last executing test programs: 5m40.674185529s ago: executing program 0 (id=37): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x40000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x6c, 0xf9, 0xd3, 0x10, 0x4cb, 0x100, 0x51f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0xa0, 0x7, [{{0x9, 0x4, 0x2f, 0x6, 0x0, 0x5c, 0xc3, 0x3c, 0x8}}]}}]}}, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) write$evdev(r0, 0x0, 0x0) 5m39.996413519s ago: executing program 0 (id=42): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x8442, 0x50, 0x4}, 0x18) socketpair(0x2a, 0x6, 0x200, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @mcast1, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa5}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @remote, 0xa5}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x218c}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x902}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58da6cb5}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x97}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2de3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff2525}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x214}}, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xd1383000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r6, 0x29, 0x2, 0x0, &(0x7f0000000000)) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r7, r5, r5, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r8, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x193}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x18c, r4, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffffff7, 0x1c}}}}, [@NL80211_ATTR_FRAME_MATCH={0xea, 0x5b, "3f5ac534efbbe2bf0c84e9c400deca82553eec0fc75a0e8fb66650531a2978b236c2dbebb5d4e3d8dd7845d274a7a23424d3510c01e1975499e7799bc4e8cd679991b3f8e1c4cbec241e067d050127777546e592421377d34938c1e18293f2bdfe78fbda300004e5e89137457e84a1662ed32497fce0358785d327adba85687d846422baebfb0d2dd4c75200e6af770e4e1e938d9621fa3dbe4e8a542ea1d813bc67d8a5033ca45209e08e308020a76f30be3ae453aadca3847647e96e88ed904b5cf3cc072a03cadaa069bd61e80cdb31a35ac25fc96eccb393e4631c77deba65c93697d99a"}, @NL80211_ATTR_FRAME_MATCH={0x14, 0x5b, "914d53dbb7fc82fe06c74bdece97b491"}, @NL80211_ATTR_FRAME_MATCH={0x51, 0x5b, "dcaf8a4ddcc4c8188f4da806198d17dcc0a4f04008025940e90aa2be1bbf08d068d1b9f8514d9dd9508fdec6c212553f2a664b9890d5dddc7f7e2d3b8d6c566abe645c3c6a5e743cc074cda256"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 5m39.882996991s ago: executing program 0 (id=44): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendto$inet(r1, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r3, &(0x7f00000004c0)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1ebf4bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91b5dc81aa034b61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5a", 0xed, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x1}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000380)={0x1, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x88) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 5m39.741727164s ago: executing program 0 (id=45): r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x200, 0x4000003, 0x0, 0x0, 0x4, "7f12ddc1517600000000000000000000000002"}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10001, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72fad530783030303030306532322c756e616d653d2e2f62696e6465726673002e00b338f846d239a19306183e72b4835ae1d4b153fd4b00"/83]) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f000009df00)={0x79, 0x0, 0x1}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x786d) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0xffffffff, 0xfffdb56e, 0xe14, 0x1, 0x7f}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = getuid() quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000001c0)=@sg0, r7, &(0x7f0000000280)={0x4, 0x54ee}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ptrace$peeksig(0x4209, r4, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x3) epoll_pwait(r0, &(0x7f0000000340), 0x0, 0x80005d0b, 0x0, 0x11) 5m39.634320475s ago: executing program 0 (id=46): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) setuid(0xee00) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x2a, 0xa01, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000a40)={0x1d94, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf2}, @NL80211_ATTR_CSA_IES={0x1d70, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x1000, 0xf0d, 0xfff8, 0x0, 0x8, 0x7, 0x4]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x60, 0x7f, [@random={0x7, 0x57, "6104fe61627071c438380b7f2aa1b3489b487a08d51eeaff1c1e821b1970b54c402b5a51136507385ce2a2240ddb1d1a0828c6b58d61ded278124eb780aafd5232522f4696d8975a2508bc2c8d185b797dc7da7c7c3cb1"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x42c, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x118, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2000}, @broadcast, @device_b, @random="8573896c1346", {0x0, 0x7}}, 0x100000001, @default, 0x400c, @void, @val={0x1, 0x3, [{0x2}, {0x1b, 0x1}, {0x12, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x72, 0xd, 0x2}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40}}, @val={0x76, 0x6, {0x5, 0x7f, 0x2b, 0x2}}, [{0xdd, 0xc6, "e68d89edf5d70aad9570934b6b44cf3788c958930f59c7a475f74d355ec67ad2112f155f00e5ddf7a03bf2582c82aa653e5d5d72e12c745c26d01bd9e7a9b387c0aafe2b782c2f7470c36af1aee7c7a5ce834b9fa564d25729374aa124f41a1d4bd3515270330a53f5c173b4133637b4c7fe17edd496d8bead7b6face68f59429102b3feae763945755a80f281f3a62e9975d5677bd92a44063583861b45d785e9e1aa4fd1f0b7cb1cad7faa1fc26b6b7f7ee7549e06f5a01d91cdf2f699929afcfb2618eebd"}]}}, @NL80211_ATTR_BEACON_TAIL={0x37, 0xf, [@cf={0x4, 0x6, {0x1, 0x9, 0x40, 0xfc01}}, @mic={0x8c, 0x10, {0xdde, "aff1b53c2efc", @short="cd53db7aca3d9b39"}}, @cf={0x4, 0x6, {0xcd, 0x0, 0x0, 0x5}}, @perr={0x84, 0xf, {0x0, 0x1, [{{}, @device_b, 0x2, @void, 0xa}]}}]}, @NL80211_ATTR_PROBE_RESP={0x85a, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x12, 0x80, [@chsw_timing={0x68, 0x4, {0xe223, 0x2}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x12, 0x80, [@chsw_timing={0x68, 0x4, {0x2, 0x8}}, @mesh_chsw={0x76, 0x6, {0x0, 0xfe, 0x2d, 0x2e2}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1b2, 0x7f, [@supported_rates={0x1, 0x7, [{0x30}, {0x60}, {0x6, 0x1}, {0x24, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}]}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @preq={0x82, 0x83, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0xdf, 0x2, 0x1, @device_b, 0xff000000, @value=@device_b, 0x8, 0x1, 0x9, [{{0x0, 0x0, 0x1}, @device_a, 0xb92}, {{0x1, 0x0, 0x1}, @device_a, 0xa43b}, {{0x1}, @broadcast, 0x8}, {{}, @broadcast, 0x9}, {{}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @broadcast}, {{0x1}, @device_b, 0x40}, {{0x1}, @device_b, 0x1000}, {{0x1}, @device_a, 0x4}]}}, @cf={0x4, 0x6, {0x2, 0x10, 0x401, 0x1000}}, @fast_bss_trans={0x37, 0x102, {0x1, 0x8, "53121c302108a521fb24076f05437517", "0c58c77fbaadb6ba6f3d716730068f4e69ed183dee85e5a2c730a9cf4796a097", "74c4bcb99970e1f8a5e5068b8e1db7e2197723f62a1b4ea3f66d5fe32fab9f99", [{0x1, 0x28, "e6d344f5759f3ef910ca282e37fa1d515933087d23dbfe7c2855625f845d975f6a9b0ed3791f1212"}, {0x2, 0x25, "e73e5fbe6f339d05d71ba36ffc762285d83a1e1b820ce9b812ccc01101fb0c2ad5b7ac73c4"}, {0x3, 0x8, "3c7f2a0dffac70a1"}, {0x2, 0x1c, "d53d15deaf135989a2ece1aa610ea1636de91cb95ac6654e8ff04f5f"}, {0x0, 0x8, "1ef489a78f45d488"}, {0x3, 0x8, "57d5536a3cdc5a4e"}, {0x2, 0xa, "24b69f761f47aa9d2ea0"}, {0x3, 0x15, "c88c68ec6036c05f36d63f0dd42479758f8a8baef0"}]}}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1b1, 0x7f, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @erp={0x2a, 0x1, {0x1}}, @gcr_ga={0xbd, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0xb5, 0x8}}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x10, 0x6d, "d45d2336e1f1a1167e9561c2e579ac93a8eeb9ee618176fd7e91e0bf3a79137b5e7728e607645bd80f24d66b84fd9d27874141f4670986f0949aa7f90203ee187917c06f088cb0e4e0c679afd70af560bd197991b44c5e505bcd5d2fe764c9e279882170e85a96f129fb847415"}, @gcr_ga={0xbd, 0x6, @broadcast}, @random_vendor={0xdd, 0xdf, "f28cde5dae7b729f44ef62ecf85cf37e31c88edb42d3991b154bc19eb50460c9c18e0be7892a9e283b5666041653ceedd24ed81f8ef5428296cdb3324bc18350134cfb52bf5889b5ece3b0b9a65df4b3205c1968c826b350da610202704cd6dba11d2097c7a3efb02bc618d8643e7ecc0412285d16d088d75845fbd8f3e005fc7026594248c55f84fd653be7fe3e7214e839a038316efb8d409aa0dbcdf2150650581598419ae405b953d990c2538e52403027575feddd22d9c6294b6231bc1e5ca6a355e8da4c04a27e1aef80ba4abf1742080319e9fc077e5f9a4d821526"}, @prep={0x83, 0x1f, {{}, 0xfd, 0x2, @broadcast, 0x0, @void, 0x2, 0x5, @device_a, 0x8000}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc5, 0x80, [@sec_chan_ofs={0x3e, 0x1}, @preq={0x82, 0x6d, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x80, 0x2, 0x7, @device_a, 0xf2, @value=@device_b, 0x6, 0x800, 0x7, [{{0x1, 0x0, 0x1}, @device_a, 0x8}, {{}, @device_a, 0xb622}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{0x1}, @device_b, 0xf9}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @device_b, 0x9}, {{0x1}, @device_b, 0xcc}]}}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x8, 0x7, 0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0xfffffff7}}, @ibss={0x6, 0x2, 0x2}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0x40, @broadcast, 0x9, @value, 0x282b, 0xd12, @device_b, 0x6}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0x25, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3, 0x20}}, @gcr_ga={0xbd, 0x6}, @peer_mgmt={0x75, 0x6, {0x0, 0x6, @void, @val=0x34, @void}}, @peer_mgmt={0x75, 0x6, {0x0, 0x2, @val=0x4, @void, @void}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x7, 0x2, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x113, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x4, 0x1}}, @peer_mgmt={0x75, 0x6, {0x1, 0x6993, @void, @val=0x3d, @void}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @random_vendor={0xdd, 0xf9, "81f0bc76ecd3e9811d80eb6b59cbeaa3fec1691faf9571473c2b51f08349ca5d13c00721bd9fd39d4cc156dcdce29481cec0d55b8f8dbc5b727f5caed2a6e79c30e91d7201eac2cefaa633a0f46b4d668073045dc52046f37257d055444f881f2fd76fafdc4df394d3e291245d236e3f37c9c4a5fb17743a5fc925ebeeee5b3ca493fb560931e35c3b5b2028ac56dabee9b54b9bbeebf1efd61513c1da481c140efd5bbf3ca840c5b9fe879beb7dde41deefdd40d82b9c3edca7b7df98f21924a4d8262c90c16d29c6404363a2cfc86944b704ac69ff582a664c585753e48d0ac88508576a897bef8a53a7b8acb8636ce11817e57208d3585f"}, @challenge={0x10, 0x1, 0xbe}]}, @NL80211_ATTR_BEACON_HEAD={0xf2, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @initial, {0x1, 0x1}, @value=@ver_80211n={0x0, 0x6, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x0, @random=0x9, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x28}, @val={0x4, 0x6, {0x6, 0xb, 0x7, 0x6}}, @val={0x6, 0x2, 0x8000}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @void, @void, [{0xdd, 0x3c, "96f5592f335cf34eec9238eae570833be1784bde9f846314dc3135e336f0934fe7fcf935f5edad7819e4e4966bd1f7baf7593dfddeb152c463921b95"}, {0xdd, 0x1b, "deb710491332ac6cc4ce1528a7198feb4395e1ec43f2e9cc968eec"}, {0xdd, 0x4f, "273e920141b6ca728522356df657d97aaf3b54ff1b8043f87ea0dfde4186b4269708a189dfff22bb58cf178b832a6d3af47b6b4c7257b0fe1a61e9e1ff9885e9b4c7cc4ca42dee49544fa535602a11"}]}}, @NL80211_ATTR_BEACON_TAIL={0x403, 0xf, [@measure_req={0x26, 0x3f, {0x1, 0x4, 0x6, "7b2f08c6e683431807c18f708416dcce64b7f435f1ae121c6f0903b4d398b144b5bc065ac06ce5868774269397140ee15c589095d7ecc5726cd4c855"}}, @random={0xec, 0x3f, "4cd132bd81b8272ad98f934257e09f6a5974e00101bf3f50f654b9582cba54120d60422b34f08e08d77fd2d63d5223cd35959db60ecd775ca7d63eb251ed57"}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x8, 0x3, @broadcast, 0x6, 0x0, 0x7fffffff}}, @measure_req={0x26, 0xbb, {0xe, 0xf9, 0x0, "be20a0367f78d15aab58ffbd35314b4c28e8fb9b32b95a4c93b1f1f927d44bca81164a73b83cc58da24e6ebc1f37d51f1d799dfb0851edc497f31caaa594802232058487871f219212bf95aea209e81f3c93e1a837d8442815754fbf56ed2a3f8de58da98052a7df04577f78d8175621579a04a3176187f31cd4e719ab07f4cec2b24acb331d138720b5ebd2f62b690ff18b04541152bbc4376c6fd0825e18329cf3b2b5b558b1758e3e4e5eb2086b0949aa67cdcc5be09f"}}, @ibss={0x6, 0x2, 0x9}, @fast_bss_trans={0x37, 0x114, {0x94, 0x9, "fe2339fafed76dd5826710715d777c78", "4da65b4118260242dbba27a80fd658140abb004e5f72607d1cdabfa5ba3e4d81", "c8df766931ea26a20481406aaf2484d56929966f73649912936758c068de7545", [{0x1, 0x6, "65229d358e09"}, {0x2, 0x14, "a5a5ca8c01bd60eda092a29bd269fea9c73e472e"}, {0x3, 0x1a, "a6d5b9aac7363881080adb9462f834ba03b26209f0ba0bc944db"}, {0x1, 0x20, "4cc47c44456babe9a9d9778c99f8af940992f9e19ad57dcbcb75d1f6d3e2c107"}, {0x3, 0x13, "f7d5ffdc3e2eff410674f50001aba6eba606c3"}, {0x3, 0xc, "6d278dc8c52509353e76ef97"}, {0x4, 0x14, "546af7024ff5cd810eb7b4720f8b98e2cf9ddc2c"}, {0x3, 0xe, "7a30cdf40cbdbf8db069b5367506"}, {0x1, 0x1b, "e903c064f5284e75ff4cda93a2e1853d46b117ebffeaa1e9d0cec6"}]}}, @dsss={0x3, 0x1, 0x78}, @preq={0x82, 0x2b, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x80, 0x3, 0x1ee772b2, @broadcast, 0x6, @value=@broadcast, 0x61, 0x7fffffff, 0x1, [{{}, @device_a, 0x3}]}}, @random={0xff, 0x5e, "7b37743d839a9c61be08a6f1fbc73b238c145a3a9d121b14a05a0553eb97640992776fa92ecdd42bac2d16f1e56020ea742bfd85ec6c4602da8eaa2cf992860b1a1275206969a6f8b652a27dceaf80e49a0c23e0456bbe595df7b31b6a39"}, @random={0x1, 0xfd, "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"}]}, @NL80211_ATTR_IE={0x8c, 0x2a, [@fast_bss_trans={0x37, 0x86, {0xef, 0x2, "6521a21cd3512cc71f28bd9aca2c0d7d", "00185bb1089da0ee35921a95ce1ba1049e9415079e845e0e591ccb05f022a5f6", "5ecff105a946b99b5d438ac0f3f1c977dcfd08be2fc17632eed2c7409f3d71bb", [{0x1, 0x28, "76e5141eb9b35d584aa9f16139e0daad5670f12fa7bc59ae39f0202489ac7aa8ec23e8854e890937"}, {0x2, 0x8, "7a059058a832c829"}]}}]}, @NL80211_ATTR_PROBE_RESP={0xa3, 0x91, "9ffeee90179b45baf6531f8a6da5930a9980db5e32b3b3cc64c3e60c23406623da7584bbf1ad6b9ba43ee29bd61c57162cf968cb86eea4d7d8b38077d7f67d7661e2f7390cc421ba86bb733b873876e2d4390f6e1a4a92f743307ed58dee69b2c8f43ca6efdc7cadc0526aa02d694693ee76477f7e43b90488dd853e580b022a1bac02f3e95c3497337440ac2c0bef840bab974b67a91c530d8f3eb6d728d1"}, @NL80211_ATTR_BEACON_HEAD={0x18d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @random="15fef4d5f6b1", {0xc, 0x2}}, 0x8, @random=0x2, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x30, 0x1}]}, @void, @val={0x4, 0x6, {0xd3, 0xf8}}, @val={0x6, 0x2, 0x5}, @val={0x5, 0x57, {0x81, 0x22, 0x8, "89afc439d7933af099e62bda86c712112fa20b43b8f4326dfa99f90f466e141e88836b691f3b7961869fc64833290e75e1c7f47d6ecb43c06a15530f6814c8f45a829bd2abe99013f365649f2a02ecae48973f2d"}}, @val={0x25, 0x3, {0x0, 0x68, 0x2}}, @void, @val={0x3c, 0x4, {0x1, 0x9, 0xb7, 0x9}}, @val={0x2d, 0x1a, {0x10, 0x3, 0x1, 0x0, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x6, 0x4, 0x6}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x41}}, @val={0x76, 0x6, {0x8, 0x80, 0x2, 0xfff}}, [{0xdd, 0x5a, "9f9e1747e7b19ac88cbff3a024269eb5d94ac45430d71a1408db71d6cb04952e6e9bc77cc1be4582dfce2af636cedbe85a1cb05749ecd522c8473b51f13e6b3292adf5337c66196e12386f21b47633539c3c7137a9199def2d4c"}, {0xdd, 0x57, "1ac64229d8857e5b68432d2a95c2509fa59fccbd38edd87dfa2b27ec60e131d5aa4a1ccdc92157ae995ded9203a945db2744557040fc0ce5e96169143d5166837c1fcea2ba9e070e5bd2888293d26fd11e9139e3e25693"}]}}, @NL80211_ATTR_PROBE_RESP={0x1b9, 0x91, "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"}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x73}]}, 0x1d94}, 0x1, 0x0, 0x0, 0xc001}, 0x810) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5m39.548261036s ago: executing program 0 (id=47): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000028c0), 0x124001, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x10001}}, {@max_read={'max_read', 0x3d, 0xd}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x400000000000000}}, 0x28) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x2043, 0x4004, 0x3, 0x3}, 0x10) 5m39.469315517s ago: executing program 32 (id=47): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000028c0), 0x124001, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x10001}}, {@max_read={'max_read', 0x3d, 0xd}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x400000000000000}}, 0x28) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x2043, 0x4004, 0x3, 0x3}, 0x10) 5m14.782054104s ago: executing program 2 (id=314): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000040a4010902240001000000000904000001030000000921050000012205000905810300"], 0x0) r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="f8200b6e93f6ae3e0cbddda78b7488da38db61948220bffe4729f7b4b5715b788a1e76a2774a4e0bc0183d4ed22818952f178da81e3eee65177ce2391ba6f4d5e6b25b0abdeff083223b5f090f4d02f5e31f9659a2e024969c83a11da3561c6c50a72bb62cc825903d9a67661bfe0c5555b57db4988c962edbef8866c4e9694fff3245b75fc34b6d90ba04d5971e267cdf5f34bcfbe3e516a98e24ed65a377e72f8e3237deaa9bfef275c7ce3996393eecc05e45323d69e8725700b78bf48003c4b9f1a4104b0152222e06045ec0b7ec1ed4", 0xd2, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$reject(0x13, r0, 0x124d20c4, 0x3, r1) keyctl$setperm(0x5, r0, 0x42200) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="3d9281da8ba6e59fc544f61600dba964ad01d66deb11376de8845b2f4de5a7dcd1e8b32c67c00130d74aeca9f03604b6ca662edbc2acaf82c7bbd9e80cba8b653e34658f74ec247ab7d7e67a30d293e02ab8101df3a69b10e942395a7b22a8f62421a1c981f24763b94324e30f337372fa50aa8779811aeb2416484fb5da51f9f3e4990879e2646096f0db0e75703750742cdc25dbe6230e7f3e6ae9a0", 0x9d, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="0dcdbaa0d6dc9dce68e3f75486bb1f7db1699e2cfebc6c8f3b530e1a897023ca2e0950387d64f048502b886a9882691ed7e48664d7d2fce0081b131c6d7bd80b9e7cb6a74cfc18694d62df3f4703445ee2ce8d641282c7702d94ceafbed470b0aabeb2069a4d0e9f61fe6bdb8ece60f089a616848f63", 0x76, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r2, r3}, &(0x7f00000002c0)=""/215, 0xd7, &(0x7f00000004c0)={&(0x7f00000003c0)={'ghash\x00'}, &(0x7f0000000400)="571fcf69860e8ac0f1e82593000fbc2f1bf6a2a4826af41113fcb2053fe85b34db8521a0edd6e30aaf1138674f2100bcce106f8135e482fa366f6bca0743b7a54aa8f513675ab9c8a6088d9cfd47cf8ca62660f7eeaee9ece4c28f5b092cd5a88b1fcb8fcf3ecda11df42b7b612bfab86393ba6a196968cacae36489d160483f3a272126e62804ee2159ad81a8ef75", 0x8f}) 5m13.599170662s ago: executing program 2 (id=321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0xc, 0x0) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async, rerun: 32) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='\x80l\x03\x00\xc5\x10\xaa\xc1D\xc8U\x9e>\xcd\xdd\xa2g\xec\x11\xe5\xc7:') (async, rerun: 32) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) (async) write$UHID_CREATE(r2, &(0x7f0000000280)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/213, 0xd5, 0x1ff, 0x4, 0x400, 0x5, 0x2}}, 0x120) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 5m13.564365352s ago: executing program 2 (id=322): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0x5, 0x4) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f00000040c0)) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r4, &(0x7f0000000140)="2bd4f6878cf9e2ba2b8bea23e8131a6e1bc6cd77a7d2618b646f874956f8e07d647c7eda9f501141c11d56366eb9a70be9ff4f3d8b9c6eab348465510d6f6dde6b0397d4b618d6c9790dd8babf3a88f56227925d0f62bb2cd7462f0b7bbf5d256fcd1839eaf30ea7eddbb365793c9e52bac3ac42f2aaff9e08d5403c31675e9dc661bf753d0d1bc927aadc46481d30faee24ec5c8993b876cf3972b89be6f33f27bf22d868d607ccbe1b32fc7956757bc4b7b633348425a242b8ef1b96ddc9e84ce61c6379591599720cbfdeb09af1e7a4e4cec0982fd78e0acd82796ef423a62f533e7c5303185a2f73c84e7db2b585", 0xf0, 0x1000, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) 5m13.563952022s ago: executing program 2 (id=323): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000980)={{{@in=@loopback, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0xa0, 0x20, 0x3a}, {0xd, 0x4, 0x9, 0x5, 0xfff, 0x7ff, 0x8, 0x4}, {0x3, 0x7, 0x6, 0x1ff}, 0xfffffff9, 0x6e6bbe, 0x2, 0x0, 0x3, 0x2}, {{@in=@empty, 0x4d2, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x34ff, 0x4, 0x9dd0a50f9d3661b9, 0x3, 0x1, 0x4, 0x3}}, 0xe8) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x20080000, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) statfs(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000280)=""/160) ioctl(r1, 0x40, &(0x7f00000011c0)="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") mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r8, 0x8) 5m13.498633633s ago: executing program 2 (id=324): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'netpci0\x00', @broadcast}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2f, 0x6, 0x0, {0x4, 0x2, 0x6, 0x0, '@\\)[-\xc3'}}, 0x2f) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002200)={'ip6tnl0\x00', &(0x7f0000002180)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x5, 0x7, 0x0, @loopback, @remote, 0x10, 0x8, 0xb78, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000022c0)={'ip6tnl0\x00', &(0x7f0000002240)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x5, 0x5, 0x13, @mcast2, @local, 0x8000, 0x8081, 0x2, 0x84f}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000002380)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x1080) write$FUSE_INIT(r0, &(0x7f00000023c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x793e, 0x14440004, 0x101, 0x100, 0x81, 0xa, 0x0, 0x0, 0x8, 0x3}}, 0x50) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000002680)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002640)={&(0x7f0000002480)={0x1a8, 0x0, 0x200, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f2e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x45}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x481}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa61c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002700), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x28, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x50) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000002840)='cgroup.procs\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r8) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000002880)={0x3, 0x5, {0x1, @usage=0x4, 0x0, 0xeda, 0x0, 0x5aaf, 0x1, 0x1bd, 0x0, @struct={0x8001, 0x100}, 0x0, 0x5, [0x4, 0xfffffffffffffffe, 0xffffffffffffff80, 0xfffffffffffffff7, 0x8, 0x8a7]}, {0x16, @usage=0x3, 0x0, 0x4, 0xff, 0x8, 0x9, 0x5, 0x697bf4a99f73ee6d, @usage=0x52f, 0x2, 0x3, [0x1af, 0x3, 0x10, 0xb7c, 0x4, 0xe62]}, {0x8, @struct={0x80, 0x3bd1}, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x4c, @struct={0x7fff, 0x2}, 0x3ff, 0x7f, [0x0, 0x0, 0x1, 0x6, 0x101, 0x7]}, {0x8, 0x7}}) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000002c80)={r9, "9edf231c88ede7b3e3c7e627cab98dd0"}) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x3c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x6, 0x1, ']\x00'}, @NFTA_COMPAT_NAME={0x16, 0x1, './cgroup.cpu/syz1\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000003e40)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003e00)={&(0x7f0000003dc0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001) write$cgroup_subtree(r0, &(0x7f0000003e80)={[{0x2b, 'rdma'}, {0x2b, 'rlimit'}, {0x2d, 'cpuset'}]}, 0x16) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003f00), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r10, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003f40)={0x1c, r11, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000c0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000004000)=@ccm_128={{0x303}, "e4ffe8bcc51bb965", "9e80980f40700cca96e0798bda78da33", "0cc5d7cd", "d312edd9ce87b65b"}, 0x28) r12 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x401) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004200)={0x70, 0x0, &(0x7f0000004100)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000004040)={@fda={0x66646185, 0x0, 0x2, 0xc}, @flat=@weak_handle={0x77682a85, 0x100a, 0x2}, @fda={0x66646185, 0x1, 0x1, 0x35}}, &(0x7f00000040c0)={0x0, 0x20, 0x38}}}, @free_buffer={0x40086303, r12}, @request_death, @release={0x40046306, 0x3}], 0x60, 0x0, &(0x7f0000004180)="8e9582601e3532df8ca935909df66f07745a845d00033ceac8936cd6a9d13f260e6eeb748d33dbfe678df8c3119c0cb5acda4ea2114aafb8768c6fef724e9c8a08f20e5304fc25c1f8ea20c1ded51c937c0980e45e871bea20ef5d736b338b6f"}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004240)='freezer.state\x00', 0x0, 0x0) execve(&(0x7f0000004280)='./file0\x00', &(0x7f00000043c0)={[&(0x7f00000042c0)='udp\x00', &(0x7f0000004300)='\\{\',:\x00', &(0x7f0000004340)=']\x00', &(0x7f0000004380)=',\x00']}, &(0x7f0000004580)={[&(0x7f0000004400)='/]\\{[!-\x00', &(0x7f0000004440)='&*\x00', &(0x7f0000004480)='l\\\x00', &(0x7f00000044c0)='cgroup.procs\x00', &(0x7f0000004500)='udp\x00', &(0x7f0000004540)='@\\)[-\xc3']}) 5m13.405275555s ago: executing program 2 (id=325): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @remote}}}, 0x108) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) close(r2) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) (async) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r1) close_range(r5, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) (async) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 5m13.381894795s ago: executing program 33 (id=325): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @remote}}}, 0x108) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) close(r2) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) (async) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r1) close_range(r5, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) (async) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 3m24.081605869s ago: executing program 5 (id=1710): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x90) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x123180, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000400)=0x14) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r4, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xb) 3m24.052816879s ago: executing program 5 (id=1711): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000240)="df37", 0x2, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="518f8aff070000c020"], 0x9) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="c300c6ca7aab33efb800"/20], 0x14}}, 0x0) 3m24.01684577s ago: executing program 5 (id=1712): r0 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x26}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x13220c28) keyctl$read(0xb, r0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000040)='logon\x00', &(0x7f0000000200)) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2000}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000005050000000000009d07000000000000"]) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) keyctl$negate(0xd, r1, 0x89c, r0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "e2455270ca32f823", "d9d34dd180c59cf225504907a6e24c3d", "96f36c9e", "5dfd234d3d1d207f"}, 0x28) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r4) r8 = syz_open_dev$usbfs(0x0, 0xf, 0x8041) ioctl$USBDEVFS_RELEASEINTERFACE(r8, 0x80045510, &(0x7f0000000100)=0x165) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3m23.878834142s ago: executing program 5 (id=1713): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') mount$cgroup2(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x10c0800, &(0x7f0000000540)=ANY=[@ANYBLOB="646576696365732c6d656d6f72795f6c6f63616c6576656e74732c6661766f7264796e6d6f64732c6d656d6f72795f72656375727369766570726f742c66736e616d653d6c6f7765726469722c636f6e746578743d73797374656d5f752c736d61636b6673666c6f6f723d262b962c6d61736b3d4d41595f415050454e442c7569643d", @ANYRESDEC, @ANYBLOB="2c736d61636b6673726f6f743d2c0064c93ca4404269a4e8a1f52113a1b20160654da0e923741dcd8bc57a799bcb02158a8c422a3b0deaf232b4c75099782dc92dc1759bb3036db0e15bcdfdfc5dba62d99de51e4520d96878bd6985775f2b30ec3698620d06d97745dcdfeeba5fb651892d15999b2fcf37c9dc72b4ef70961ebc68c5a9c4add66d58dbd169d5bee308cbb50fdc116cb8c06fcd55ac4f58684fe79ff11677be2d801c"]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000000), 0x51bf3295, 0x101040) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) eventfd(0x6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110c000000000000000005000000180001801400020073797a5f74756e0000000000000000001c00038018000380100001800800010000000000040003"], 0x48}}, 0x88c0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m23.878502032s ago: executing program 5 (id=1714): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa}) mmap$binder(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x1, 0x11, r0, 0x10441e) userfaultfd(0x1) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2000000}) r2 = gettid() gettid() (async) r3 = gettid() kcmp(r2, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) kcmp(r2, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r7 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r7, 0xffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) (async) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x7) (async) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000000)=0x7) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x8000, 0x98, 0x40000d}}) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) recvfrom$packet(r12, &(0x7f0000000440)=""/250, 0xfa, 0x40010020, &(0x7f0000000580)={0x11, 0x11, r13, 0x1, 0x9, 0x6, @random="f003769aefdd"}, 0x14) 3m23.826209423s ago: executing program 5 (id=1715): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2ba52ebd7000fddbdf251b0000000600210061"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r4, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r7}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x2a}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xe736, 0x7d}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0xbb8a85dd1702afe4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x77}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000002900000004000000290000000000000024"], 0x40}}], 0x1, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) unshare(0x64000600) openat$kvm(0x0, 0x0, 0x0, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$EVIOCREVOKE(r9, 0x40044591, 0x0) ioctl$EVIOCGABS0(r9, 0x80184540, 0x0) 3m23.785669953s ago: executing program 34 (id=1715): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2ba52ebd7000fddbdf251b0000000600210061"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r4, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r7}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x2a}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xe736, 0x7d}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0xbb8a85dd1702afe4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x77}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000002900000004000000290000000000000024"], 0x40}}], 0x1, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) unshare(0x64000600) openat$kvm(0x0, 0x0, 0x0, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$EVIOCREVOKE(r9, 0x40044591, 0x0) ioctl$EVIOCGABS0(r9, 0x80184540, 0x0) 21.828475536s ago: executing program 3 (id=3742): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000) r1 = fsopen(&(0x7f0000000000)='aufs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) 21.766440117s ago: executing program 3 (id=3744): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') futex(0x0, 0x6, 0x2, 0x0, 0x0, 0x1) (async) futex(0x0, 0x6, 0x2, 0x0, 0x0, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x8880, 0x0) (async) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x8880, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x8, 0x0, 0x0, {0xa, 0x0, 0xfffffffd, @private0}}}, 0x3a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x3, 0x8, 0xbfde, 0x6, 0x2, 0x4, 0x84, 0xf2, 0xffffffffffffb22a, 0x3, 0x2, 0x6, 0x4, 0x9, 0x8000000000000000], 0x6000, 0x40400}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 21.754371617s ago: executing program 3 (id=3745): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008880)="00000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006fdfeab27f9b61b500", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x0, 0x6a}, 0x0, 0x0, 0x0, 0x0}) 21.57600854s ago: executing program 3 (id=3747): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0x11) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) write$vga_arbiter(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='lowk none\x00'], 0xa) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e22, @broadcast}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 21.402811462s ago: executing program 3 (id=3750): syz_open_dev$evdev(0x0, 0x51bf3295, 0x101040) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x256}, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 21.252551115s ago: executing program 3 (id=3753): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x2002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 21.224580195s ago: executing program 35 (id=3753): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x2002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 7.182594483s ago: executing program 4 (id=3864): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = epoll_create1(0x80000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='comm\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x5) r11 = getgid() r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) r13 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = userfaultfd(0x1) r16 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r16, 0x107, 0x18, 0x0, 0x0) r17 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r17, 0x401c5820, &(0x7f0000000080)={0x8}) r18 = inotify_init() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="41b89d56b17a57a121a913a2fc64cac4f1cbe4a3b899253550c63138ec67e63b29fecf048167f88fe0401ee9eab0b0556a0d0c4e4a5754f27d8b06f04aa861c30647a36490a14fc2689f58c58f2a1e43f1ad8c8357353082f4b5ed78cb7bf40966ca3d87ab76261e7143545a87db673ff86c2f5f4ee2cb965289d82df08d00c23bc647e54aa8e1243e127c743b4933d4bc0b450a7843976ebd88c279384b3521db19913f14d9f339b3f6ac0d4cba7502ca5082d708f40410526cbe3729b144feb206c940addd7b9de2d15c3529f3590d39d6859296e73e88e5cb5dd43fc973b3d607f4610a98be638e1997801a23f758510cff6319d7d8038a", 0xf9}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r5, r0, r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, r11}}}, @rights={{0x30, 0x1, 0x1, [r12, r13, r0, r14, r0, r0, r0, r15]}}, @rights={{0x30, 0x1, 0x1, [r16, r17, r18, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x140}, 0x4004) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000600)=0x2, 0x4) getsockopt$sock_buf(r0, 0x1, 0x23, 0x0, &(0x7f0000005500)) 7.069530335s ago: executing program 4 (id=3865): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @none, 0xfff7, 0x3}, 0xe) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x1, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000d00)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000083}]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x10, 0x0, &(0x7f0000000600)=[@request_death], 0x0, 0x0, 0x0}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMGET(r8, 0x5415, &(0x7f0000000000)) 5.354581511s ago: executing program 7 (id=3874): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000005c0)={0x4}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x2) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r5, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 5.210800803s ago: executing program 7 (id=3877): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') prctl$PR_SET_VMA(0x42, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) socket$netlink(0x10, 0x3, 0x14) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000740), 0x0, 0x46400) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 5.210423103s ago: executing program 6 (id=3878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x22602, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x7, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000018010040"]) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x68f, 0x58) r5 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f00000001c0)=0x5) fcntl$lock(r5, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010000, 0xffffffffffffffff}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0) 4.06898366s ago: executing program 6 (id=3882): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r0, &(0x7f00000004c0)=""/92, 0x1001) close(r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 4.005028031s ago: executing program 6 (id=3883): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0x16, 0x4, "a6f5de1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup3(r1, r2, 0x80000) listen(r2, 0x6) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="000e040000107388e1e5"], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_buf(r6, 0x107, 0x2, &(0x7f00000000c0), &(0x7f0000000100)) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r7, 0x20}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x2000000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x6, 0x6, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x5}}]}, 0x60}}, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x9e, 0x0, 0x4}]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r12, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) 3.806810794s ago: executing program 4 (id=3884): r0 = socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) eventfd2(0x3, 0x80000) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r0], 0x0) 3.36683657s ago: executing program 7 (id=3887): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) setuid(0xee00) ioctl$TIOCCONS(r0, 0x541d) 3.36631747s ago: executing program 7 (id=3888): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000001300)=0x4be1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), r3) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), r3) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r2, @ANYRES16=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r2, @ANYRES16=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/98, 0x62}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}], 0x7}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) read$rfkill(r6, &(0x7f00000024c0), 0x8) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0xfffc, 0x2000}, 0x4) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0xfffc, 0x2000}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mmap(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x2000003, 0x13, r1, 0x7746e000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 3.213986272s ago: executing program 7 (id=3891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x22602, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x7, 0xf000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000018010040"]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x68f, 0x58) 2.737310509s ago: executing program 7 (id=3893): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x800455cc, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x0) nanosleep(0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x7f, 0x39, 0x1, {0x22, 0xd86}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x5, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xe6, 0x8, 0x31}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x0, 0x2, 0xfb, 0x20, 0x5}, 0x38, &(0x7f00000000c0)={0x5, 0xf, 0x38, 0x4, [@generic={0x1e, 0x10, 0x5, "89b8cbff0c22624ecd18873821f247d53123337b8b6242941581b5"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x4, 0x81}, @wireless={0xb, 0x10, 0x1, 0x7b4a37fae6394058, 0x0, 0x2f, 0xf, 0x3, 0x6}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x33f33e185fbfa3c0}}, {0x54, &(0x7f00000001c0)=@string={0x54, 0x3, "7fb8d435e059821d3727a80c938cc372d94cfe9ac9bd205b7752e277c2f1646e621ca9505b2cf2a6d38ae410aa3a8f74bba7ef50ae0c824de55f590de9d3b0837df0202c63e6185945d6a914fd739c0ef694"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000380)={0x24, &(0x7f0000000240)={0x0, 0x30, 0x3f, {0x3f, 0xf, "0e328581b52e2e86c6bbce9a952c7fc71c237ee66df3c77f6c141f8603af0f351de98bda333597be26fb0ba71bc38f24170ce21c5d4bb8fb6f249bd73e"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}, &(0x7f0000000300)={0x0, 0x22, 0xc, {[@local=@item_012={0x1, 0x2, 0x7, "f5"}, @global=@item_4={0x3, 0x1, 0x2, "54eb47e5"}, @local=@item_4={0x3, 0x2, 0x1, "fa048511"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x5, 0x1, {0x22, 0x66c}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x40, 0x31, 0x7a, "673617c4a0f44944aefabb6ba0495ebe19e479b5e1ba7fa27ab8a97418e8fc38a3a70a5b85d256bba28bf3f5964b6c47158761055b1d56ceafb65964db62bc9eb5117df763fa0ec8b375d1e2747f3bc847e6ae6b38aa90b8c5570e06423351a74553e26d7ad9a40ad71c271e6ae37d11d49db245272c7ed9c910"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4d}, &(0x7f00000004c0)={0x20, 0x1, 0x55, "a61cdc4fb933132468726d7d20efe462fed5805c8d29f2c2a4f45137ffebde7829f025790af220313c0e3bddbd7269785e5d871ab255671865809317d1754f6bef4537598d781cb557d9e80d81f55a562687f37489"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x5}}) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) 1.780315864s ago: executing program 1 (id=3904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe5, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') read(r1, &(0x7f0000000080)=""/190, 0xbe) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000680)={{0xa, 0x4e24, 0xffffffb8, @local, 0x6}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x3263}, 0x1, {[0xc3, 0x5, 0x3, 0x1, 0x4, 0x1, 0xfffffffd, 0x1]}}, 0x5c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001100040028bd7000fbdbdf0bffffffff000000000000000000000000000004d502003c00"], 0x28}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000080)=[@decrefs={0x40046307, 0x2}], 0xfffffffffffffea2, 0x0, 0x0}) r7 = syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000000000000, 0x1) preadv2(r7, &(0x7f0000000540)=[{&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/128, 0x80}], 0x2, 0x6, 0xffff3167, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x400000000001, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYRESOCT=r2], 0x14}}, 0x400d800) bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}}, 0x0, 0x0, 0x13, 0x0, "9d3629a19cad9fb78bc4fd92a64cb3fee5d2f1c50ce08fba9090358d1ccdfe4f4e335f880728dfbbf2fe028515aae884874b2b13e7e2e1ac5873f5c7d7bf8851aa3d4e2cb0544397a3d13404a60eafa4"}, 0xd8) 1.578046856s ago: executing program 6 (id=3905): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x8fff, 0x8044}, 0x0) 1.462493519s ago: executing program 6 (id=3906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x2e, 0x0, &(0x7f0000000040)) r3 = fsopen(&(0x7f0000000480)='fusectl\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f00000004c0)='\'%\\-[:(\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffff9c) syz_usb_connect(0x0, 0x5d, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000093007a402104070051b80102030109024b00010000000009040000000202ff000524060001"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x2000, 0x8, 0x1, 0xeffffdff, 0x0, [{0xff, 0xff}, {0x15, 0x3, 0x5, '\x00', 0x7}, {0x8, 0x4}, {0xfe, 0x0, 0x7d, '\x00', 0xdc}, {}, {0x81, 0x65, 0x5}, {0xfe, 0x8, 0x31, '\x00', 0x3}, {0x0, 0x5d, 0x0, '\x00', 0x6}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x6}, {0xff, 0x5, 0x0, '\x00', 0x4}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {}, {0x3, 0x0, 0x0, '\x00', 0x5}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x7f}, {0x5, 0x0, 0x0, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x2, '\x00', 0x25}, {0x58, 0x9}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@multicast1, @multicast2, 0x0, 0xffffffff, 0x10, 0xd, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0x7f, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x9, 0x3, 0x5, 0x1bc, 0x5, 'veth0_to_bond\x00', 'dummy0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @rand_addr=0x64010102, @private=0xa010102, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0x8, 0x1}}}, {{@arp={@loopback, @empty, 0xff000000, 0xff, 0x5, 0xd, {@mac, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x5, 0x5, 0x0, 0x6, 0x40, 0x12, 'veth1_to_bridge\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @remote, @rand_addr=0x64010100, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000009c0)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x80000001, 0x4) 1.39460174s ago: executing program 1 (id=3907): r0 = userfaultfd(0x80001) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000010c0), 0x200, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x31cd7000) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f000018a000/0x4000)=nil, &(0x7f0000a83000/0x4000)=nil, 0x4000}) 1.298246961s ago: executing program 1 (id=3908): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0xe0, 0x0, &(0x7f0000000600)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd5e4cf1980871f59b391bd091bb537c85f5ad467697f0d78b5ecb76a81093f2c8db336f3f6bbce5983e15ce67e17925e20627f1535275522c17a11da587b625f2db6e4b4d6e6db83850a5150a187254e813250bbf913f0c2514539deae19dd56c88d8e7dd1bd04550b5d0e20ace0c865a9e12716764b0c852f8bf8baa3c4adf41aa657bc7ff5e6435842ea5e6abec66d9e28f0fec4ed2bd602437114b2925a5c29846451fcbccb39520b1ee08a816dcfd3d64a7637ef7"}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x64, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "86ca5daf117e97455dcd970e5c46359ef75c83fece0dbf607a028caa38"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000003c0)={0x38, r3, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) r6 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffc) keyctl$revoke(0x3, r6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 998.807706ms ago: executing program 1 (id=3909): r0 = socket(0x8000000010, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000000040)) write(r0, &(0x7f00000006c0)="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", 0xfc) 959.139416ms ago: executing program 1 (id=3910): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40004, 0x40, 0x5, 0x0, 0x35a, 0x40010020}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0xa, 0x2400000001, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/23, 0x17}, 0xf}], 0x1, 0x10022, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, 0x0, &(0x7f0000e5f000)) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f00005a9000/0x3000)=nil, 0x0, 0x0, 0x0, 0x401, 0x2, 0x0, 0x18, 0x59}) accept$inet6(r1, 0x0, &(0x7f0000000240)) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) ioctl$TCSBRK(r8, 0x5409, 0x0) openat$cgroup_ro(r7, &(0x7f0000000bc0)='io.stat\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 611.466221ms ago: executing program 4 (id=3911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x28}}, 0x80) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x400c800) 542.674862ms ago: executing program 4 (id=3912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x116ac3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) request_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008904"]) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000380)={0x0, 0x9}) close(r1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0x400448cb, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0xb757}, 0x1c) listen(r0, 0x0) dup2(r1, r3) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) r7 = socket$netlink(0x10, 0x3, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_timeval(r8, 0x1, 0x42, 0x0, &(0x7f0000000180)) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 173.999948ms ago: executing program 6 (id=3913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4ed430448b52cdfc}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4040000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r4, 0x601}, 0x14}}, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)={0x328, r4, 0x40a, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x98}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x328}}, 0x10) 137.225728ms ago: executing program 1 (id=3914): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000040c0)) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x0, 0xc08, 0x2}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0xee3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0xf, 0xa4}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xf4, 0x4, 0x40, 0x8}, 0xbe, &(0x7f0000000140)={0x5, 0xf, 0xbe, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0x7513}, @generic={0x13, 0x10, 0x8, "75638ff64c99cc3dfe26c15029ded1ce"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x7, 0x3ff}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b0a456b179b1d04642d05d2f6d6f8436"}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "096b6d64ddbc4d679e2c48505bf0c76f"}, @generic={0x70, 0x10, 0x3, "bcb1ef7e3c8a161fbded8a44672c455af3fb5bba538e0aa9552475ff81ac56c39d4ebc7f67e84f56465c2e5830ef695155333e0517984c63ca66308af0b2c67fdc6dbb148e9a147c8435657086c8781ab73f2a8c270eafae919df87477be28eb0bf5fb2015a401a9c70977b696"}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc04}}, {0x45, &(0x7f00000002c0)=@string={0x45, 0x3, "e449fbc94ca70b335ed9cb29e65b69f8f1f44e373722b4f48e5f62253014b3cfccd28bafd752a4119cd76b12adb87df73668bd6ff73678bba3b092c82210463a0165de"}}, {0x8f, &(0x7f0000000340)=@string={0x8f, 0x3, "c682db8cdd841d7b017d5b38aa2ce45df195a4d5715a47c275fcc032ee18b3db4e211336a7c5a1a81d3a276ced83e70b94a190b1b8a2a399b3313989aa25aa4aa1607cf746fb62c4e545e71d7bda00b3635ba079857b9c19ca5d9ac4f29d2fde9dfda2f58cb38d83bc0950d070ba909b25d97aaa26e999d96c03a6b165a3ba00b6f948d4af198a1cebefc1ad1f"}}, {0x47, &(0x7f0000000400)=@string={0x47, 0x3, "fe8fd69c9ff90f0fb0b3042d6b85d9165c59a60aafee61054775c81030b6003e4338659f27cd86d835408840df4a0c110e5fd84fffd85cb048af29ca89f57b274544749b1b"}}, {0xed, &(0x7f0000000480)=@string={0xed, 0x3, "c589d8a38ebb759886965f9bdeec442aecb1701131e036ec58b6a16465700f3fee1f8b3a3e11fb8f27be08bbe5591d35ff535b0307f34ecb296463aa70d1d9c8394271cffdeb0ed65405c8ef53137535957e0e00741a5f125c6916ca86ef096a2936df2d3d9f01e82bfa2aca2f5e4cdbb20f2b4f28d3474b605f86ea092df58c742c53b284a99e70d6b5e90b9e01eedc37a27684e3774029fef821f2617856b86f9d02e0f616a1e91dc72bc74b3a24ee6d1792383c401068919ca3ce8417341ba11b9e45fb2896a7e5fb119f7bbb66735152eaebecc166b3a00338071e506e98cafb4f35ce998aa602cbcf"}}]}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000001340)={0x2, 0x1, 0x0, 0xa}) 0s ago: executing program 4 (id=3915): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) (async) sendmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000380)="57ac7cab87aaf68432ade4f44581d9d8d15c532c461a7cf2649520b54e3150c044f8b21951e357e4942b6d7fb3decc8c5fd5b71aa481edd22ff6af8b66360113a779444cc6f73f2b6e5e0d9ce22b75a3", 0x50}, {&(0x7f0000000540)="4c56504d2bfd9c83050de2b7a3b6ee00431e6c310784d74bea7070a11283482d5fa7f63776c53ddd78884bc06833aa479a7fa36f30c95da07ecff5ad5f1b0863f0c3eb6e9aa77e72de3be2048680c83b898564e2cc665bc4504accc55ee1fa8ee6e4586e70de9f0895efafc9922ab610f01dcf90d7b156a3f5fd8757b8a7df6fa74d216d824ef3e7caeda2d9ee9683872aded9e9a7993fc199f1b549c5b3d3b350207e10c19414e176b46ee058afd21e66f106f8ed1232915794b66108f860714ed9783ebb4b5e8d70e4da575a5529512178e02df2338dea15ca7467b8b5de342b73a7e37f0c", 0xe6}, {&(0x7f0000000640)="897f382ac6db20d0d6646fea0e8b2ca8b4b36ac615bd0dd27343c14da7ff2906edb2e81b5a5d737d886de24d94574b7d50e40e0c1db4554fb5f04328e2c2f0d51243164fdf45f2caa1c74ccdd07ac714b66b6b62f2d9715f71c41a9b63d621c7b285466c5c1a2b1e94ae837eaf0ad9701baa5b44aa34b6e9e32a207d43d262fe3c5b5196befcb94212763a70445b2d515949dd5cd2d1753b27d351f72f32f5480445b3477bfb85cacd20d96f55d2c8acc4c7c267657d23022a89f3f5b207c3925094c0486c0209359315af29d901267e18c38911bee8989f423291c09299d1925301806d39", 0xe5}, {&(0x7f0000000740)="f41dd65e8b248c3e4a71d6cb9e3d87555977eb25057a6b8baf1aedd85e4a585fee8674a91044b549cae2811b09b81fb8e547f2992875aed4ea4a04c2739268947d6ac7f3fa8bf46f88c68bba78ae89ba97046046e3b40c99afa1a55205cfcea7320cd5d7544f42a3b4ded07524965f974c8f997bc37f062d4ab7", 0x7a}, {&(0x7f00000007c0)="37263857b1f089fa717203f3272845444367816fe2da801b3310e653d24e1133aa78d5561432a4558fbdd26edd6dd5deeb5b61394aecffae21d3b69c1ab21007196bf4de96031b55cfb0c43eb2a5ce4fdfec49b63cbb80eec7b1038ec84e4330a107a9670c555a5177580e5f15f2a143fbe9ee8d01858dc9e197162ee155b3c8ced8b66fd20a4317358fcf19abb9274da8fb2e9b62a0255172ef79e1235f6d4e2667662f431f8564c7145d40f9e0a0ab129a79ddfe4709bef1ba6ab7ab3a30ed271e10bfdd3504cbb9cd428b4b53fd23e4e1420dbb25135288fbd949", 0xdc}, {&(0x7f00000008c0)="e3cad0019ac5f693d4cdcad70e17595a313afb414f168ce1373c34cc23ed099751446636fbbb79a706ef27bae1b57e94d0ea0a997b18fe9788247760b6db4383a3b8c1f0ef51306ed766b161cb61df6cc589fa2dc5993d14674565cf16842c4d1ad0b6fd288517bd7975358a21087da5ea7979ddb9f83267f17796634a851e01e97bfd81f839bb6b8bc738ccade90df978e78aead4888a992db3769469b0abb19dfd3dfb65c872cae9f633f0600b3e28853d09ff89c1ca39750c7e9315cdf23523d273c94f74d2f5f7191eb341a48bc5eb722992f02338d18c285964f101424c", 0xe0}, {&(0x7f00000009c0)="2d8e8d27210be570d32e40bcf91986c76042509ec79e9d4b20430bb98c51045fd560e419b037dfc7454a20abbf1d6b20297986eafb0e3f5979f1fbefb8a48999e9c8c3bf9c25ed", 0x47}, {&(0x7f0000000b80)="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", 0xfd}], 0x8}}], 0x1, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xe) (async) getsockopt$inet6_int(r1, 0x29, 0x42, 0x0, &(0x7f0000000180)) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000280)=0x10000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) kernel console output (not intermixed with test programs): ed [ 292.504188][ T36] audit: type=1400 audit(1750458633.292:16301): avc: denied { ioctl } for pid=9391 comm="syz.1.3358" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.536043][ T36] audit: type=1400 audit(1750458633.321:16302): avc: denied { ioctl } for pid=9391 comm="syz.1.3358" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.561293][ T36] audit: type=1400 audit(1750458633.321:16303): avc: denied { ioctl } for pid=9391 comm="syz.1.3358" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.605909][ T36] audit: type=1400 audit(1750458633.395:16304): avc: denied { ioctl } for pid=9391 comm="syz.1.3358" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.630934][ T36] audit: type=1400 audit(1750458633.395:16305): avc: denied { ioctl } for pid=9391 comm="syz.1.3358" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.668734][ T48] usb 7-1: 0:2 : does not exist [ 292.691013][ T48] usb 7-1: USB disconnect, device number 44 [ 292.830306][ T36] audit: type=1400 audit(1750458633.601:16306): avc: denied { ioctl } for pid=9391 comm="syz.1.3358" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.873327][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 292.894523][ T928] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 292.916745][ T36] audit: type=1400 audit(1750458633.685:16307): avc: denied { ioctl } for pid=9391 comm="syz.1.3358" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.942774][ T36] audit: type=1400 audit(1750458633.685:16308): avc: denied { ioctl } for pid=9391 comm="syz.1.3358" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.969202][ T928] usb 2-1: device descriptor read/8, error -71 [ 292.976145][ T36] audit: type=1400 audit(1750458633.685:16309): avc: denied { ioctl } for pid=9391 comm="syz.1.3358" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.002040][ T36] audit: type=1400 audit(1750458633.704:16310): avc: denied { ioctl } for pid=9391 comm="syz.1.3358" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.119865][ T928] usb 2-1: device descriptor read/8, error -71 [ 293.195834][ T9409] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 293.195857][ T9409] rust_binder: Error while translating object. [ 293.226500][ T9409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 293.244295][ T9409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:560 [ 293.308145][ T9419] FAULT_INJECTION: forcing a failure. [ 293.308145][ T9419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.352824][ T9419] CPU: 1 UID: 0 PID: 9419 Comm: syz.4.3369 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 293.352851][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.352862][ T9419] Call Trace: [ 293.352869][ T9419] [ 293.352877][ T9419] __dump_stack+0x21/0x30 [ 293.352902][ T9419] dump_stack_lvl+0x10c/0x190 [ 293.352921][ T9419] ? __cfi_dump_stack_lvl+0x10/0x10 [ 293.352941][ T9419] ? kernel_text_address+0xa9/0xe0 [ 293.352960][ T9419] dump_stack+0x19/0x20 [ 293.352978][ T9419] should_fail_ex+0x3d9/0x530 [ 293.352997][ T9419] should_fail+0xf/0x20 [ 293.353013][ T9419] should_fail_usercopy+0x1e/0x30 [ 293.353036][ T9419] _copy_from_user+0x22/0xb0 [ 293.353057][ T9419] ___sys_sendmsg+0x159/0x2a0 [ 293.353082][ T9419] ? __sys_sendmsg+0x280/0x280 [ 293.353105][ T9419] ? kstrtouint+0x78/0xf0 [ 293.353126][ T9419] __sys_sendmmsg+0x271/0x470 [ 293.353143][ T9419] ? __cfi___sys_sendmmsg+0x10/0x10 [ 293.353162][ T9419] ? __cfi_ksys_write+0x10/0x10 [ 293.353183][ T9419] __x64_sys_sendmmsg+0xa4/0xc0 [ 293.353199][ T9419] x64_sys_call+0xfec/0x2ee0 [ 293.353220][ T9419] do_syscall_64+0x58/0xf0 [ 293.353238][ T9419] ? clear_bhb_loop+0x35/0x90 [ 293.353260][ T9419] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 293.353282][ T9419] RIP: 0033:0x7f6f5c18e929 [ 293.353298][ T9419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.353314][ T9419] RSP: 002b:00007f6f5d067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 293.353334][ T9419] RAX: ffffffffffffffda RBX: 00007f6f5c3b5fa0 RCX: 00007f6f5c18e929 [ 293.353348][ T9419] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 293.353360][ T9419] RBP: 00007f6f5d067090 R08: 0000000000000000 R09: 0000000000000000 [ 293.353373][ T9419] R10: 0000000020000084 R11: 0000000000000246 R12: 0000000000000001 [ 293.353384][ T9419] R13: 0000000000000000 R14: 00007f6f5c3b5fa0 R15: 00007fff403dc1a8 [ 293.353400][ T9419] [ 293.553222][ T928] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 293.588619][ T928] usb 2-1: device descriptor read/8, error -71 [ 293.732061][ T928] usb 2-1: device descriptor read/8, error -71 [ 293.789391][ T9434] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3374'. [ 293.845927][ T928] usb usb2-port1: unable to enumerate USB device [ 294.444899][ T10] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 294.594764][ T10] usb 7-1: device descriptor read/64, error -71 [ 294.612646][ T9475] FAULT_INJECTION: forcing a failure. [ 294.612646][ T9475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.625792][ T9475] CPU: 0 UID: 0 PID: 9475 Comm: syz.3.3389 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 294.625819][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.625830][ T9475] Call Trace: [ 294.625836][ T9475] [ 294.625844][ T9475] __dump_stack+0x21/0x30 [ 294.625867][ T9475] dump_stack_lvl+0x10c/0x190 [ 294.625887][ T9475] ? __cfi_dump_stack_lvl+0x10/0x10 [ 294.625907][ T9475] dump_stack+0x19/0x20 [ 294.625923][ T9475] should_fail_ex+0x3d9/0x530 [ 294.625940][ T9475] should_fail+0xf/0x20 [ 294.625956][ T9475] should_fail_usercopy+0x1e/0x30 [ 294.625975][ T9475] _copy_to_user+0x24/0xa0 [ 294.625996][ T9475] simple_read_from_buffer+0xed/0x160 [ 294.626019][ T9475] proc_fail_nth_read+0x19e/0x210 [ 294.626034][ T9475] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 294.626047][ T9475] ? bpf_lsm_file_permission+0xd/0x20 [ 294.626063][ T9475] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 294.626078][ T9475] vfs_read+0x278/0xb60 [ 294.626097][ T9475] ? __cfi_vfs_read+0x10/0x10 [ 294.626115][ T9475] ? __kasan_check_write+0x18/0x20 [ 294.626134][ T9475] ? mutex_lock+0x92/0x1c0 [ 294.626150][ T9475] ? __cfi_mutex_lock+0x10/0x10 [ 294.626163][ T9475] ? __fget_files+0x2c5/0x340 [ 294.626186][ T9475] ksys_read+0x141/0x250 [ 294.626204][ T9475] ? __cfi_ksys_read+0x10/0x10 [ 294.626224][ T9475] ? __kasan_check_read+0x15/0x20 [ 294.626242][ T9475] __x64_sys_read+0x7f/0x90 [ 294.626260][ T9475] x64_sys_call+0x2638/0x2ee0 [ 294.626281][ T9475] do_syscall_64+0x58/0xf0 [ 294.626301][ T9475] ? clear_bhb_loop+0x35/0x90 [ 294.626338][ T9475] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 294.626360][ T9475] RIP: 0033:0x7ff62298d33c [ 294.626375][ T9475] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 294.626388][ T9475] RSP: 002b:00007ff623798030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.626408][ T9475] RAX: ffffffffffffffda RBX: 00007ff622bb5fa0 RCX: 00007ff62298d33c [ 294.626429][ T9475] RDX: 000000000000000f RSI: 00007ff6237980a0 RDI: 0000000000000004 [ 294.626441][ T9475] RBP: 00007ff623798090 R08: 0000000000000000 R09: 0000000000000000 [ 294.626453][ T9475] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 294.626466][ T9475] R13: 0000000000000000 R14: 00007ff622bb5fa0 R15: 00007ffdaa26c428 [ 294.626479][ T9475] [ 294.963776][ T9485] overlayfs: failed to resolve './file0': -2 [ 295.000137][ T10] usb 7-1: device descriptor read/64, error -71 [ 295.267374][ T10] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 295.417044][ T10] usb 7-1: device descriptor read/64, error -71 [ 295.673660][ T10] usb 7-1: device descriptor read/64, error -71 [ 295.695014][ T31] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 295.791640][ T10] usb usb7-port1: attempt power cycle [ 295.868956][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 295.883155][ T9512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:609 [ 295.884341][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.887707][ T9512] rust_binder: Read failure Err(EFAULT) in pid:609 [ 295.896572][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.924271][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.931931][ T9512] rust_binder: Write failure EFAULT in pid:609 [ 295.933147][ T31] usb 2-1: SerialNumber: syz [ 296.116782][ T9523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.117091][ T9523] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 296.130669][ T9523] rust_binder: Write failure EINVAL in pid:620 [ 296.165396][ T10] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 296.199714][ T10] usb 7-1: device descriptor read/8, error -71 [ 296.338566][ T10] usb 7-1: device descriptor read/8, error -71 [ 296.593036][ T10] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 296.603317][ T31] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 296.626186][ T10] usb 7-1: device descriptor read/8, error -71 [ 296.785464][ T10] usb 7-1: device descriptor read/8, error -71 [ 296.822671][ T461] usb 2-1: USB disconnect, device number 90 [ 296.829173][ T461] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 296.903254][ T10] usb usb7-port1: unable to enumerate USB device [ 297.359685][ T9561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:631 [ 297.817958][ T9593] rust_binder: Write failure EINVAL in pid:642 [ 297.855286][ T36] kauditd_printk_skb: 1232 callbacks suppressed [ 297.855304][ T36] audit: type=1400 audit(1750458638.297:17541): avc: denied { setopt } for pid=9594 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.910240][ T36] audit: type=1400 audit(1750458638.334:17542): avc: denied { create } for pid=9594 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.932437][ T36] audit: type=1400 audit(1750458638.334:17543): avc: denied { write } for pid=9594 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.956875][ T36] audit: type=1400 audit(1750458638.334:17544): avc: denied { read } for pid=9594 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.978677][ T36] audit: type=1400 audit(1750458638.334:17545): avc: denied { read } for pid=9594 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.001171][ T36] audit: type=1400 audit(1750458638.334:17546): avc: denied { write } for pid=9594 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 298.026451][ T36] audit: type=1400 audit(1750458638.334:17547): avc: denied { read write } for pid=6616 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.051427][ T36] audit: type=1400 audit(1750458638.334:17548): avc: denied { read write open } for pid=6616 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.076743][ T36] audit: type=1400 audit(1750458638.334:17549): avc: denied { ioctl } for pid=6616 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.102328][ T36] audit: type=1400 audit(1750458638.390:17550): avc: denied { read write } for pid=9596 comm="syz.1.3429" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 298.103063][ T9599] input: syz0 as /devices/virtual/input/input42 [ 298.651400][ T9606] tipc: Started in network mode [ 298.656987][ T9606] tipc: Node identity , cluster identity 4711 [ 298.668935][ T9606] tipc: Failed to set node id, please configure manually [ 298.676662][ T9606] tipc: Enabling of bearer rejected, failed to enable media [ 310.132315][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 310.132332][ T36] audit: type=1400 audit(1750458649.784:17625): avc: denied { read } for pid=9615 comm="syz.4.3435" name="binder0" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 310.191381][ T9625] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.197903][ T7876] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.197920][ T7876] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 310.197942][ T7876] audit: backlog limit exceeded [ 310.200095][ T7876] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.217176][ T36] audit: type=1400 audit(1750458649.784:17626): avc: denied { read open } for pid=9615 comm="syz.4.3435" path="/dev/binderfs/binder0" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 310.217200][ T36] audit: type=1400 audit(1750458649.784:17627): avc: denied { create } for pid=9612 comm="syz.6.3437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 310.217222][ T36] audit: type=1400 audit(1750458649.784:17628): avc: denied { read write } for pid=9614 comm="syz.3.3438" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 310.246241][ T9613] audit: audit_backlog=65 > audit_backlog_limit=64 [ 310.353464][ T9634] FAULT_INJECTION: forcing a failure. [ 310.353464][ T9634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.372328][ T9634] CPU: 0 UID: 0 PID: 9634 Comm: syz.4.3440 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 310.372358][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.372369][ T9634] Call Trace: [ 310.372375][ T9634] [ 310.372383][ T9634] __dump_stack+0x21/0x30 [ 310.372409][ T9634] dump_stack_lvl+0x10c/0x190 [ 310.372428][ T9634] ? __cfi_dump_stack_lvl+0x10/0x10 [ 310.372448][ T9634] ? __alloc_skb+0x144/0x370 [ 310.372467][ T9634] ? ip6_make_skb+0x41c/0x850 [ 310.372485][ T9634] ? udpv6_sendmsg+0x1c46/0x26c0 [ 310.372502][ T9634] ? inet6_sendmsg+0xef/0x120 [ 310.372531][ T9634] ? ___sys_sendmsg+0x220/0x2a0 [ 310.372555][ T9634] dump_stack+0x19/0x20 [ 310.372573][ T9634] should_fail_ex+0x3d9/0x530 [ 310.372592][ T9634] should_fail+0xf/0x20 [ 310.372609][ T9634] should_fail_usercopy+0x1e/0x30 [ 310.372628][ T9634] _copy_from_user+0x22/0xb0 [ 310.372649][ T9634] csum_and_copy_from_iter_full+0x4c5/0x1c00 [ 310.372673][ T9634] ? __cfi_csum_and_copy_from_iter_full+0x10/0x10 [ 310.372695][ T9634] ? kasan_save_alloc_info+0x40/0x50 [ 310.372713][ T9634] ? __kasan_slab_alloc+0x73/0x90 [ 310.372738][ T9634] ? kmem_cache_alloc_node_noprof+0x15c/0x3b0 [ 310.372759][ T9634] ip_generic_getfrag+0x137/0x290 [ 310.372780][ T9634] ? __kasan_check_write+0x18/0x20 [ 310.372798][ T9634] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 310.372818][ T9634] ? __alloc_skb+0x1bc/0x370 [ 310.372836][ T9634] ? skb_put+0x112/0x1f0 [ 310.372856][ T9634] __ip6_append_data+0x2dab/0x3ab0 [ 310.372874][ T9634] ? __asan_memcpy+0x5a/0x80 [ 310.372896][ T9634] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 310.372917][ T9634] ? ip6_setup_cork+0x1390/0x1390 [ 310.372937][ T9634] ip6_make_skb+0x41c/0x850 [ 310.372954][ T9634] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 310.372973][ T9634] ? __cfi_ip6_make_skb+0x10/0x10 [ 310.372990][ T9634] ? ip6_sk_dst_lookup_flow+0x463/0x790 [ 310.373009][ T9634] udpv6_sendmsg+0x1c46/0x26c0 [ 310.373027][ T9634] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 310.373048][ T9634] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 310.373067][ T9634] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 310.373087][ T9634] ? _raw_spin_unlock_bh+0x54/0x60 [ 310.373107][ T9634] ? release_sock+0x171/0x1f0 [ 310.373128][ T9634] ? inet_send_prepare+0x1e7/0x4f0 [ 310.373144][ T9634] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 310.373159][ T9634] inet6_sendmsg+0xef/0x120 [ 310.373179][ T9634] ____sys_sendmsg+0x5db/0xa70 [ 310.373203][ T9634] ? __sys_sendmsg_sock+0x50/0x50 [ 310.373227][ T9634] ? import_iovec+0x81/0xb0 [ 310.373250][ T9634] ___sys_sendmsg+0x220/0x2a0 [ 310.373271][ T9634] ? __sys_sendmsg+0x280/0x280 [ 310.373295][ T9634] ? kstrtouint+0x78/0xf0 [ 310.373317][ T9634] __sys_sendmmsg+0x271/0x470 [ 310.373334][ T9634] ? __cfi___sys_sendmmsg+0x10/0x10 [ 310.373353][ T9634] ? __cfi_ksys_write+0x10/0x10 [ 310.373374][ T9634] __x64_sys_sendmmsg+0xa4/0xc0 [ 310.373390][ T9634] x64_sys_call+0xfec/0x2ee0 [ 310.373410][ T9634] do_syscall_64+0x58/0xf0 [ 310.373430][ T9634] ? clear_bhb_loop+0x35/0x90 [ 310.373454][ T9634] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 310.373477][ T9634] RIP: 0033:0x7f6f5c18e929 [ 310.373492][ T9634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.373507][ T9634] RSP: 002b:00007f6f5d067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 310.373533][ T9634] RAX: ffffffffffffffda RBX: 00007f6f5c3b5fa0 RCX: 00007f6f5c18e929 [ 310.373547][ T9634] RDX: 0000000000000001 RSI: 0000200000004700 RDI: 0000000000000003 [ 310.373559][ T9634] RBP: 00007f6f5d067090 R08: 0000000000000000 R09: 0000000000000000 [ 310.373571][ T9634] R10: 00000000080040c4 R11: 0000000000000246 R12: 0000000000000002 [ 310.373583][ T9634] R13: 0000000000000000 R14: 00007f6f5c3b5fa0 R15: 00007fff403dc1a8 [ 310.373598][ T9634] [ 310.878792][ T9643] rust_binder: 9640 RLIMIT_NICE not set [ 311.482556][ T9680] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 311.766628][ T9700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 311.788528][ T9703] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 311.816483][ T9703] SELinux: failed to load policy [ 311.967445][ T461] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 312.005873][ T9710] binder: Unknown parameter 'ärØö™ÿ~"¥*Snobp\' [ 312.126491][ T461] usb 7-1: device descriptor read/64, error -71 [ 312.375920][ T9719] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.384634][ T461] usb 7-1: device descriptor read/64, error -71 [ 312.535170][ T9725] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 312.589174][ T9729] tipc: Started in network mode [ 312.594161][ T9729] tipc: Node identity , cluster identity 4711 [ 312.600246][ T9729] tipc: Failed to set node id, please configure manually [ 312.607266][ T9729] tipc: Enabling of bearer rejected, failed to enable media [ 312.639639][ T461] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 312.789312][ T461] usb 7-1: device descriptor read/64, error -71 [ 313.045868][ T461] usb 7-1: device descriptor read/64, error -71 [ 313.163679][ T461] usb usb7-port1: attempt power cycle [ 313.227604][ T305] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 313.387954][ T305] usb 4-1: Using ep0 maxpacket: 16 [ 313.395054][ T305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.405295][ T305] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 313.420890][ T305] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.429984][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.437982][ T305] usb 4-1: Product: syz [ 313.442336][ T305] usb 4-1: Manufacturer: syz [ 313.446910][ T305] usb 4-1: SerialNumber: syz [ 313.526947][ T461] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 313.550496][ T461] usb 7-1: device descriptor read/8, error -71 [ 313.689121][ T461] usb 7-1: device descriptor read/8, error -71 [ 313.943897][ T461] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 313.967107][ T461] usb 7-1: device descriptor read/8, error -71 [ 314.106013][ T461] usb 7-1: device descriptor read/8, error -71 [ 314.222283][ T461] usb usb7-port1: unable to enumerate USB device [ 314.531868][ T305] cdc_ncm 4-1:1.0: bind() failure [ 314.544334][ T305] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 314.552458][ T305] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 314.562357][ T305] usb 4-1: USB disconnect, device number 81 [ 315.092466][ T9751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:685 [ 315.505330][ T36] kauditd_printk_skb: 757 callbacks suppressed [ 315.505347][ T36] audit: type=1400 audit(1750458654.807:18372): avc: denied { ioctl } for pid=9762 comm="syz.1.3492" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.559957][ T36] audit: type=1400 audit(1750458654.863:18373): avc: denied { read write } for pid=7876 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.588616][ T928] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 315.613043][ T36] audit: type=1400 audit(1750458654.863:18374): avc: denied { read write open } for pid=7876 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.651085][ T36] audit: type=1400 audit(1750458654.863:18375): avc: denied { ioctl } for pid=7876 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.677943][ T36] audit: type=1400 audit(1750458654.882:18376): avc: denied { ioctl } for pid=9771 comm="syz.6.3494" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.703207][ T36] audit: type=1400 audit(1750458654.882:18377): avc: denied { write } for pid=9775 comm="syz.4.3496" name="igmp" dev="proc" ino=4026532577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 315.727038][ T36] audit: type=1400 audit(1750458654.882:18378): avc: denied { write } for pid=9775 comm="syz.4.3496" path="/proc/385/net/igmp" dev="proc" ino=4026532577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 315.761269][ T305] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 315.777114][ T36] audit: type=1400 audit(1750458654.910:18379): avc: denied { ioctl } for pid=9762 comm="syz.1.3492" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.802908][ T36] audit: type=1400 audit(1750458654.910:18380): avc: denied { ioctl } for pid=9762 comm="syz.1.3492" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.806431][ T928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.828814][ T36] audit: type=1400 audit(1750458654.910:18381): avc: denied { ioctl } for pid=9762 comm="syz.1.3492" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.846058][ T928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.907669][ T928] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 315.926044][ T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.945713][ T928] usb 2-1: config 0 descriptor?? [ 315.966892][ T305] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 315.986467][ T305] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.995551][ T305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 316.015773][ T305] usb 7-1: SerialNumber: syz [ 316.038318][ T9787] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 316.049975][ T9787] rust_binder: Write failure EINVAL in pid:688 [ 316.249226][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.285373][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.333879][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.352400][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.365858][ T305] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 316.393486][ T305] usb 7-1: USB disconnect, device number 53 [ 316.452899][ T9797] tmpfs: Unknown parameter 'fowner' [ 316.672694][ T9815] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 316.841133][ T928] uclogic 0003:256C:006D.001F: failed retrieving Huion firmware version: -71 [ 316.861123][ T928] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 316.869115][ T928] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 316.891007][ T928] usb 2-1: USB disconnect, device number 91 [ 317.102147][ T9831] netlink: 4344 bytes leftover after parsing attributes in process `syz.6.3518'. [ 317.546609][ T589] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 317.709284][ T589] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 317.723452][ T589] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 317.736099][ T589] usb 4-1: config 1 interface 0 has no altsetting 0 [ 317.760404][ T589] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.770292][ T9862] netlink: 'syz.1.3531': attribute type 4 has an invalid length. [ 317.773397][ T589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.796362][ T928] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 317.802372][ T589] usb 4-1: Product: 尣愉䀞耤⡱齮钺邉꫸롅쒷籗ȴ콘䅽ᮬé„耫疦ç©ê¸²è¢¦âš–ﻖ趆䛪ç”å½¥æ±ï°²ï›…ç€ä©„ஓ禡௷싧愜굴雺ᢱổᆿ砡鱗깅쳩隋죾頧蚀震8 [ 317.826507][ T589] usb 4-1: Manufacturer: 弲Ⴋ䂨੸䯷鷭䑱ڣ䭛㓬徶ꛤ䚔͛ヘíˆÉ”妜ꊲâ­ä«†é–šë½¹å”®ï™©ã½™ï³¦å®ä¯—⪔헶逌פֿ滥穿凇䃟餋絛宧꜊胡蛉赃æ´á¦‰ï£¿á‹—똳鮙ꔒ兓瀜硧 [ 317.845420][ T589] usb 4-1: SerialNumber: 盹辭뒌㡠ê¢ï‚‰àµã¼•í„Ÿï¤›î˜î¢§ï©—ಀㅹ礑贒յ༶裾çµáµ›î¼ [ 317.858619][ T9840] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.866002][ T9840] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.906029][ T9864] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3532'. [ 317.976661][ T928] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 317.996735][ T928] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.008782][ T928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 318.016790][ T928] usb 7-1: SerialNumber: syz [ 318.244375][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.252987][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.265519][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.274009][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.284090][ T928] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 318.297095][ T928] usb 7-1: USB disconnect, device number 54 [ 318.308437][ T589] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 318.328799][ T589] usb 4-1: USB disconnect, device number 82 [ 318.433947][ T48] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 318.572922][ T48] usb 2-1: device descriptor read/64, error -71 [ 318.829478][ T48] usb 2-1: device descriptor read/64, error -71 [ 318.871900][ T9874] FAULT_INJECTION: forcing a failure. [ 318.871900][ T9874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.885074][ T9874] CPU: 0 UID: 0 PID: 9874 Comm: syz.3.3535 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 318.885102][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.885113][ T9874] Call Trace: [ 318.885120][ T9874] [ 318.885127][ T9874] __dump_stack+0x21/0x30 [ 318.885151][ T9874] dump_stack_lvl+0x10c/0x190 [ 318.885170][ T9874] ? __cfi_dump_stack_lvl+0x10/0x10 [ 318.885190][ T9874] dump_stack+0x19/0x20 [ 318.885208][ T9874] should_fail_ex+0x3d9/0x530 [ 318.885228][ T9874] should_fail+0xf/0x20 [ 318.885242][ T9874] should_fail_usercopy+0x1e/0x30 [ 318.885261][ T9874] _copy_from_user+0x22/0xb0 [ 318.885282][ T9874] memdup_user+0x81/0x180 [ 318.885301][ T9874] ? strndup_user+0x40/0xd0 [ 318.885318][ T9874] strndup_user+0x6c/0xd0 [ 318.885334][ T9874] __se_sys_mount+0x9f/0x480 [ 318.885352][ T9874] ? ksys_write+0x1ef/0x250 [ 318.885371][ T9874] ? __x64_sys_mount+0xf0/0xf0 [ 318.885390][ T9874] __x64_sys_mount+0xc3/0xf0 [ 318.885409][ T9874] x64_sys_call+0x2021/0x2ee0 [ 318.885429][ T9874] do_syscall_64+0x58/0xf0 [ 318.885449][ T9874] ? clear_bhb_loop+0x35/0x90 [ 318.885473][ T9874] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 318.885494][ T9874] RIP: 0033:0x7ff62298e929 [ 318.885508][ T9874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.885522][ T9874] RSP: 002b:00007ff623798038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.885541][ T9874] RAX: ffffffffffffffda RBX: 00007ff622bb5fa0 RCX: 00007ff62298e929 [ 318.885554][ T9874] RDX: 0000200000000080 RSI: 0000200000000240 RDI: 0000000000000000 [ 318.885567][ T9874] RBP: 00007ff623798090 R08: 0000200000000000 R09: 0000000000000000 [ 318.885578][ T9874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.885589][ T9874] R13: 0000000000000000 R14: 00007ff622bb5fa0 R15: 00007ffdaa26c428 [ 318.885604][ T9874] [ 319.152379][ T48] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 319.299861][ T48] usb 2-1: device descriptor read/64, error -71 [ 319.428148][ T694] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 319.556434][ T48] usb 2-1: device descriptor read/64, error -71 [ 319.567408][ T694] usb 4-1: device descriptor read/64, error -71 [ 319.674367][ T48] usb usb2-port1: attempt power cycle [ 319.823760][ T694] usb 4-1: device descriptor read/64, error -71 [ 320.037523][ T48] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 320.060556][ T48] usb 2-1: device descriptor read/8, error -71 [ 320.080318][ T694] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 320.103798][ T9897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 320.200228][ T48] usb 2-1: device descriptor read/8, error -71 [ 320.229945][ T694] usb 4-1: device descriptor read/64, error -71 [ 320.465143][ T48] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 320.488318][ T48] usb 2-1: device descriptor read/8, error -71 [ 320.497218][ T694] usb 4-1: device descriptor read/64, error -71 [ 320.614905][ T694] usb usb4-port1: attempt power cycle [ 320.638141][ T48] usb 2-1: device descriptor read/8, error -71 [ 320.754177][ T48] usb usb2-port1: unable to enumerate USB device [ 320.898081][ T36] kauditd_printk_skb: 1036 callbacks suppressed [ 320.898098][ T36] audit: type=1400 audit(1750458659.848:19418): avc: denied { read write } for pid=8774 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.930863][ T36] audit: type=1400 audit(1750458659.848:19419): avc: denied { read write open } for pid=8774 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.969664][ T36] audit: type=1400 audit(1750458659.848:19420): avc: denied { ioctl } for pid=8774 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.995947][ T694] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 321.042494][ T36] audit: type=1400 audit(1750458659.877:19421): avc: denied { ioctl } for pid=9886 comm="syz.3.3541" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.076778][ T36] audit: type=1400 audit(1750458659.895:19422): avc: denied { read write } for pid=7876 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.101054][ T694] usb 4-1: device descriptor read/8, error -71 [ 321.107591][ T36] audit: type=1400 audit(1750458659.895:19423): avc: denied { read write open } for pid=7876 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.132754][ T36] audit: type=1400 audit(1750458659.895:19424): avc: denied { ioctl } for pid=7876 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.158483][ T36] audit: type=1400 audit(1750458659.914:19425): avc: denied { create } for pid=9901 comm="syz.6.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.191402][ T36] audit: type=1400 audit(1750458659.914:19426): avc: denied { setopt } for pid=9901 comm="syz.6.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.211513][ T36] audit: type=1400 audit(1750458659.914:19427): avc: denied { setopt } for pid=9901 comm="syz.6.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 321.264911][ T694] usb 4-1: device descriptor read/8, error -71 [ 321.537647][ T694] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 321.568912][ T694] usb 4-1: device descriptor read/8, error -71 [ 321.662504][ T305] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 321.708422][ T694] usb 4-1: device descriptor read/8, error -71 [ 321.822993][ T694] usb usb4-port1: unable to enumerate USB device [ 321.833881][ T305] usb 7-1: Using ep0 maxpacket: 32 [ 321.841306][ T305] usb 7-1: config 2 has an invalid interface number: 1 but max is 0 [ 321.849992][ T305] usb 7-1: config 2 has no interface number 0 [ 321.857709][ T305] usb 7-1: config 2 interface 1 altsetting 0 endpoint 0x2 has an invalid bInterval 31, changing to 8 [ 321.869190][ T305] usb 7-1: config 2 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 321.880826][ T305] usb 7-1: config 2 interface 1 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 321.891793][ T305] usb 7-1: config 2 interface 1 altsetting 0 endpoint 0x1 has an invalid bInterval 193, changing to 7 [ 321.902963][ T305] usb 7-1: config 2 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 321.913728][ T305] usb 7-1: config 2 interface 1 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 321.924439][ T305] usb 7-1: config 2 interface 1 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 321.941660][ T305] usb 7-1: Dual-Role OTG device on HNP port [ 321.947973][ T305] usb 7-1: New USB device found, idVendor=19d2, idProduct=0199, bcdDevice=e4.37 [ 321.957046][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.965048][ T305] usb 7-1: Product: щ [ 321.969115][ T305] usb 7-1: Manufacturer: ã  [ 321.979677][ T305] usb 7-1: SerialNumber:  [ 322.035019][ T9932] fuse: Invalid rootmode [ 322.192721][ T9939] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 322.192745][ T9939] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 322.201369][ T9939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:581 [ 322.434918][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.464444][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.498412][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.512745][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.575022][ T9953] rust_binder: Error while translating object. [ 322.575065][ T9953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 322.581250][ T9953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:725 [ 322.766849][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.802776][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.340918][ T48] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 323.502636][ T48] usb 2-1: not running at top speed; connect to a high speed hub [ 323.511579][ T48] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.524794][ T48] usb 2-1: config 1 interface 0 has no altsetting 0 [ 323.533961][ T48] usb 2-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.40 [ 323.542992][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.551362][ T48] usb 2-1: Product: syz [ 323.555543][ T48] usb 2-1: Manufacturer: syz [ 323.560118][ T48] usb 2-1: SerialNumber: syz [ 323.625673][ T9984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 323.625704][ T9984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:433 [ 323.745908][ T9986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:435 [ 323.788853][ T48] usbhid 2-1:1.0: can't add hid device: -71 [ 323.804023][ T48] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 323.813601][ T48] usb 2-1: USB disconnect, device number 96 [ 323.860614][ T9990] overlayfs: conflicting lowerdir path [ 324.367218][ T48] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 324.540133][ T48] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.550351][ T48] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.561110][ T48] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 324.577396][ T928] usb 7-1: USB disconnect, device number 55 [ 324.588621][ T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.599078][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 324.609455][ T48] usb 4-1: SerialNumber: syz [ 324.625014][ T48] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 324.662952][ T589] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 324.681062][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3590'. [ 324.698508][T10018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:284 [ 324.841815][ T694] usb 4-1: USB disconnect, device number 87 [ 324.864760][ T589] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.874196][ T589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.882214][ T589] usb 2-1: Product: syz [ 324.886575][ T589] usb 2-1: Manufacturer: syz [ 324.891197][ T589] usb 2-1: SerialNumber: syz [ 325.587953][T10029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.608330][T10029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.993151][ T589] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 325.999607][ T589] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 326.210380][ T589] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 326.249408][ T36] kauditd_printk_skb: 876 callbacks suppressed [ 326.249424][ T36] audit: type=1400 audit(1750458664.862:20304): avc: denied { read write } for pid=8774 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.292536][ T36] audit: type=1400 audit(1750458664.881:20305): avc: denied { read write open } for pid=8774 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.318250][ T36] audit: type=1400 audit(1750458664.881:20306): avc: denied { ioctl } for pid=8774 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.347943][ T36] audit: type=1400 audit(1750458664.956:20307): avc: denied { read write } for pid=8774 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.373080][ T36] audit: type=1400 audit(1750458664.956:20308): avc: denied { read write open } for pid=8774 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.414472][ T36] audit: type=1400 audit(1750458664.956:20309): avc: denied { ioctl } for pid=8774 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 326.442159][ T36] audit: type=1400 audit(1750458665.012:20310): avc: denied { create } for pid=10057 comm="syz.6.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.468937][ T36] audit: type=1400 audit(1750458665.012:20311): avc: denied { setopt } for pid=10057 comm="syz.6.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.489880][ T36] audit: type=1400 audit(1750458665.012:20312): avc: denied { create } for pid=10057 comm="syz.6.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.510766][ T36] audit: type=1400 audit(1750458665.012:20313): avc: denied { write } for pid=10057 comm="syz.6.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.657010][ T589] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 326.682343][ T589] usb 2-1: USB disconnect, device number 97 [ 326.690547][ T589] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 327.125404][ T928] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 327.143070][T10085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:782 [ 327.296442][ T928] usb 7-1: Using ep0 maxpacket: 8 [ 327.312319][ T928] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.322741][ T928] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 327.331615][ T928] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.341344][ T928] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 327.350377][ T928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.364399][ T928] hub 7-1:1.0: bad descriptor, ignoring hub [ 327.370289][ T928] hub 7-1:1.0: probe with driver hub failed with error -5 [ 327.378398][ T928] cdc_wdm 7-1:1.0: skipping garbage [ 327.383634][ T928] cdc_wdm 7-1:1.0: skipping garbage [ 327.388851][ T928] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 327.424764][ T48] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 327.577254][T10070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 327.587424][ T48] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.628361][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 327.640675][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 327.651346][ T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.671093][ T48] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.680198][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.705826][ T589] usb 7-1: USB disconnect, device number 56 [ 327.712893][ T48] usb 4-1: config 0 descriptor?? [ 327.967898][ T48] usbhid 4-1:0.0: can't add hid device: -71 [ 327.994597][ T48] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 328.035690][ T48] usb 4-1: USB disconnect, device number 88 [ 328.046455][ T589] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 328.169590][T10116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604 [ 328.228465][ T589] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.248495][ T589] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.258220][ T589] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 328.267291][ T589] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.276390][ T589] usb 7-1: config 0 descriptor?? [ 328.440334][ T48] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 328.515924][ T589] usb 7-1: USB disconnect, device number 57 [ 328.600681][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 328.608306][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 328.615955][ T48] usb 4-1: can't read configurations, error -61 [ 328.761070][ T48] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 328.921405][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 328.929055][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 328.936693][ T48] usb 4-1: can't read configurations, error -61 [ 328.943202][ T48] usb usb4-port1: attempt power cycle [ 329.252816][ T31] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 329.306290][ T48] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 329.328380][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 329.335769][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 329.343815][ T48] usb 4-1: can't read configurations, error -61 [ 329.415065][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.426043][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 329.435344][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.446414][ T31] usb 2-1: config 0 descriptor?? [ 329.498785][ T48] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 329.520706][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 329.528523][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 329.536174][ T48] usb 4-1: can't read configurations, error -61 [ 329.542743][ T48] usb usb4-port1: unable to enumerate USB device [ 329.668799][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 329.683153][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 329.692995][ T31] usb 2-1: USB disconnect, device number 98 [ 330.140148][ T31] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 330.300489][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 330.307445][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.319198][ T31] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 330.328242][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.337354][ T31] usb 2-1: config 0 descriptor?? [ 330.364682][ T589] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 330.526911][ T589] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.537844][ T589] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.547614][ T589] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 330.560418][ T589] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.569481][ T589] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.578936][ T589] usb 7-1: config 0 descriptor?? [ 330.778072][ T31] hid-generic 0003:04D8:00DD.0020: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 330.998347][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.008606][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.018941][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.026338][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.033808][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.041215][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.048628][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.056044][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.063448][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.070834][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.078220][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.085618][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.093048][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.100406][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.107792][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.115205][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.122565][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.129954][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.137366][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.144754][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.152163][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.159558][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.166945][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.174316][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.181721][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.189129][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.191055][ T31] usb 2-1: USB disconnect, device number 99 [ 331.196521][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.216020][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.226928][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.234805][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.263688][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.273472][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.280880][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.289517][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.315823][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.328105][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.335530][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.350296][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.357802][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.365870][ T589] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 331.374042][ T589] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 331.386153][ T589] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 331.423245][ T589] usb 7-1: USB disconnect, device number 58 [ 331.565775][T10145] fido_id[10145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 331.613585][ T36] kauditd_printk_skb: 511 callbacks suppressed [ 331.613601][ T36] audit: type=1400 audit(1750458669.867:20825): avc: denied { read write } for pid=7876 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.673204][ T36] audit: type=1400 audit(1750458669.867:20826): avc: denied { read write open } for pid=7876 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.702388][ T36] audit: type=1400 audit(1750458669.867:20827): avc: denied { ioctl } for pid=7876 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.734705][ T36] audit: type=1400 audit(1750458669.885:20828): avc: denied { read write } for pid=10155 comm="syz.4.3640" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.807678][ T36] audit: type=1400 audit(1750458669.885:20829): avc: denied { read write open } for pid=10155 comm="syz.4.3640" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.841698][T10162] rust_binder: Error while translating object. [ 331.841732][T10162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 331.847914][T10162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:480 [ 331.848116][ T459] tipc: Subscription rejected, illegal request [ 331.872012][ T36] audit: type=1400 audit(1750458669.885:20830): avc: denied { ioctl } for pid=10155 comm="syz.4.3640" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.898229][T10167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.910294][T10167] rust_binder: Error while translating object. [ 331.910330][T10167] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 331.917570][T10167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:480 [ 331.926929][ T36] audit: type=1400 audit(1750458669.885:20831): avc: denied { create } for pid=10155 comm="syz.4.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.971295][ T36] audit: type=1400 audit(1750458669.885:20832): avc: denied { write } for pid=10155 comm="syz.4.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 332.015060][ T36] audit: type=1400 audit(1750458669.885:20833): avc: denied { write } for pid=10155 comm="syz.4.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 332.037230][ T36] audit: type=1400 audit(1750458669.885:20834): avc: denied { map } for pid=10155 comm="syz.4.3640" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 332.353098][ T31] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 332.513442][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 332.520405][ T31] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 332.528807][ T31] usb 7-1: config 0 has no interface number 0 [ 332.537067][ T31] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 332.546433][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.554415][ T31] usb 7-1: Product: syz [ 332.559100][ T31] usb 7-1: Manufacturer: syz [ 332.563692][ T31] usb 7-1: SerialNumber: syz [ 332.569665][ T31] usb 7-1: config 0 descriptor?? [ 332.576413][ T31] smsc95xx v2.0.0 [ 332.695192][ T48] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 332.857469][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.868413][ T48] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 332.877458][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.887019][ T48] usb 2-1: config 0 descriptor?? [ 333.008424][ T31] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 333.019180][ T31] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 333.110160][ T48] usbhid 2-1:0.0: can't add hid device: -71 [ 333.122754][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 333.131572][ T48] usb 2-1: USB disconnect, device number 100 [ 333.410380][T10198] SELinux: policydb string S= LInux does not match my string SE Linux [ 333.418756][T10198] SELinux: failed to load policy [ 333.582525][ T48] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 333.742888][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 333.750096][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.761095][ T48] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 333.770353][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.779961][ T48] usb 2-1: config 0 descriptor?? [ 334.221336][ T48] hid-generic 0003:04D8:00DD.0022: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 334.441592][T10184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.450141][T10184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.627617][ T305] usb 2-1: USB disconnect, device number 101 [ 335.427956][T10216] No source specified [ 335.824415][T10175] rust_binder: Write failure EINVAL in pid:346 [ 335.824793][ T31] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 335.844820][ T48] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 335.857287][ T31] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 335.867457][ T31] usb 7-1: USB disconnect, device number 59 [ 336.019971][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 336.027367][ T48] usb 2-1: config 1 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 336.039543][ T48] usb 2-1: config 1 interface 0 altsetting 35 endpoint 0x82 has invalid maxpacket 41838, setting to 1024 [ 336.051046][ T48] usb 2-1: config 1 interface 0 altsetting 35 bulk endpoint 0x82 has invalid maxpacket 1024 [ 336.061146][ T48] usb 2-1: config 1 interface 0 altsetting 35 bulk endpoint 0x3 has invalid maxpacket 64 [ 336.071052][ T48] usb 2-1: config 1 interface 0 has no altsetting 0 [ 336.080243][ T48] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.089674][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.097679][ T48] usb 2-1: Product: ဌ [ 336.101813][ T48] usb 2-1: Manufacturer: 啀饣ꠔཤ㴉⾪द㒙㈉밸蠻▕ã‹ç•³î‚”澯᳉ꗲ㺸织榞过ë¶é²™á°‹ì·–ǀ꧎㒗춯ä欫ä¢ï¶‡å«¤æ™¦êµ†â¨ï“æ¦êƒí£å¾å‡™ì–ï©í“¯ï—ªè²‡ì…¿æ‚®â´˜é•¤æˆ¹ã¦¡è¥“例ꋇ䯾꬜䶂攸芦ﶤ咹暔䪗캆ᗮԑⶆꆙâ´ïŠ”턼鸵䙽鿖䵦㘕魀᷉૬é–㭳㪪æ‹é‹ŠäŒ·ë¿Žæ¨°ä¢…㘾㪶ᒩ숳뫖턆鬧뎼ì¼á«¹æº£ëœžå·® [ 336.135160][ T48] usb 2-1: SerialNumber: syz [ 336.142565][T10221] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 336.151399][T10221] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 336.600809][T10221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.631920][T10221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.734597][T10237] binder: Unknown parameter 'context' [ 336.829558][T10244] input: syz0 as /devices/virtual/input/input46 [ 336.846248][T10244] binder: Unknown parameter 'ˆ' [ 336.852168][T10244] binder: Unknown parameter 's\ats' [ 336.870295][T10244] binder: Unknown parameter 'smackfsroot' [ 336.920848][T10246] overlayfs: failed to resolve './file0': -2 [ 336.976270][ T36] kauditd_printk_skb: 639 callbacks suppressed [ 336.976286][ T36] audit: type=1400 audit(1750458674.890:21429): avc: denied { create } for pid=10247 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.007586][ T36] audit: type=1400 audit(1750458674.890:21430): avc: denied { write } for pid=10247 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.028880][ T36] audit: type=1400 audit(1750458674.890:21431): avc: denied { read } for pid=10247 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.051088][ T36] audit: type=1400 audit(1750458674.890:21432): avc: denied { read } for pid=10247 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.080789][ T305] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 337.086799][ T36] audit: type=1400 audit(1750458674.918:21433): avc: denied { ioctl } for pid=10241 comm="syz.3.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.115503][ T36] audit: type=1400 audit(1750458674.918:21434): avc: denied { create } for pid=10247 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.136215][ T36] audit: type=1400 audit(1750458674.918:21435): avc: denied { write } for pid=10247 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.156936][ T36] audit: type=1400 audit(1750458674.927:21436): avc: denied { create } for pid=10247 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.177711][ T36] audit: type=1400 audit(1750458674.946:21437): avc: denied { write } for pid=10247 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 337.197206][ T36] audit: type=1400 audit(1750458674.946:21438): avc: denied { write } for pid=10247 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 337.240880][ T305] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 337.258679][ T305] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 337.270680][ T305] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 337.282886][ T305] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 337.291937][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.325640][T10242] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 337.494061][T10263] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 337.901518][ T31] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 338.075115][ T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 338.090603][ T31] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 338.116110][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.125499][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 338.133535][ T31] usb 7-1: SerialNumber: syz [ 338.141833][ T31] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 338.368395][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.380229][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.390625][ T694] usb 7-1: USB disconnect, device number 60 [ 338.696172][ T48] usb 2-1: bad CDC descriptors [ 338.710727][ T48] usb 2-1: USB disconnect, device number 102 [ 339.216469][ T589] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 339.378757][ T589] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 339.393370][ T589] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.402462][ T589] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 339.410502][ T589] usb 7-1: SerialNumber: syz [ 339.636244][T10293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.644737][T10293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.669806][ T589] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 339.686896][ T589] usb 7-1: USB disconnect, device number 61 [ 339.941563][T10310] FAULT_INJECTION: forcing a failure. [ 339.941563][T10310] name failslab, interval 1, probability 0, space 0, times 0 [ 339.954316][T10310] CPU: 0 UID: 0 PID: 10310 Comm: syz.1.3699 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 339.954345][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.954358][T10310] Call Trace: [ 339.954365][T10310] [ 339.954372][T10310] __dump_stack+0x21/0x30 [ 339.954396][T10310] dump_stack_lvl+0x10c/0x190 [ 339.954415][T10310] ? __cfi_dump_stack_lvl+0x10/0x10 [ 339.954434][T10310] ? __kasan_check_write+0x18/0x20 [ 339.954453][T10310] ? mutex_unlock+0x8b/0x240 [ 339.954470][T10310] ? __cfi_mutex_unlock+0x10/0x10 [ 339.954486][T10310] ? __fget_files+0x2c5/0x340 [ 339.954508][T10310] dump_stack+0x19/0x20 [ 339.954526][T10310] should_fail_ex+0x3d9/0x530 [ 339.954546][T10310] should_failslab+0xac/0x100 [ 339.954567][T10310] kmem_cache_alloc_noprof+0x42/0x3a0 [ 339.954586][T10310] ? getname_flags+0xc6/0x710 [ 339.954604][T10310] getname_flags+0xc6/0x710 [ 339.954624][T10310] __x64_sys_rename+0x61/0xa0 [ 339.954641][T10310] x64_sys_call+0x150b/0x2ee0 [ 339.954662][T10310] do_syscall_64+0x58/0xf0 [ 339.954682][T10310] ? clear_bhb_loop+0x35/0x90 [ 339.954705][T10310] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 339.954729][T10310] RIP: 0033:0x7fec40f8e929 [ 339.954744][T10310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.954759][T10310] RSP: 002b:00007fec41de5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 339.954778][T10310] RAX: ffffffffffffffda RBX: 00007fec411b5fa0 RCX: 00007fec40f8e929 [ 339.954790][T10310] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000200000000240 [ 339.954800][T10310] RBP: 00007fec41de5090 R08: 0000000000000000 R09: 0000000000000000 [ 339.954810][T10310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.954821][T10310] R13: 0000000000000000 R14: 00007fec411b5fa0 R15: 00007fff338b5f98 [ 339.954835][T10310] [ 340.784000][T10340] tun0: tun_chr_ioctl cmd 1074025676 [ 340.789550][T10340] tun0: owner set to 0 [ 340.941053][T10344] tap0: tun_chr_ioctl cmd 1074025673 [ 340.946407][T10345] tap0: tun_chr_ioctl cmd 1074025677 [ 340.952443][T10345] tap0: linktype set to 774 [ 340.957071][T10346] tap0: tun_chr_ioctl cmd 1074025677 [ 340.962414][T10346] tap0: linktype set to 774 [ 340.968059][T10344] __vm_enough_memory: pid: 10344, comm: syz.1.3712, bytes: 281474976845824 not enough memory for the allocation [ 341.311849][ T589] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 341.399547][ T305] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 341.407313][ T305] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input47 [ 341.429925][ T305] usb 4-1: USB disconnect, device number 93 [ 341.430015][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 341.474454][ T589] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 341.490222][ T589] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.499315][ T589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 341.510849][ T589] usb 2-1: SerialNumber: syz [ 341.747173][T10361] kvm: pic: non byte write [ 341.748506][T10348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.782099][T10348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.798098][ T589] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 341.830635][ T589] usb 2-1: USB disconnect, device number 103 [ 341.842828][T10365] rust_binder: Write failure EFAULT in pid:568 [ 342.357527][ T36] kauditd_printk_skb: 682 callbacks suppressed [ 342.357544][ T36] audit: type=1400 audit(1750458679.922:22121): avc: denied { read write } for pid=6616 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 342.395521][ T36] audit: type=1400 audit(1750458679.922:22122): avc: denied { read write open } for pid=6616 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 342.421518][ T36] audit: type=1400 audit(1750458679.922:22123): avc: denied { ioctl } for pid=6616 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 342.447245][ T36] audit: type=1400 audit(1750458679.941:22124): avc: denied { write } for pid=10377 comm="syz.1.3724" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 342.470242][ T48] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 342.477856][ T36] audit: type=1400 audit(1750458679.941:22125): avc: denied { write } for pid=10377 comm="syz.1.3724" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 342.502742][ T36] audit: type=1400 audit(1750458679.941:22126): avc: denied { read write } for pid=10377 comm="syz.1.3724" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.527055][ T36] audit: type=1400 audit(1750458679.941:22127): avc: denied { read write open } for pid=10377 comm="syz.1.3724" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.552684][ T36] audit: type=1400 audit(1750458679.941:22128): avc: denied { ioctl } for pid=10377 comm="syz.1.3724" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.578498][ T36] audit: type=1400 audit(1750458679.960:22129): avc: denied { ioctl } for pid=10375 comm="syz.6.3723" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.605478][ T36] audit: type=1400 audit(1750458680.062:22130): avc: denied { ioctl } for pid=10375 comm="syz.6.3723" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.685617][ T48] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 342.695004][ T48] usb 7-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 342.703228][ T48] usb 7-1: Product: syz [ 342.707464][ T48] usb 7-1: Manufacturer: syz [ 342.712037][ T48] usb 7-1: SerialNumber: syz [ 342.720293][ T48] r8152-cfgselector 7-1: Unknown version 0x0000 [ 342.726739][ T48] r8152-cfgselector 7-1: config 0 descriptor?? [ 343.125007][T10400] SELinux: ebitmap: truncated map [ 343.131837][T10400] SELinux: failed to load policy [ 343.321662][ T305] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 343.363869][ T589] r8152-cfgselector 7-1: USB disconnect, device number 62 [ 343.485388][ T305] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 343.499588][ T305] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.508995][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 343.517009][ T305] usb 2-1: SerialNumber: syz [ 343.652868][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3737'. [ 343.694618][T10411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 343.694646][T10411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:583 [ 343.743240][T10397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.767774][T10397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.792100][ T305] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 343.814345][ T305] usb 2-1: USB disconnect, device number 104 [ 344.236878][T10434] can0: slcan on ttyS3. [ 344.309941][T10434] can0 (unregistered): slcan off ttyS3. [ 344.519028][ T305] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 344.692941][ T305] usb 7-1: Using ep0 maxpacket: 16 [ 344.703361][ T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.715099][ T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.726009][ T305] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 344.726683][T10443] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.739600][ T305] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 344.754907][ T305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.756393][T10443] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.766436][ T305] usb 7-1: config 0 descriptor?? [ 344.779991][T10443] bridge_slave_0: entered allmulticast mode [ 344.787652][T10443] bridge_slave_0: entered promiscuous mode [ 344.795081][T10443] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.803397][T10443] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.813457][T10443] bridge_slave_1: entered allmulticast mode [ 344.819812][T10443] bridge_slave_1: entered promiscuous mode [ 344.893226][T10443] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.900272][T10443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.907538][T10443] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.914574][T10443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.961609][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.969021][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.981943][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.989004][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.999676][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.006747][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.064519][ T928] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 345.070419][T10443] veth0_vlan: entered promiscuous mode [ 345.101341][T10443] veth1_macvtap: entered promiscuous mode [ 345.216894][ T305] microsoft 0003:045E:07DA.0023: unknown main item tag 0x2 [ 345.224162][ T305] microsoft 0003:045E:07DA.0023: ignoring exceeding usage max [ 345.234854][ T305] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 345.245956][ T928] usb 2-1: Using ep0 maxpacket: 16 [ 345.253724][ T305] microsoft 0003:045E:07DA.0023: unknown main item tag 0xe [ 345.257913][ T928] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.262173][ T305] microsoft 0003:045E:07DA.0023: collection stack underflow [ 345.278608][ T928] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 345.289996][ T928] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 345.299442][ T305] microsoft 0003:045E:07DA.0023: item 0 0 0 12 parsing failed [ 345.300792][ T928] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 345.307324][ T305] microsoft 0003:045E:07DA.0023: parse failed [ 345.321276][ T928] usb 2-1: config 1 interface 0 has no altsetting 0 [ 345.336172][ T928] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.341332][ T305] microsoft 0003:045E:07DA.0023: probe with driver microsoft failed with error -22 [ 345.346395][ T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 345.375849][ T928] usb 2-1: SerialNumber: syz [ 345.386754][T10450] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 345.394287][T10450] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 345.467685][ T3856] usb 7-1: USB disconnect, device number 63 [ 345.493313][T10458] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 345.632380][T10450] input: syz1 as /devices/virtual/input/input48 [ 345.655975][T10450] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 345.673931][T10450] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 346.090557][ T3856] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 346.134797][ T928] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 346.253243][ T3856] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 346.269593][ T3856] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.279947][ T3856] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 346.293649][ T3856] usb 8-1: SerialNumber: syz [ 346.489289][ C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 68! [ 346.497272][ C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 04! [ 346.504791][ C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 64! [ 346.519611][ C1] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 79! [ 346.527013][T10468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.535616][T10468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.550472][ T3856] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 346.565463][ T3856] usb 8-1: USB disconnect, device number 2 [ 346.809490][ T3856] usb 2-1: USB disconnect, device number 105 [ 346.816601][ T3856] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 346.953142][T10489] kvm: pic: non byte write [ 347.028890][T10498] rust_binder: Write failure EFAULT in pid:390 [ 347.194792][T10510] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3765'. [ 347.352725][T10522] FAULT_INJECTION: forcing a failure. [ 347.352725][T10522] name failslab, interval 1, probability 0, space 0, times 0 [ 347.401282][T10522] CPU: 0 UID: 0 PID: 10522 Comm: syz.7.3768 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 347.401311][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.401322][T10522] Call Trace: [ 347.401329][T10522] [ 347.401336][T10522] __dump_stack+0x21/0x30 [ 347.401359][T10522] dump_stack_lvl+0x10c/0x190 [ 347.401379][T10522] ? __cfi_dump_stack_lvl+0x10/0x10 [ 347.401398][T10522] ? stack_trace_save+0x9d/0xe0 [ 347.401417][T10522] ? ip6_dst_check+0x5d1/0x720 [ 347.401438][T10522] dump_stack+0x19/0x20 [ 347.401456][T10522] should_fail_ex+0x3d9/0x530 [ 347.401475][T10522] should_failslab+0xac/0x100 [ 347.401497][T10522] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 347.401524][T10522] ? __alloc_skb+0x10c/0x370 [ 347.401544][T10522] ? tcp_sendmsg_locked+0x4879/0x4ee0 [ 347.401566][T10522] ? tcp_sendmsg+0x3e/0xe0 [ 347.401587][T10522] __alloc_skb+0x10c/0x370 [ 347.401607][T10522] tcp_stream_alloc_skb+0x43/0x370 [ 347.401628][T10522] ? __asan_memset+0x39/0x50 [ 347.401646][T10522] tcp_connect+0x169e/0x59a0 [ 347.401671][T10522] ? __kasan_slab_alloc+0x73/0x90 [ 347.401695][T10522] ? __cfi_tcp_connect+0x10/0x10 [ 347.401715][T10522] ? __inet_hash_connect+0x1256/0x17b0 [ 347.401730][T10522] ? __siphash_unaligned+0x23f/0x3c0 [ 347.401749][T10522] ? read_tsc+0xd/0x20 [ 347.401766][T10522] ? tcp_fastopen_defer_connect+0xf1/0x460 [ 347.401790][T10522] ? __cfi_tcp_fastopen_defer_connect+0x10/0x10 [ 347.401816][T10522] ? inet6_hash_connect+0x95/0xe0 [ 347.401836][T10522] tcp_v6_connect+0x109d/0x1800 [ 347.401856][T10522] ? __cfi_tcp_v6_connect+0x10/0x10 [ 347.401874][T10522] ? inet6_sendmsg+0xb7/0x120 [ 347.401896][T10522] ? x64_sys_call+0x2c2c/0x2ee0 [ 347.401917][T10522] ? do_syscall_64+0x58/0xf0 [ 347.401940][T10522] __inet_stream_connect+0x2a4/0xf40 [ 347.401959][T10522] ? __cfi___inet_stream_connect+0x10/0x10 [ 347.401975][T10522] ? kasan_save_alloc_info+0x40/0x50 [ 347.401993][T10522] ? __kasan_kmalloc+0x96/0xb0 [ 347.402018][T10522] ? tcp_sendmsg_fastopen+0x1e2/0x6e0 [ 347.402040][T10522] tcp_sendmsg_fastopen+0x3b0/0x6e0 [ 347.402062][T10522] tcp_sendmsg_locked+0x4879/0x4ee0 [ 347.402084][T10522] ? _parse_integer_limit+0x195/0x1e0 [ 347.402103][T10522] ? avc_has_perm_noaudit+0x21c/0x360 [ 347.402123][T10522] ? __kasan_check_write+0x18/0x20 [ 347.402141][T10522] ? _raw_spin_lock_bh+0x90/0x120 [ 347.402163][T10522] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 347.402182][T10522] ? kstrtouint_from_user+0xfb/0x150 [ 347.402200][T10522] ? x64_sys_call+0xe69/0x2ee0 [ 347.402222][T10522] ? _raw_spin_unlock_bh+0x54/0x60 [ 347.402243][T10522] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 347.402265][T10522] ? __kasan_check_write+0x18/0x20 [ 347.402283][T10522] ? proc_fail_nth_write+0x17e/0x210 [ 347.402300][T10522] ? __cfi_tcp_sendmsg+0x10/0x10 [ 347.402324][T10522] tcp_sendmsg+0x3e/0xe0 [ 347.402344][T10522] ? __cfi_tcp_sendmsg+0x10/0x10 [ 347.402365][T10522] inet6_sendmsg+0xb7/0x120 [ 347.402386][T10522] __sys_sendto+0x446/0x6f0 [ 347.402408][T10522] ? __cfi___sys_sendto+0x10/0x10 [ 347.402430][T10522] ? __kasan_check_write+0x18/0x20 [ 347.402450][T10522] ? __cfi_ksys_write+0x10/0x10 [ 347.402470][T10522] __x64_sys_sendto+0xe9/0x100 [ 347.402491][T10522] x64_sys_call+0x2c2c/0x2ee0 [ 347.402544][T10522] do_syscall_64+0x58/0xf0 [ 347.402564][T10522] ? clear_bhb_loop+0x35/0x90 [ 347.402588][T10522] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 347.402610][T10522] RIP: 0033:0x7f58ca18e929 [ 347.402626][T10522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.402641][T10522] RSP: 002b:00007f58cafb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 347.402661][T10522] RAX: ffffffffffffffda RBX: 00007f58ca3b5fa0 RCX: 00007f58ca18e929 [ 347.402675][T10522] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 347.402687][T10522] RBP: 00007f58cafb8090 R08: 0000200000b63fe4 R09: 000000000000001c [ 347.402700][T10522] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 347.402712][T10522] R13: 0000000000000000 R14: 00007f58ca3b5fa0 R15: 00007fff06c7d9e8 [ 347.402727][T10522] [ 347.825745][T10526] FAULT_INJECTION: forcing a failure. [ 347.825745][T10526] name failslab, interval 1, probability 0, space 0, times 0 [ 347.828241][ T36] kauditd_printk_skb: 1015 callbacks suppressed [ 347.828254][ T36] audit: type=1400 audit(1750458686.040:23146): avc: denied { read write } for pid=10443 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.838418][T10526] CPU: 0 UID: 0 PID: 10526 Comm: syz.4.3769 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 347.838445][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.838456][T10526] Call Trace: [ 347.838463][T10526] [ 347.838470][T10526] __dump_stack+0x21/0x30 [ 347.838494][T10526] dump_stack_lvl+0x10c/0x190 [ 347.838512][T10526] ? __cfi_dump_stack_lvl+0x10/0x10 [ 347.838531][T10526] dump_stack+0x19/0x20 [ 347.838549][T10526] should_fail_ex+0x3d9/0x530 [ 347.838573][T10526] should_failslab+0xac/0x100 [ 347.838594][T10526] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 347.838613][T10526] ? __d_alloc+0x42/0x8e0 [ 347.838630][T10526] __d_alloc+0x42/0x8e0 [ 347.838647][T10526] ? put_dec_trunc8+0x229/0x380 [ 347.838667][T10526] d_alloc_parallel+0xde/0x1240 [ 347.838685][T10526] ? number+0xd21/0xf80 [ 347.838703][T10526] ? pointer+0xdd0/0xdd0 [ 347.838721][T10526] ? __d_lookup+0x4e8/0x550 [ 347.838739][T10526] ? __cfi_d_alloc_parallel+0x10/0x10 [ 347.838758][T10526] ? full_name_hash+0xa1/0xf0 [ 347.838778][T10526] proc_fill_cache+0x293/0x420 [ 347.838800][T10526] ? __cfi_proc_fd_instantiate+0x10/0x10 [ 347.838820][T10526] ? __cfi_proc_fill_cache+0x10/0x10 [ 347.838839][T10526] ? __cfi_snprintf+0x10/0x10 [ 347.838859][T10526] ? __kasan_check_write+0x18/0x20 [ 347.838876][T10526] proc_readfd_common+0x41f/0x5a0 [ 347.838896][T10526] ? __cfi_proc_fd_instantiate+0x10/0x10 [ 347.838916][T10526] ? proc_fdinfo_iterate+0x50/0x50 [ 347.838935][T10526] ? vfs_write+0x8ba/0xe80 [ 347.838953][T10526] ? devlink_port_attrs_pci_pf_set+0x210/0x320 [ 347.838974][T10526] ? __cfi_down_read_killable+0x10/0x10 [ 347.838992][T10526] ? mutex_lock+0x92/0x1c0 [ 347.839007][T10526] ? __cfi_mutex_lock+0x10/0x10 [ 347.839022][T10526] proc_fd_iterate+0x28/0x40 [ 347.839041][T10526] iterate_dir+0x200/0x5e0 [ 347.839062][T10526] __se_sys_getdents+0xe9/0x240 [ 347.839082][T10526] ? fput+0x1a5/0x240 [ 347.839103][T10526] ? __x64_sys_getdents+0xa0/0xa0 [ 347.839123][T10526] ? ksys_write+0x1ef/0x250 [ 347.839141][T10526] ? __cfi_filldir+0x10/0x10 [ 347.839161][T10526] ? __cfi_ksys_write+0x10/0x10 [ 347.839180][T10526] ? __kasan_check_read+0x15/0x20 [ 347.839198][T10526] __x64_sys_getdents+0x7f/0xa0 [ 347.839218][T10526] x64_sys_call+0x26e0/0x2ee0 [ 347.839238][T10526] do_syscall_64+0x58/0xf0 [ 347.839257][T10526] ? clear_bhb_loop+0x35/0x90 [ 347.839278][T10526] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 347.839300][T10526] RIP: 0033:0x7f6f5c18e929 [ 347.839314][T10526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.839328][T10526] RSP: 002b:00007f6f5d067038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 347.839346][T10526] RAX: ffffffffffffffda RBX: 00007f6f5c3b5fa0 RCX: 00007f6f5c18e929 [ 347.839359][T10526] RDX: 0000000000001027 RSI: 00002000000003c0 RDI: 0000000000000003 [ 347.839371][T10526] RBP: 00007f6f5d067090 R08: 0000000000000000 R09: 0000000000000000 [ 347.839382][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.839393][T10526] R13: 0000000000000000 R14: 00007f6f5c3b5fa0 R15: 00007fff403dc1a8 [ 347.839407][T10526] [ 348.182723][ T36] audit: type=1400 audit(1750458686.059:23147): avc: denied { read write } for pid=7876 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.207064][ T36] audit: type=1400 audit(1750458686.059:23148): avc: denied { read write open } for pid=7876 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.232174][ T36] audit: type=1400 audit(1750458686.059:23149): avc: denied { ioctl } for pid=7876 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.257751][ T36] audit: type=1400 audit(1750458686.106:23150): avc: denied { read write open } for pid=10443 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.282888][ T36] audit: type=1400 audit(1750458686.106:23151): avc: denied { ioctl } for pid=10443 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.308524][ T36] audit: type=1400 audit(1750458686.274:23152): avc: denied { read } for pid=10528 comm="syz.4.3772" dev="nsfs" ino=4026532556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 348.329812][ T36] audit: type=1400 audit(1750458686.274:23153): avc: denied { read open } for pid=10528 comm="syz.4.3772" path="net:[4026532556]" dev="nsfs" ino=4026532556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 348.353647][ T36] audit: type=1400 audit(1750458686.274:23154): avc: denied { create } for pid=10528 comm="syz.4.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 348.374250][ T36] audit: type=1400 audit(1750458686.274:23155): avc: denied { read } for pid=10528 comm="syz.4.3772" dev="nsfs" ino=4026532556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 348.447147][T10535] bridge0: entered promiscuous mode [ 348.453247][T10534] bridge0: left promiscuous mode [ 348.463856][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 348.648218][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.667011][ T10] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 348.676602][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.698471][ T10] usb 8-1: config 0 descriptor?? [ 348.872701][T10551] rust_binder: Got transaction with invalid offset. [ 348.872747][T10551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 348.879962][T10551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:696 [ 348.929238][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 348.950300][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 348.969792][ T10] usb 8-1: USB disconnect, device number 3 [ 349.468759][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 349.564983][ T3856] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 349.629128][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 349.636130][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.647633][ T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 349.659093][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.670058][ T10] usb 8-1: config 0 descriptor?? [ 349.725353][ T3856] usb 7-1: device descriptor read/64, error -71 [ 349.907071][ T928] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 349.981945][ T3856] usb 7-1: device descriptor read/64, error -71 [ 350.067437][ T928] usb 2-1: Using ep0 maxpacket: 16 [ 350.074546][ T928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.086174][ T928] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 350.095225][ T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.104914][ T928] usb 2-1: config 0 descriptor?? [ 350.118455][ T10] hid-generic 0003:04D8:00DD.0024: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 350.238512][ T3856] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 350.341443][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.349998][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.388163][ T3856] usb 7-1: device descriptor read/64, error -71 [ 350.472636][ T31] usb 8-1: USB disconnect, device number 4 [ 350.544274][ T928] appleir 0003:05AC:8241.0025: unknown main item tag 0x0 [ 350.552497][ T928] appleir 0003:05AC:8241.0025: unknown main item tag 0x0 [ 350.559581][ T928] appleir 0003:05AC:8241.0025: item fetching failed at offset 3/5 [ 350.567644][ T928] appleir 0003:05AC:8241.0025: parse failed [ 350.573616][ T928] appleir 0003:05AC:8241.0025: probe with driver appleir failed with error -22 [ 350.644727][ T3856] usb 7-1: device descriptor read/64, error -71 [ 350.760674][T10581] input: syz0 as /devices/virtual/input/input49 [ 350.763745][ T3856] usb usb7-port1: attempt power cycle [ 350.833900][ T10] usb 2-1: USB disconnect, device number 106 [ 351.147204][ T3856] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 351.180913][ T3856] usb 7-1: device descriptor read/8, error -71 [ 351.320249][ T3856] usb 7-1: device descriptor read/8, error -71 [ 351.395960][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 351.430380][T10593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.498366][T10601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:606 [ 351.509719][T10593] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 351.519517][T10593] rust_binder: Error in use_page_slow: EBUSY [ 351.539340][T10593] rust_binder: use_range failure EBUSY [ 351.553434][ T10] usb 8-1: device descriptor read/64, error -71 [ 351.553553][T10593] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 351.566977][T10593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 351.574636][T10593] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 351.583986][ T3856] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 351.603314][T10593] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:606 [ 351.620042][ T3856] usb 7-1: device descriptor read/8, error -71 [ 351.665415][T10608] selinux_netlink_send: 33 callbacks suppressed [ 351.665432][T10608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=12189 sclass=netlink_tcpdiag_socket pid=10608 comm=syz.4.3801 [ 351.804190][ T3856] usb 7-1: device descriptor read/8, error -71 [ 351.811028][ T10] usb 8-1: device descriptor read/64, error -71 [ 351.940904][ T3856] usb usb7-port1: unable to enumerate USB device [ 352.077302][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 352.152113][ T305] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 352.176348][T10628] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10628 comm=syz.4.3810 [ 352.228716][T10630] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 352.237404][T10630] rust_binder: Write failure EINVAL in pid:625 [ 352.237698][ T10] usb 8-1: device descriptor read/64, error -71 [ 352.336080][ T305] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 352.351300][ T305] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.369804][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 352.384299][ T305] usb 2-1: SerialNumber: syz [ 352.526312][ T10] usb 8-1: device descriptor read/64, error -71 [ 352.644356][ T10] usb usb8-port1: attempt power cycle [ 352.654582][ T305] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 352.677771][ T305] usb 2-1: USB disconnect, device number 107 [ 352.693101][ T9628] udevd[9628]: setting owner of /dev/bus/usb/002/107 to uid=0, gid=0 failed: No such file or directory [ 352.753198][T10643] rust_binder: Error while translating object. [ 352.753236][T10643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 352.759418][T10643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:414 [ 353.007543][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 353.035654][T10649] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 353.041594][ T10] usb 8-1: device descriptor read/8, error -71 [ 353.051516][T10649] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 353.190312][ T36] kauditd_printk_skb: 806 callbacks suppressed [ 353.190328][ T36] audit: type=1400 audit(1750458691.063:23962): avc: denied { ioctl } for pid=10588 comm="syz.7.3795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.191860][ T10] usb 8-1: device descriptor read/8, error -71 [ 353.196680][ T36] audit: type=1400 audit(1750458691.063:23963): avc: denied { ioctl } for pid=10588 comm="syz.7.3795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.252848][ T36] audit: type=1400 audit(1750458691.063:23964): avc: denied { ioctl } for pid=10588 comm="syz.7.3795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.279205][ T36] audit: type=1400 audit(1750458691.063:23965): avc: denied { ioctl } for pid=10588 comm="syz.7.3795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.305164][ T36] audit: type=1400 audit(1750458691.063:23966): avc: denied { ioctl } for pid=10588 comm="syz.7.3795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.330937][ T36] audit: type=1400 audit(1750458691.091:23967): avc: denied { ioctl } for pid=10588 comm="syz.7.3795" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.402892][ T36] audit: type=1400 audit(1750458691.119:23968): avc: denied { mounton } for pid=10652 comm="syz.6.3820" path="/172/file0/file0" dev="tmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 353.456798][ T36] audit: type=1400 audit(1750458691.129:23969): avc: denied { create } for pid=10652 comm="syz.6.3820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=ipx_socket permissive=1 [ 353.497803][ T36] audit: type=1400 audit(1750458691.176:23970): avc: denied { read write } for pid=6616 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.522227][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 353.563237][T10657] fuse: Bad value for 'user_id' [ 353.563289][ T36] audit: type=1400 audit(1750458691.176:23971): avc: denied { read write open } for pid=6616 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.568181][T10657] fuse: Bad value for 'user_id' [ 353.621139][ T10] usb 8-1: device descriptor read/8, error -71 [ 353.666975][T10663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:635 [ 353.768243][ T10] usb 8-1: device descriptor read/8, error -71 [ 353.916125][ T10] usb usb8-port1: unable to enumerate USB device [ 354.140556][ T589] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 354.322298][ T589] usb 7-1: Using ep0 maxpacket: 8 [ 354.331709][ T589] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 354.340871][ T589] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 354.349436][ T589] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 354.358598][ T589] usb 7-1: config 250 has no interface number 0 [ 354.364920][ T589] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 354.376610][ T589] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 354.398224][ T589] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 354.411737][ T589] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 354.423517][ T589] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 354.437686][ T589] usb 7-1: config 250 interface 228 has no altsetting 0 [ 354.447849][ T589] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 354.462452][ T589] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 354.472700][ T589] usb 7-1: Product: syz [ 354.477853][ T589] usb 7-1: SerialNumber: syz [ 354.515532][ T589] hub 7-1:250.228: bad descriptor, ignoring hub [ 354.523734][ T589] hub 7-1:250.228: probe with driver hub failed with error -5 [ 354.741174][ T589] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 68 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 355.214908][T10703] netlink: 188 bytes leftover after parsing attributes in process `syz.7.3840'. [ 355.295222][ T305] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 355.382762][T10710] rust_binder: Write failure EINVAL in pid:61 [ 355.468162][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.485271][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.495199][ T305] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 355.505157][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.514607][ T305] usb 2-1: config 0 descriptor?? [ 356.283035][ T59] tipc: Subscription rejected, illegal request [ 356.604024][T10694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 356.604053][T10694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:747 [ 356.614048][ T305] uclogic 0003:256C:006D.0026: failed retrieving string descriptor #100: -71 [ 356.634684][ T305] uclogic 0003:256C:006D.0026: failed retrieving pen parameters: -71 [ 356.646115][ T305] uclogic 0003:256C:006D.0026: failed probing pen v1 parameters: -71 [ 356.654696][ T305] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 356.662229][ T305] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71 [ 356.672326][ T305] usb 2-1: USB disconnect, device number 108 [ 357.500949][T10735] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3853'. [ 357.606051][T10731] FAULT_INJECTION: forcing a failure. [ 357.606051][T10731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.619221][T10731] CPU: 1 UID: 0 PID: 10731 Comm: syz.1.3850 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 357.619248][T10731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.619260][T10731] Call Trace: [ 357.619265][T10731] [ 357.619272][T10731] __dump_stack+0x21/0x30 [ 357.619296][T10731] dump_stack_lvl+0x10c/0x190 [ 357.619315][T10731] ? __cfi_dump_stack_lvl+0x10/0x10 [ 357.619336][T10731] dump_stack+0x19/0x20 [ 357.619354][T10731] should_fail_ex+0x3d9/0x530 [ 357.619374][T10731] should_fail+0xf/0x20 [ 357.619390][T10731] should_fail_usercopy+0x1e/0x30 [ 357.619409][T10731] _copy_from_user+0x22/0xb0 [ 357.619436][T10731] seccomp_notify_ioctl+0x9d2/0x1750 [ 357.619459][T10731] ? __cfi_seccomp_notify_ioctl+0x10/0x10 [ 357.619479][T10731] ? selinux_file_ioctl+0x6e0/0x1360 [ 357.619502][T10731] ? vfs_write+0x8ba/0xe80 [ 357.619522][T10731] ? __cfi_vfs_write+0x10/0x10 [ 357.619541][T10731] ? __kasan_check_write+0x18/0x20 [ 357.619559][T10731] ? mutex_unlock+0x8b/0x240 [ 357.619576][T10731] ? __cfi_mutex_unlock+0x10/0x10 [ 357.619592][T10731] ? __fget_files+0x2c5/0x340 [ 357.619614][T10731] ? __fget_files+0x2c5/0x340 [ 357.619635][T10731] ? bpf_lsm_file_ioctl+0xd/0x20 [ 357.619652][T10731] ? security_file_ioctl+0x34/0xd0 [ 357.619674][T10731] ? __cfi_seccomp_notify_ioctl+0x10/0x10 [ 357.619694][T10731] __se_sys_ioctl+0x132/0x1b0 [ 357.619715][T10731] __x64_sys_ioctl+0x7f/0xa0 [ 357.619736][T10731] x64_sys_call+0x1878/0x2ee0 [ 357.619756][T10731] do_syscall_64+0x58/0xf0 [ 357.619777][T10731] ? clear_bhb_loop+0x35/0x90 [ 357.619800][T10731] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 357.619823][T10731] RIP: 0033:0x7fec40f8e929 [ 357.619838][T10731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.619853][T10731] RSP: 002b:00007fec41dc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.619873][T10731] RAX: ffffffffffffffda RBX: 00007fec411b6080 RCX: 00007fec40f8e929 [ 357.619887][T10731] RDX: 0000200000000240 RSI: 0000000040182103 RDI: 0000000000000003 [ 357.619900][T10731] RBP: 00007fec41dc4090 R08: 0000000000000000 R09: 0000000000000000 [ 357.619912][T10731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.619924][T10731] R13: 0000000000000000 R14: 00007fec411b6080 R15: 00007fff338b5f98 [ 357.619939][T10731] [ 358.319083][T10744] x_tables: duplicate underflow at hook 1 [ 358.439708][ T928] usb 7-1: USB disconnect, device number 68 [ 358.446819][ T928] usblp0: removed [ 358.546060][ T36] kauditd_printk_skb: 461 callbacks suppressed [ 358.546076][ T36] audit: type=1400 audit(1750458696.068:24431): avc: denied { read } for pid=10747 comm="syz.1.3859" dev="nsfs" ino=4026532391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 358.576416][ T36] audit: type=1400 audit(1750458696.096:24432): avc: denied { read open } for pid=10747 comm="syz.1.3859" path="net:[4026532391]" dev="nsfs" ino=4026532391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 358.602745][ T36] audit: type=1400 audit(1750458696.096:24433): avc: denied { create } for pid=10747 comm="syz.1.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 358.649963][ T36] audit: type=1400 audit(1750458696.096:24434): avc: denied { getopt } for pid=10747 comm="syz.1.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 358.689235][ T36] audit: type=1400 audit(1750458696.124:24435): avc: denied { read } for pid=10747 comm="syz.1.3859" path="socket:[98739]" dev="sockfs" ino=98739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 358.721021][ T36] audit: type=1400 audit(1750458696.124:24436): avc: denied { read write } for pid=7876 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.752807][ T36] audit: type=1400 audit(1750458696.124:24437): avc: denied { read write open } for pid=7876 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.777887][ T36] audit: type=1400 audit(1750458696.124:24438): avc: denied { ioctl } for pid=7876 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 358.803484][ T305] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 358.811039][ T36] audit: type=1400 audit(1750458696.161:24439): avc: denied { ioctl } for pid=10758 comm="syz.7.3862" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 358.837032][ T36] audit: type=1400 audit(1750458696.171:24440): avc: denied { create } for pid=10765 comm="syz.4.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 358.994091][ T305] usb 8-1: Using ep0 maxpacket: 16 [ 359.001148][ T305] usb 8-1: config 0 interface 0 altsetting 67 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.014169][ T305] usb 8-1: config 0 interface 0 has no altsetting 0 [ 359.020966][ T305] usb 8-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 359.030017][ T305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.039286][ T305] usb 8-1: config 0 descriptor?? [ 359.535339][T10775] binder: Bad value for 'max' [ 359.690601][ T459] tipc: Subscription rejected, illegal request [ 359.702483][ T305] usbhid 8-1:0.0: can't add hid device: -71 [ 359.718413][ T305] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 359.732038][ T305] usb 8-1: USB disconnect, device number 9 [ 360.846660][ T928] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 361.016502][ T928] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 361.024635][ T928] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 361.036204][ T928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 361.047152][ T928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 361.056876][ T928] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.070328][ T928] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.079404][ T928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.088698][ T928] usb 8-1: config 0 descriptor?? [ 361.132229][ T3856] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 361.294536][ T3856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.304682][ T3856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.315659][ T3856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 361.326628][ T3856] usb 2-1: config 1 interface 1 has no altsetting 1 [ 361.336288][ T3856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.345636][ T3856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.353651][ T3856] usb 2-1: Product: syz [ 361.357982][ T3856] usb 2-1: Manufacturer: syz [ 361.362565][ T3856] usb 2-1: SerialNumber: syz [ 361.370574][T10806] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 361.378669][ T3856] cdc_ncm 2-1:1.0: skipping garbage [ 361.384069][ T3856] usb 2-1: selecting invalid altsetting 1 [ 361.532454][ T928] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 361.539955][ T928] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 361.547402][ T928] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 361.555112][ T928] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 361.563075][ T928] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 361.570516][ T928] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 361.577959][ T928] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 361.591953][ T928] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 361.599381][ T928] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 361.606895][ T928] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 361.614327][ T3856] cdc_ncm 2-1:1.0: bind() failure [ 361.619952][ T3856] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 361.628514][ T928] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 361.635935][ T3856] cdc_ncm 2-1:1.1: bind() failure [ 361.642111][ T928] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 361.650048][ T3856] usb 2-1: USB disconnect, device number 109 [ 361.673104][ T928] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 361.819039][ T694] usb 8-1: USB disconnect, device number 10 [ 361.869080][T10812] fido_id[10812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 362.051620][ T305] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 362.211950][ T305] usb 7-1: Using ep0 maxpacket: 32 [ 362.220289][ T305] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 362.233753][ T305] usb 7-1: config 0 has no interface number 0 [ 362.243177][ T305] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 362.252546][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.254984][T10818] overlayfs: failed to resolve './file1/file0': -2 [ 362.262591][ T305] usb 7-1: Product: syz [ 362.271214][ T305] usb 7-1: Manufacturer: syz [ 362.275917][ T305] usb 7-1: SerialNumber: syz [ 362.282138][ T305] usb 7-1: config 0 descriptor?? [ 362.291201][ T305] smsc95xx v2.0.0 [ 362.513872][T10827] input: syz1 as /devices/virtual/input/input50 [ 362.534555][T10827] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3889'. [ 362.650494][T10831] FAULT_INJECTION: forcing a failure. [ 362.650494][T10831] name failslab, interval 1, probability 0, space 0, times 0 [ 362.671705][T10831] CPU: 0 UID: 0 PID: 10831 Comm: syz.1.3890 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 362.671744][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.671755][T10831] Call Trace: [ 362.671762][T10831] [ 362.671771][T10831] __dump_stack+0x21/0x30 [ 362.671794][T10831] dump_stack_lvl+0x10c/0x190 [ 362.671816][T10831] ? __cfi_dump_stack_lvl+0x10/0x10 [ 362.671837][T10831] dump_stack+0x19/0x20 [ 362.671855][T10831] should_fail_ex+0x3d9/0x530 [ 362.671874][T10831] should_failslab+0xac/0x100 [ 362.671893][T10831] __kmalloc_noprof+0x69/0x450 [ 362.671910][T10831] ? security_sb_alloc+0x5b/0x200 [ 362.671926][T10831] ? __kasan_kmalloc+0x96/0xb0 [ 362.671947][T10831] security_sb_alloc+0x5b/0x200 [ 362.671965][T10831] ? __kasan_check_write+0x18/0x20 [ 362.671984][T10831] alloc_super+0x174/0x930 [ 362.672001][T10831] sget+0x1fa/0x700 [ 362.672016][T10831] ? __cfi_set_anon_super+0x10/0x10 [ 362.672034][T10831] incfs_mount_fs+0xc7/0x960 [ 362.672052][T10831] ? __kasan_check_read+0x15/0x20 [ 362.672070][T10831] ? static_key_count+0x45/0x70 [ 362.672088][T10831] ? __cfi_incfs_mount_fs+0x10/0x10 [ 362.672107][T10831] ? selinux_capable+0x38/0x50 [ 362.672127][T10831] legacy_get_tree+0x103/0x1b0 [ 362.672151][T10831] ? __cfi_incfs_mount_fs+0x10/0x10 [ 362.672169][T10831] vfs_get_tree+0x9e/0x290 [ 362.672189][T10831] do_new_mount+0x251/0xb40 [ 362.672210][T10831] path_mount+0x688/0x1050 [ 362.672227][T10831] ? putname+0x113/0x150 [ 362.672247][T10831] __se_sys_mount+0x2bd/0x480 [ 362.672266][T10831] ? ksys_write+0x1ef/0x250 [ 362.672285][T10831] ? __x64_sys_mount+0xf0/0xf0 [ 362.672305][T10831] __x64_sys_mount+0xc3/0xf0 [ 362.672325][T10831] x64_sys_call+0x2021/0x2ee0 [ 362.672347][T10831] do_syscall_64+0x58/0xf0 [ 362.672367][T10831] ? clear_bhb_loop+0x35/0x90 [ 362.672392][T10831] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 362.672414][T10831] RIP: 0033:0x7fec40f8e929 [ 362.672431][T10831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.672446][T10831] RSP: 002b:00007fec41de5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 362.672467][T10831] RAX: ffffffffffffffda RBX: 00007fec411b5fa0 RCX: 00007fec40f8e929 [ 362.672481][T10831] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000200000000140 [ 362.672495][T10831] RBP: 00007fec41de5090 R08: 0000000000000000 R09: 0000000000000000 [ 362.672508][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.672519][T10831] R13: 0000000000000000 R14: 00007fec411b5fa0 R15: 00007fff338b5f98 [ 362.672533][T10831] [ 363.317747][ T305] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 363.328498][ T694] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 363.336089][ T305] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 363.484198][ T694] usb 8-1: device descriptor read/64, error -71 [ 363.611132][ T305] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 363.627828][ T305] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 363.637873][ T305] usb 7-1: USB disconnect, device number 69 [ 363.740847][ T694] usb 8-1: device descriptor read/64, error -71 [ 363.933465][ T36] kauditd_printk_skb: 540 callbacks suppressed [ 363.933481][ T36] audit: type=1400 audit(1750458701.109:24981): avc: denied { ioctl } for pid=10835 comm="syz.7.3893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 363.995713][ T36] audit: type=1400 audit(1750458701.166:24982): avc: denied { read write } for pid=6616 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.008035][ T694] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 364.020483][ T36] audit: type=1400 audit(1750458701.166:24983): avc: denied { read write open } for pid=6616 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.066163][ T36] audit: type=1400 audit(1750458701.166:24984): avc: denied { ioctl } for pid=6616 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 364.072690][T10860] rust_binder: Read failure Err(EAGAIN) in pid:808 [ 364.093278][ T36] audit: type=1400 audit(1750458701.203:24985): avc: denied { ioctl } for pid=10835 comm="syz.7.3893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.126119][ T36] audit: type=1400 audit(1750458701.203:24986): avc: denied { ioctl } for pid=10835 comm="syz.7.3893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.151237][ T36] audit: type=1400 audit(1750458701.203:24987): avc: denied { ioctl } for pid=10835 comm="syz.7.3893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.176342][ T36] audit: type=1400 audit(1750458701.203:24988): avc: denied { ioctl } for pid=10835 comm="syz.7.3893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.201416][ T694] usb 8-1: device descriptor read/64, error -71 [ 364.208068][ T36] audit: type=1400 audit(1750458701.203:24989): avc: denied { ioctl } for pid=10835 comm="syz.7.3893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.233167][ T36] audit: type=1400 audit(1750458701.203:24990): avc: denied { ioctl } for pid=10835 comm="syz.7.3893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.239431][T10860] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 364.294138][T10860] rust_binder: Read failure Err(EFAULT) in pid:808 [ 364.324200][T10860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:808 [ 364.457014][ T694] usb 8-1: device descriptor read/64, error -71 [ 364.542533][ T305] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 364.585634][ T694] usb usb8-port1: attempt power cycle [ 364.630247][T10872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:813 [ 364.704682][ T305] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.729880][ T305] usb 7-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 364.741658][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.750588][ T305] usb 7-1: Product: syz [ 364.754755][ T305] usb 7-1: Manufacturer: syz [ 364.760020][ T305] usb 7-1: SerialNumber: syz [ 364.772905][ T305] usb 7-1: config 0 descriptor?? [ 364.780563][ T305] usb 7-1: bad CDC descriptors [ 364.801454][T10874] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3909'. [ 364.948784][ T694] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 364.971993][ T694] usb 8-1: device descriptor read/8, error -71 [ 365.005053][T10865] x_tables: duplicate underflow at hook 1 [ 365.012304][ T928] usb 7-1: USB disconnect, device number 70 [ 365.110945][ T694] usb 8-1: device descriptor read/8, error -71 [ 365.365701][ T694] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 365.388956][ T694] usb 8-1: device descriptor read/8, error -71 [ 365.528176][ T694] usb 8-1: device descriptor read/8, error -71 [ 365.644399][ T694] usb usb8-port1: unable to enumerate USB device [ 365.770755][T10890] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 365.770755][T10890] null pointer dereference occurred [ 365.784068][T10890] ------------[ cut here ]------------ [ 365.789645][T10890] kernel BUG at rust/helpers/bug.c:7! [ 365.795604][T10890] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 365.802551][T10890] CPU: 1 UID: 0 PID: 10890 Comm: syz.4.3915 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 365.816090][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 365.826154][T10890] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 365.832847][T10890] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 f9 cd 8d 97 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 b3 09 c4 1b 90 90 90 90 90 90 90 90 90 [ 365.852459][T10890] RSP: 0018:ffffc900057071d0 EFLAGS: 00010246 [ 365.858538][T10890] RAX: 000000000000005a RBX: 1ffff92000ae0e3c RCX: 05ef1d6edb724700 [ 365.866512][T10890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 365.874469][T10890] RBP: ffffc900057071d0 R08: ffffc90005706ec7 R09: 1ffff92000ae0dd8 [ 365.882422][T10890] R10: dffffc0000000000 R11: fffff52000ae0dd9 R12: 0000000000000000 [ 365.890371][T10890] R13: dffffc0000000000 R14: ffffc90005707200 R15: ffffc90005707230 [ 365.898319][T10890] FS: 00007f6f5d0676c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 365.907227][T10890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.913794][T10890] CR2: 00007f6f5d024f98 CR3: 0000000107ae4000 CR4: 00000000003526b0 [ 365.921750][T10890] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 365.929705][T10890] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 365.937655][T10890] Call Trace: [ 365.940912][T10890] [ 365.943823][T10890] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 365.951265][T10890] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 365.959230][T10890] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 365.972747][T10890] ? p9pdu_vwritef+0x2720/0x2720 [ 365.977676][T10890] ? radix_tree_node_alloc+0x1af/0x400 [ 365.983148][T10890] ? __cfi_p9pdu_vwritef+0x10/0x10 [ 365.988251][T10890] ? p9pdu_vwritef+0x1c5e/0x2720 [ 365.993177][T10890] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 366.001219][T10890] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 366.009963][T10890] ? p9pdu_writef+0xdb/0x130 [ 366.014531][T10890] ? p9pdu_vwritef+0x2720/0x2720 [ 366.019447][T10890] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 366.028538][T10890] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 366.037368][T10890] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 366.045179][T10890] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 366.052828][T10890] ? p9_client_prepare_req+0x732/0xa10 [ 366.058290][T10890] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 366.066537][T10890] ? __kasan_check_write+0x18/0x20 [ 366.071655][T10890] ? _raw_spin_lock+0x8c/0x120 [ 366.076426][T10890] ? __cfi__raw_spin_lock+0x10/0x10 [ 366.081622][T10890] ? __kasan_check_write+0x18/0x20 [ 366.086733][T10890] ? _raw_spin_lock+0x8c/0x120 [ 366.091501][T10890] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 366.099751][T10890] p9_fd_request+0x391/0x520 [ 366.104344][T10890] p9_client_rpc+0x2f9/0xb40 [ 366.108919][T10890] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 366.117140][T10890] ? p9_fid_create+0x3d0/0x3d0 [ 366.121882][T10890] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 366.130104][T10890] ? p9_conn_create+0x4c9/0x570 [ 366.134934][T10890] ? p9_fd_create+0x2f3/0x4c0 [ 366.139587][T10890] p9_client_create+0x96a/0x1190 [ 366.144513][T10890] ? __cfi_p9_client_create+0x10/0x10 [ 366.149872][T10890] ? kasan_save_alloc_info+0x40/0x50 [ 366.152160][T10899] tipc: Enabling of bearer rejected, failed to enable media [ 366.155157][T10890] ? __kasan_kmalloc+0x96/0xb0 [ 366.168648][T10890] ? kstrdup+0x7b/0x140 [ 366.172805][T10890] ? __kasan_check_write+0x18/0x20 [ 366.177918][T10890] v9fs_session_init+0x1e1/0x1820 [ 366.182949][T10890] ? __cfi_v9fs_session_init+0x10/0x10 [ 366.188408][T10890] ? kasan_save_alloc_info+0x40/0x50 [ 366.193692][T10890] ? __kasan_kmalloc+0x96/0xb0 [ 366.198458][T10890] ? v9fs_mount+0xbd/0xa00 [ 366.202874][T10890] v9fs_mount+0xd7/0xa00 [ 366.207098][T10890] ? selinux_sb_eat_lsm_opts+0xa69/0xb40 [ 366.212718][T10890] ? __cfi_v9fs_mount+0x10/0x10 [ 366.217549][T10890] ? selinux_capable+0x38/0x50 [ 366.222289][T10890] legacy_get_tree+0x103/0x1b0 [ 366.227031][T10890] ? __cfi_v9fs_mount+0x10/0x10 [ 366.231856][T10890] vfs_get_tree+0x9e/0x290 [ 366.236249][T10890] do_new_mount+0x251/0xb40 [ 366.240729][T10890] path_mount+0x688/0x1050 [ 366.245122][T10890] ? putname+0x113/0x150 [ 366.249344][T10890] __se_sys_mount+0x2bd/0x480 [ 366.253998][T10890] ? __x64_sys_mount+0xf0/0xf0 [ 366.258740][T10890] ? __kasan_check_write+0x18/0x20 [ 366.263827][T10890] ? fpregs_restore_userregs+0x11d/0x260 [ 366.269442][T10890] __x64_sys_mount+0xc3/0xf0 [ 366.274138][T10890] x64_sys_call+0x2021/0x2ee0 [ 366.278820][T10890] do_syscall_64+0x58/0xf0 [ 366.283243][T10890] ? clear_bhb_loop+0x35/0x90 [ 366.287929][T10890] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 366.293827][T10890] RIP: 0033:0x7f6f5c18e929 [ 366.298245][T10890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.317853][T10890] RSP: 002b:00007f6f5d067038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.326270][T10890] RAX: ffffffffffffffda RBX: 00007f6f5c3b5fa0 RCX: 00007f6f5c18e929 [ 366.334251][T10890] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 366.342226][T10890] RBP: 00007f6f5c210b39 R08: 0000200000000140 R09: 0000000000000000 [ 366.350195][T10890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.358153][T10890] R13: 0000000000000000 R14: 00007f6f5c3b5fa0 R15: 00007fff403dc1a8 [ 366.366111][T10890] [ 366.369118][T10890] Modules linked in: [ 366.373217][T10890] ---[ end trace 0000000000000000 ]--- [ 366.384692][T10890] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 366.390006][T10890] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 f9 cd 8d 97 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 b3 09 c4 1b 90 90 90 90 90 90 90 90 90 [ 366.409932][T10890] RSP: 0018:ffffc900057071d0 EFLAGS: 00010246 [ 366.416067][T10890] RAX: 000000000000005a RBX: 1ffff92000ae0e3c RCX: 05ef1d6edb724700 [ 366.424071][T10890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 366.432042][T10890] RBP: ffffc900057071d0 R08: ffffc90005706ec7 R09: 1ffff92000ae0dd8 [ 366.440038][T10890] R10: dffffc0000000000 R11: fffff52000ae0dd9 R12: 0000000000000000 [ 366.448022][T10890] R13: dffffc0000000000 R14: ffffc90005707200 R15: ffffc90005707230 [ 366.455985][T10890] FS: 00007f6f5d0676c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 366.456142][ T305] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 366.466515][T10890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.479612][T10890] CR2: 00007f58ca3b7bac CR3: 0000000107ae4000 CR4: 00000000003526b0 [ 366.487580][T10890] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 366.495560][T10890] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.503551][T10890] Kernel panic - not syncing: Fatal exception [ 366.509820][T10890] Kernel Offset: disabled [ 366.514122][T10890] Rebooting in 86400 seconds..