0x7f0000000600)="f299861c007ab92e6bebb221126bfa03392eb9583f46b3c000f15c775702fd82860dc8d733a153bdf4f3af1d62b0f91244683d89653fbb0870bbdebfcf5051bbf4b8c417c5b698da1e10db6dc4b3b9", 0x4f}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400b86e1e5b00000000006371c2db00", @ANYRES32=r6, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r9, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0xc4}}], 0x2, 0x4000010) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000b40)={{0x1, @loopback, 0x4e22, 0x0, 'lc\x00', 0x2, 0x1, 0xa}, {@loopback, 0x4e20, 0x3, 0x2, 0x6ea, 0x8}}, 0x44) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.648181425s ago: executing program 4 (id=4512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, r1, 0x8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x48800) 1.619503156s ago: executing program 4 (id=4513): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0xb, 0x1000, 0x4, 0xffffffffffffffff, 0x1}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D'], 0x38}, 0xc804) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x1}) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'pim6reg\x00', {0x4}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x40}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x28, 0x3, 0x0, {0x10, @ether_spec={@local, @remote, 0x1ff}, {0x0, @random="cc80348623a4", 0x0, 0x8000, [0x2, 0x2]}, @udp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x28}, @mcast1, 0x4e22, 0x4e22, 0x9c}, {0x0, @broadcast, 0x3, 0x0, [0x3, 0x5]}, 0xfffffffffffffffe, 0x1}}}) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8010, r10, 0x2b091000) 1.260152131s ago: executing program 9 (id=4515): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000000c0)={0x9, 0x4}) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000080)={0xf97cff8c, 0x3700, 'SE Linux', "2d185423bfe87441073ad81995e24cc2"}, 0x20) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x3, 0x1, 0x1}) 1.259813111s ago: executing program 4 (id=4516): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000080)) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xeae2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {0x1, 0xffff, 0x3, 0x2}, 0x1d, [0x5, 0x9, 0x6, 0x6, 0xff, 0x5, 0xfffffe00, 0x10000, 0x101, 0x9, 0xf31, 0x8, 0x6, 0x4, 0x5, 0x96, 0x4, 0x400, 0x1, 0xfffffffd, 0x8000, 0x5, 0x3, 0x1, 0x7, 0x7, 0x6d6e, 0x33, 0x1, 0xfffffe7d, 0x7, 0xffff, 0xffff0000, 0x3ff, 0xc7, 0xfffffff5, 0x4, 0x0, 0x8, 0x6, 0x7fffffff, 0x0, 0x95ea, 0x8, 0x984, 0x5f, 0x6, 0x7ff, 0x6, 0xf79, 0x6, 0xb, 0x8, 0x7fffffff, 0xfffffffa, 0x7ff, 0x7, 0xd, 0x401, 0x5, 0x2, 0x0, 0x3ff, 0x800], [0x3, 0x6, 0x59a, 0x24, 0x3, 0x0, 0x1, 0x7, 0xd7, 0x6, 0x9ad, 0x4, 0x9, 0xfff, 0x0, 0x8, 0x2, 0x1, 0x3, 0x7fffffff, 0xfffffff7, 0x7f, 0x7, 0x4, 0x8001, 0x4, 0x8, 0x2, 0x9, 0xfffffff8, 0x401, 0xfffffff9, 0x3, 0x2, 0x6, 0xe, 0xfe88, 0x5, 0x7fffffff, 0xfff, 0x1, 0x2, 0x6, 0x5, 0x5, 0xfffffff9, 0x1, 0x0, 0xfffffffb, 0x1000, 0x972e, 0x3ba4, 0x6d, 0x9, 0x8001, 0x6, 0x7, 0x4, 0x6, 0x800, 0x9, 0x4, 0x6, 0x6], [0x186, 0x8001, 0x10001, 0x4, 0x8, 0x10, 0x80000001, 0x9, 0x8b, 0x7, 0x1, 0x425, 0x3acb, 0x1000, 0x600, 0x80, 0xfffffff9, 0x5, 0x0, 0x55, 0x4, 0xfffffff9, 0xd, 0x3, 0x79, 0x6, 0xbfbef4b, 0xc0, 0xb, 0x81, 0x3, 0x3, 0x9, 0x4, 0x41988d7b, 0x1, 0xfffffffb, 0x2, 0x89, 0x1, 0x9, 0x7ff, 0x0, 0x7, 0x3, 0xfffffff7, 0x6, 0x8, 0x1, 0xff, 0x0, 0xe, 0x3, 0x800, 0x9, 0x4, 0x9858, 0x7fffffff, 0x6, 0x4, 0x1000, 0x40, 0x12, 0xc], [0x8001, 0x2, 0xb3d, 0x4, 0x3ff, 0x3, 0x928a, 0xa9, 0xf8, 0x6, 0x1, 0x7, 0x10000, 0x80000000, 0xffffffff, 0x1, 0xfffffff8, 0x6, 0x6, 0x2, 0x101, 0x64, 0x2, 0x80000001, 0xfff, 0x8, 0x9, 0xc, 0x3, 0x2, 0xd, 0xf59, 0x4, 0x101, 0x0, 0x8, 0x7b87, 0xffffffff, 0x5, 0xad68, 0x5, 0x7fffffff, 0x8, 0x0, 0x88000000, 0x366, 0x6, 0x7ff, 0x47, 0xfffffffb, 0xfffffffb, 0x641e, 0x9, 0x6, 0xffffd837, 0x1, 0x3, 0x2, 0xffffffff, 0x7ff, 0x9, 0x10001, 0x5, 0x5]}, 0x45c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000040)) ioctl$UI_DEV_CREATE(r1, 0x5501) getsockopt$inet_mreqn(r0, 0x0, 0x3, 0x0, &(0x7f0000000240)) 1.146015483s ago: executing program 9 (id=4518): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000081000040000000000000000020000000"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0xd0, 0x101}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="2f304136b1ff"}) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 1.107610273s ago: executing program 6 (id=4519): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r2) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2c, r3, 0x819, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x17, 0x1, './binderfs/binder0\x00'}]}, 0x2c}}, 0x840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000002900)=0x659c, 0x4) 1.027756604s ago: executing program 1 (id=4520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x6, 0xbe, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) shutdown(r0, 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffff000}) 888.196897ms ago: executing program 9 (id=4521): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x20080000, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) (fail_nth: 3) 887.955497ms ago: executing program 6 (id=4522): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) read(r0, &(0x7f0000000680)=""/4096, 0x1000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x20080000, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 886.439437ms ago: executing program 4 (id=4523): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)={0x40, 0x14, 0x5, "0000e4ff4c"}, 0x0, 0x0}) 787.166438ms ago: executing program 9 (id=4524): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f00000000c0)) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000000300)=""/254, 0xfe}, {&(0x7f0000000700)=""/72, 0x48}], 0x2, 0x7, 0xfff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000000000000f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300075d42eae0008"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pim6reg\x00', 0x2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x7f}]}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008a030000000000000100000010000040"]) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e24, @local}, 0x205, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000200000000000, 0x81, 0x1}) 766.841208ms ago: executing program 6 (id=4525): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x22020400) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000200)={0x2, @long}, 0x8) recvmmsg$unix(r3, 0x0, 0x0, 0x1, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r8, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r7, &(0x7f0000000500)={0x18, 0x0, r9}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000040)=0x30e180, 0x4) bind$packet(r2, &(0x7f0000000280)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 616.02343ms ago: executing program 6 (id=4526): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000840)={0x74, 0x0, &(0x7f00000006c0)=[@decrefs={0x40046307, 0x2}, @request_death, @release={0x40046306, 0x1}, @exit_looper, @increfs={0x40046304, 0x2}, @enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/114, 0x72, 0x1, 0x29}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000680)={0x0, 0x18, 0x40}}}], 0xe3, 0x0, &(0x7f0000000740)="b46f9eb68a795331a6942ef9bb6e3026ca8eb8503fd74e75ab008f87f1bb008d5811c7d3318373b2d2721be97f14a34e46e6b194b152104255e66a4abd46d7099e3bf24a3431a257907ed75e53b2e097f5dc615295c55b08823583ad3894daf728646b5930d657ddfe48476dde6c28818ab26337e028e018804ee362cfcb1bcd63d5ead31d3d887aa91b25f5fb1de93155cf789bc36f204365aa1fe0c45cc5d18377e4976b49d939d5077fe49f724ad31c275064ab42b461ecbfd71a122ae51704df2aa914dbdd08ba08ff5bce5e7c52b57702ee7369ab2a5071cde694af6942f9c0e7"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3}) write$uinput_user_dev(r2, &(0x7f0000002c00)={'syz1\x00', {0x9, 0x33, 0x1, 0x5}, 0x11, [0x9, 0x7fffffff, 0x7, 0x7, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0xac8d, 0x9, 0xfffffeb4, 0xe6b5, 0x9, 0x8, 0x8, 0x1ff, 0xfffffff1, 0x7fff, 0x1, 0x0, 0xa, 0x3d, 0x7, 0x7ea79520, 0x7f, 0xb, 0x9, 0x0, 0xf, 0x0, 0x5, 0x3, 0x949, 0x2, 0x8, 0xf95f, 0x9, 0x101, 0x1000, 0x7, 0x1, 0x9, 0xd44, 0x3, 0x7f, 0x10001, 0x1ff, 0x0, 0x8, 0x6, 0x0, 0x7fff, 0x1d, 0x4, 0x8b, 0xffff0000, 0x1, 0x2, 0x7, 0x401, 0x4, 0x4, 0x7ff], [0x1, 0x6, 0x9, 0x3, 0x1, 0xffff, 0x1000, 0x9, 0x8, 0x6f, 0x4, 0x7, 0x5, 0x7fffffff, 0x8, 0x12f, 0x3, 0x1c765bd7, 0x273, 0x6, 0x9f, 0x448, 0x3, 0xb, 0x10000, 0x2, 0x5, 0x3, 0x3, 0x587, 0x100, 0x2, 0x80000000, 0x1, 0x2, 0x10000, 0x0, 0x80000001, 0x400, 0x6, 0x6, 0x1, 0x7fffffff, 0x9, 0x0, 0x3, 0x7, 0x5, 0x9, 0x2c824684, 0x838, 0xb, 0x1000, 0x4, 0x68d, 0x1, 0x5d3, 0x6, 0x55, 0xfffffffc, 0x2, 0x5, 0xffffffff, 0x4], [0x4, 0x1000, 0x6, 0x8, 0x2, 0x35344016, 0x8e, 0x7, 0x200, 0xd, 0x6, 0x80000001, 0x48, 0x6, 0x80000000, 0x9, 0x1, 0x2, 0x8, 0x3, 0x19ee, 0x51ed, 0x7fff, 0x9, 0x8, 0x6, 0x8, 0x8, 0xfff, 0x9, 0x38, 0x1, 0x1, 0x3, 0xfffffef5, 0x7, 0x9, 0x3, 0x5, 0xfffffffc, 0xaec0, 0x400, 0xf39, 0xfffff8f4, 0x3, 0x4, 0x39d, 0x200, 0x0, 0x1, 0x2, 0x2, 0x6, 0x8001, 0x7fff, 0x7, 0xfffffffd, 0x2a, 0xb0d, 0x6, 0x7f, 0x200, 0x52d, 0xc], [0x3, 0x35af, 0xffff, 0x8, 0x2, 0x0, 0xffffffff, 0x61, 0x8, 0x2, 0xff, 0x6, 0x5, 0x3fffc, 0x2, 0x1, 0x3, 0x19a, 0x9, 0x9, 0x9, 0x1000, 0xff, 0x4, 0x4812, 0x10, 0x5, 0x54e4, 0x6a, 0xb, 0xfffffffd, 0x5, 0xfffffffa, 0x8, 0x1, 0x40000, 0x6, 0x6, 0xffffffff, 0x0, 0x4, 0x7, 0x9, 0x400, 0x19d28fd2, 0x9, 0x0, 0x7fffffff, 0x6, 0x6, 0x9, 0x101, 0x4, 0x2, 0x800, 0xa0, 0x8, 0x401, 0x2, 0x2, 0x8100000, 0x3, 0x5eb, 0x4c0a]}, 0x45c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x1be8b000) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r6, 0xfffffffffffffc01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008904"]) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 301.671356ms ago: executing program 9 (id=4527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x23, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c001506", @ANYRES16=r2, @ANYBLOB="24092cbd7000fcdbdf250700000000000180000009000f00000000000900020000000000090045000000000001000a00000000000400ff0000000000028000000b00020000000000080004000000"], 0x14}, 0x1, 0x0, 0x0, 0x200480b5}, 0x40) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000000)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001a00)={0x1158, 0x1, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_PAYLOAD={0x1004, 0xa, "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"}, @NFQA_PAYLOAD={0xd0, 0xa, "452c8e77f332e2a10c58074273add9cc9870f622f68245666d4c3d8871f0fc471735386a9893a298d74971b2c7caa831b5acac8597d156bbf91c7c2158f140971f228764c117ebf67e09907bd6a93d84f4dbb8024e2a6486e81b8a3dd3fa0b320df751de87fd4681b515d946a05374068b67dff5cb25e84ff5645c3557331e766901cf9286a46697d13ff048459a05914d6315979f220eb6eee6134111820eecd0f7cb2e988b03162d00b9bdd30a35902d4006427286527883b2e38180e03be4e62304808ffa5483b4b5763e"}, @NFQA_PAYLOAD={0x66, 0xa, "7bc6a7ae4aea7d9313d14c67821c27cfdcbd0a962a662af1cc089a3c4475f2fe4c19fc5cc53f5634f56a6cac8530cf806fc61deeeafe1c4e6d417119c6b954d3dc33c199e68835d6207ce699d72370d339bb4b983c8b87d1f1e8c8964c7e892c3019"}]}, 0x1158}, 0x1, 0x0, 0x0, 0x40040}, 0x488e0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r3, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) flock(r4, 0xc) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x4, 0x0) r8 = dup2(r1, r1) r9 = openat$cgroup_subtree(r8, &(0x7f0000000080), 0x2, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = eventfd2(0x9, 0x80800) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000040)={0x400008001, 0x0, 0x1, r12, 0x1}) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r12, 0x1}) write$cgroup_subtree(r9, &(0x7f0000000140)={[{0x2b, 'io'}, {0x6, 'pids'}, {0x2d, 'cpuset'}, {0x2d, 'perf_event'}]}, 0x1e) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000000)=[@exit_looper], 0x0, 0x0, 0x0}) close(r3) 269.321156ms ago: executing program 6 (id=4528): r0 = socket$igmp6(0xa, 0x3, 0x2) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x80000000, {{0xa, 0x4e22, 0x7, @local, 0xa3}}, {{0xa, 0x4e22, 0x617a, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x108) 118.682618ms ago: executing program 6 (id=4529): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)={0x40, 0x14, 0x7, "0000e4ff4cdc27"}, 0x0, 0x0}) 0s ago: executing program 9 (id=4530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, 0x0, r4, r5) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xfffffffffffffffb, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x2f}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ster_driver returned -16 [ 505.838531][ T313] xpad 10-1:179.65: probe with driver xpad failed with error -5 [ 505.848485][ T10] microsoft 0003:045E:07DA.0038: unknown main item tag 0x2 [ 505.869772][ T10] microsoft 0003:045E:07DA.0038: ignoring exceeding usage max [ 505.899581][ T10] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 505.914785][ T10] microsoft 0003:045E:07DA.0038: unknown main item tag 0xe [ 505.922209][ T10] microsoft 0003:045E:07DA.0038: collection stack underflow [ 505.941814][ T10] microsoft 0003:045E:07DA.0038: item 0 0 0 12 parsing failed [ 505.950400][ T10] microsoft 0003:045E:07DA.0038: parse failed [ 505.957304][ T10] microsoft 0003:045E:07DA.0038: probe with driver microsoft failed with error -22 [ 506.066914][ T10] usb 4-1: USB disconnect, device number 55 [ 506.129740][ T9] usb 10-1: USB disconnect, device number 20 [ 506.647034][T11342] fuse: Bad value for 'user_id' [ 506.652042][T11342] fuse: Bad value for 'user_id' [ 506.666240][T11341] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 506.686852][T11343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 507.013768][T11359] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 507.023794][T11359] rust_binder: Read failure Err(EFAULT) in pid:304 [ 507.092021][T11361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 507.115802][T11361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=11361 comm=syz.9.4196 [ 507.153225][ T313] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 507.170025][ T449] usb 7-1: USB disconnect, device number 6 [ 507.228073][ T9] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 507.334962][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 507.349053][ T313] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 507.369037][ T313] usb 4-1: config 0 has no interface number 0 [ 507.375366][ T313] usb 4-1: config 0 interface 184 has no altsetting 0 [ 507.407465][ T313] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 507.420482][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 507.426025][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.434094][ T36] kauditd_printk_skb: 1074 callbacks suppressed [ 507.434112][ T36] audit: type=1400 audit(1750448860.020:56089): avc: denied { write } for pid=11347 comm="syz.4.4192" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 507.473942][ T313] usb 4-1: Product: syz [ 507.478159][ T313] usb 4-1: Manufacturer: syz [ 507.482781][ T313] usb 4-1: SerialNumber: syz [ 507.500579][ T36] audit: type=1400 audit(1750448860.020:56090): avc: denied { write } for pid=11347 comm="syz.4.4192" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 507.519425][T11348] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.533120][ T313] usb 4-1: config 0 descriptor?? [ 507.533686][T11357] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.543367][ T36] audit: type=1400 audit(1750448860.020:56091): avc: denied { write } for pid=11347 comm="syz.4.4192" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 507.547713][T11353] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.576888][T11357] audit: audit_lost=3520 audit_rate_limit=0 audit_backlog_limit=64 [ 507.576924][T11348] audit: audit_lost=3521 audit_rate_limit=0 audit_backlog_limit=64 [ 507.576944][T11348] audit: backlog limit exceeded [ 507.577491][T11348] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.604329][ T9] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 507.612012][ T313] smsc75xx v1.0.0 [ 507.801540][T11376] kvm: pic: non byte write [ 507.806109][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 507.811571][ T9] usb usb5-port1: attempt power cycle [ 508.055050][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 508.066047][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 508.075728][ T313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 508.086001][ T313] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 508.190215][ T9] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 508.216679][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 508.361315][ T9] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 508.383489][ T9] usb 5-1: Invalid ep0 maxpacket: 64 [ 508.388958][ T9] usb usb5-port1: unable to enumerate USB device [ 508.885113][ T449] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 509.045501][ T449] usb 10-1: Using ep0 maxpacket: 32 [ 509.052790][ T449] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 509.061882][ T449] usb 10-1: config 0 has no interface number 0 [ 509.068107][ T449] usb 10-1: config 0 interface 184 has no altsetting 0 [ 509.077999][ T449] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 509.087219][ T449] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.095346][ T449] usb 10-1: Product: syz [ 509.099638][ T449] usb 10-1: Manufacturer: syz [ 509.104321][ T449] usb 10-1: SerialNumber: syz [ 509.111092][ T449] usb 10-1: config 0 descriptor?? [ 509.118571][ T449] smsc75xx v1.0.0 [ 509.243171][T11390] rust_binder: Write failure EINVAL in pid:759 [ 509.457614][T11394] fuse: Bad value for 'fd' [ 509.778526][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 509.804520][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 510.009271][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 510.020409][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 510.033980][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 510.046131][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 510.060037][ T449] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 510.082820][ T449] usb 4-1: USB disconnect, device number 56 [ 510.814621][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4223'. [ 511.087766][ T449] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 511.260980][ T449] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.271161][ T449] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.281959][ T449] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 511.291077][ T449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 511.299091][ T449] usb 4-1: SerialNumber: syz [ 511.533059][ T449] usb 4-1: 0:2 : does not exist [ 511.544360][ T449] usb 4-1: USB disconnect, device number 57 [ 511.729645][ T596] udevd[596]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 511.844453][ T449] usb 10-1: USB disconnect, device number 21 [ 512.181044][T11461] FAULT_INJECTION: forcing a failure. [ 512.181044][T11461] name failslab, interval 1, probability 0, space 0, times 0 [ 512.195305][T11461] CPU: 0 UID: 0 PID: 11461 Comm: syz.9.4233 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 512.195341][T11461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.195356][T11461] Call Trace: [ 512.195364][T11461] [ 512.195373][T11461] __dump_stack+0x21/0x30 [ 512.195403][T11461] dump_stack_lvl+0x10c/0x190 [ 512.195429][T11461] ? __cfi_dump_stack_lvl+0x10/0x10 [ 512.195457][T11461] dump_stack+0x19/0x20 [ 512.195481][T11461] should_fail_ex+0x3d9/0x530 [ 512.195506][T11461] should_failslab+0xac/0x100 [ 512.195535][T11461] kmem_cache_alloc_noprof+0x42/0x3a0 [ 512.195560][T11461] ? getname_flags+0xc6/0x710 [ 512.195587][T11461] getname_flags+0xc6/0x710 [ 512.195613][T11461] user_path_at+0x2b/0x60 [ 512.195643][T11461] __se_sys_mount+0x288/0x480 [ 512.195669][T11461] ? ksys_write+0x1ef/0x250 [ 512.195696][T11461] ? __x64_sys_mount+0xf0/0xf0 [ 512.195723][T11461] __x64_sys_mount+0xc3/0xf0 [ 512.195748][T11461] x64_sys_call+0x2021/0x2ee0 [ 512.195775][T11461] do_syscall_64+0x58/0xf0 [ 512.195802][T11461] ? clear_bhb_loop+0x35/0x90 [ 512.195834][T11461] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 512.195863][T11461] RIP: 0033:0x7f6134f8e929 [ 512.195882][T11461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.195901][T11461] RSP: 002b:00007f6135e4e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 512.195925][T11461] RAX: ffffffffffffffda RBX: 00007f61351b5fa0 RCX: 00007f6134f8e929 [ 512.195942][T11461] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 512.195957][T11461] RBP: 00007f6135e4e090 R08: 00002000000000c0 R09: 0000000000000000 [ 512.195972][T11461] R10: 0000000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 512.195986][T11461] R13: 0000000000000000 R14: 00007f61351b5fa0 R15: 00007fff92813f48 [ 512.196005][T11461] [ 512.241143][T11463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 512.562675][ T704] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 512.680339][ T449] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 512.733722][ T704] usb 4-1: Using ep0 maxpacket: 32 [ 512.746744][ T704] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 512.764778][ T704] usb 4-1: config 0 has no interface number 0 [ 512.773343][ T704] usb 4-1: config 0 interface 184 has no altsetting 0 [ 512.785553][ T704] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 512.795238][ T36] kauditd_printk_skb: 1056 callbacks suppressed [ 512.795264][ T36] audit: type=1400 audit(1750448865.043:57143): avc: denied { ioctl } for pid=11464 comm="syz.3.4234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 512.826649][ T704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.833451][T11484] rust_binder: 11482 RLIMIT_NICE not set [ 512.834750][ T704] usb 4-1: Product: syz [ 512.840689][ T36] audit: type=1400 audit(1750448865.071:57144): avc: denied { map } for pid=11481 comm="syz.6.4241" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.844615][ T704] usb 4-1: Manufacturer: syz [ 512.873289][ T704] usb 4-1: SerialNumber: syz [ 512.878709][ T449] usb 10-1: Using ep0 maxpacket: 32 [ 512.884110][ T36] audit: type=1400 audit(1750448865.071:57145): avc: denied { read } for pid=11481 comm="syz.6.4241" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.898135][ T704] usb 4-1: config 0 descriptor?? [ 512.916138][ T36] audit: type=1400 audit(1750448865.071:57146): avc: denied { read } for pid=11481 comm="syz.6.4241" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.921345][ T704] smsc75xx v1.0.0 [ 512.941421][ T36] audit: type=1400 audit(1750448865.071:57147): avc: denied { read open } for pid=11481 comm="syz.6.4241" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.967465][ T449] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 512.967499][ T36] audit: type=1400 audit(1750448865.071:57148): avc: denied { ioctl } for pid=11481 comm="syz.6.4241" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 512.975787][ T449] usb 10-1: config 0 has no interface number 0 [ 512.975830][ T449] usb 10-1: config 0 interface 184 has no altsetting 0 [ 513.001740][ T36] audit: type=1400 audit(1750448865.071:57149): avc: denied { call } for pid=11481 comm="syz.6.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 513.048067][ T36] audit: type=1400 audit(1750448865.164:57150): avc: denied { ioctl } for pid=11468 comm="syz.9.4236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 513.048159][ T449] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 513.085521][ T449] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.094428][ T449] usb 10-1: Product: syz [ 513.106264][ T36] audit: type=1400 audit(1750448865.164:57151): avc: denied { ioctl } for pid=11468 comm="syz.9.4236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 513.110375][ T449] usb 10-1: Manufacturer: syz [ 513.154280][ T449] usb 10-1: SerialNumber: syz [ 513.165910][ T449] usb 10-1: config 0 descriptor?? [ 513.174008][ T36] audit: type=1400 audit(1750448865.164:57152): avc: denied { ioctl } for pid=11464 comm="syz.3.4234" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 513.183448][ T449] smsc75xx v1.0.0 [ 513.218145][T11488] FAULT_INJECTION: forcing a failure. [ 513.218145][T11488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.231352][T11488] CPU: 0 UID: 0 PID: 11488 Comm: syz.6.4243 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 513.231389][T11488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.231403][T11488] Call Trace: [ 513.231415][T11488] [ 513.231424][T11488] __dump_stack+0x21/0x30 [ 513.231454][T11488] dump_stack_lvl+0x10c/0x190 [ 513.231480][T11488] ? __cfi_dump_stack_lvl+0x10/0x10 [ 513.231506][T11488] ? kstrtoull+0x13b/0x1e0 [ 513.231530][T11488] dump_stack+0x19/0x20 [ 513.231553][T11488] should_fail_ex+0x3d9/0x530 [ 513.231577][T11488] should_fail+0xf/0x20 [ 513.231599][T11488] should_fail_usercopy+0x1e/0x30 [ 513.231625][T11488] _copy_from_user+0x22/0xb0 [ 513.231654][T11488] ___sys_sendmsg+0x159/0x2a0 [ 513.231688][T11488] ? __sys_sendmsg+0x280/0x280 [ 513.231720][T11488] ? proc_fail_nth_write+0x17e/0x210 [ 513.231742][T11488] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 513.231770][T11488] __x64_sys_sendmsg+0x1eb/0x2c0 [ 513.231789][T11488] ? fput+0x1a5/0x240 [ 513.231821][T11488] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 513.231840][T11488] ? ksys_write+0x1ef/0x250 [ 513.231866][T11488] ? __kasan_check_read+0x15/0x20 [ 513.231891][T11488] x64_sys_call+0x2a4c/0x2ee0 [ 513.231918][T11488] do_syscall_64+0x58/0xf0 [ 513.231947][T11488] ? clear_bhb_loop+0x35/0x90 [ 513.231978][T11488] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 513.232007][T11488] RIP: 0033:0x7f475258e929 [ 513.232025][T11488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.232045][T11488] RSP: 002b:00007f4753478038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.232069][T11488] RAX: ffffffffffffffda RBX: 00007f47527b5fa0 RCX: 00007f475258e929 [ 513.232089][T11488] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 513.232104][T11488] RBP: 00007f4753478090 R08: 0000000000000000 R09: 0000000000000000 [ 513.232118][T11488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.232131][T11488] R13: 0000000000000000 R14: 00007f47527b5fa0 R15: 00007ffcdf805dd8 [ 513.232149][T11488] [ 513.733393][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 513.744266][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 513.754524][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 513.765394][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 513.775672][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 513.785999][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 513.795675][ T704] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 513.815264][ T704] usb 4-1: USB disconnect, device number 58 [ 513.845583][ T687] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 513.920591][ T313] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 513.945136][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 513.956094][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 514.005911][ T687] usb 7-1: Using ep0 maxpacket: 32 [ 514.013492][ T687] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 514.021756][ T687] usb 7-1: config 0 has no interface number 0 [ 514.027900][ T687] usb 7-1: config 0 interface 184 has no altsetting 0 [ 514.037607][ T687] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 514.046732][ T687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.054814][ T687] usb 7-1: Product: syz [ 514.058985][ T687] usb 7-1: Manufacturer: syz [ 514.063679][ T687] usb 7-1: SerialNumber: syz [ 514.071671][ T687] usb 7-1: config 0 descriptor?? [ 514.080031][ T687] smsc75xx v1.0.0 [ 514.083746][ T313] usb 5-1: Using ep0 maxpacket: 16 [ 514.091492][ T313] usb 5-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.102503][ T313] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 514.112419][ T313] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 514.122271][ T313] usb 5-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 514.135571][ T313] usb 5-1: config 1 interface 0 has no altsetting 0 [ 514.144033][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.153174][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 514.161301][ T313] usb 5-1: SerialNumber: syz [ 514.166284][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 514.177290][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 514.187508][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 514.197973][ T449] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 514.201794][T11496] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 514.207599][ T449] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 514.216324][T11496] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 514.333960][T11499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1334 [ 514.333996][T11499] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 514.343350][T11499] rust_binder: Read failure Err(EFAULT) in pid:1334 [ 514.453290][T11505] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 514.467522][T11505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1340 [ 514.474580][T11505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1340 [ 514.486964][T11507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 514.528716][T11511] 8021q: VLANs not supported on ip_vti0 [ 515.158518][ T687] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 515.378438][ T687] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 515.399334][ T687] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 515.410179][ T687] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 515.420624][ T687] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 515.430158][ T687] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 515.439763][ T687] usb 7-1: USB disconnect, device number 7 [ 515.634693][ T687] usb 10-1: USB disconnect, device number 22 [ 515.741719][T11528] syzkaller0: entered allmulticast mode [ 515.749390][T11528] binder: Unknown parameter 'seclabeL' [ 515.834010][ T449] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 516.015763][ T449] usb 4-1: Using ep0 maxpacket: 32 [ 516.036630][ T449] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 516.056422][ T449] usb 4-1: config 0 has no interface number 0 [ 516.069216][ T449] usb 4-1: config 0 interface 184 has no altsetting 0 [ 516.090636][ T449] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 516.110644][ T449] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.119967][ T449] usb 4-1: Product: syz [ 516.126546][ T449] usb 4-1: Manufacturer: syz [ 516.134439][ T449] usb 4-1: SerialNumber: syz [ 516.143959][ T449] usb 4-1: config 0 descriptor?? [ 516.154854][ T449] smsc75xx v1.0.0 [ 516.205132][T11544] binfmt_misc: register: failed to install interpreter file ./file0 [ 516.214007][T11544] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 516.216071][T11544] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 516.283038][ T687] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 516.456405][ T687] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 516.465591][ T687] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.475890][ T687] usb 7-1: config 0 descriptor?? [ 516.801070][ T449] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 516.816983][ T449] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 516.827802][ T313] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 516.841453][ T449] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 516.854795][ T313] usb 5-1: USB disconnect, device number 76 [ 516.862948][ T449] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 516.874876][ T449] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 516.889415][ T449] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 516.916054][ T449] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 516.936803][ T449] usb 4-1: USB disconnect, device number 59 [ 517.110606][T11551] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4267'. [ 517.362785][ T704] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 517.381952][T11560] FAULT_INJECTION: forcing a failure. [ 517.381952][T11560] name failslab, interval 1, probability 0, space 0, times 0 [ 517.394653][T11560] CPU: 1 UID: 0 PID: 11560 Comm: syz.3.4270 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 517.394687][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.394702][T11560] Call Trace: [ 517.394710][T11560] [ 517.394719][T11560] __dump_stack+0x21/0x30 [ 517.394749][T11560] dump_stack_lvl+0x10c/0x190 [ 517.394778][T11560] ? __cfi_dump_stack_lvl+0x10/0x10 [ 517.394804][T11560] ? __ip_dev_find+0x36f/0x410 [ 517.394832][T11560] dump_stack+0x19/0x20 [ 517.394856][T11560] should_fail_ex+0x3d9/0x530 [ 517.394880][T11560] should_failslab+0xac/0x100 [ 517.394911][T11560] kmem_cache_alloc_noprof+0x42/0x3a0 [ 517.394936][T11560] ? __inet_hash_connect+0x783/0x17b0 [ 517.394960][T11560] __inet_hash_connect+0x783/0x17b0 [ 517.394987][T11560] ? __cfi___inet_hash_connect+0x10/0x10 [ 517.395008][T11560] ? secure_ipv4_port_ephemeral+0xd1/0x170 [ 517.395035][T11560] ? __cfi_secure_ipv4_port_ephemeral+0x10/0x10 [ 517.395064][T11560] inet_hash_connect+0xbe/0x160 [ 517.395087][T11560] tcp_v4_connect+0xc21/0x19e0 [ 517.395107][T11560] ? tcp_sendmsg_fastopen+0x1e2/0x6e0 [ 517.395146][T11560] ? __cfi_tcp_v4_connect+0x10/0x10 [ 517.395169][T11560] __inet_stream_connect+0x2a4/0xf40 [ 517.395191][T11560] ? __cfi___inet_stream_connect+0x10/0x10 [ 517.395212][T11560] ? kasan_save_alloc_info+0x40/0x50 [ 517.395234][T11560] ? __kasan_kmalloc+0x96/0xb0 [ 517.395262][T11560] ? tcp_sendmsg_fastopen+0x1e2/0x6e0 [ 517.395291][T11560] tcp_sendmsg_fastopen+0x3b0/0x6e0 [ 517.395322][T11560] tcp_sendmsg_locked+0x4879/0x4ee0 [ 517.395351][T11560] ? _parse_integer_limit+0x195/0x1e0 [ 517.395375][T11560] ? avc_has_perm_noaudit+0x21c/0x360 [ 517.395399][T11560] ? __kasan_check_write+0x18/0x20 [ 517.395423][T11560] ? _raw_spin_lock_bh+0x90/0x120 [ 517.395449][T11560] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 517.395476][T11560] ? kstrtouint_from_user+0xfb/0x150 [ 517.395499][T11560] ? x64_sys_call+0xe69/0x2ee0 [ 517.395527][T11560] ? _raw_spin_unlock_bh+0x54/0x60 [ 517.395556][T11560] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 517.395585][T11560] ? __kasan_check_write+0x18/0x20 [ 517.395609][T11560] ? proc_fail_nth_write+0x17e/0x210 [ 517.395631][T11560] ? __cfi_tcp_sendmsg+0x10/0x10 [ 517.395659][T11560] tcp_sendmsg+0x3e/0xe0 [ 517.395687][T11560] ? __cfi_tcp_sendmsg+0x10/0x10 [ 517.395715][T11560] inet_sendmsg+0xb7/0x120 [ 517.395736][T11560] __sys_sendto+0x588/0x6f0 [ 517.395766][T11560] ? __cfi___sys_sendto+0x10/0x10 [ 517.395799][T11560] ? __kasan_check_write+0x18/0x20 [ 517.395825][T11560] ? __cfi_ksys_write+0x10/0x10 [ 517.395853][T11560] __x64_sys_sendto+0xe9/0x100 [ 517.395884][T11560] x64_sys_call+0x2c2c/0x2ee0 [ 517.395912][T11560] do_syscall_64+0x58/0xf0 [ 517.395940][T11560] ? clear_bhb_loop+0x35/0x90 [ 517.395972][T11560] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 517.396002][T11560] RIP: 0033:0x7fc01af8e929 [ 517.396020][T11560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.396039][T11560] RSP: 002b:00007fc01bdf3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 517.396062][T11560] RAX: ffffffffffffffda RBX: 00007fc01b1b5fa0 RCX: 00007fc01af8e929 [ 517.396079][T11560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 517.396093][T11560] RBP: 00007fc01bdf3090 R08: 0000200000000000 R09: 0000000000000010 [ 517.396107][T11560] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 517.396128][T11560] R13: 0000000000000000 R14: 00007fc01b1b5fa0 R15: 00007fffc2ce7908 [ 517.396147][T11560] [ 517.822460][ T704] usb 10-1: Using ep0 maxpacket: 32 [ 517.839743][ T704] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 517.867453][ T704] usb 10-1: config 0 has no interface number 0 [ 517.885653][ T704] usb 10-1: config 0 interface 184 has no altsetting 0 [ 517.897207][ T704] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 517.901942][T11567] random: crng reseeded on system resumption [ 517.907363][ T704] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.922673][ T704] usb 10-1: Product: syz [ 517.926962][ T704] usb 10-1: Manufacturer: syz [ 517.932881][ T704] usb 10-1: SerialNumber: syz [ 517.940278][ T704] usb 10-1: config 0 descriptor?? [ 517.951362][ T704] smsc75xx v1.0.0 [ 518.079296][ T313] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 518.154559][ T36] kauditd_printk_skb: 559 callbacks suppressed [ 518.154577][ T36] audit: type=1400 audit(1750448870.066:57712): avc: denied { ioctl } for pid=11562 comm="syz.4.4271" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.187483][ T36] audit: type=1400 audit(1750448870.094:57713): avc: denied { ioctl } for pid=11570 comm="syz.3.4275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.212729][ T36] audit: type=1400 audit(1750448870.094:57714): avc: denied { ioctl } for pid=11552 comm="syz.9.4266" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.237973][ T36] audit: type=1400 audit(1750448870.094:57715): avc: denied { ioctl } for pid=11552 comm="syz.9.4266" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.263140][ T36] audit: type=1400 audit(1750448870.094:57716): avc: denied { ioctl } for pid=11552 comm="syz.9.4266" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.282300][ T313] usb 5-1: Using ep0 maxpacket: 32 [ 518.290762][ T36] audit: type=1400 audit(1750448870.094:57717): avc: denied { ioctl } for pid=11552 comm="syz.9.4266" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.299125][ T313] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 518.318776][ T36] audit: type=1400 audit(1750448870.094:57718): avc: denied { ioctl } for pid=11552 comm="syz.9.4266" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.329019][ T313] usb 5-1: config 0 has no interface number 0 [ 518.352012][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 518.361337][ T313] usb 5-1: config 0 interface 184 has no altsetting 0 [ 518.365858][ T36] audit: type=1400 audit(1750448870.094:57719): avc: denied { ioctl } for pid=11552 comm="syz.9.4266" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.378702][ T313] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 518.397875][ T36] audit: type=1400 audit(1750448870.187:57720): avc: denied { ioctl } for pid=11570 comm="syz.3.4275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.409273][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.433058][ T36] audit: type=1400 audit(1750448870.197:57721): avc: denied { ioctl } for pid=11562 comm="syz.4.4271" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 518.443199][ T313] usb 5-1: Product: syz [ 518.468969][ T313] usb 5-1: Manufacturer: syz [ 518.473611][ T313] usb 5-1: SerialNumber: syz [ 518.480806][ T313] usb 5-1: config 0 descriptor?? [ 518.489005][ T313] smsc75xx v1.0.0 [ 518.581521][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 518.589843][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 518.602718][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 518.611903][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.619986][ T9] usb 4-1: Product: syz [ 518.624236][ T9] usb 4-1: Manufacturer: syz [ 518.628887][ T9] usb 4-1: SerialNumber: syz [ 518.635821][ T9] usb 4-1: config 0 descriptor?? [ 518.645026][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 518.653136][ T9] usb 4-1: Detected FT232R [ 518.681858][ T704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 518.692833][ T704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 518.881719][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 518.898000][ T704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 518.909165][ T704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 518.918971][ T704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 518.933373][ T704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 518.943013][ T704] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32 [ 519.110832][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 519.320263][ T687] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 519.353029][ T687] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 519.366635][ T687] asix 7-1:0.0: probe with driver asix failed with error -71 [ 519.376204][ T687] usb 7-1: USB disconnect, device number 8 [ 519.580079][ T313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 519.795540][ T313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 519.817575][ T313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 519.832525][ T313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 519.842871][ T313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 519.852382][ T313] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 519.867692][ T313] usb 5-1: USB disconnect, device number 77 [ 520.227859][ T687] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 520.324173][ T313] usb 10-1: USB disconnect, device number 23 [ 520.393246][ T687] usb 7-1: Using ep0 maxpacket: 32 [ 520.422017][ T687] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 520.430434][ T687] usb 7-1: config 0 has no interface number 0 [ 520.447459][ T687] usb 7-1: config 0 interface 184 has no altsetting 0 [ 520.468999][ T687] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 520.490575][ T687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.516606][ T687] usb 7-1: Product: syz [ 520.520846][ T687] usb 7-1: Manufacturer: syz [ 520.525471][ T687] usb 7-1: SerialNumber: syz [ 520.549336][ T687] usb 7-1: config 0 descriptor?? [ 520.564024][ T687] smsc75xx v1.0.0 [ 520.783773][ T313] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 520.815860][ T704] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 520.946603][ T313] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 520.956710][ T313] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 520.970202][ T313] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.979525][ T313] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.980441][ T704] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 520.987748][ T313] usb 10-1: Product: syz [ 520.998223][ T704] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 521.002554][ T313] usb 10-1: Manufacturer: syz [ 521.010058][ T704] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 521.014131][ T313] usb 10-1: SerialNumber: syz [ 521.023483][ T704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.037306][ T704] usb 5-1: config 0 has no interface number 0 [ 521.043515][ T704] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 521.053442][ T704] usb 5-1: config 0 interface 176 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.070128][ T704] usb 5-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 521.079267][ T704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.087302][ T704] usb 5-1: Product: syz [ 521.091530][ T704] usb 5-1: Manufacturer: syz [ 521.096168][ T704] usb 5-1: SerialNumber: syz [ 521.102616][ T704] usb 5-1: config 0 descriptor?? [ 521.217469][ T687] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 521.228421][ T687] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 521.239078][ T687] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 521.258305][ T687] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 521.271089][ T687] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 521.279099][ T65] usb 4-1: USB disconnect, device number 60 [ 521.282147][ T687] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 521.304222][ T687] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 521.318283][ T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 521.329142][ T687] usb 7-1: USB disconnect, device number 9 [ 521.366308][ T65] ftdi_sio 4-1:0.0: device disconnected [ 521.380399][ T704] snd-usb-audio 5-1:0.176: probe with driver snd-usb-audio failed with error -2 [ 521.411813][ T704] usb 5-1: USB disconnect, device number 78 [ 521.485706][T11582] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 521.501398][T11582] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 521.607834][ T596] udevd[596]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.176/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 521.852830][ T65] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 522.013187][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 522.021980][ T65] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 522.030317][ T65] usb 4-1: config 179 has no interface number 0 [ 522.036615][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 522.047848][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 522.059121][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 522.070289][ T65] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 522.081765][ T65] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 522.095052][ T65] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 522.104144][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.115996][T11594] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 522.194921][ T687] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 522.216331][ T449] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 522.344620][ T687] usb 7-1: device descriptor read/64, error -71 [ 522.375718][T11582] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 522.382985][ T449] usb 5-1: Using ep0 maxpacket: 32 [ 522.386432][T11582] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 522.392075][ T449] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 522.403758][ T449] usb 5-1: config 0 has no interface number 0 [ 522.409924][ T449] usb 5-1: config 0 interface 184 has no altsetting 0 [ 522.420985][ T449] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 522.431005][ T449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.436493][ T65] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input127 [ 522.450572][ T449] usb 5-1: Product: syz [ 522.461874][ T449] usb 5-1: Manufacturer: syz [ 522.476207][ T449] usb 5-1: SerialNumber: syz [ 522.485210][ T449] usb 5-1: config 0 descriptor?? [ 522.503182][ T449] smsc75xx v1.0.0 [ 522.611915][ T687] usb 7-1: device descriptor read/64, error -71 [ 522.620296][ T313] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 522.628290][ T313] cdc_ncm 10-1:1.0: setting tx_max = 16384 [ 522.641570][ T313] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 522.670407][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.694440][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.849563][ T9] usb 10-1: USB disconnect, device number 24 [ 522.866616][ T9] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 522.868446][ T687] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 522.953994][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.981662][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.997701][ T65] usb 4-1: USB disconnect, device number 61 [ 523.003706][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 523.003747][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 523.037756][ T65] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 523.048082][ T687] usb 7-1: device descriptor read/64, error -71 [ 523.152961][ T449] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 523.164087][ T449] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 523.317490][ T687] usb 7-1: device descriptor read/64, error -71 [ 523.368205][ T449] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 523.379662][ T449] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 523.390061][ T449] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 523.401486][ T449] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 523.411778][ T449] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 523.443747][ T687] usb usb7-port1: attempt power cycle [ 523.520056][ T36] kauditd_printk_skb: 755 callbacks suppressed [ 523.520076][ T36] audit: type=1400 audit(1750448875.070:58475): avc: denied { read } for pid=11619 comm="syz.9.4288" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.567174][T11620] rust_binder: Write failure EINVAL in pid:362 [ 523.574578][ T36] audit: type=1400 audit(1750448875.108:58476): avc: denied { read open } for pid=11619 comm="syz.9.4288" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.635953][ T36] audit: type=1400 audit(1750448875.108:58477): avc: denied { map } for pid=11619 comm="syz.9.4288" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.641014][T11625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 523.702285][ T36] audit: type=1400 audit(1750448875.108:58478): avc: denied { read } for pid=11619 comm="syz.9.4288" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.747875][ T36] audit: type=1400 audit(1750448875.117:58479): avc: denied { ioctl } for pid=11595 comm="syz.6.4286" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.780022][ T36] audit: type=1400 audit(1750448875.117:58480): avc: denied { ioctl } for pid=11595 comm="syz.6.4286" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.827986][ T36] audit: type=1400 audit(1750448875.117:58481): avc: denied { execute } for pid=11619 comm="syz.9.4288" path="/138/cgroup.controllers" dev="tmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 523.855815][ T36] audit: type=1400 audit(1750448875.117:58482): avc: denied { read } for pid=11619 comm="syz.9.4288" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 523.867063][ T687] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 523.882605][ T36] audit: type=1400 audit(1750448875.117:58483): avc: denied { read open } for pid=11619 comm="syz.9.4288" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 523.914236][ T36] audit: type=1400 audit(1750448875.126:58484): avc: denied { search } for pid=11618 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.961609][ T687] usb 7-1: device descriptor read/8, error -71 [ 524.100312][ T687] usb 7-1: device descriptor read/8, error -71 [ 524.140612][ T449] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 524.306686][ T449] usb 10-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 524.316040][ T449] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.324997][ T449] usb 10-1: Product: syz [ 524.329327][ T449] usb 10-1: Manufacturer: syz [ 524.334146][ T449] usb 10-1: SerialNumber: syz [ 524.340458][ T449] usb 10-1: config 0 descriptor?? [ 524.354476][ T687] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 524.378433][ T687] usb 7-1: device descriptor read/8, error -71 [ 524.517150][ T687] usb 7-1: device descriptor read/8, error -71 [ 524.632477][ T687] usb usb7-port1: unable to enumerate USB device [ 525.162732][ T9] usb 5-1: USB disconnect, device number 79 [ 525.337952][ T704] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 525.438230][T11662] Invalid logical block size (4) [ 525.452430][T11664] SELinux: Context system_u:object_r:hald_var_run_t:s0 is not valid (left unmapped). [ 525.457710][ T449] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 525.504614][ T449] asix 10-1:0.0: probe with driver asix failed with error -71 [ 525.514175][ T449] usb 10-1: USB disconnect, device number 25 [ 525.530391][ T704] usb 4-1: Using ep0 maxpacket: 32 [ 525.543234][ T704] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 525.565552][ T704] usb 4-1: config 0 has no interface number 0 [ 525.571703][ T704] usb 4-1: config 0 interface 184 has no altsetting 0 [ 525.583310][ T704] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 525.603340][ T704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.635612][ T704] usb 4-1: Product: syz [ 525.642269][ T704] usb 4-1: Manufacturer: syz [ 525.657712][ T704] usb 4-1: SerialNumber: syz [ 525.669878][ T704] usb 4-1: config 0 descriptor?? [ 525.677588][ T704] smsc75xx v1.0.0 [ 525.744226][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 525.757766][T11671] rust_binder: Error in use_page_slow: ESRCH [ 525.757792][T11671] rust_binder: use_range failure ESRCH [ 525.763839][T11671] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 525.769370][T11671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 525.777243][T11671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:852 [ 525.791950][T11671] rust_binder: Error in use_page_slow: ESRCH [ 525.801053][T11671] rust_binder: use_range failure ESRCH [ 525.807074][T11671] rust_binder: Failed to allocate buffer. len:48, is_oneway:false [ 525.812633][T11671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 525.820693][T11671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:852 [ 525.904572][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 525.921405][ T9] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 525.929708][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.940644][ T9] usb 5-1: config 0 has no interface number 0 [ 525.950552][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 525.959719][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.967733][ T9] usb 5-1: Product: syz [ 525.971941][ T9] usb 5-1: Manufacturer: syz [ 525.976563][ T9] usb 5-1: SerialNumber: syz [ 525.983407][ T9] usb 5-1: config 0 descriptor?? [ 525.990696][ T9] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 525.997111][ T9] usb 5-1: No valid video chain found. [ 526.208928][ T65] usb 5-1: USB disconnect, device number 80 [ 526.326280][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 526.342965][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 526.358318][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 526.392348][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 526.423696][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 526.446127][ T704] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 526.467030][ T704] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 526.500295][ T704] usb 4-1: USB disconnect, device number 62 [ 526.716339][T11693] 9pnet_fd: Insufficient options for proto=fd [ 526.988682][T11708] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 526.988710][T11708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 527.016385][ T449] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 527.023269][T11708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1390 [ 527.224362][ T449] usb 10-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 527.252017][ T449] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.272473][ T449] usb 10-1: Product: syz [ 527.276855][ T449] usb 10-1: Manufacturer: syz [ 527.281870][ T449] usb 10-1: SerialNumber: syz [ 527.300051][ T449] usb 10-1: config 0 descriptor?? [ 527.403940][T11720] binder: Bad value for 'stats' [ 527.433335][ T687] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 527.604366][ T687] usb 7-1: Using ep0 maxpacket: 8 [ 527.617613][ T687] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 527.636578][ T687] usb 7-1: config 179 has no interface number 0 [ 527.647653][ T687] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 527.679207][ T687] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 527.690603][ T687] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 527.711319][ T687] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 527.733254][ T687] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 527.757506][ T687] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 527.775508][ T687] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.790313][T11712] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 528.045496][T11723] binder: Unknown parameter '' [ 528.144896][ T313] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input129 [ 528.375944][T11727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.391561][T11727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.422711][ T449] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 528.449093][ T449] asix 10-1:0.0: probe with driver asix failed with error -71 [ 528.486561][ T449] usb 10-1: USB disconnect, device number 26 [ 528.526256][ T304] bridge_slave_1: left allmulticast mode [ 528.532242][ T304] bridge_slave_1: left promiscuous mode [ 528.562661][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.584139][ T304] bridge_slave_0: left allmulticast mode [ 528.598577][ T304] bridge_slave_0: left promiscuous mode [ 528.609383][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.717913][T11727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.742979][T11727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.765083][ T704] usb 7-1: USB disconnect, device number 14 [ 528.765083][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 528.765120][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 528.787791][ T704] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 528.825877][ T304] tipc: Disabling bearer [ 528.842472][ T304] tipc: Left network mode [ 528.863588][ T304] veth1_macvtap: left promiscuous mode [ 528.870203][ T36] kauditd_printk_skb: 720 callbacks suppressed [ 528.870223][ T36] audit: type=1400 audit(1750448880.084:59145): avc: denied { ioctl } for pid=11730 comm="syz.4.4328" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.876667][ T304] veth0_vlan: left promiscuous mode [ 528.920129][ T313] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 528.952302][ T36] audit: type=1400 audit(1750448880.131:59146): avc: denied { read } for pid=11733 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 528.978343][ T36] audit: type=1400 audit(1750448880.140:59147): avc: denied { read open } for pid=11733 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 529.016438][ T36] audit: type=1400 audit(1750448880.140:59148): avc: denied { mounton } for pid=11733 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 529.047606][ T36] audit: type=1400 audit(1750448880.140:59149): avc: denied { sys_module } for pid=11733 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 529.111924][ T36] audit: type=1400 audit(1750448880.159:59150): avc: denied { read write } for pid=10261 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 529.205136][ T36] audit: type=1400 audit(1750448880.187:59151): avc: denied { read write open } for pid=10261 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 529.217112][ T313] usb 5-1: Using ep0 maxpacket: 32 [ 529.262361][T11737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 529.267463][T11737] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 529.282418][ T36] audit: type=1400 audit(1750448880.187:59152): avc: denied { ioctl } for pid=10261 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 529.310428][ T313] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 529.325844][ T36] audit: type=1400 audit(1750448880.224:59153): avc: denied { ioctl } for pid=11730 comm="syz.4.4328" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 529.342584][ T313] usb 5-1: config 0 has no interface number 0 [ 529.353202][ T36] audit: type=1400 audit(1750448880.243:59154): avc: denied { ioctl } for pid=11730 comm="syz.4.4328" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 529.379046][ T313] usb 5-1: config 0 interface 184 has no altsetting 0 [ 529.403952][ T313] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 529.417266][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.425378][ T313] usb 5-1: Product: syz [ 529.430010][ T313] usb 5-1: Manufacturer: syz [ 529.437330][ T313] usb 5-1: SerialNumber: syz [ 529.444994][ T313] usb 5-1: config 0 descriptor?? [ 529.479290][ T313] smsc75xx v1.0.0 [ 529.502443][T11733] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.524732][T11733] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.539465][T11733] bridge_slave_0: entered allmulticast mode [ 529.546124][T11733] bridge_slave_0: entered promiscuous mode [ 529.547232][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4334'. [ 529.562755][T11733] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.569919][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.618615][T11733] bridge_slave_1: entered allmulticast mode [ 529.637497][T11733] bridge_slave_1: entered promiscuous mode [ 529.763876][ T65] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 529.943491][ T65] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.967016][ T65] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.990927][ T519] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.998046][ T519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.009805][ T65] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 530.033059][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.040169][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.042463][ T65] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.084328][ T65] usb 10-1: config 0 descriptor?? [ 530.163106][ T313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 530.181688][ T313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 530.202053][ T313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 530.209063][T11733] veth0_vlan: entered promiscuous mode [ 530.228396][ T313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 530.249767][ T313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 530.261566][ T313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 530.272002][ T313] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 530.283244][ T313] usb 5-1: USB disconnect, device number 81 [ 530.295174][T11733] veth1_macvtap: entered promiscuous mode [ 530.535348][ T65] lenovo 0003:17EF:6047.0039: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.9-1/input0 [ 530.593917][T11761] FAULT_INJECTION: forcing a failure. [ 530.593917][T11761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.607575][T11761] CPU: 0 UID: 0 PID: 11761 Comm: syz.1.4341 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 530.607613][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 530.607628][T11761] Call Trace: [ 530.607637][T11761] [ 530.607647][T11761] __dump_stack+0x21/0x30 [ 530.607679][T11761] dump_stack_lvl+0x10c/0x190 [ 530.607705][T11761] ? __cfi_dump_stack_lvl+0x10/0x10 [ 530.607732][T11761] dump_stack+0x19/0x20 [ 530.607755][T11761] should_fail_ex+0x3d9/0x530 [ 530.607780][T11761] should_fail+0xf/0x20 [ 530.607802][T11761] should_fail_usercopy+0x1e/0x30 [ 530.607828][T11761] _copy_from_user+0x22/0xb0 [ 530.607857][T11761] ___sys_sendmsg+0x159/0x2a0 [ 530.607890][T11761] ? __sys_sendmsg+0x280/0x280 [ 530.607931][T11761] ? do_user_addr_fault+0xbc4/0x1200 [ 530.607965][T11761] __sys_sendmmsg+0x271/0x470 [ 530.607986][T11761] ? __cfi___sys_sendmmsg+0x10/0x10 [ 530.608012][T11761] ? __cfi_ksys_write+0x10/0x10 [ 530.608041][T11761] __x64_sys_sendmmsg+0xa4/0xc0 [ 530.608060][T11761] x64_sys_call+0xfec/0x2ee0 [ 530.608087][T11761] do_syscall_64+0x58/0xf0 [ 530.608116][T11761] ? clear_bhb_loop+0x35/0x90 [ 530.608149][T11761] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 530.608181][T11761] RIP: 0033:0x7f234258e929 [ 530.608199][T11761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.608218][T11761] RSP: 002b:00007f234334a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 530.608242][T11761] RAX: ffffffffffffffda RBX: 00007f23427b5fa0 RCX: 00007f234258e929 [ 530.608259][T11761] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 0000000000000004 [ 530.608274][T11761] RBP: 00007f234334a090 R08: 0000000000000000 R09: 0000000000000000 [ 530.608288][T11761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 530.608301][T11761] R13: 0000000000000000 R14: 00007f23427b5fa0 R15: 00007fff70ea7f28 [ 530.608319][T11761] [ 530.804428][ T65] lenovo 0003:17EF:6047.0039: Failed to switch F7/9/11 mode: -71 [ 530.812475][ T65] lenovo 0003:17EF:6047.0039: Failed to switch middle button: -71 [ 530.820590][ T65] lenovo 0003:17EF:6047.0039: Fn-lock setting failed: -71 [ 530.833896][ T65] lenovo 0003:17EF:6047.0039: Sensitivity setting failed: -71 [ 530.843204][ T65] usb 10-1: USB disconnect, device number 27 [ 531.067712][T11771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 531.067749][T11771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:879 [ 531.417788][T11781] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 531.477763][T11774] fido_id[11774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 531.518301][T11781] rust_binder: Write failure EINVAL in pid:884 [ 531.527245][T11785] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 531.614614][T11785] rust_binder: Write failure EINVAL in pid:884 [ 532.083844][ T313] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 532.276148][ T313] usb 7-1: Using ep0 maxpacket: 32 [ 532.284328][ T313] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 532.297550][ T313] usb 7-1: config 0 has no interface number 0 [ 532.303694][ T313] usb 7-1: config 0 interface 184 has no altsetting 0 [ 532.333431][ T313] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 532.350974][ T313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.369845][ T313] usb 7-1: Product: syz [ 532.380564][ T313] usb 7-1: Manufacturer: syz [ 532.393741][ T313] usb 7-1: SerialNumber: syz [ 532.414661][ T313] usb 7-1: config 0 descriptor?? [ 532.438173][ T313] smsc75xx v1.0.0 [ 532.475195][T11806] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 532.484323][T11806] overlayfs: missing 'lowerdir' [ 532.500686][ T687] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 532.573492][T11808] overlayfs: missing 'workdir' [ 532.671711][ T687] usb 10-1: Using ep0 maxpacket: 16 [ 532.686335][ T687] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.707722][ T687] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 532.735875][ T687] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 532.756631][ T687] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.779010][ T687] usb 10-1: config 0 descriptor?? [ 533.100652][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 533.133428][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 533.156882][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 533.168963][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 533.195692][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 533.211587][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 533.224130][ T687] microsoft 0003:045E:07DA.003A: ignoring exceeding usage max [ 533.234382][ T687] microsoft 0003:045E:07DA.003A: unknown global tag 0xc [ 533.242305][ T313] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 533.259702][ T687] microsoft 0003:045E:07DA.003A: item 0 0 1 12 parsing failed [ 533.279239][ T687] microsoft 0003:045E:07DA.003A: parse failed [ 533.286082][ T313] usb 7-1: USB disconnect, device number 15 [ 533.297681][ T687] microsoft 0003:045E:07DA.003A: probe with driver microsoft failed with error -22 [ 533.447879][ T65] usb 10-1: USB disconnect, device number 28 [ 533.462819][ T449] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 533.473516][ T704] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 533.623204][ T449] usb 2-1: Using ep0 maxpacket: 32 [ 533.630739][ T449] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 533.633887][ T704] usb 5-1: Using ep0 maxpacket: 16 [ 533.640399][ T449] usb 2-1: config 0 has no interface number 0 [ 533.648514][ T704] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 533.650337][ T449] usb 2-1: config 0 interface 184 has no altsetting 0 [ 533.660160][ T704] usb 5-1: config 0 has no interface number 0 [ 533.671133][ T449] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 533.671165][ T449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.684776][ T704] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 533.689825][ T449] usb 2-1: Product: syz [ 533.698195][ T704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.709589][ T704] usb 5-1: Product: syz [ 533.710922][ T449] usb 2-1: Manufacturer: syz [ 533.720706][ T449] usb 2-1: SerialNumber: syz [ 533.720828][ T704] usb 5-1: Manufacturer: syz [ 533.731147][ T704] usb 5-1: SerialNumber: syz [ 533.741001][ T449] usb 2-1: config 0 descriptor?? [ 533.742528][ T704] usb 5-1: config 0 descriptor?? [ 533.754754][ T449] smsc75xx v1.0.0 [ 533.764476][ T704] asix 5-1:0.251: probe with driver asix failed with error -22 [ 534.004417][T11831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.029599][T11831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.240951][ T36] kauditd_printk_skb: 830 callbacks suppressed [ 534.240972][ T36] audit: type=1400 audit(1750448885.107:59985): avc: denied { name_bind } for pid=11848 comm="syz.9.4373" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 534.320473][ T36] audit: type=1400 audit(1750448885.182:59986): avc: denied { read write } for pid=10261 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 534.361534][ T36] audit: type=1400 audit(1750448885.182:59987): avc: denied { read write open } for pid=10261 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 534.408243][ T36] audit: type=1400 audit(1750448885.182:59988): avc: denied { ioctl } for pid=10261 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 534.441985][ T449] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 534.453469][ T449] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 534.463935][ T36] audit: type=1400 audit(1750448885.257:59989): avc: denied { read write } for pid=11851 comm="syz.9.4374" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 534.487589][ T36] audit: type=1400 audit(1750448885.257:59990): avc: denied { read write open } for pid=11851 comm="syz.9.4374" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 534.512337][ T449] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 534.523167][ T449] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 534.533450][ T449] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 534.545917][ T449] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 534.555657][ T36] audit: type=1400 audit(1750448885.257:59991): avc: denied { mounton } for pid=11851 comm="syz.9.4374" path="/160/file0" dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 534.590006][ T449] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 534.609283][ T449] usb 2-1: USB disconnect, device number 5 [ 534.628825][ T36] audit: type=1400 audit(1750448885.257:59992): avc: denied { ioctl } for pid=11844 comm="syz.6.4372" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 534.659217][T11858] FAULT_INJECTION: forcing a failure. [ 534.659217][T11858] name failslab, interval 1, probability 0, space 0, times 0 [ 534.669058][ T36] audit: type=1400 audit(1750448885.266:59993): avc: denied { create } for pid=11844 comm="syz.6.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 534.695263][T11858] CPU: 0 UID: 0 PID: 11858 Comm: syz.9.4376 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 534.695301][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.695315][T11858] Call Trace: [ 534.695323][T11858] [ 534.695332][T11858] __dump_stack+0x21/0x30 [ 534.695362][T11858] dump_stack_lvl+0x10c/0x190 [ 534.695394][T11858] ? __cfi_dump_stack_lvl+0x10/0x10 [ 534.695420][T11858] ? skb_put+0x112/0x1f0 [ 534.695447][T11858] dump_stack+0x19/0x20 [ 534.695483][T11858] should_fail_ex+0x3d9/0x530 [ 534.695507][T11858] should_failslab+0xac/0x100 [ 534.695569][T11858] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 534.695597][T11858] ? sidtab_sid2str_get+0x139/0x370 [ 534.695625][T11858] kmemdup_noprof+0x31/0x80 [ 534.695648][T11858] sidtab_sid2str_get+0x139/0x370 [ 534.695676][T11858] security_sid_to_context_core+0x30d/0x5d0 [ 534.695703][T11858] security_sid_to_context+0x2e/0x50 [ 534.695727][T11858] avc_audit_post_callback+0x198/0x780 [ 534.695750][T11858] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 534.695774][T11858] ? audit_log_untrustedstring+0xea/0x100 [ 534.695793][T11858] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 534.695815][T11858] common_lsm_audit+0x147a/0x1860 [ 534.695835][T11858] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 534.695863][T11858] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 534.695885][T11858] ? __cfi_common_lsm_audit+0x10/0x10 [ 534.695906][T11858] ? avc_denied+0x112/0x180 [ 534.695928][T11858] slow_avc_audit+0x18d/0x1f0 [ 534.695948][T11858] ? __cfi_slow_avc_audit+0x10/0x10 [ 534.695969][T11858] ? avc_has_perm_noaudit+0x360/0x360 [ 534.696010][T11858] ? avc_has_perm_noaudit+0x21c/0x360 [ 534.696032][T11858] avc_has_perm+0x1cd/0x220 [ 534.696052][T11858] ? __cfi_avc_has_perm+0x10/0x10 [ 534.696075][T11858] selinux_socket_sendmsg+0x284/0x380 [ 534.696099][T11858] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 534.696125][T11858] ? arch_stack_walk+0x10b/0x170 [ 534.696155][T11858] security_socket_sendmsg+0x56/0xd0 [ 534.696182][T11858] ____sys_sendmsg+0x52d/0xa70 [ 534.696217][T11858] ? __sys_sendmsg_sock+0x50/0x50 [ 534.696250][T11858] ? import_iovec+0x81/0xb0 [ 534.696280][T11858] ___sys_sendmsg+0x220/0x2a0 [ 534.696310][T11858] ? __sys_sendmsg+0x280/0x280 [ 534.696345][T11858] ? proc_fail_nth_write+0x17e/0x210 [ 534.696366][T11858] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 534.696400][T11858] __x64_sys_sendmsg+0x1eb/0x2c0 [ 534.696419][T11858] ? fput+0x1a5/0x240 [ 534.696451][T11858] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 534.696471][T11858] ? ksys_write+0x1ef/0x250 [ 534.696498][T11858] ? __kasan_check_read+0x15/0x20 [ 534.696522][T11858] x64_sys_call+0x2a4c/0x2ee0 [ 534.696549][T11858] do_syscall_64+0x58/0xf0 [ 534.696576][T11858] ? clear_bhb_loop+0x35/0x90 [ 534.696607][T11858] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 534.696638][T11858] RIP: 0033:0x7f6134f8e929 [ 534.696656][T11858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.696675][T11858] RSP: 002b:00007f6135e4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.696697][T11858] RAX: ffffffffffffffda RBX: 00007f61351b5fa0 RCX: 00007f6134f8e929 [ 534.696713][T11858] RDX: 0000000000008000 RSI: 0000200000005640 RDI: 0000000000000003 [ 534.696728][T11858] RBP: 00007f6135e4e090 R08: 0000000000000000 R09: 0000000000000000 [ 534.696742][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.696755][T11858] R13: 0000000000000000 R14: 00007f61351b5fa0 R15: 00007fff92813f48 [ 534.696773][T11858] [ 534.722113][ T36] audit: type=1400 audit(1750448885.266:59994): avc: denied { ioctl } for pid=11830 comm="syz.1.4365" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 534.946168][T11861] FAULT_INJECTION: forcing a failure. [ 534.946168][T11861] name failslab, interval 1, probability 0, space 0, times 0 [ 535.149372][T11861] CPU: 0 UID: 0 PID: 11861 Comm: syz.6.4377 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 535.149408][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.149424][T11861] Call Trace: [ 535.149431][T11861] [ 535.149440][T11861] __dump_stack+0x21/0x30 [ 535.149469][T11861] dump_stack_lvl+0x10c/0x190 [ 535.149494][T11861] ? __cfi_dump_stack_lvl+0x10/0x10 [ 535.149521][T11861] ? pointer+0xdd0/0xdd0 [ 535.149546][T11861] dump_stack+0x19/0x20 [ 535.149577][T11861] should_fail_ex+0x3d9/0x530 [ 535.149602][T11861] should_failslab+0xac/0x100 [ 535.149631][T11861] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 535.149657][T11861] ? sidtab_sid2str_get+0x139/0x370 [ 535.149687][T11861] kmemdup_noprof+0x31/0x80 [ 535.149710][T11861] sidtab_sid2str_get+0x139/0x370 [ 535.149740][T11861] security_sid_to_context_core+0x30d/0x5d0 [ 535.149768][T11861] security_sid_to_context+0x2e/0x50 [ 535.149794][T11861] avc_audit_post_callback+0x107/0x780 [ 535.149816][T11861] ? audit_log_format+0xdb/0x140 [ 535.149836][T11861] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 535.149858][T11861] ? __cfi_audit_log_format+0x10/0x10 [ 535.149879][T11861] ? audit_log_untrustedstring+0xea/0x100 [ 535.149900][T11861] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 535.149923][T11861] common_lsm_audit+0x147a/0x1860 [ 535.149943][T11861] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 535.149973][T11861] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 535.149995][T11861] ? __cfi_common_lsm_audit+0x10/0x10 [ 535.150016][T11861] ? avc_denied+0x112/0x180 [ 535.150038][T11861] slow_avc_audit+0x18d/0x1f0 [ 535.150060][T11861] ? __cfi_slow_avc_audit+0x10/0x10 [ 535.150083][T11861] ? avc_has_perm_noaudit+0x21c/0x360 [ 535.150106][T11861] avc_has_perm+0x1cd/0x220 [ 535.150127][T11861] ? __cfi_avc_has_perm+0x10/0x10 [ 535.150148][T11861] ? __kasan_check_write+0x18/0x20 [ 535.150171][T11861] ? proc_fail_nth_write+0x17e/0x210 [ 535.150192][T11861] selinux_mmap_file+0x1f3/0x320 [ 535.150221][T11861] ? __cfi_selinux_mmap_file+0x10/0x10 [ 535.150252][T11861] ? vfs_write+0x8ba/0xe80 [ 535.150279][T11861] security_mmap_file+0x2af/0x350 [ 535.150308][T11861] vm_mmap_pgoff+0x11d/0x4e0 [ 535.150333][T11861] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 535.150357][T11861] ? __fget_files+0x2c5/0x340 [ 535.150387][T11861] ksys_mmap_pgoff+0x166/0x1e0 [ 535.150413][T11861] __x64_sys_mmap+0x121/0x140 [ 535.150441][T11861] x64_sys_call+0x13bf/0x2ee0 [ 535.150468][T11861] do_syscall_64+0x58/0xf0 [ 535.150495][T11861] ? clear_bhb_loop+0x35/0x90 [ 535.150527][T11861] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 535.150564][T11861] RIP: 0033:0x7f475258e929 [ 535.150582][T11861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.150600][T11861] RSP: 002b:00007f4753478038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 535.150624][T11861] RAX: ffffffffffffffda RBX: 00007f47527b5fa0 RCX: 00007f475258e929 [ 535.150640][T11861] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000ffd000 [ 535.150654][T11861] RBP: 00007f4753478090 R08: 0000000000000003 R09: 0000000080000000 [ 535.150668][T11861] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 535.150680][T11861] R13: 0000000000000000 R14: 00007f47527b5fa0 R15: 00007ffcdf805dd8 [ 535.150697][T11861] [ 535.307762][T11868] binder: Unknown parameter 'processor : 0 [ 535.307762][T11868] vendor_id : GenuineIntel [ 535.307762][T11868] cpu family : 6 [ 535.307762][T11868] model : 79 [ 535.307762][T11868] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 535.307762][T11868] stepping : 0 [ 535.307762][T11868] microcode : 0xffffffff [ 535.307762][T11868] cpu MHz : 2199.998 [ 535.307762][T11868] cache size : 56320 KB [ 535.307762][T11868] physical id : 0 [ 535.307762][T11868] siblings : 2 [ 535.307762][T11868] core id : 0 [ 535.307762][T11868] cpu cores : 1 [ 535.307762][T11868] apicid : 0 [ 535.307762][T11868] initial apicid : 0 [ 535.307762][T11868] fpu : yes [ 535.307762][T11868] fpu_exception : yes [ 535.307762][T11868] cpuid level : 13 [ 535.307762][T11868] wp : yes [ 535.307762][T11868] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 535.307762][T11868] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 535.677949][T11882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 535.862660][T11882] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 535.943379][ T10] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 536.139746][ T10] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 536.170346][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.190662][ T10] usb 7-1: config 0 descriptor?? [ 536.381363][ T313] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 536.429562][ T65] usb 5-1: USB disconnect, device number 82 [ 536.541906][ T313] usb 10-1: Using ep0 maxpacket: 32 [ 536.560350][ T313] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 536.579587][ T313] usb 10-1: config 0 has no interface number 0 [ 536.590368][ T313] usb 10-1: config 0 interface 184 has no altsetting 0 [ 536.620443][ T313] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 536.653200][ T313] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.669985][ T313] usb 10-1: Product: syz [ 536.677029][ T313] usb 10-1: Manufacturer: syz [ 536.683018][ T313] usb 10-1: SerialNumber: syz [ 536.702820][ T313] usb 10-1: config 0 descriptor?? [ 536.718405][ T313] smsc75xx v1.0.0 [ 536.793912][T11917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:58 [ 536.797076][T11918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 536.867651][T11923] FAULT_INJECTION: forcing a failure. [ 536.867651][T11923] name failslab, interval 1, probability 0, space 0, times 0 [ 536.886914][T11923] CPU: 0 UID: 0 PID: 11923 Comm: syz.1.4401 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 536.886952][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.886966][T11923] Call Trace: [ 536.886975][T11923] [ 536.886984][T11923] __dump_stack+0x21/0x30 [ 536.887020][T11923] dump_stack_lvl+0x10c/0x190 [ 536.887045][T11923] ? __cfi_dump_stack_lvl+0x10/0x10 [ 536.887072][T11923] dump_stack+0x19/0x20 [ 536.887095][T11923] should_fail_ex+0x3d9/0x530 [ 536.887119][T11923] should_failslab+0xac/0x100 [ 536.887148][T11923] __kmalloc_noprof+0x69/0x450 [ 536.887167][T11923] ? ___neigh_create+0x75b/0x2160 [ 536.887184][T11923] ___neigh_create+0x75b/0x2160 [ 536.887214][T11923] __neigh_create+0x72/0xb0 [ 536.887238][T11923] ip6_finish_output2+0xafa/0x1990 [ 536.887266][T11923] ? __cfi_ip6_finish_output2+0x10/0x10 [ 536.887291][T11923] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 536.887315][T11923] ip6_finish_output+0x54f/0xb10 [ 536.887331][T11923] ip6_output+0x1d5/0x3c0 [ 536.887346][T11923] ? __cfi_ip6_output+0x10/0x10 [ 536.887366][T11923] ? is_bpf_text_address+0x17b/0x1a0 [ 536.887395][T11923] ? __cfi_ip6_finish_output+0x10/0x10 [ 536.887416][T11923] ? __cfi_ip6t_do_table+0x10/0x10 [ 536.887443][T11923] ? __cfi_ip6_output+0x10/0x10 [ 536.887459][T11923] ip6_xmit+0xc4f/0x1550 [ 536.887475][T11923] ? __cfi_ip6_xmit+0x10/0x10 [ 536.887489][T11923] ? __cfi_dst_output+0x10/0x10 [ 536.887508][T11923] ? __sk_dst_check+0x102/0x230 [ 536.887535][T11923] ? inet6_csk_route_socket+0x471/0x990 [ 536.887564][T11923] ? kasan_save_track+0x3e/0x80 [ 536.887590][T11923] ? kasan_save_alloc_info+0x40/0x50 [ 536.887606][T11923] ? inet6_csk_xmit+0x500/0x500 [ 536.887627][T11923] ? tcp_sendmsg_locked+0x4879/0x4ee0 [ 536.887656][T11923] inet6_csk_xmit+0x33e/0x500 [ 536.887686][T11923] ? __cfi_inet6_csk_xmit+0x10/0x10 [ 536.887718][T11923] ? __cfi_inet6_csk_xmit+0x10/0x10 [ 536.887744][T11923] __tcp_transmit_skb+0x1ef9/0x3890 [ 536.887770][T11923] ? __tcp_send_ack+0x6b0/0x6b0 [ 536.887793][T11923] ? __kasan_check_write+0x18/0x20 [ 536.887820][T11923] ? __alloc_skb+0x1fd/0x370 [ 536.887845][T11923] ? tcp_fastopen_cookie_check+0x3e8/0x5c0 [ 536.887880][T11923] tcp_connect+0x32bd/0x59a0 [ 536.887907][T11923] ? __cfi_tcp_connect+0x10/0x10 [ 536.887930][T11923] ? ktime_get_with_offset+0x59/0x2b0 [ 536.887951][T11923] ? read_tsc+0xd/0x20 [ 536.887975][T11923] ? tcp_fastopen_defer_connect+0xf1/0x460 [ 536.888007][T11923] ? __cfi_tcp_fastopen_defer_connect+0x10/0x10 [ 536.888039][T11923] ? inet6_hash_connect+0x95/0xe0 [ 536.888057][T11923] tcp_v6_connect+0x109d/0x1800 [ 536.888075][T11923] ? __cfi_tcp_v6_connect+0x10/0x10 [ 536.888097][T11923] ? inet6_sendmsg+0xb7/0x120 [ 536.888128][T11923] ? x64_sys_call+0x2c2c/0x2ee0 [ 536.888156][T11923] ? do_syscall_64+0x58/0xf0 [ 536.888187][T11923] __inet_stream_connect+0x2a4/0xf40 [ 536.888214][T11923] ? __cfi___inet_stream_connect+0x10/0x10 [ 536.888229][T11923] ? kasan_save_alloc_info+0x40/0x50 [ 536.888251][T11923] ? __kasan_kmalloc+0x96/0xb0 [ 536.888281][T11923] ? tcp_sendmsg_fastopen+0x1e2/0x6e0 [ 536.888310][T11923] tcp_sendmsg_fastopen+0x3b0/0x6e0 [ 536.888338][T11923] tcp_sendmsg_locked+0x4879/0x4ee0 [ 536.888360][T11923] ? _parse_integer_limit+0x195/0x1e0 [ 536.888376][T11923] ? avc_has_perm_noaudit+0x21c/0x360 [ 536.888401][T11923] ? __kasan_check_write+0x18/0x20 [ 536.888425][T11923] ? _raw_spin_lock_bh+0x90/0x120 [ 536.888452][T11923] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 536.888478][T11923] ? kstrtouint_from_user+0xfb/0x150 [ 536.888495][T11923] ? x64_sys_call+0xe69/0x2ee0 [ 536.888516][T11923] ? _raw_spin_unlock_bh+0x54/0x60 [ 536.888543][T11923] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 536.888572][T11923] ? __kasan_check_write+0x18/0x20 [ 536.888595][T11923] ? proc_fail_nth_write+0x17e/0x210 [ 536.888618][T11923] ? __cfi_tcp_sendmsg+0x10/0x10 [ 536.888639][T11923] tcp_sendmsg+0x3e/0xe0 [ 536.888659][T11923] ? __cfi_tcp_sendmsg+0x10/0x10 [ 536.888681][T11923] inet6_sendmsg+0xb7/0x120 [ 536.888715][T11923] __sys_sendto+0x446/0x6f0 [ 536.888742][T11923] ? __cfi___sys_sendto+0x10/0x10 [ 536.888772][T11923] ? __kasan_check_write+0x18/0x20 [ 536.888790][T11923] ? __cfi_ksys_write+0x10/0x10 [ 536.888809][T11923] __x64_sys_sendto+0xe9/0x100 [ 536.888836][T11923] x64_sys_call+0x2c2c/0x2ee0 [ 536.888864][T11923] do_syscall_64+0x58/0xf0 [ 536.888890][T11923] ? clear_bhb_loop+0x35/0x90 [ 536.888919][T11923] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 536.888942][T11923] RIP: 0033:0x7f234258e929 [ 536.888955][T11923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.888969][T11923] RSP: 002b:00007f234334a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 536.888997][T11923] RAX: ffffffffffffffda RBX: 00007f23427b5fa0 RCX: 00007f234258e929 [ 536.889014][T11923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 536.889027][T11923] RBP: 00007f234334a090 R08: 00002000000001c0 R09: 000000000000001c [ 536.889041][T11923] R10: 0000000024000048 R11: 0000000000000246 R12: 0000000000000002 [ 536.889057][T11923] R13: 0000000000000000 R14: 00007f23427b5fa0 R15: 00007fff70ea7f28 [ 536.889070][T11923] [ 537.365914][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 537.472330][T11925] fuse: Bad value for 'group_id' [ 537.477400][T11925] fuse: Bad value for 'group_id' [ 537.483428][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 537.507952][ T10] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 537.517994][ T10] asix 7-1:0.0: probe with driver asix failed with error -71 [ 537.526648][ T10] usb 7-1: USB disconnect, device number 16 [ 537.580250][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 537.591610][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 537.609787][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 537.639575][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 537.657855][ T313] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 537.714057][ T313] usb 10-1: USB disconnect, device number 29 [ 538.050545][T11943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:909 [ 538.081290][ T687] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 538.118760][T11947] fuse: Bad value for 'group_id' [ 538.126968][T11947] fuse: Bad value for 'group_id' [ 538.263403][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4413'. [ 538.284274][ T687] usb 2-1: Using ep0 maxpacket: 32 [ 538.296568][ T687] usb 2-1: unable to get BOS descriptor or descriptor too short [ 538.327403][ T687] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 538.335803][ T687] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 538.376029][ T687] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 538.388607][ T687] usb 2-1: config 128 has no interface number 0 [ 538.401870][ T687] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 538.420215][ T687] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.431019][ T687] usb 2-1: config 128 interface 127 has no altsetting 0 [ 538.442683][ T687] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 538.453121][ T687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.474122][ T687] usb 2-1: Product: syz [ 538.480598][ T687] usb 2-1: Manufacturer: syz [ 538.496099][ T687] usb 2-1: SerialNumber: syz [ 538.501647][T11962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:917 [ 538.521426][T11962] support for the xor transformation has been removed. [ 538.569876][T11962] rust_binder: Error while translating object. [ 538.569922][T11962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 538.586780][T11962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:917 [ 538.615700][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 538.762693][ T687] usb 2-1: USB disconnect, device number 6 [ 538.787992][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 538.803375][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 538.815545][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.832348][ T10] usb 5-1: config 0 descriptor?? [ 538.973718][ T596] udevd[596]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 539.081672][T11978] fuse: Bad value for 'group_id' [ 539.086761][T11978] fuse: Bad value for 'group_id' [ 539.193034][ T313] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 539.353351][ T313] usb 10-1: Using ep0 maxpacket: 32 [ 539.378164][ T313] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 539.394371][ T313] usb 10-1: config 0 has no interface number 0 [ 539.403093][ T313] usb 10-1: config 0 interface 184 has no altsetting 0 [ 539.415957][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4426'. [ 539.426813][ T313] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 539.441913][ T313] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.460860][ T313] usb 10-1: Product: syz [ 539.476142][ T313] usb 10-1: Manufacturer: syz [ 539.480874][ T313] usb 10-1: SerialNumber: syz [ 539.501350][ T313] usb 10-1: config 0 descriptor?? [ 539.520664][ T313] smsc75xx v1.0.0 [ 539.599260][ T449] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 539.607528][ T36] kauditd_printk_skb: 994 callbacks suppressed [ 539.607546][ T36] audit: type=1400 audit(1750448890.121:60987): avc: denied { ioctl } for pid=11984 comm="syz.1.4425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.640120][ T36] audit: type=1400 audit(1750448890.158:60988): avc: denied { ioctl } for pid=11984 comm="syz.1.4425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.665382][ T36] audit: type=1400 audit(1750448890.158:60989): avc: denied { ioctl } for pid=11984 comm="syz.1.4425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.690937][ T36] audit: type=1400 audit(1750448890.158:60990): avc: denied { ioctl } for pid=11988 comm="syz.6.4427" path="socket:[115369]" dev="sockfs" ino=115369 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 539.716732][ T36] audit: type=1400 audit(1750448890.224:60991): avc: denied { ioctl } for pid=11955 comm="syz.4.4414" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.741931][ T36] audit: type=1400 audit(1750448890.224:60992): avc: denied { ioctl } for pid=11955 comm="syz.4.4414" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.767096][ T36] audit: type=1400 audit(1750448890.233:60993): avc: denied { ioctl } for pid=11984 comm="syz.1.4425" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.792278][ T36] audit: type=1400 audit(1750448890.233:60994): avc: denied { ioctl } for pid=11975 comm="syz.9.4421" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.817463][ T36] audit: type=1400 audit(1750448890.233:60995): avc: denied { ioctl } for pid=11975 comm="syz.9.4421" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.842689][ T36] audit: type=1400 audit(1750448890.233:60996): avc: denied { ioctl } for pid=11975 comm="syz.9.4421" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.871460][ T449] usb 2-1: not running at top speed; connect to a high speed hub [ 539.881340][ T449] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 539.893287][ T449] usb 2-1: config 1 interface 0 has no altsetting 0 [ 539.901071][ T449] usb 2-1: string descriptor 0 read error: -22 [ 539.907357][ T449] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.916472][ T449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.929510][T11985] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 540.156136][T11985] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 540.172015][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 540.183046][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 540.381654][T11985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.390720][T11985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.392725][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 540.406763][T11985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.412881][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 540.436763][T11985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.445737][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 540.456892][ T313] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 540.467420][ T313] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 540.480077][ T313] usb 10-1: USB disconnect, device number 30 [ 540.501949][ T1156] udevd[1156]: setting mode of /dev/bus/usb/010/030 to 020664 failed: No such file or directory [ 540.513161][ T1156] udevd[1156]: setting owner of /dev/bus/usb/010/030 to uid=0, gid=0 failed: No such file or directory [ 540.548923][T11992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:935 [ 540.582775][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 540.602623][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 540.614383][T11993] rust_binder: Write failure EINVAL in pid:935 [ 540.614585][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 540.630710][ T10] usb 5-1: USB disconnect, device number 83 [ 540.668064][T11985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.676817][T11985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.908948][ T449] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -32 [ 540.918266][ T449] usb 2-1: USB disconnect, device number 7 [ 541.288345][ T10] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 541.365074][T12004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4433'. [ 541.420494][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4434'. [ 541.463991][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 541.489531][ T10] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 541.502150][ T10] usb 10-1: config 0 has no interface number 0 [ 541.508384][ T10] usb 10-1: config 0 interface 184 has no altsetting 0 [ 541.527531][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 541.544902][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.562929][ T10] usb 10-1: Product: syz [ 541.573519][ T10] usb 10-1: Manufacturer: syz [ 541.599322][ T10] usb 10-1: SerialNumber: syz [ 541.611635][ T10] usb 10-1: config 0 descriptor?? [ 541.654796][ T10] smsc75xx v1.0.0 [ 541.675069][T12019] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 541.929859][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 542.015526][T12035] rust_binder: Write failure EFAULT in pid:92 [ 542.100902][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 542.130948][T12042] geneve1: tun_chr_ioctl cmd 1074025672 [ 542.135805][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 542.138743][T12042] geneve1: ignored: set checksum enabled [ 542.148181][ T9] usb 7-1: config 0 has no interface number 0 [ 542.156731][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 542.168483][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 542.177639][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.185680][ T9] usb 7-1: Product: syz [ 542.190175][ T9] usb 7-1: Manufacturer: syz [ 542.194840][ T9] usb 7-1: SerialNumber: syz [ 542.205740][ T9] usb 7-1: config 0 descriptor?? [ 542.223135][ T9] smsc75xx v1.0.0 [ 542.310751][T12046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 542.314141][T12046] rust_binder: Read failure Err(EFAULT) in pid:100 [ 542.324664][ T10] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 542.360403][ T10] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 542.388619][ T10] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 542.399660][ T10] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 542.409539][ T10] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 542.420082][ T10] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 542.429694][ T10] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -61 [ 542.538756][T12053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 542.605016][ T313] usb 10-1: USB disconnect, device number 31 [ 542.788340][T12060] kvm: user requested TSC rate below hardware speed [ 542.892326][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 542.913444][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 543.127962][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 543.158797][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 543.179321][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 543.201665][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 543.223372][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 543.255408][ T9] usb 7-1: USB disconnect, device number 17 [ 543.426464][ T313] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 543.520081][T12088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 543.524935][T12088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 543.597558][ T313] usb 5-1: Using ep0 maxpacket: 16 [ 543.621064][ T313] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.639820][ T313] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.651363][ T313] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.665026][T12090] 9pnet_virtio: no channels available for device syz [ 543.672907][ T313] usb 5-1: config 0 interface 0 has no altsetting 0 [ 543.695939][ T313] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 543.714945][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.737865][ T313] usb 5-1: config 0 descriptor?? [ 543.822008][ T449] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 544.001449][ T449] usb 10-1: unable to get BOS descriptor or descriptor too short [ 544.017544][ T449] usb 10-1: no configurations [ 544.024803][ T449] usb 10-1: can't read configurations, error -22 [ 544.178350][T12078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.205819][T12078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.449878][ T313] usbhid 5-1:0.0: can't add hid device: -71 [ 544.464142][ T313] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 544.495597][ T313] usb 5-1: USB disconnect, device number 84 [ 544.516908][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 544.648155][T12117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 544.648186][T12117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:465 [ 544.687940][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 544.709866][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.729563][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.739450][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 544.748529][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.758214][ T10] usb 2-1: config 0 descriptor?? [ 544.933853][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 544.980640][ T36] kauditd_printk_skb: 1012 callbacks suppressed [ 544.980659][ T36] audit: type=1400 audit(1750448895.153:62009): avc: denied { create } for pid=12109 comm="syz.1.4473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 545.028709][ T36] audit: type=1400 audit(1750448895.153:62010): avc: denied { ioctl } for pid=12109 comm="syz.1.4473" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.055158][ T36] audit: type=1400 audit(1750448895.153:62011): avc: denied { ioctl } for pid=12109 comm="syz.1.4473" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.090740][ T36] audit: type=1400 audit(1750448895.172:62012): avc: denied { read write } for pid=8467 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 545.115413][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 545.122121][ T36] audit: type=1400 audit(1750448895.172:62013): avc: denied { read write open } for pid=8467 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 545.148002][ T36] audit: type=1400 audit(1750448895.172:62014): avc: denied { ioctl } for pid=8467 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 545.150718][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 545.174666][ T36] audit: type=1400 audit(1750448895.181:62015): avc: denied { ioctl } for pid=12119 comm="syz.6.4477" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 545.182028][ T9] usb 7-1: config 0 has no interface number 0 [ 545.209023][ T36] audit: type=1400 audit(1750448895.219:62016): avc: denied { read write } for pid=8467 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 545.216595][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 545.218112][ T10] appleir 0003:05AC:8241.003B: unknown main item tag 0x1 [ 545.240435][ T36] audit: type=1400 audit(1750448895.219:62017): avc: denied { read write open } for pid=8467 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 545.252304][ T36] audit: type=1400 audit(1750448895.219:62018): avc: denied { ioctl } for pid=8467 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 545.276461][ T10] appleir 0003:05AC:8241.003B: global environment stack underflow [ 545.310804][ T10] appleir 0003:05AC:8241.003B: item 0 0 1 11 parsing failed [ 545.318361][ T10] appleir 0003:05AC:8241.003B: parse failed [ 545.326194][ T10] appleir 0003:05AC:8241.003B: probe with driver appleir failed with error -22 [ 545.338449][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 545.347662][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.355748][ T9] usb 7-1: Product: syz [ 545.360062][ T9] usb 7-1: Manufacturer: syz [ 545.364724][ T9] usb 7-1: SerialNumber: syz [ 545.371191][ T9] usb 7-1: config 0 descriptor?? [ 545.376276][ T704] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 545.387212][ T9] smsc75xx v1.0.0 [ 545.436999][T12110] overlayfs: failed to resolve './file0': -2 [ 545.446387][ T10] usb 2-1: USB disconnect, device number 8 [ 545.556928][ T704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 545.575366][ T704] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 545.606917][ T704] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.631361][ T704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 545.638713][T12132] FAULT_INJECTION: forcing a failure. [ 545.638713][T12132] name failslab, interval 1, probability 0, space 0, times 0 [ 545.644017][ T704] usb 5-1: SerialNumber: syz [ 545.657144][T12132] CPU: 1 UID: 0 PID: 12132 Comm: syz.9.4481 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 545.657179][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.657193][T12132] Call Trace: [ 545.657201][T12132] [ 545.657210][T12132] __dump_stack+0x21/0x30 [ 545.657241][T12132] dump_stack_lvl+0x10c/0x190 [ 545.657266][T12132] ? __cfi_dump_stack_lvl+0x10/0x10 [ 545.657294][T12132] dump_stack+0x19/0x20 [ 545.657317][T12132] should_fail_ex+0x3d9/0x530 [ 545.657341][T12132] ? __cfi_ip6_dst_gc+0x10/0x10 [ 545.657361][T12132] should_failslab+0xac/0x100 [ 545.657389][T12132] kmem_cache_alloc_noprof+0x42/0x3a0 [ 545.657425][T12132] ? dst_alloc+0x13c/0x250 [ 545.657444][T12132] ? __cfi_ip6_dst_gc+0x10/0x10 [ 545.657463][T12132] dst_alloc+0x13c/0x250 [ 545.657483][T12132] ip6_create_rt_rcu+0x21d/0x4b0 [ 545.657506][T12132] ? ip6_pol_route_lookup+0x15c0/0x15c0 [ 545.657531][T12132] ip6_pol_route_lookup+0xfc3/0x15c0 [ 545.657557][T12132] ? __cfi_ip6_pol_route_lookup+0x10/0x10 [ 545.657584][T12132] ? is_bpf_text_address+0x17b/0x1a0 [ 545.657614][T12132] ? kernel_text_address+0xa9/0xe0 [ 545.657635][T12132] ? __kernel_text_address+0x11/0x40 [ 545.657656][T12132] fib6_rule_lookup+0x59d/0x6b0 [ 545.657687][T12132] ? arch_stack_walk+0x10b/0x170 [ 545.657715][T12132] ? __cfi_ip6_pol_route_lookup+0x10/0x10 [ 545.657739][T12132] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 545.657770][T12132] ? stack_trace_save+0x9d/0xe0 [ 545.657795][T12132] ? stack_depot_save_flags+0x38/0x800 [ 545.657846][T12132] ? arch_stack_walk+0x10b/0x170 [ 545.657874][T12132] ? __asan_memcpy+0x5a/0x80 [ 545.657898][T12132] rt6_lookup+0x11a/0x1d0 [ 545.657919][T12132] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 545.657951][T12132] ? __cfi_rt6_lookup+0x10/0x10 [ 545.657976][T12132] ? _raw_spin_unlock+0x45/0x60 [ 545.658005][T12132] ip6_mc_source+0x200/0x14b0 [ 545.658035][T12132] ? __kasan_check_write+0x18/0x20 [ 545.658059][T12132] do_ipv6_mcast_group_source+0x35a/0x3f0 [ 545.658086][T12132] ? ipv6_mcast_join_leave+0x200/0x200 [ 545.658112][T12132] ? __call_rcu_common+0x40b/0x6f0 [ 545.658140][T12132] ? __kasan_check_write+0x18/0x20 [ 545.658165][T12132] ? _raw_spin_trylock+0xaf/0x130 [ 545.658191][T12132] ? __cfi__raw_spin_trylock+0x10/0x10 [ 545.658218][T12132] ? __kasan_check_write+0x18/0x20 [ 545.658240][T12132] ? _raw_spin_lock_bh+0x90/0x120 [ 545.658271][T12132] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 545.658302][T12132] do_ipv6_setsockopt+0x168c/0x2ec0 [ 545.658330][T12132] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 545.658357][T12132] ? kstrtouint+0x78/0xf0 [ 545.658379][T12132] ? avc_has_perm_noaudit+0x21c/0x360 [ 545.658408][T12132] ? avc_has_perm+0x144/0x220 [ 545.658428][T12132] ? __cfi_avc_has_perm+0x10/0x10 [ 545.658454][T12132] ? selinux_socket_setsockopt+0x2ea/0x390 [ 545.658479][T12132] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 545.658506][T12132] ipv6_setsockopt+0x5d/0x170 [ 545.658532][T12132] udpv6_setsockopt+0xa3/0xc0 [ 545.658554][T12132] sock_common_setsockopt+0xb5/0xd0 [ 545.658579][T12132] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 545.658605][T12132] do_sock_setsockopt+0x26a/0x400 [ 545.658636][T12132] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 545.658670][T12132] __x64_sys_setsockopt+0x1b8/0x250 [ 545.658702][T12132] x64_sys_call+0x2adc/0x2ee0 [ 545.658728][T12132] do_syscall_64+0x58/0xf0 [ 545.658754][T12132] ? clear_bhb_loop+0x35/0x90 [ 545.658784][T12132] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 545.658813][T12132] RIP: 0033:0x7f6134f8e929 [ 545.658832][T12132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.658849][T12132] RSP: 002b:00007f6135e4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 545.658873][T12132] RAX: ffffffffffffffda RBX: 00007f61351b5fa0 RCX: 00007f6134f8e929 [ 545.658891][T12132] RDX: 000000000000002b RSI: 0000000000000029 RDI: 0000000000000003 [ 545.658904][T12132] RBP: 00007f6135e4e090 R08: 0000000000000108 R09: 0000000000000000 [ 545.658919][T12132] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 545.658933][T12132] R13: 0000000000000000 R14: 00007f61351b5fa0 R15: 00007fff92813f48 [ 545.658950][T12132] [ 546.117037][T12137] overlayfs: missing 'lowerdir' [ 546.128919][T12137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 546.128955][T12137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:146 [ 546.221297][T12139] incfs: Backing dir is not set, filesystem can't be mounted. [ 546.238102][T12139] incfs: mount failed -2 [ 546.296200][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 546.332205][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 546.363152][ T704] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 546.398502][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 546.452057][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 546.477321][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 546.532199][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 546.568569][ T10] usb 5-1: USB disconnect, device number 85 [ 546.579039][ T10] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 546.603995][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 546.644427][ T9] usb 7-1: USB disconnect, device number 18 [ 546.986860][T12151] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 547.018683][T12153] FAULT_INJECTION: forcing a failure. [ 547.018683][T12153] name failslab, interval 1, probability 0, space 0, times 0 [ 547.088237][T12153] CPU: 0 UID: 0 PID: 12153 Comm: syz.9.4489 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 547.088273][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.088287][T12153] Call Trace: [ 547.088310][T12153] [ 547.088320][T12153] __dump_stack+0x21/0x30 [ 547.088350][T12153] dump_stack_lvl+0x10c/0x190 [ 547.088376][T12153] ? __cfi_dump_stack_lvl+0x10/0x10 [ 547.088403][T12153] dump_stack+0x19/0x20 [ 547.088427][T12153] should_fail_ex+0x3d9/0x530 [ 547.088452][T12153] should_failslab+0xac/0x100 [ 547.088482][T12153] __kmalloc_noprof+0x69/0x450 [ 547.088507][T12153] ? usb_alloc_urb+0x5f/0x200 [ 547.088528][T12153] usb_alloc_urb+0x5f/0x200 [ 547.088547][T12153] ? do_proc_control+0x1e9/0xfd0 [ 547.088567][T12153] do_proc_control+0x1fe/0xfd0 [ 547.088590][T12153] proc_control+0xc9/0x120 [ 547.088620][T12153] ? destroy_async+0x210/0x210 [ 547.088648][T12153] ? mutex_lock+0x92/0x1c0 [ 547.088669][T12153] ? __cfi_vfs_write+0x10/0x10 [ 547.088695][T12153] usbdev_ioctl+0xc5b/0x20a0 [ 547.088726][T12153] ? __cfi_usbdev_ioctl+0x10/0x10 [ 547.088755][T12153] ? __fget_files+0x2c5/0x340 [ 547.088784][T12153] ? bpf_lsm_file_ioctl+0xd/0x20 [ 547.088807][T12153] ? security_file_ioctl+0x34/0xd0 [ 547.088836][T12153] ? __cfi_usbdev_ioctl+0x10/0x10 [ 547.088864][T12153] __se_sys_ioctl+0x132/0x1b0 [ 547.088894][T12153] __x64_sys_ioctl+0x7f/0xa0 [ 547.088922][T12153] x64_sys_call+0x1878/0x2ee0 [ 547.088950][T12153] do_syscall_64+0x58/0xf0 [ 547.088977][T12153] ? clear_bhb_loop+0x35/0x90 [ 547.089011][T12153] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 547.089042][T12153] RIP: 0033:0x7f6134f8e929 [ 547.089060][T12153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.089078][T12153] RSP: 002b:00007f6135e4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.089101][T12153] RAX: ffffffffffffffda RBX: 00007f61351b5fa0 RCX: 00007f6134f8e929 [ 547.089118][T12153] RDX: 0000200000000340 RSI: 00000000c0185500 RDI: 0000000000000003 [ 547.089133][T12153] RBP: 00007f6135e4e090 R08: 0000000000000000 R09: 0000000000000000 [ 547.089147][T12153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.089161][T12153] R13: 0000000000000000 R14: 00007f61351b5fa0 R15: 00007fff92813f48 [ 547.089179][T12153] [ 547.649666][T12185] netlink: 'syz.1.4498': attribute type 3 has an invalid length. [ 547.799322][ T313] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 547.917692][T12201] input: syz1 as /devices/virtual/input/input132 [ 547.991359][ T313] usb 7-1: Using ep0 maxpacket: 32 [ 548.002048][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 548.010357][ T313] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 548.034110][ T313] usb 7-1: config 0 has no interface number 0 [ 548.045569][ T313] usb 7-1: config 0 interface 184 has no altsetting 0 [ 548.067997][ T313] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 548.087617][ T313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.099179][ T313] usb 7-1: Product: syz [ 548.103391][ T313] usb 7-1: Manufacturer: syz [ 548.118837][ T313] usb 7-1: SerialNumber: syz [ 548.132961][ T313] usb 7-1: config 0 descriptor?? [ 548.161420][ T313] smsc75xx v1.0.0 [ 548.183782][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 548.220885][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 548.244035][ T10] usb 2-1: config 0 has no interface number 0 [ 548.272436][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 548.321219][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 548.341178][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.378618][ T10] usb 2-1: Product: syz [ 548.396596][ T10] usb 2-1: Manufacturer: syz [ 548.413090][ T10] usb 2-1: SerialNumber: syz [ 548.445036][ T10] usb 2-1: config 0 descriptor?? [ 548.477666][ T10] smsc75xx v1.0.0 [ 548.883489][T12230] /dev/loop0: Can't lookup blockdev [ 549.034695][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 549.056366][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 549.071330][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 549.093225][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 549.102931][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 549.114363][ T313] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 549.123941][ T313] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 549.132652][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 549.144156][ T313] usb 7-1: USB disconnect, device number 19 [ 549.145271][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 549.382830][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 549.393796][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 549.418575][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 549.431879][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 549.442647][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 549.453459][ T10] usb 2-1: USB disconnect, device number 9 [ 549.692759][T12244] input: syz0 as /devices/virtual/input/input133 [ 549.769611][T12246] SELinux: policydb string length 14080 does not match expected length 8 [ 549.801810][T12246] SELinux: failed to load policy [ 549.985225][T12254] netlink: 'syz.6.4519': attribute type 1 has an invalid length. [ 550.279149][ T313] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 550.365278][ T36] kauditd_printk_skb: 1033 callbacks suppressed [ 550.365298][ T36] audit: type=1400 audit(1750448900.195:63052): avc: denied { create } for pid=12263 comm="syz.9.4524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 550.403095][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4524'. [ 550.414428][T12269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:969 [ 550.450195][ T36] audit: type=1400 audit(1750448900.223:63053): avc: denied { read } for pid=12268 comm="syz.6.4526" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 550.487639][ T36] audit: type=1400 audit(1750448900.223:63054): avc: denied { read open } for pid=12268 comm="syz.6.4526" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 550.514834][ T313] usb 2-1: Using ep0 maxpacket: 8 [ 550.531970][ T313] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 550.539528][ T36] audit: type=1400 audit(1750448900.223:63055): avc: denied { setopt } for pid=12263 comm="syz.9.4524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 550.560896][ T313] usb 2-1: config 179 has no interface number 0 [ 550.560933][ T313] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 550.560963][ T313] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 550.567343][ T704] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 550.610370][ T36] audit: type=1400 audit(1750448900.223:63056): avc: denied { create } for pid=12263 comm="syz.9.4524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 550.611106][ T313] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 550.631234][ T36] audit: type=1400 audit(1750448900.223:63057): avc: denied { write } for pid=12263 comm="syz.9.4524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 550.666275][ T36] audit: type=1400 audit(1750448900.223:63058): avc: denied { read } for pid=12263 comm="syz.9.4524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 550.697290][ T36] audit: type=1400 audit(1750448900.223:63059): avc: denied { ioctl } for pid=12256 comm="syz.1.4520" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 550.728132][ T313] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 550.770099][ T313] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 550.781662][T12271] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 550.786497][ T36] audit: type=1400 audit(1750448900.223:63060): avc: denied { read } for pid=12263 comm="syz.9.4524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 550.811646][ T313] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 550.835092][ T704] usb 5-1: Using ep0 maxpacket: 32 [ 550.854878][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.875206][ T704] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 550.883752][T12267] audit: audit_backlog=65 > audit_backlog_limit=64 [ 550.896988][ T704] usb 5-1: config 0 has no interface number 0 [ 550.907411][T12257] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 550.922962][ T704] usb 5-1: config 0 interface 184 has no altsetting 0 [ 550.973009][ T704] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 550.985191][ T704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.999721][ T704] usb 5-1: Product: syz [ 551.017338][ T704] usb 5-1: Manufacturer: syz [ 551.021991][ T704] usb 5-1: SerialNumber: syz [ 551.028659][T12277] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 551.034406][ T704] usb 5-1: config 0 descriptor?? [ 551.048411][T12277] rust_kernel: panicked at drivers/android/binder/rust_binder.rs:288:5: [ 551.048411][T12277] attempt to add with overflow [ 551.075436][ T704] smsc75xx v1.0.0 [ 551.100853][T12277] ------------[ cut here ]------------ [ 551.106449][T12277] kernel BUG at rust/helpers/bug.c:7! [ 551.114023][T12277] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 551.121024][T12277] CPU: 1 UID: 0 PID: 12277 Comm: syz.9.4530 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 551.134609][T12277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 551.144696][T12277] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 551.150039][T12277] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 84 5b d5 65 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 ce 9f 9c e9 90 90 90 90 90 90 90 90 90 [ 551.169685][T12277] RSP: 0018:ffffc90001934510 EFLAGS: 00010246 [ 551.175789][T12277] RAX: 0000000000000062 RBX: 1ffff920003268a4 RCX: e98851f54ceb2d00 [ 551.183800][T12277] RDX: ffffc90002e77000 RSI: 0000000000005808 RDI: 0000000000005809 [ 551.191810][T12277] RBP: ffffc90001934510 R08: ffffc90001934207 R09: 1ffff92000326840 [ 551.199825][T12277] R10: dffffc0000000000 R11: fffff52000326841 R12: 0000000000000000 [ 551.207834][T12277] R13: dffffc0000000000 R14: ffffc90001934540 R15: ffffc90001934570 [ 551.215839][T12277] FS: 00007f6135e4e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 551.224802][T12277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.230653][ T65] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 551.231409][T12277] CR2: 00007f61351b7bac CR3: 000000011917e000 CR4: 00000000003526b0 [ 551.231435][T12277] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 551.254987][T12277] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 551.262998][T12277] Call Trace: [ 551.266299][T12277] [ 551.269264][T12277] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 551.276764][T12277] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 551.284788][T12277] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 551.298368][T12277] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 551.305612][T12277] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 551.313558][T12277] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 551.323483][T12277] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 551.334218][T12277] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x656e/0x6e00 [ 551.344763][T12277] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 551.355686][T12277] ? is_bpf_text_address+0x17b/0x1a0 [ 551.361021][T12277] ? is_bpf_text_address+0x17b/0x1a0 [ 551.366345][T12277] ? kernel_text_address+0xa9/0xe0 [ 551.371487][T12277] ? __kernel_text_address+0x11/0x40 [ 551.376797][T12277] ? unwind_get_return_address+0x51/0x90 [ 551.382462][T12277] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 551.388649][T12277] ? arch_stack_walk+0x10b/0x170 [ 551.390970][ T65] usb 7-1: Using ep0 maxpacket: 32 [ 551.393619][T12277] ? stack_trace_save+0x9d/0xe0 [ 551.393654][T12277] ? stack_depot_save_flags+0x38/0x800 [ 551.405477][ T65] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 551.409075][T12277] ? x64_sys_call+0x1878/0x2ee0 [ 551.422121][T12277] ? do_syscall_64+0x58/0xf0 [ 551.426745][T12277] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 551.432221][ T65] usb 7-1: config 0 has no interface number 0 [ 551.432856][T12277] ? is_bpf_text_address+0x17b/0x1a0 [ 551.440870][ T65] usb 7-1: config 0 interface 184 has no altsetting 0 [ 551.444213][T12277] ? kernel_text_address+0xa9/0xe0 [ 551.444245][T12277] _RNvMNtCshgDM7dBCdno_11rust_binder11transactionNtB2_11Transaction3new+0x331/0x2040 [ 551.460319][ T65] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 551.465654][T12277] ? __cfi__RNvMNtCshgDM7dBCdno_11rust_binder11transactionNtB2_11Transaction3new+0x10/0x10 [ 551.475969][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.484689][T12277] ? stack_depot_save_flags+0x38/0x800 [ 551.484723][T12277] ? audit_log_end+0x1f1/0x240 [ 551.484748][T12277] ? kasan_save_track+0x4f/0x80 [ 551.496846][ T65] usb 7-1: Product: syz [ 551.498209][T12277] ? kasan_save_track+0x3e/0x80 [ 551.498243][T12277] ? kasan_save_alloc_info+0x40/0x50 [ 551.505629][ T65] usb 7-1: Manufacturer: syz [ 551.507871][T12277] ? __kasan_kmalloc+0x96/0xb0 [ 551.513874][ T65] usb 7-1: SerialNumber: syz [ 551.516900][T12277] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 551.516936][T12277] ? krealloc_noprof+0x8d/0x130 [ 551.528149][ T65] usb 7-1: config 0 descriptor?? [ 551.531560][T12277] ? rust_helper_krealloc+0x33/0xd0 [ 551.531590][T12277] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 551.545940][ T65] smsc75xx v1.0.0 [ 551.547615][T12277] ? _RINvMNtNtCs43vyB533jt3_6kernel4list3arcINtB3_7ListArcINtCshgDM7dBCdno_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x79/0x3b0 [ 551.593963][T12277] ? _RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x81c/0xdd0 [ 551.606152][T12277] ? _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1e80/0x9d20 [ 551.615899][T12277] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 551.625204][T12277] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 551.633905][T12277] ? __se_sys_ioctl+0x132/0x1b0 [ 551.638813][T12277] ? __x64_sys_ioctl+0x7f/0xa0 [ 551.643607][T12277] ? x64_sys_call+0x1878/0x2ee0 [ 551.648565][T12277] ? do_syscall_64+0x58/0xf0 [ 551.653269][T12277] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 551.659371][T12277] ? kasan_save_alloc_info+0x40/0x50 [ 551.664666][T12277] ? __kasan_kmalloc+0x96/0xb0 [ 551.669453][T12277] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 551.676058][T12277] ? rust_helper_krealloc+0x33/0xd0 [ 551.681277][T12277] ? krealloc_noprof+0xfa/0x130 [ 551.686160][T12277] ? rust_helper_krealloc+0x33/0xd0 [ 551.691378][T12277] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 551.701022][T12277] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xbe/0x100 [ 551.710596][T12277] ? rust_helper_REFCOUNT_INIT+0x10/0x20 [ 551.716252][T12277] _RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x88e/0xdd0 [ 551.728249][T12277] ? __cfi__RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 551.740786][T12277] ? __kasan_check_write+0x18/0x20 [ 551.745916][T12277] ? _raw_spin_lock+0x8c/0x120 [ 551.750702][T12277] ? __cfi__raw_spin_lock+0x10/0x10 [ 551.755938][T12277] ? __kasan_check_write+0x18/0x20 [ 551.761079][T12277] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1e80/0x9d20 [ 551.770675][T12277] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 551.780631][T12277] ? is_bpf_text_address+0x17b/0x1a0 [ 551.785956][T12277] ? kernel_text_address+0xa9/0xe0 [ 551.791099][T12277] ? __kernel_text_address+0x11/0x40 [ 551.796394][T12277] ? unwind_get_return_address+0x51/0x90 [ 551.802052][T12277] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 551.808230][T12277] ? arch_stack_walk+0x10b/0x170 [ 551.813195][T12277] ? stack_trace_save+0x9d/0xe0 [ 551.818071][T12277] ? stack_depot_save_flags+0x38/0x800 [ 551.823553][T12277] ? stack_depot_save+0x12/0x20 [ 551.828427][T12277] ? kasan_save_stack+0x4d/0x60 [ 551.833312][T12277] ? kasan_save_stack+0x3e/0x60 [ 551.838188][T12277] ? __kasan_record_aux_stack+0xb2/0xd0 [ 551.843758][T12277] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 551.849749][T12277] ? __call_rcu_common+0xcc/0x6f0 [ 551.854797][T12277] ? call_rcu+0x14/0x20 [ 551.858984][T12277] ? __kasan_check_write+0x18/0x20 [ 551.864125][T12277] ? _raw_spin_trylock+0xaf/0x130 [ 551.869182][T12277] ? __cfi__raw_spin_trylock+0x10/0x10 [ 551.874667][T12277] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 551.880780][T12277] ? _raw_spin_unlock+0x45/0x60 [ 551.885666][T12277] ? call_rcu_nocb+0x6bd/0xc10 [ 551.890446][T12277] ? swake_up_one_online_ipi+0x30/0x30 [ 551.895943][T12277] ? __cfi_mt_free_rcu+0x10/0x10 [ 551.900929][T12277] ? mas_leaf_max_gap+0x496/0x690 [ 551.905989][T12277] ? cgroup_rstat_updated+0x132/0x7f0 [ 551.911387][T12277] ? is_bpf_text_address+0x17b/0x1a0 [ 551.916701][T12277] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 551.922455][T12277] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 551.927962][T12277] ? update_curr_dl_se+0x10c/0xb20 [ 551.933117][T12277] ? is_bpf_text_address+0x17b/0x1a0 [ 551.938441][T12277] ? kernel_text_address+0xa9/0xe0 [ 551.943596][T12277] ? __kernel_text_address+0x11/0x40 [ 551.948946][T12277] ? unwind_get_return_address+0x51/0x90 [ 551.954682][T12277] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 551.960898][T12277] ? arch_stack_walk+0x10b/0x170 [ 551.965923][T12277] ? stack_trace_save+0x9d/0xe0 [ 551.970831][T12277] ? stack_depot_save_flags+0x38/0x800 [ 551.976339][T12277] ? _raw_spin_unlock+0x45/0x60 [ 551.981238][T12277] ? kasan_save_track+0x4f/0x80 [ 551.986135][T12277] ? kasan_save_track+0x3e/0x80 [ 551.991020][T12277] ? kasan_save_free_info+0x4a/0x60 [ 551.996254][T12277] ? __kasan_slab_free+0x5f/0x80 [ 552.001210][T12277] ? kmem_cache_free+0x1c1/0x4c0 [ 552.006171][T12277] ? audit_log_end+0x1f1/0x240 [ 552.010970][T12277] ? common_lsm_audit+0x148c/0x1860 [ 552.016190][T12277] ? slow_avc_audit+0x18d/0x1f0 [ 552.021069][T12277] ? avc_has_extended_perms+0x895/0xdd0 [ 552.026650][T12277] ? ioctl_has_perm+0x384/0x4d0 [ 552.031552][T12277] ? selinux_file_ioctl+0x6e0/0x1360 [ 552.036871][T12277] ? security_file_ioctl+0x58/0xd0 [ 552.042027][T12277] ? __se_sys_ioctl+0x53/0x1b0 [ 552.046819][T12277] ? __x64_sys_ioctl+0x7f/0xa0 [ 552.051620][T12277] ? x64_sys_call+0x1878/0x2ee0 [ 552.056490][T12277] ? do_syscall_64+0x58/0xf0 [ 552.061115][T12277] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 552.067219][T12277] ? _raw_spin_unlock+0x45/0x60 [ 552.072102][T12277] ? rust_helper_spin_unlock+0x19/0x30 [ 552.077579][T12277] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 552.088103][T12277] ? kmem_cache_free+0x1c1/0x4c0 [ 552.093071][T12277] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 552.103851][T12277] ? audit_log_end+0x1f1/0x240 [ 552.108637][T12277] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 552.114674][T12277] ? common_lsm_audit+0x148c/0x1860 [ 552.119899][T12277] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 552.125921][T12277] ? slow_avc_audit+0x18d/0x1f0 [ 552.130800][T12277] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 552.139963][T12277] ? avc_denied+0x112/0x180 [ 552.144502][T12277] ? avc_has_extended_perms+0x895/0xdd0 [ 552.150170][T12277] ? avc_has_extended_perms+0x91a/0xdd0 [ 552.155751][T12277] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 552.165342][T12277] ? do_vfs_ioctl+0xeda/0x1e30 [ 552.170157][T12277] ? __futex_queue+0x19a/0x340 [ 552.174961][T12277] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 552.180616][T12277] ? __cfi___futex_queue+0x10/0x10 [ 552.185752][T12277] ? futex_wait_setup+0x1bc/0x260 [ 552.190882][T12277] ? __futex_wait+0x218/0x2a0 [ 552.195585][T12277] ? ioctl_has_perm+0x384/0x4d0 [ 552.200472][T12277] ? has_cap_mac_admin+0xd0/0xd0 [ 552.203893][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 552.205434][T12277] ? futex_wake+0x5fb/0x900 [ 552.205463][T12277] ? futex_setup_timer+0xb4/0xd0 [ 552.217647][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 552.220719][T12277] ? futex_wait+0x288/0x540 [ 552.220748][T12277] ? __cfi_futex_wait+0x10/0x10 [ 552.244132][T12277] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 552.250067][T12277] ? selinux_file_ioctl+0x6e0/0x1360 [ 552.255392][T12277] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 552.260983][T12277] ? __cfi_do_mmap+0x10/0x10 [ 552.265608][T12277] ? down_write_killable+0xe9/0x2d0 [ 552.270843][T12277] ? do_futex+0x309/0x500 [ 552.275213][T12277] ? __cfi_do_futex+0x10/0x10 [ 552.279927][T12277] ? vm_mmap_pgoff+0x145/0x4e0 [ 552.284737][T12277] ? __fget_files+0x2c5/0x340 [ 552.289453][T12277] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 552.297993][T12277] ? __se_sys_ioctl+0x114/0x1b0 [ 552.302887][T12277] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 552.312051][T12277] __se_sys_ioctl+0x132/0x1b0 [ 552.316774][T12277] __x64_sys_ioctl+0x7f/0xa0 [ 552.321393][T12277] x64_sys_call+0x1878/0x2ee0 [ 552.326097][T12277] do_syscall_64+0x58/0xf0 [ 552.330545][T12277] ? clear_bhb_loop+0x35/0x90 [ 552.335258][T12277] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 552.341266][T12277] RIP: 0033:0x7f6134f8e929 [ 552.345705][T12277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.365416][T12277] RSP: 002b:00007f6135e4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.373872][T12277] RAX: ffffffffffffffda RBX: 00007f61351b5fa0 RCX: 00007f6134f8e929 [ 552.381868][T12277] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000003 [ 552.389861][T12277] RBP: 00007f6135010b39 R08: 0000000000000000 R09: 0000000000000000 [ 552.397860][T12277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.405858][T12277] R13: 0000000000000000 R14: 00007f61351b5fa0 R15: 00007fff92813f48 [ 552.413851][T12277] [ 552.416920][T12277] Modules linked in: [ 552.421246][T12277] ---[ end trace 0000000000000000 ]--- [ 552.427669][T12277] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 552.437536][T12277] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 84 5b d5 65 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 ce 9f 9c e9 90 90 90 90 90 90 90 90 90 [ 552.457896][T12277] RSP: 0018:ffffc90001934510 EFLAGS: 00010246 [ 552.470360][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 552.470831][T12277] RAX: 0000000000000062 RBX: 1ffff920003268a4 RCX: e98851f54ceb2d00 [ 552.492747][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 552.495793][T12277] RDX: ffffc90002e77000 RSI: 0000000000005808 RDI: 0000000000005809 [ 552.504315][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 552.518275][ T687] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input136 [ 552.534865][ T65] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 552.539657][T12277] RBP: ffffc90001934510 R08: ffffc90001934207 R09: 1ffff92000326840 [ 552.555718][T12277] R10: dffffc0000000000 R11: fffff52000326841 R12: 0000000000000000 [ 552.564110][ T65] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 552.566961][T12277] R13: dffffc0000000000 R14: ffffc90001934540 R15: ffffc90001934570 [ 552.582548][T12277] FS: 00007f6135e4e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 552.593767][T12277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.594471][ T65] usb 7-1: USB disconnect, device number 20 [ 552.603008][T12277] CR2: 00007f2343327fe8 CR3: 000000011917e000 CR4: 00000000003526b0 [ 552.616711][T12277] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 552.626422][T12277] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 552.652472][T12277] Kernel panic - not syncing: Fatal exception [ 552.658840][T12277] Kernel Offset: disabled [ 552.663182][T12277] Rebooting in 86400 seconds..