last executing test programs: 4m6.125303089s ago: executing program 3 (id=215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) (async) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003002dd42c8010000140000102090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000020000000064a0900100905820920007f04000a2525000400008f0200"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00290700"], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m6.014264366s ago: executing program 3 (id=219): fsopen(0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 4m5.127380475s ago: executing program 3 (id=228): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0xc35, 0x4) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f000000a0c0), 0x2) r2 = socket$tipc(0x1e, 0xa, 0x0) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f000000a100), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000aa00)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="3c7b1dcde4667cc26d49dab96f5065330d2f3fece6ad4b0e05fd0a87f1c499e5888dad26864f05ddcfb043c6e5be5551c91dfa89d17a5567632fc4c9ddd01276c940bc4d55e2dd8c60a4aad67648540d592ef15bf9b73969e9c88a00296e9357f8fdf9febcdada351d3864da785dae32f9652573745fdedf378aff9852c4e8a91843c0daf6c4169e5716173233e8a48bfc0abb3175463f1ae488d718450c77ed2c2369b8990ec2f34e7e29e30bf9061ef0cb9ee8716cf5f2f2e0", 0xba}, {&(0x7f0000000380)="c83f504e461f1f4c1027bed9bebacdff66bc8c116b06e9a1eeb857cc5d8d3bb0439ad72002ae1f64fc27e8298a8dc7ee1e94d81ac6ce172baa085d1f2a49af9bc865593cb9", 0x45}, {&(0x7f0000000580)="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", 0x1000}], 0x3, &(0x7f00000079c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x128, 0x4}}, {{&(0x7f0000007b00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000007bc0)=[{&(0x7f0000007b80)="9a72888e679dac6495ea13fb25b5ae652ae63511e44d128a", 0x18}], 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRESOCT=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRESHEX=r3, @ANYRES32, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB="1000b2a61d002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0x1041}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f000000a280)="258ab921739a453cb4589b49dec2e331b16410e166379f35793d8e6d14c2086206dcb6b88d842a579232e5b1f0450265b9f964c12381aafc", 0x38}, {&(0x7f000000a2c0)="8019ea812045d3a5ab80d4074f565f7f68ab7033998cdbffb428153f0e061e1c4241b2858407bdd8313d54f447e4185e9347b4905ca7e0a56143537a8bf8fbf31e746047ee50320780304687952f41e6", 0x50}, {&(0x7f000000a340)="aed1d2bfe0dc2032140139a9ac2c249f02eeefb0ee44c5a0ff0d362804101665ac8e7d81d49357d1c13ef3efdbb5d051e6c7bfc552b61613f7b3133c6c91025990f26677cdac27a13931f4c8c6daf37a0c5f9e8a33b82ece20bab3dfceabe79a49ad123df7cc16c128d3c6326206e9e862646d3bc5ac3d80b19b7cb62b2350dcd1332bcc803342aeb85f3b4f986b3ec1f38fc270c7c6a570820aafbae74ca66a328f28cc4d0eb9d7c85320cd41759514b07a11f45499dabef4328bce74fce4afd5951b", 0xc3}, {&(0x7f000000a440)="11aaba3d603bad92f340c286064b323d21f6224501713948e818781fd5b86905d22993579dd32efdf30cea1fa26585f82592632f51a9966cc41c2c029e94871571f8781d8b38b5220aca058f1eb74aa76d4cf9", 0x53}], 0x4, 0x0, 0x0, 0x1}}, {{&(0x7f000000a500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a940)=[{&(0x7f000000a580)="fd1d77423326f199acd25388f517f22e988fc2405db31c8ccc37e37415ea4e1f66b02294b245e8fe9983d6dda0bafd58975c9893406e590cf0c1fddb0b10fee3c7592d3a55bf47e5b34f49389f21e21c5af1c32541119a48d3426b33c218bd1df11472d94d92665922fba2a9eb3e4aa644ac1c5748425509514fcd3f906c413969089817537bc9e8fb20d58dfced56e76f95fc848b54d77174eb172c9974", 0x9e}, {&(0x7f000000a640)="8290de4d0bf07b7efb8b71f78afc80268983841e43f571a3190726a979cf8fca07a129b056463d72d6444007e97848cf7c0ba160923e64916b1d6c73bdac5b00d901bd98063c1fdd567553871dae9bde5f8fbbb213bd5abe6322a64eece398afb6a4be7cf2f212e8a5f30969121450ce3e03160df6d4c26c6cb32fa9282bf368423bee64fdb60b7c7d262739b6e95b558eb533aa17f1777c1a576a", 0x9b}, {&(0x7f000000a700)="3c4c86384d64925421ccb613b4f11e08b2f604c5bf3caf503a4b2a1df560415b131022b79e18bc1dfae65d752462903978d0d0e21dc0e7dc146c60f36fbfac661e6d770f234030a4ba778c14797c101ddcb52033bb68304cfc14c7a108cfaba5b623be2d68c34c476634e5b3ddd209f6cadb556adc84b73e80a44b49", 0x7c}, {&(0x7f000000a780)="5250a1f4cbf81a32f37083986da101676d011a987c9e0d5f2cdb59dd609751b2a4b5a90a299d94a055c46bdd9d5a8d69dff25d711249a5b17e5bf496c07a25b1b00539b18d8cafbefedcfd23e91acbe14f13e9584d1182991ff5b17c2d087b628b32db06f32621d8fb64e024b65b9df522e7d8e2998fa6ffd44fa79dc6efe18db02f8c7ef91460a82e74f4c025f0d2422837edec8fcaf88929c80d55efdf40adbd05d06e46f9e52d49fd0d9eb3120d526ff4a3d26315513548e932cad18b0eb0b09f28f3659562a9e67598433d93", 0xce}, {&(0x7f000000a880)="fd7b050b50", 0x5}, {&(0x7f000000a8c0)="957b7468208a7bf4e536e35b897bb015004b5d00402ab1c7ffa7e6e36f795e951ba89f1875f69027e8df4d2fb86feb11607c47f434d8757597fcbe4b13", 0x3d}, {&(0x7f000000a900)="45bf51d7fd0e42a1d709b3b0cf19d74827fc2e6a5d85a89a134ba68eb5f26b11c9b0820a36cf4d947a75ed506055962cfd578008b8042231d78fbc36", 0x3c}], 0x7, &(0x7f000000a9c0)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}], 0x28, 0x400c000}}], 0x4, 0x4008844) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) timerfd_settime(0xffffffffffffffff, 0xf06a19edeaaab97b, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x60c42, 0x5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./bus\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000040)=[0x3, 0x4]) close(r0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) socket(0xa, 0x0, 0x62d8a2cd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000810) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m5.024574161s ago: executing program 3 (id=231): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000380)=0xe, 0x4) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000380)=0xe, 0x4) (async) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) chroot(&(0x7f0000001140)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) chroot(&(0x7f00000000c0)='./file0/../file0\x00') (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') (async) dup(r0) (async) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) (async) 4m4.89995602s ago: executing program 3 (id=232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_rxfh_indir={0x38, 0x3, [0x286, 0x3, 0x9]}}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) (async) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000fb266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a73, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r11, 0x4068aea3, &(0x7f0000000000)={0xbc, 0x0, 0x2}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 4m4.791280927s ago: executing program 3 (id=233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) pipe2$9p(&(0x7f0000000140), 0x4900) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000040)) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x5209, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0x2003, 0xffffffffffffff69) ioctl$BLKOPENZONE(r5, 0x40101286, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2f, &(0x7f00000001c0)={0x8, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 4m4.709561652s ago: executing program 32 (id=233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) pipe2$9p(&(0x7f0000000140), 0x4900) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000040)) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x5209, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0x2003, 0xffffffffffffff69) ioctl$BLKOPENZONE(r5, 0x40101286, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2f, &(0x7f00000001c0)={0x8, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 1m31.408609543s ago: executing program 4 (id=1380): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905b5"], 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) syslog(0x3, &(0x7f0000000040)=""/218, 0xda) syslog(0x4, &(0x7f0000000140)=""/222, 0xde) 1m30.148790918s ago: executing program 4 (id=1399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x1001, @any, 0x2d, 0x1}, 0xe) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1m28.559625184s ago: executing program 4 (id=1411): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) utimensat(r0, 0x0, 0x0, 0x100) r1 = geteuid() mount$binderfs(0x0, 0x0, 0x0, 0x2076c10, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT=r1]) setxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x7}, [{0x2, 0x5, r1}, {0x2, 0x0, r1}, {0x2, 0x1, r1}, {0x2, 0x7, r1}, {0x2, 0x5, r1}], {}, [], {0x10, 0x6}, {0x20, 0x6}}, 0x4c, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="100006000000000020"], 0x54, 0x1) read$FUSE(r0, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = getegid() mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f00000025c0)={[{@mode={'mode', 0x3d, 0x7}}, {@uid={'uid', 0x3d, r1}}, {@gid}, {@gid}, {@uid={'uid', 0x3d, r1}}, {@gid={'gid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}, {@gid={'gid', 0x3d, r6}}], [{@euid_eq={'euid', 0x3d, r1}}]}) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040000}, 0x44844) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r12) sendmsg$IEEE802154_ADD_IFACE(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) unlinkat(r8, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r8, &(0x7f0000000180)='./file0/../file0/file0\x00') 1m28.466100581s ago: executing program 4 (id=1413): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2943056, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x12c4024, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2943056, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x12c4024, 0x0) (async) 1m28.460832032s ago: executing program 4 (id=1414): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x4000090) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, 0x4, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa12}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x56}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000c4}, 0x8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x48e9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x4810) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r1) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}]}, 0x5c}}, 0x8080) (async, rerun: 32) pipe2$9p(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) write$P9_RLINK(r5, &(0x7f00000007c0)={0x7, 0x47, 0x1}, 0x7) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555c}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c010}, 0x94) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000009c0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa0, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x24008041) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4004021) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xd1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4008) (async, rerun: 32) openat$fuse(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x60048}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0xc0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000f00)={0x3, 0x10, 0x6, 0x8, 0x7f}) clock_gettime(0x0, &(0x7f0000000fc0)={0x0, 0x0}) epoll_pwait2(r5, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f0000001000)={r8, r9+10000000}, &(0x7f0000001040), 0x8) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x84) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000001180)=""/58, &(0x7f00000011c0)=0x3a) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x1) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe555, 0x55}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2e7a3808f840"}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x22000080) 1m28.258822105s ago: executing program 4 (id=1415): clock_getres(0x5, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x3d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x2}, {0x6, 0xfc, 0x0, 0x6}]}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000090abd5e200000b4699986a758455"], 0x0}, 0x0) 1m28.215365648s ago: executing program 33 (id=1415): clock_getres(0x5, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c3400000000001090224"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x3d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x2}, {0x6, 0xfc, 0x0, 0x6}]}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000090abd5e200000b4699986a758455"], 0x0}, 0x0) 25.788640593s ago: executing program 5 (id=1906): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x1c, 0x5, 0x0, 0x80, 0x5, 0xfd, 0x3, 0xfc, 0x0, 0xfc, 0x5, 0xfffffbfc, 0x4, 0xff, 0x0, 0x45, [0xd708, 0x2]}}) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=[@clear_death], 0x0, 0x0, 0x0}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async, rerun: 64) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x4) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r6, &(0x7f0000000480)=""/177, 0xb1, 0x2) (async) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none, 0x7b71, 0x1}, 0xe) (async) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000900)={"f0a3f17bc165bb067533dff53aa0cf965d535dcda4db4c9669ab39a0c0720a6848da4eeaa7d36e0ddbac23ef5c320494f14483d7d42edb768a7616b58156b9608f484f3f66d7631aef22db5f2b57544e5f637d3502433a3f33fb4a1b015f102dee9af0d64317612212ee476379733640831b1b867e6b8279c857c49df902785614931c237a50f6e0b31e445455955a2e1b6eca97c90bca9d8cc02ae1c492b21ddfaadd560162d70169b40be9b48e83d758116083eda4444ab49b3d993741adf70d177e95215b55334b5943edd6f180a9ba4dae2d2bc263c6cd2ef70e4a01e55e7439896f3a4cc0c4da9682a44706622c5cdab4a0e3cc6659648165a80e4394d7fd24a6e7bae9111a059fd6800a0bfc5bd5e719f63dd8789e32ff933f72b43b722dbf9fe8c90767d4c0afea9816cf33f5510e58eae3c3dfa45e07ee6fdd1a6aa584f1e9ae144174697c808ab73706acfdeaf6401cee7511e50fdba381bf085a3a2020eb687f9f8d935121ba38fdae75b3a52e05274c3ef1b99382d2d5633d51b70e145d7a6c210960bd2abb8ffc4ecb4b6d7faf70d63c16a6dac15859907098764a01b70def6b6845612ea91c30c5768f87fee7c79a7fe0816f8c7cce4770b690a7ef0002385f54d3d98fe33c94a34a38ea814ef7285bea1e986d54d13746c30a675046624f1e647560f4eb4f092e826fefa099d7121df42438701f97a61a1da07b1b263cb1dfd9ef6b83aed86b5d79753372bba8eea85c61e99388083e61281e69dcee99733a92abb98b41541566bcd92af263d65bfcd7f07d8f5db0bf2e7fac92331c4596c62cef69db3b435e5ac433d3516036a54918d4d8e6d54dcd1ccd9ca1dc710282aa7c8718eed0de218e9fb78d7dee9043cb35f73e8ac27baa0717be8df419adfabb4bcc65b6712e0767d242fc92ec32a8489893d7d3e03de5b5af5b93bdbe1647395705c8b52083b1e4bff7d9c736ba5129aa9c40ab4aab7b40f2652977d42bdffba2f270b7eff5427db039abc2757f6ebad81d2a9d2cdc3f0dfa5fcb06a5c8481f3b9d3cddc1a9679175df7932e80f6e1abcf1368ad5b0e2bc4c6119ccf69b39ea1e5ed9445ad4262af275b2dc9e13e0f5298d8ba91de61a1854878cb207dd0343dca7bb2d805ffabe0be26b180a195bd70060d9b09a8c55fac53113b4629d221cc0b187ff34a4b6215adb8647d3ff12fc209070ce844986f332c2577a391b20b6641d74ae67e059c978a384bad3afdafa48af87ab2e43935d00cc762c66b797aba0f6a62923d84adefd68cde5dffc70da5faad354254e48720c5633e54000731cb21514618a184391b39a52d4d9ad8b591e66e16c37e08c0b1fe018c430b559debcfcbdfbe44759f1f398932f9f2169d0b53574428c52339335bf4e093de2a1771b9648e62d282b0b5968df7b767b045ec6165e9537511aff07bf"}) (async) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00') mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) (async) getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) (async, rerun: 64) sendmsg$key(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)={0x2, 0x9, 0x4, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x4000000) (rerun: 64) 25.67340182s ago: executing program 5 (id=1907): r0 = socket(0x0, 0x3, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x6bf, 0x80840) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) socket$inet6(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socket$inet6(0x10, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000013c0)={{0x1, 0x0, 0x0, 0x0, 0x6}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r5, &(0x7f0000000280)="020428", 0x3, 0x800, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f0000000080)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac3(0x1, 0xf5, &(0x7f0000000380)=ANY=[@ANYBLOB="120168000000001082059a004000010203010902e30003010290f0080b0100012130020904000000010130000a24010611000900000007240c0202c96609040100000102300009040101010102300017240100cd00000007000000000000000000780102004009050109ff0306f86e0a2525008000000601000904020000010230000904020101010230000a240201060110784beb0c24020181044004b5ab7fffffffffffffffff00070002000000000000000f000400020a240202000008007f070924020105b609c40f172401080c000000ff030400000000000000020403000c0905820940000804f10a2525f0c0fd3b000400"], &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x250, 0x88, 0x0, 0x40, 0x8, 0x6}, 0xf8, &(0x7f0000000940)=ANY=[@ANYBLOB="050f4c09c057d07a4594cb32ddab1c8c5f3f730866493a45271439d195e39a2d08dae211407ed3b8ecb3161371ad99f481846621108160578fe7e2b0786cf35056f803f5a8b7db8cfacabf7133ee3a4f45352bc07442fd039227555999a7e42afcbd31ff0e85625f1935896b8a01f1688d4c3b88769cf4c6475c756c9a5b1a208d902d1e843e0966ad58ac89afd594924ce635e547e8b4228df26ac7633909432608a28d48bd87e665fd74440774a5b80bef5e2024472297a773e88e50adaa6ce0b69f59de32ae09a264d57d034c5ed7eb63577b6aa6aa37f6088270cc339827751047d4fac72c237d5937986ea7084074655afc4303100b"], 0x1555567d, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x69, &(0x7f0000000780)=ANY=[@ANYBLOB="690379842f36f20a8a765160a9ec61018a519c33e01a8190724a49005528bfc0bbdce37e8f1547dcd0cac1c5f3f7fdb343c0e89f7fa168a6056b7abd259357ff43a381c36e3783af109150eec19a92b3de18683367cd37eebff20c0f4b27aa0157972449e3dbb8ec0c0263a0899ae737d6de2bf5", @ANYRESHEX=r4, @ANYBLOB="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", @ANYRES64, @ANYRES32=r6, @ANYRES8]}]}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'gre0\x00'}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x18, r8, 0x1, 0x1, 0x6, @random="10c9b0241f75"}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x5, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000050}, 0x8041) 24.836599397s ago: executing program 5 (id=1910): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x68}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}]}]}, 0x34}], 0x1}, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r2, &(0x7f0000000240), 0xfdef) (async, rerun: 64) read$FUSE(r2, &(0x7f0000002440)={0x2020}, 0x2020) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) 24.7970449s ago: executing program 5 (id=1911): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(0x3) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000200)={0x1, 0x0, [0x4, 0x3, 0x100, 0x7fffffffffffffff], 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={@multicast1, @broadcast}) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 24.673159678s ago: executing program 5 (id=1913): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x48000}, 0x40) recvmmsg$unix(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2020, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000001c0)={{r1, &(0x7f0000000000)='`\xb0\xfb\xd9Z\x10G1r0\x00', 0x1, &(0x7f0000000080)={@align=0x3, {0x3ff, 0x5, 0x6, 0x1000000006}}, 0x40, &(0x7f00000000c0), &(0x7f0000000100)=0x80000000}, {[0x1, 0x0, 0x80000001, 0x8]}, 0x5, 0x78, &(0x7f0000000140)=""/120}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000300)={0xf}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000003c0)="fc0000001c000704ab5b2509b868030002ab087a010000002a481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d9d294170e5d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdef1af51af8032943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548dee9e8478ff47601b2e6b1", 0xfc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000d00)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}], 0x30}}], 0x1, 0x4040000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r6 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) preadv(r1, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/33, 0x21}, {0x0}], 0x2, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) fadvise64(r6, 0x6, 0x8, 0x5) 24.477491761s ago: executing program 5 (id=1915): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2a2900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x0, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x454}) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) read$FUSE(r8, &(0x7f0000002600)={0x2020}, 0x2020) (async) write$uinput_user_dev(r8, &(0x7f0000000640)={'syz1\x00', {0x7, 0x6, 0x1ff, 0xfac}, 0x16, [0x7, 0x3, 0x8108, 0x7, 0x101, 0x2c94cded, 0x4, 0x6, 0x2, 0x9, 0x4, 0x80000000, 0x4, 0xe1, 0x3ff, 0x8, 0x9, 0x9, 0x4, 0x40, 0xffffff01, 0xb, 0xa, 0x6, 0x7fffffff, 0x2, 0x1, 0xfffffffb, 0x4, 0x10, 0x9, 0x101, 0x7, 0x9, 0xfffffffe, 0x3, 0x400000, 0x8, 0x1, 0x0, 0xc0000, 0x2, 0x4, 0x7, 0x1, 0x9, 0xf, 0x6, 0x1, 0x200, 0x40ba, 0x3, 0xbd6, 0x7, 0x4, 0x80000000, 0x54fc3549, 0x101, 0x6, 0x6, 0xd53, 0x71, 0x5, 0xe1d], [0x8, 0x1, 0xe2d, 0x8, 0x0, 0xfff, 0xfffff2d2, 0x4, 0x0, 0x8, 0x2, 0x5, 0x10001, 0x7bf, 0xa, 0x7ff, 0x3, 0xd6f, 0x5, 0xa, 0xc, 0x8, 0x1, 0x1, 0x3, 0x5, 0x2, 0xf, 0x0, 0x3b, 0x3, 0x475, 0x7, 0x10001, 0x5, 0x39, 0xff, 0x6, 0xedd7, 0x2, 0x5421, 0xaf, 0xffffffff, 0x1ff, 0x10001, 0x1, 0x5, 0x2, 0x2, 0x6, 0xe, 0x9, 0x5, 0x0, 0x7, 0x7fff, 0xeb1a, 0x0, 0x7, 0x4, 0x5, 0x8001, 0x10001, 0x5], [0xd, 0x4, 0x52c, 0xfb44, 0x7f, 0xe, 0x1ff, 0xfffffffa, 0x800, 0x9, 0x1ff, 0x401, 0xfffffff8, 0x7, 0x7, 0x3b, 0xffffffff, 0x8, 0x800, 0x10001, 0x2, 0x18b, 0x8000, 0x508, 0x7, 0x10, 0x6, 0x6, 0x6, 0x9b0, 0x7, 0x1, 0x9, 0x60000000, 0x8001, 0x200, 0x7, 0x3, 0x9, 0x3f, 0x1, 0x4, 0x4, 0x6, 0x5, 0x10000, 0xfffffff8, 0xc, 0xffffffff, 0x7ff, 0x5, 0x4, 0x8, 0x6, 0x7fff, 0x8001, 0x0, 0x80, 0xd0b, 0x800, 0x9, 0x1b, 0x5, 0xfffff432], [0x4, 0x9, 0x8, 0x2, 0x6, 0xfffff5c9, 0x0, 0x1000, 0x0, 0x4, 0x6, 0x8, 0x6, 0x0, 0x2, 0x1000081, 0x100, 0xfffffff7, 0x5, 0x3, 0x10, 0x7c1f, 0x8, 0x8, 0x2, 0x7, 0x7, 0x0, 0x1d, 0x80000000, 0x3, 0xfb0, 0xa, 0x3, 0x3d9, 0xc27, 0x1, 0x2, 0x8, 0x81, 0x7, 0x7, 0x3, 0x2, 0x202, 0x7, 0x6c56, 0x4, 0x29, 0x0, 0x3, 0x8001, 0x5, 0x149, 0x2, 0x3, 0x4, 0x4, 0xfff, 0x8, 0xa91, 0x101, 0x5, 0x4]}, 0x45c) (async, rerun: 64) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 64) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') (async) write$rfkill(r10, 0x0, 0x0) (async, rerun: 32) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 9.582876464s ago: executing program 2 (id=1995): ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x3) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x8b, 0x0, 0x88}]}) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendto$packet(r6, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_IO_FLUSHER(0x39, 0x4) setresuid(r9, r9, r9) sendmsg$nl_xfrm(r5, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=@allocspi={0x1d0, 0x16, 0x2, 0x70bd29, 0x25dfdbfc, {{{@in6=@private0, @in6=@loopback, 0x4e23, 0x404, 0x4e23, 0x5, 0xa, 0x80, 0x10, 0x2, r8, r9}, {@in=@empty, 0x4d5, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x8, 0x100000001, 0xb0, 0xc, 0x4, 0x1, 0x1, 0x1ff}, {0xdf84, 0x6, 0x16, 0x7}, {0x1, 0x0, 0xffffff0d}, 0x70bd2a, 0x3504, 0x2, 0x3, 0x4, 0x49}, 0x10001, 0x9f8d}, [@algo_aead={0xc1, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x3a8, 0x0, "df9ad5fce9f53edeb433e3d22fbba799a772f0ff42987c3d2440a2d861189bc2b3fc69749696c15bdf2f6d55abc339f830b9f17e0f034e286c48615beeda1e00e3352294a9c8e26ed2ec6a06a2ad19154ac6ee5c16396024596dcf1f464d08d5e92f29ddd191cc15a907028929397554c71259dc60"}}, @lastused={0xc, 0xf, 0x6}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x44040}, 0x4000800) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0x17, 0x6, "98b5428ca72d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f00000003c0)={0x40, 0x0, 0x2, "a285"}, 0x0, 0x0}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) 8.571860512s ago: executing program 34 (id=1915): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2a2900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x0, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x454}) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) read$FUSE(r8, &(0x7f0000002600)={0x2020}, 0x2020) (async) write$uinput_user_dev(r8, &(0x7f0000000640)={'syz1\x00', {0x7, 0x6, 0x1ff, 0xfac}, 0x16, [0x7, 0x3, 0x8108, 0x7, 0x101, 0x2c94cded, 0x4, 0x6, 0x2, 0x9, 0x4, 0x80000000, 0x4, 0xe1, 0x3ff, 0x8, 0x9, 0x9, 0x4, 0x40, 0xffffff01, 0xb, 0xa, 0x6, 0x7fffffff, 0x2, 0x1, 0xfffffffb, 0x4, 0x10, 0x9, 0x101, 0x7, 0x9, 0xfffffffe, 0x3, 0x400000, 0x8, 0x1, 0x0, 0xc0000, 0x2, 0x4, 0x7, 0x1, 0x9, 0xf, 0x6, 0x1, 0x200, 0x40ba, 0x3, 0xbd6, 0x7, 0x4, 0x80000000, 0x54fc3549, 0x101, 0x6, 0x6, 0xd53, 0x71, 0x5, 0xe1d], [0x8, 0x1, 0xe2d, 0x8, 0x0, 0xfff, 0xfffff2d2, 0x4, 0x0, 0x8, 0x2, 0x5, 0x10001, 0x7bf, 0xa, 0x7ff, 0x3, 0xd6f, 0x5, 0xa, 0xc, 0x8, 0x1, 0x1, 0x3, 0x5, 0x2, 0xf, 0x0, 0x3b, 0x3, 0x475, 0x7, 0x10001, 0x5, 0x39, 0xff, 0x6, 0xedd7, 0x2, 0x5421, 0xaf, 0xffffffff, 0x1ff, 0x10001, 0x1, 0x5, 0x2, 0x2, 0x6, 0xe, 0x9, 0x5, 0x0, 0x7, 0x7fff, 0xeb1a, 0x0, 0x7, 0x4, 0x5, 0x8001, 0x10001, 0x5], [0xd, 0x4, 0x52c, 0xfb44, 0x7f, 0xe, 0x1ff, 0xfffffffa, 0x800, 0x9, 0x1ff, 0x401, 0xfffffff8, 0x7, 0x7, 0x3b, 0xffffffff, 0x8, 0x800, 0x10001, 0x2, 0x18b, 0x8000, 0x508, 0x7, 0x10, 0x6, 0x6, 0x6, 0x9b0, 0x7, 0x1, 0x9, 0x60000000, 0x8001, 0x200, 0x7, 0x3, 0x9, 0x3f, 0x1, 0x4, 0x4, 0x6, 0x5, 0x10000, 0xfffffff8, 0xc, 0xffffffff, 0x7ff, 0x5, 0x4, 0x8, 0x6, 0x7fff, 0x8001, 0x0, 0x80, 0xd0b, 0x800, 0x9, 0x1b, 0x5, 0xfffff432], [0x4, 0x9, 0x8, 0x2, 0x6, 0xfffff5c9, 0x0, 0x1000, 0x0, 0x4, 0x6, 0x8, 0x6, 0x0, 0x2, 0x1000081, 0x100, 0xfffffff7, 0x5, 0x3, 0x10, 0x7c1f, 0x8, 0x8, 0x2, 0x7, 0x7, 0x0, 0x1d, 0x80000000, 0x3, 0xfb0, 0xa, 0x3, 0x3d9, 0xc27, 0x1, 0x2, 0x8, 0x81, 0x7, 0x7, 0x3, 0x2, 0x202, 0x7, 0x6c56, 0x4, 0x29, 0x0, 0x3, 0x8001, 0x5, 0x149, 0x2, 0x3, 0x4, 0x4, 0xfff, 0x8, 0xa91, 0x101, 0x5, 0x4]}, 0x45c) (async, rerun: 64) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 64) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') (async) write$rfkill(r10, 0x0, 0x0) (async, rerun: 32) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 7.277938439s ago: executing program 2 (id=1998): timer_create(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x2, 0x0, 0xfffffffffffffd95}, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000043c0), 0x2, 0x0) r3 = socket(0x10, 0x80003, 0x0) recvmsg$unix(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'sit0\x00'}) recvfrom$inet6(r3, 0x0, 0x0, 0x2042, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002240)='./file0/file0\x00', 0x80, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r4, &(0x7f00000000c0)=@random={'security.', '\x00'}, &(0x7f00000001c0)=""/113, 0x71) r5 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xa4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 6.454511035s ago: executing program 2 (id=2002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = dup2(r0, r0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x100000, 0x3, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}]}]}, 0x2c}}, 0x4000880) syz_usb_connect$midi(0x0, 0x32, &(0x7f0000001140)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x78, &(0x7f00000000c0)=@string={0x78, 0x3, "ae406a81bcfa0eb5547a72c3a6bd5b44f67b0aaf9f8f26a9452dc52c58598b6c74de45db4a8c3ab489060c328a022135e71a99d3131860f5900089aa664d1bf83068ae33c49999a65b7e766f4be75c6075eb34302bedb269c773d0788fa3c776af1ca0414eeb3fefc5539d1b2b6a8b658bad3990495d"}}]}) 5.622283691s ago: executing program 6 (id=2007): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4044014) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) fchmodat(r2, &(0x7f00000002c0)='./file0/../file0\x00', 0x160) 5.622034691s ago: executing program 6 (id=2008): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x42902, 0x0) readv(r0, &(0x7f0000003580)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002300)=""/4096, 0x1000}, {0x0}, {&(0x7f00000034c0)=""/153, 0x99}], 0x4) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000004200)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x88, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f0000000440)='c', 0x1}], 0x3) read$usbmon(r1, &(0x7f0000000000)=""/248, 0xf8) 5.552441155s ago: executing program 1 (id=2010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010058, 0x0, 0x200000000}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x4}, 0x20) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r8, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)={{0x8000000, 0xf000, 0x0, 0x2, 0x8, 0x0, 0x40, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x48, 0xfb, 0x9, 0x0, 0x2, 0x7, 0x7, 0x0, 0xff}, {0x6000, 0x3000, 0xc, 0x0, 0x7, 0x9, 0x40, 0x0, 0x3, 0x8, 0x0, 0xfc}, {0xeeef0000, 0xd000, 0x0, 0xff, 0x0, 0xfe, 0xa, 0x0, 0xfe, 0x3, 0x4}, {0xffffffff, 0xf000, 0x4, 0x0, 0x8f, 0x4, 0x6, 0xb, 0x1, 0x3c}, {0xeeee8000, 0x4000, 0x0, 0x3, 0x5, 0x2, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0xdddd1000, 0x0, 0x2, 0xff, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3000, 0xf, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x96}, {0x1, 0x4}, {0x80a0000, 0xff}, 0x9dfeffdb, 0x0, 0xeeee8000, 0x600, 0x1, 0x5800, 0x0, [0x4000000000013, 0x0, 0x1]}) r13 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r12, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r13, 0x20, &(0x7f0000000240)="fb4149dd053be3ac2cc4a22332a77b23b8898600087bb16c94a6ab80313804d92f00000000010000045a96383369d226270080ff000000000000000000a000", 0x0, 0xffa4) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r12, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000080)=@arm64={0xa, 0x3, 0x0, '\x00', 0x3}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x0, r2, 'id0\x00'}) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r15 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) sendmsg$nl_generic(r15, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 5.306243392s ago: executing program 1 (id=2011): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x200000000000d46, 0xfffffffffffffffc, 0x2, 0x8003, 0xfffc, 0x0, 0x1000000000008007, 0x1000000000000009, 0x0, 0x8, 0x200000000000, 0x10000000000000a2, 0x1000000000000401, 0xc, 0x9, 0xffffffffffffffff], 0xb000, 0x20014}) (async) setresuid(0xee00, 0xee00, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009084}, 0x40040c0) faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x1000) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) wait4(r2, 0x0, 0x8, 0x0) (async) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) (async) ptrace$cont(0x21, r2, 0x8, 0x4) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 5.170371122s ago: executing program 1 (id=2012): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x81, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xb, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.784981927s ago: executing program 6 (id=2015): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = getpgrp(0xffffffffffffffff) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000780)={0x11, 0x0, 0x80}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 4.768346668s ago: executing program 6 (id=2016): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001bc0)=[{&(0x7f0000000380)="5c2aa695281feb07d402c3f658e75f737c8ae0ba6592e5c8a2b247ea7178a38fe3e3a996f5010dbddc588e4c489641dd429d85579898616824e57200a84a332d1d39d2f9d7ddfdb64ce84733e7f50f0b8a4f1fca48189736ade70ac85be7889b8a7fb63230bd7d30e37e6c670814b611d5d733775eaec7eda8e42b4429771d08f12153076ebb8140f01e3f5fcbc7062a48d51c08d4d96b10e0153cdea0be929e", 0xa0}, {&(0x7f00000004c0)="93d1cc2cd17e188066a8857a07f2952f5d498435a2caa8b685c54b131d4f9ff8ca2fbd413ee12edd646103eae22e35f30d36b837fa5fe0dd8cd492fd412c386e50af54f9baa178efe2250f8d739b2553456ef57e79f0eec14e53a579dbaf44b10273559fbf5cad641b3e3ac1440173563177df3c2c2fb3795d5dbd79e9b9334b7e3499921a67243871544aa94ab91eb69fda78ea416ba3f8f5bb3a9ec35c09016890c59f91b33c76", 0xa8}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="c700f9978f4bdc95ca5715d5eef47ed03fd6bb82f8c057a5037df31ccfc6f2fa146f6046bfb3fe179ad6c12eb845b283422d510cb86269f5be96c55c620ca6016ee731feb2517db59c5022acabbb152e5ccf31c2aced1941aad5198c5064609a30f444595c8104e245c00248d33749ce916338678699a4f02bbcce5541c6ccac62e2e5ab9c240ff165512a894a4b6266faff89d2019859614ebaef3ec782f7914e58b7a9d8974436ca994acd04694961fe0dac4bd13f12ee00"/205, 0xcd}, {&(0x7f0000001a40)="99a65330b9f7430ab393cc4560fb559097bf9e1709ad74626fd1f9454930bae96c89291bd2af", 0x26}, {&(0x7f0000001a80)="33176480", 0x4}, {&(0x7f0000001ac0)="f8a4cb6ae33b947cd1362a14b196b276592916d22ca20ccec6d97086e347b1b0edea60262ba535d5f611cbe5ee773dfb66889a0008199b59d27223510bf76f982909fff96ab2e8a115f4dafd0f9f01da07445748bb7cb168b5e2f03f29077a7252c64e013e06d19582279bb10d71f83492260ab110aa4374c31e8fa32e0053a8e2f9066ff8e10c46949214baa2ce02954b135b8fe6801be2aaf796573a0ffa79862c9799acaf9fb89bd33bf816048d1f690a61dbd041", 0xb6}, {&(0x7f0000001b80)}], 0x8) r2 = socket$inet6(0x10, 0x6, 0x1ff) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x12, r1, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x16a600, 0x78e22799f4a46f8f) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x1) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}, 0x10000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000100)=0x8d05, 0x4) close_range(r2, r2, 0x0) write$binfmt_misc(r5, &(0x7f0000000300)="9754f8aa6592cd38dfdcd79f6c49f71a422eac05b822f142336535335c781e54d6a2b2a3d2bb2fd763bb2ff10b44c0a66c354f93497e84d5a5afd0496ad4f4e3f958ccec117e988c290a58028a1a07eed3b8276274d73bac96f3b7f890584e0670ead9b7798821947164f45a9ca94c68e383c344535071764a5725f9e14930", 0x7f) rmdir(&(0x7f0000000080)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') pwritev2(0xffffffffffffffff, &(0x7f0000003740)=[{&(0x7f00000001c0)="b1de27e1dea88b2bce02bb54c89e3896b186b5f1cb0a833a8117950f7f989fc326", 0x21}, {0x0}], 0x2, 0x7, 0x4, 0x0) syz_usb_connect$uac1(0x4, 0x7a, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000040)=0x101, 0x4) sendto$inet(r0, &(0x7f0000000900)='.U/]', 0x4, 0x12, 0x0, 0x0) 3.588747958s ago: executing program 6 (id=2018): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, 0x1, 0x0, 0x30, 0x0, [{@empty}, {@initdev}, {@remote}]}}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x10, 0x0, [{@local}]}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x1ff, 0x4}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)) r2 = gettid() fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x1, 0x1, 0x8, 0x6, r2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x2, 0x0) fsync(r3) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280), &(0x7f00000002c0)=0x4) read(r0, &(0x7f0000000300)=""/143, 0x8f) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, r6) recvfrom$inet_nvme(r1, &(0x7f0000000480)=""/233, 0xe9, 0x1, &(0x7f0000000580)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x2}}, 0x80) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x44) syz_extract_tcp_res(&(0x7f0000000740), 0x8, 0x2) r8 = socket$netlink(0x10, 0x3, 0x10) fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000000840)='./file0\x00', 0x400, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r3, &(0x7f0000000980)='./file0\x00', 0x800, 0x20, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)=0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(r1, &(0x7f0000002b40)='./file0\x00', 0x800, 0x5, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f0000000780)='system.posix_acl_access\x00', &(0x7f0000002d40)={{}, {}, [{0x2, 0x6, r9}, {0x2, 0x2, r10}, {0x2, 0x2, r11}, {0x2, 0x0, r12}, {0x2, 0x3, r13}, {0x2, 0x6, r14}], {}, [{0x8, 0x4, r5}, {0x8, 0x1, r6}, {0x8, 0x4, r6}, {0x8, 0x7, r5}, {0x8, 0x2, r4}, {0x8, 0x3, r6}, {0x8, 0x4, r15}], {0x10, 0x4}, {0x20, 0x2}}, 0x8c, 0x2) clock_gettime(0x0, &(0x7f0000007fc0)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000007dc0)=[{{&(0x7f0000002e00)=@can, 0x80, &(0x7f0000003080)=[{&(0x7f0000002e80)=""/21, 0x15}, {&(0x7f0000002ec0)=""/129, 0x81}, {&(0x7f0000002f80)=""/219, 0xdb}], 0x3, &(0x7f00000030c0)=""/51, 0x33}, 0x10001}, {{&(0x7f0000003100)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003180)=""/204, 0xcc}, {&(0x7f0000003280)=""/57, 0x39}, {&(0x7f00000032c0)=""/221, 0xdd}, {&(0x7f00000033c0)=""/172, 0xac}, {&(0x7f0000003480)=""/153, 0x99}, {&(0x7f0000003540)=""/255, 0xff}, {&(0x7f0000003640)}, {&(0x7f0000003680)=""/139, 0x8b}, {&(0x7f0000003740)=""/232, 0xe8}], 0x9, &(0x7f0000003900)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000004900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004980)=""/220, 0xdc}, {&(0x7f0000004a80)=""/66, 0x42}, {&(0x7f0000004b00)=""/24, 0x18}, {&(0x7f0000004b40)=""/219, 0xdb}, {&(0x7f0000004c40)=""/251, 0xfb}, {&(0x7f0000004d40)=""/129, 0x81}], 0x6}, 0x285}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000004e80)=""/193, 0xc1}, {&(0x7f0000004f80)=""/190, 0xbe}], 0x2, &(0x7f0000005080)=""/68, 0x44}, 0xdb6d101}, {{&(0x7f0000005100)=@rc, 0x80, &(0x7f0000005180), 0x0, &(0x7f00000051c0)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000061c0)=""/238, 0xee}, {&(0x7f00000062c0)=""/17, 0x11}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/210, 0xd2}], 0x4, &(0x7f0000007440)=""/60, 0x3c}, 0x8}, {{&(0x7f0000007480)=@alg, 0x80, &(0x7f00000076c0)=[{&(0x7f0000007500)=""/15, 0xf}, {&(0x7f0000007540)=""/212, 0xd4}, {&(0x7f0000007640)=""/91, 0x5b}], 0x3, &(0x7f0000007700)=""/170, 0xaa}, 0x200}, {{0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000077c0)=""/185, 0xb9}, {&(0x7f0000007880)=""/81, 0x51}, {&(0x7f0000007900)=""/10, 0xa}, {&(0x7f0000007940)=""/93, 0x5d}, {&(0x7f00000079c0)=""/99, 0x63}, {&(0x7f0000007a40)=""/227, 0xe3}, {&(0x7f0000007b40)=""/140, 0x8c}, {&(0x7f0000007c00)=""/241, 0xf1}], 0x8, &(0x7f0000007d80)=""/18, 0x12}}], 0x8, 0x10120, &(0x7f0000008000)={r16, r17+60000000}) openat(0xffffffffffffff9c, &(0x7f0000008040)='./file0\x00', 0x220041, 0x34) 3.40152101s ago: executing program 2 (id=2021): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000200)={0x0, 0x7, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x105, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x3, 0x1, 0x4, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x37}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0x7, "10"}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x4, 0x3}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x3, 0x1, "0d1a"}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, 0x2, [0xa, 0x6], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x3, 0x7, 0x4, 0x1, 0xf1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc4, 0x3, 0x4, 0x9, "", "4ac03c"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x25, 0x6, "1cd2a2"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x8, 0xa, 0x2, 0xf7}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x7f, 0xf9, "e6"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0xfff8, 0x6, 0x4}, @as_header={0x7, 0x24, 0x1, 0x8, 0xf, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x85, 0xd, 0x0, {0x7, 0x25, 0x1, 0xc, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x4, 0x40, 0xfb, "a4"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7, 0x2, 0x2, 0x1, "e5d298bf74009f4e9f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x4, 0x6, 0x2d}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x80, 0x80, 0x5, 0x6e}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x61, 0x2, 0x2, {0x7, 0x25, 0x1, 0xc, 0x5, 0x6}}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x3, 0x1, 0x2, 0x10}, 0xb8, &(0x7f0000000580)={0x5, 0xf, 0xb8, 0x1, [@generic={0xb3, 0x10, 0xb, "268caadf05b25b4d33e984fc0476afc74a9a0e544b7ae70f2a20865a7fd94fd04ee7f4cba39b930b21e3865385b13027bc9551621677c283f1ae191514b0c6ea0ad3cc802a4317f6525834ba4aec5e6f4e666b02fb44ad4d17cde61d759e76d215290101653516ba12ad651ff1f41aaa968a07dc9c34122a063bbb8d4a47a85a3e28bc070d2780620010deba8160548146b93634aada6e48ad697d82295ef12cead4270c82b2b2dd83dc59a56fd1c6fd"}]}, 0x7, [{0xdf, &(0x7f0000000640)=@string={0xdf, 0x3, "ddb253ae005bbcaf9f11e55b4b72772e6a3b916cded6807b5ae11c6ce710b73c39962c2f07320e65db8bfe728a1a926910bde4118bf6e29f8ab59eeec0714a4d9e6d444b9232b999bcc23f10e9a316a9e13e2819a7b84eabec87087df49f4e363a8204eb7887a1cea6cfc1ceea29da1e0e2fa5a4f3d7003c47441db7fdf7a508b57a0c8660d33624311f87223fcf88c43c894c5ccf0dad500261e975fc4be90f104c278e87f426ff75ecb0d00b9daf75d34298644c21158e7754677a50e7fcf837cb2f6af65218773fec76825c55f72394187f9d719b9b52d49022e070"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1404}}, {0x68, &(0x7f0000000780)=@string={0x68, 0x3, "8673891f4c95d2ad6ee7159c61d2968bbe852f339280c01438519ae0b88950e72c10dd40402f7e5e6cd317547d7838bc728116b20565fbf441da7ceadd76e0d11aa56dabed023f7fd02c3cd9e4cb988c2d54bce06ea0d5ac6d10e42dff0a4954d7aa3bc78c8b"}}, {0x101, &(0x7f0000000840)=@string={0x101, 0x3, "68551a0cda1ff6166833d780191101d8231c695869c764649099f0439ba077d62721ad249625c0fe0a356382111c97513c509260a5549aff5a76aa718baec82297e24f042741c79a1981cc6c48c8743bf1d1e8dcad54f8635d8b88761fdc519b6a5d7f111284f89dae3c374bdf5fe8295de26db9eba6a1efde47a34e6f1b8a978c42ec13f149d7c9a766a90cd3bf6c6fe6170a2db786b04b18be9af6acf1ace254544b74116cc773d2f86db201d4a8b39462b32eb8b3015cfc0249bb81c27a6e6755f366ee6fd9212b88d6cb375bfba0e6425ab933c507b92a71f02e210202685bdeeaee549b537bf9eff2a638742aaa9a84864d491bb58c46e9ca42c7e22e"}}, {0x77, &(0x7f0000000980)=@string={0x77, 0x3, "dc64eec4a87038a27a89197881c6bc041b6797ce96274e8e23f3913f6b13b488472fea43bf46ad05d85453dcb16c5351b557a48a9c8908a8ee9da385a80e21611d5787f324b5f8656be3d5fb6790db2ee136e0da845d5991b50f5f7155791aea8f95fbffe5eb66087c156e128b1e6f49f899b3539e"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x420}}]}) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 2.740237765s ago: executing program 6 (id=2026): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000100)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000085000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) close_range(r2, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r1, 0x29, 0x19, 0x0, &(0x7f0000000000)=0xffffffffffffff71) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) fcntl$getown(r0, 0x9) syz_open_procfs(r4, &(0x7f0000000100)='task\x00') 2.106058417s ago: executing program 1 (id=2028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000001340)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @val={@void, {0x8100, 0x0, 0x0, 0x5}}, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x468, 0x0, 0x7, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x5, 0x4, 0x2, 0x8, 0x1, 0x66, 0x3000, 0x0, 0x89, 0xdc, @local, @dev={0xac, 0x14, 0x14, 0x3e}}}}}}}}, 0x42) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0x2000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0xdddd1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3}, {0xeeef0000, 0x33331000, 0x8, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x80, 0x2, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x1, 0x0, 0x8}, {0x2, 0x6000, 0xb, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cd}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x4, 0x200130, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x2, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6, 0xffffffff}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) (async) write$tun(r1, &(0x7f0000001340)={@void, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @val={@void, {0x8100, 0x0, 0x0, 0x5}}, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x468, 0x0, 0x7, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x3, 0x0, @broadcast, {0x5, 0x4, 0x2, 0x8, 0x1, 0x66, 0x3000, 0x0, 0x89, 0xdc, @local, @dev={0xac, 0x14, 0x14, 0x3e}}}}}}}}, 0x42) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0x2000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0xdddd1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3}, {0xeeef0000, 0x33331000, 0x8, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x80, 0x2, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x1, 0x0, 0x8}, {0x2, 0x6000, 0xb, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cd}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x4, 0x200130, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x2, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6, 0xffffffff}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) 2.006914624s ago: executing program 1 (id=2029): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x100, 0x800, &(0x7f0000000340)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000009480)={'bridge_slave_1\x00', &(0x7f0000009440)=@ethtool_cmd={0x48, 0xeaa, 0x0, 0x34, 0xd2, 0x85, 0x3, 0x6, 0xed, 0x1, 0xfff, 0x3, 0x4, 0x67, 0x7, 0x4, [0x10000, 0x6]}}) socket(0x28, 0x5, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="401008000000473fc324374e4c17"], 0x0, 0x0}) 1.729852423s ago: executing program 0 (id=2031): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[], 0x108}}], 0x2, 0xc040) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4010) r2 = socket$netlink(0x10, 0x3, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x5, 0x80000000002}) fcntl$lock(r3, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x4) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0x87000861) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000740)={r0, &(0x7f0000000300)='ipvs\x00', 0x4063de80f3704b65, &(0x7f0000000340)={@_ha_fsid={[0x6, 0x81]}, {0xb94, 0x7fff, 0xc, 0x6}}, 0xcc, &(0x7f0000000380), &(0x7f00000003c0)=0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_usb_connect$uac2(0x1, 0x90, &(0x7f0000000940)=ANY=[@ANYRES16=r7, @ANYBLOB="e28cb75d31f5c801781b81b43941bf8437c09f4f86694b045a2ed29d4d442e6d70289de5906fe5171a236366793aaf0af46f2d246b7d535b3ac158ab70a198fd917372b79c9906dc257cbea9742f47ea1623e6bf721ba63fd62553a3a35d2950c000333898ebf89051cec562fff6c7555cbd553b4d1c88070145dc3d4cbddeb6b2ebeb67a8dad435465d6fa33c0e9ae528cb525c200356c9668030a29661c45f1142284906455f26cb793bcedc8d9b34ebe8918d0aa104530076fe8d743d57d1e033ab03019d02482cb6b1113800c8ec10f8adfc148304b88638c6f9101edd2d9e8ff5e32defbba07e3b1d2548", @ANYRESDEC=r3, @ANYRES16=r5, @ANYRES16=r6, @ANYRESDEC=r4, @ANYRESHEX=r2, @ANYRES8=r7], 0x0) setuid(0xee00) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f320f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x54}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000049000100000000000010ff000a00866e"], 0x1c}}, 0x4008000) syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100300000008e4087f0140000102030109028d00030101900e080b0101010b200009040000000101200009240106000a1500500c24030307033902080900800904010000010220000904010101010220000824020d0000000210240103c101040000000801000080b70905010908"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.158465861s ago: executing program 0 (id=2032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x28, 0x0, &(0x7f0000000200)) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049e1002100c9a7befe6f6d645a1a11b81b2c4b100fd57c06db1a75df432a9ed32d3b475663c0d236fd000000000000000000000000000000267f49eb82b962d81db29f0b47df47351f"], 0x184}}, 0x0) (async) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="59030000", @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf250d00000006000a0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80894}, 0x8000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000000640)={{r0}, "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"}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x38, 0x1, 0x2, 0xc05, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20682, 0x0) ioctl$BLKCLOSEZONE(r7, 0x40101287, &(0x7f0000000100)={0x4, 0x401}) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) 1.141253192s ago: executing program 0 (id=2033): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x5, 0x1000, 0x1000, &(0x7f000057d000/0x1000)=nil}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 1.019971331s ago: executing program 2 (id=2034): r0 = userfaultfd(0x801) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) userfaultfd(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x400002}], 0x1, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000000), 0x6200800, &(0x7f0000000440)={[{@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@appraise_type}], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x103841, 0x186) fcntl$setstatus(r4, 0x4, 0x48c00) lseek(r4, 0x100, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1022802, 0x0) r6 = dup(r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r6, r7, 0x0, 0x8000fffffffe) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ccc000/0x3000)=nil, 0x3000}, 0x7}) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f00000003c0)={0xff, 0x1, 0x92, 0x1, 0x6}) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff, 0x0, 0xff, 0x5, 0xda73, 0x5}, 0x20) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000340)={[{@release_agent={'release_agent', 0x3d, './cgroup'}}, {@nofavordynmods}]}) syz_io_uring_setup(0x476d, &(0x7f0000000140)={0x0, 0x9167, 0x10, 0x1, 0x35d}, &(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000000)) 921.894637ms ago: executing program 0 (id=2035): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10000, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x700) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3967, 0x1, 0x1000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 213.058595ms ago: executing program 1 (id=2036): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x5460, &(0x7f0000000540)={'veth0_macvtap\x00', @link_local}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x8, "2644d8ea"}, @local=@item_012={0x1, 0x2, 0x4, 'h'}]}}, 0x0}, 0x0) 165.100659ms ago: executing program 2 (id=2037): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0x81, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x24}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xa, 0xff}}}}}]}}]}}, 0x0) timerfd_create(0x1, 0x80800) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 58.181346ms ago: executing program 0 (id=2038): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async) r0 = userfaultfd(0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000005b582d"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000100)='reno\x00', 0x5) (async) write$tcp_congestion(r2, &(0x7f0000000300)='reno\x00', 0x5) (async) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006a0015"], 0x14}], 0x1}, 0x4000880) (async) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x4, 0x87, "6e548202"}}, 0x0}, 0x0) 0s ago: executing program 0 (id=2039): keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000240)='keyring\x00', &(0x7f0000002380)={'syz', 0x2}, r2) add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="4120bd0744cee132be0829dca1f373c533c0106d8e453ba64de10d16e10e11b3018a993e551748afb6b35d1c2bbe9cc407251287db887f70cc1804b807ff69d34e53b125c95acb2ef6e139abeed45439616b4067c0c9b9bfdb820738466f74c1463472fd6069276329ea159e2284fd8a7a1b1ac1d87ba86eec3282c23a3cb28c43205590b298d57dcfd2395074afc34d70b8524c7a03b5dcef28c01e163ecb806e464a8d8dadf6fcdda6b052ab6fd973f570f4d6933a1fad5fc11a0309fdc0f77ea74930793876f62eb44897123f223f", 0xd0, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x1, 0x2, 0x1e}, @flat=@handle={0x73682a85, 0x1, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): file permissive=1 [ 234.584511][ T36] audit: type=1400 audit(1792307168.596:3183): avc: denied { map } for pid=4997 comm="syz.5.1524" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 234.587195][ T313] usb 2-1: device descriptor read/64, error -71 [ 234.607779][ T36] audit: type=1400 audit(1792307168.596:3184): avc: denied { execute } for pid=4997 comm="syz.5.1524" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 234.749281][ T339] elo 0003:04E7:0009.0023: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.5-1/input0 [ 234.848728][ T313] usb 2-1: device descriptor read/64, error -71 [ 234.949143][ T339] usb 6-1: USB disconnect, device number 7 [ 234.959644][ T313] usb usb2-port1: attempt power cycle [ 235.040233][ T5032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.048859][ T5032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.301634][ T313] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 235.322872][ T313] usb 2-1: device descriptor read/8, error -71 [ 235.453702][ T313] usb 2-1: device descriptor read/8, error -71 [ 235.602199][ T5036] fuse: Unknown parameter '00000000000000000007' [ 235.694049][ T313] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 235.715352][ T313] usb 2-1: device descriptor read/8, error -71 [ 235.764487][ T339] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 235.846153][ T313] usb 2-1: device descriptor read/8, error -71 [ 235.916769][ T339] usb 6-1: unable to get BOS descriptor or descriptor too short [ 235.925513][ T339] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.935804][ T339] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 235.944882][ T339] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.957949][ T313] usb usb2-port1: unable to enumerate USB device [ 235.970908][ T339] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 235.980135][ T339] usb 6-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 235.988259][ T339] usb 6-1: Product: syz [ 235.992474][ T339] usb 6-1: Manufacturer: syz [ 235.997226][ T339] usb 6-1: SerialNumber: syz [ 236.213593][ T339] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 236.223918][ T339] usb 6-1: USB disconnect, device number 8 [ 236.234753][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 236.478881][ T36] audit: type=1326 audit(1792307170.514:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5037 comm="syz.0.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a6d9c819 code=0x7fc00000 [ 236.581342][ T5049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.590857][ T5049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.856133][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.865461][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.875792][ T5072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.884709][ T5072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.660548][ T5090] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 237.673700][ T5090] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.797199][ T5104] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1559'. [ 237.817115][ T339] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 237.982759][ T339] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.990894][ T339] usb 2-1: config 0 has no interface number 0 [ 237.997044][ T339] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.008232][ T339] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.018176][ T339] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.031173][ T339] usb 2-1: config 0 interface 1 has no altsetting 0 [ 238.037823][ T339] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 238.046907][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.055921][ T339] usb 2-1: config 0 descriptor?? [ 238.209481][ T313] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 238.253635][ T5128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1568'. [ 238.364614][ T313] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 238.380504][ T313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.397426][ T313] usb 6-1: Product: syz [ 238.402605][ T313] usb 6-1: Manufacturer: syz [ 238.407606][ T313] usb 6-1: SerialNumber: syz [ 238.426937][ T5137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.434258][ T5137] IPv6: NLM_F_CREATE should be set when creating new route [ 238.444716][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.454190][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.695635][ T339] usbhid 2-1:0.1: can't add hid device: -71 [ 238.701668][ T339] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 238.712849][ T339] usb 2-1: USB disconnect, device number 126 [ 238.963451][ T5142] tc_dump_action: action bad kind [ 239.056623][ T5154] overlayfs: failed to clone upperpath [ 239.064990][ T5154] overlayfs: failed to clone upperpath [ 239.286477][ T36] audit: type=1400 audit(1792307173.317:3186): avc: denied { create } for pid=5170 comm="syz.1.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 239.547394][ T65] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 239.698254][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 239.705036][ T65] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 239.713741][ T65] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 239.722155][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.732553][ T65] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 239.741521][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.756257][ T65] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 239.765778][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.774085][ T65] usb 2-1: Product: syz [ 239.778365][ T65] usb 2-1: Manufacturer: syz [ 239.783474][ T65] usb 2-1: SerialNumber: syz [ 239.794614][ T65] usb 2-1: config 0 descriptor?? [ 239.802133][ T65] hub 2-1:0.0: bad descriptor, ignoring hub [ 239.808112][ T65] hub 2-1:0.0: probe with driver hub failed with error -5 [ 240.110774][ T313] usb 2-1: USB disconnect, device number 127 [ 240.539444][ T44] erspan0: left allmulticast mode [ 240.544733][ T44] erspan0: left promiscuous mode [ 240.549915][ T44] bridge0: port 3(erspan0) entered disabled state [ 240.557356][ T44] bridge_slave_1: left allmulticast mode [ 240.570672][ T44] bridge_slave_1: left promiscuous mode [ 240.580915][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.597681][ T44] bridge_slave_0: left allmulticast mode [ 240.603689][ T44] bridge_slave_0: left promiscuous mode [ 240.609742][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.631144][ T44] tipc: Disabling bearer [ 240.716851][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.723974][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.731330][ T5188] bridge_slave_0: entered allmulticast mode [ 240.737813][ T5188] bridge_slave_0: entered promiscuous mode [ 240.744603][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.751762][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.758975][ T5188] bridge_slave_1: entered allmulticast mode [ 240.765890][ T5188] bridge_slave_1: entered promiscuous mode [ 240.772223][ T44] tipc: Left network mode [ 240.841567][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.848888][ T5188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.856301][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.863368][ T5188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.873456][ T44] veth1_macvtap: left promiscuous mode [ 240.879254][ T44] veth0_vlan: left promiscuous mode [ 240.935463][ T784] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 240.971430][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.986326][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.002252][ T393] usb 6-1: USB disconnect, device number 9 [ 241.038055][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.045301][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.053233][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.060362][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.085239][ T5188] veth0_vlan: entered promiscuous mode [ 241.101932][ T5188] veth1_macvtap: entered promiscuous mode [ 241.108011][ T784] usb 2-1: Using ep0 maxpacket: 32 [ 241.188247][ T784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.196971][ T784] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 241.209792][ T784] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 241.219337][ T784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.227864][ T784] usb 2-1: Product: syz [ 241.232110][ T784] usb 2-1: Manufacturer: syz [ 241.236756][ T784] usb 2-1: SerialNumber: syz [ 241.428285][ T339] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 241.445119][ T5198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.453798][ T5198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.462357][ T36] audit: type=1326 audit(1792307175.474:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0759c819 code=0x7ffc0000 [ 241.486272][ T36] audit: type=1326 audit(1792307175.474:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0759c819 code=0x7ffc0000 [ 241.510223][ T36] audit: type=1326 audit(1792307175.474:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0759c819 code=0x7ffc0000 [ 241.534057][ T36] audit: type=1326 audit(1792307175.474:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d0759c819 code=0x7ffc0000 [ 241.557953][ T36] audit: type=1326 audit(1792307175.474:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0759c819 code=0x7ffc0000 [ 241.581617][ T36] audit: type=1326 audit(1792307175.474:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0759c819 code=0x7ffc0000 [ 241.605255][ T36] audit: type=1326 audit(1792307175.474:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0759c819 code=0x7ffc0000 [ 241.629122][ T36] audit: type=1326 audit(1792307175.474:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0759c819 code=0x7ffc0000 [ 241.639780][ T5214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.653860][ T36] audit: type=1326 audit(1792307175.474:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0759c819 code=0x7ffc0000 [ 241.666301][ T5214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.689708][ T339] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 241.701858][ T339] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 241.710845][ T339] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 241.721477][ T36] audit: type=1326 audit(1792307175.474:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d0759c819 code=0x7ffc0000 [ 241.745388][ T339] usb 3-1: config 220 has no interface number 2 [ 241.751776][ T339] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 241.765460][ T339] usb 3-1: config 220 interface 0 has no altsetting 0 [ 241.772759][ T339] usb 3-1: config 220 interface 76 has no altsetting 0 [ 241.779957][ T339] usb 3-1: config 220 interface 1 has no altsetting 0 [ 241.787967][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 241.797800][ T5215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1593'. [ 241.803323][ T5199] Invalid argument reading file caps for ./file0 [ 241.807204][ T339] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 241.825086][ T5198] Invalid argument reading file caps for ./file0 [ 241.828692][ T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.841499][ T339] usb 3-1: Product: syz [ 241.845760][ T339] usb 3-1: Manufacturer: syz [ 241.850672][ T339] usb 3-1: SerialNumber: syz [ 241.856435][ T784] usb 2-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 241.869917][ T784] usb 2-1: found format II with max.bitrate = 634, frame size=84 [ 241.880670][ T784] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 241.887040][ T784] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 241.906173][ T784] usb 2-1: USB disconnect, device number 2 [ 242.073978][ T339] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 242.080524][ T339] usb 3-1: No valid video chain found. [ 242.086126][ T339] usb 3-1: selecting invalid altsetting 0 [ 242.094881][ T339] usb 3-1: USB disconnect, device number 61 [ 242.188680][ T345] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 242.338659][ T345] usb 6-1: Using ep0 maxpacket: 16 [ 242.345091][ T345] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 242.354310][ T345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.362960][ T345] usb 6-1: config 0 descriptor?? [ 242.370864][ T345] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 242.381316][ T345] usb 6-1: Detected FT4232H [ 242.570426][ T5217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.579138][ T5217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.628645][ T784] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 242.779835][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.791380][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.802180][ T784] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.815189][ T784] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.824397][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.837758][ T784] usb 2-1: config 0 descriptor?? [ 242.891188][ T345] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 242.899933][ T345] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 242.916540][ T345] usb 6-1: USB disconnect, device number 10 [ 242.925009][ T345] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 242.934947][ T345] ftdi_sio 6-1:0.0: device disconnected [ 243.068675][ T339] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 243.218638][ T339] usb 3-1: Using ep0 maxpacket: 32 [ 243.225521][ T339] usb 3-1: unable to get BOS descriptor or descriptor too short [ 243.234153][ T339] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 243.245222][ T339] usb 3-1: New USB device found, idVendor=fc08, idProduct=0301, bcdDevice= 0.40 [ 243.254776][ T339] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 243.256762][ T784] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 243.263755][ T339] usb 3-1: Product: syz [ 243.275070][ T339] usb 3-1: SerialNumber: syz [ 243.283408][ T784] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 243.362488][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.371323][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.487671][ T339] usb 3-1: MIDIStreaming interface descriptor not found [ 243.497482][ T339] usb 3-1: USB disconnect, device number 62 [ 243.510374][ T3002] udevd[3002]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 243.565800][ T5245] input: syz0 as /devices/virtual/input/input38 [ 243.776685][ T784] usb 2-1: USB disconnect, device number 3 [ 244.050226][ T5254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.076488][ T5256] netlink: 'syz.2.1605': attribute type 33 has an invalid length. [ 244.079625][ T5254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.087463][ T5256] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 244.340387][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 244.350382][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 244.359339][ T5267] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 244.390215][ T5269] bpf: Bad value for 'uid' [ 244.568626][ T339] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 244.612480][ T5272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.621110][ T5272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.720010][ T339] usb 2-1: unable to get BOS descriptor or descriptor too short [ 244.728130][ T339] usb 2-1: not running at top speed; connect to a high speed hub [ 244.738239][ T339] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 244.747438][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.755681][ T339] usb 2-1: Product: syz [ 244.759942][ T339] usb 2-1: Manufacturer: syz [ 244.764650][ T339] usb 2-1: SerialNumber: syz [ 244.975192][ T339] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 244.985307][ T339] usb 2-1: failed to enable PITCH for EP 0x1 [ 244.991943][ T339] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 245.001792][ T339] usb 2-1: 1:1 : bogus bTerminalLink 3 [ 245.007538][ T339] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 245.017677][ T339] usb 2-1: 1:1 : bogus bTerminalLink 3 [ 245.023232][ T345] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 245.033041][ T339] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 245.043008][ T339] usb 2-1: USB disconnect, device number 4 [ 245.054073][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 245.179738][ T345] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.191404][ T345] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.202576][ T345] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 245.212819][ T345] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.234662][ T345] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.251729][ T345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.261340][ T345] usb 6-1: config 0 descriptor?? [ 245.329186][ T5281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.339594][ T5281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.498663][ T393] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 245.650033][ T393] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.659957][ T393] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 245.669152][ T393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.677546][ T345] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 245.678334][ T393] usb 3-1: Product: syz [ 245.689806][ T393] usb 3-1: Manufacturer: syz [ 245.694458][ T345] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 245.694612][ T393] usb 3-1: SerialNumber: syz [ 245.715718][ T393] usb 3-1: selecting invalid altsetting 1 [ 245.721858][ T393] usb 3-1: unit 6 not found! [ 245.748622][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 245.898648][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 245.905072][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.916118][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.930614][ T46] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 245.939756][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.948948][ T46] usb 2-1: config 0 descriptor?? [ 246.225985][ T5296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.234666][ T5296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.299589][ T5298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.308252][ T5298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.357579][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.364786][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.371978][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.379331][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.386451][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.393547][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.400693][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.407891][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.415015][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.422118][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.429242][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.436324][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.443421][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.450609][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.457711][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.464899][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.472047][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.479191][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.486296][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.493408][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.500544][ T46] uclogic 0003:5543:0781.0026: unknown main item tag 0x0 [ 246.507632][ T46] uclogic 0003:5543:0781.0026: unbalanced collection at end of report description [ 246.517080][ T46] uclogic 0003:5543:0781.0026: parse failed [ 246.523136][ T46] uclogic 0003:5543:0781.0026: probe with driver uclogic failed with error -22 [ 246.555969][ T46] usb 2-1: USB disconnect, device number 5 [ 246.579653][ T784] usb 6-1: USB disconnect, device number 11 [ 247.398620][ T46] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 247.528621][ T784] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 247.549760][ T46] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.559987][ T46] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.569680][ T46] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 247.578861][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.586917][ T46] usb 6-1: SerialNumber: syz [ 247.679830][ T784] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 247.689087][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.698181][ T784] usb 2-1: config 0 descriptor?? [ 248.261441][ T393] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 248.276125][ T393] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 248.277673][ T46] usb 6-1: 0:2 : does not exist [ 248.288472][ T393] usb 3-1: selecting invalid altsetting 1 [ 248.295072][ T46] usb 6-1: unit 5: unexpected type 0x0a [ 248.303263][ T5318] Invalid argument reading file caps for ./file0 [ 248.305960][ T5316] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1626'. [ 248.320676][ T46] usb 6-1: USB disconnect, device number 12 [ 248.323918][ T393] usb 3-1: unit 6 not found! [ 248.345036][ T393] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 248.365340][ T393] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 248.383834][ T393] usb 3-1: selecting invalid altsetting 1 [ 248.390182][ T393] usb 3-1: unit 6 not found! [ 248.397515][ T393] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 248.407710][ T3002] udevd[3002]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 248.425453][ T393] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 248.438449][ T393] usb 3-1: USB disconnect, device number 63 [ 248.446979][ T784] usb 2-1: Cannot set autoneg [ 248.453129][ T784] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 248.467053][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 248.470187][ T784] usb 2-1: USB disconnect, device number 6 [ 248.668625][ T46] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 248.748608][ T393] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 248.819823][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 248.830828][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 248.843775][ T46] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 248.852892][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.861648][ T46] usb 6-1: config 0 descriptor?? [ 248.867031][ T5320] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 248.878630][ T393] usb 3-1: device descriptor read/64, error -71 [ 248.969411][ T5326] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1630'. [ 249.031667][ T5328] kvm: kvm [5327]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 249.079468][ T5320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.088222][ T5320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.101856][ T5329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.112529][ T5329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.128655][ T393] usb 3-1: device descriptor read/64, error -71 [ 249.240823][ T5333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.249581][ T5333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.271030][ T5333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.280234][ T5333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.304058][ T46] kye 0003:0458:500F.0027: control desc unexpectedly large [ 249.312687][ T46] input: HID 0458:500f as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:500F.0027/input/input40 [ 249.329438][ T46] kye 0003:0458:500F.0027: input,hiddev96,hidraw0: USB HID v0.06 Device [HID 0458:500f] on usb-dummy_hcd.5-1/input0 [ 249.348609][ T784] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 249.368624][ T393] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 249.498615][ T784] usb 2-1: Using ep0 maxpacket: 8 [ 249.503796][ T393] usb 3-1: device descriptor read/64, error -71 [ 249.511343][ T784] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 249.511835][ T46] usb 6-1: USB disconnect, device number 13 [ 249.522223][ T784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 249.540232][ T784] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 249.550048][ T784] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.563703][ T784] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 249.573058][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 249.581497][ T784] usb 2-1: SerialNumber: syz [ 249.587121][ T5328] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 249.595054][ T784] cdc_ether 2-1:1.0: skipping garbage [ 249.600632][ T784] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 249.609189][ T784] usb-storage 2-1:1.0: USB Mass Storage device detected [ 249.617088][ T784] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 249.748633][ T393] usb 3-1: device descriptor read/64, error -71 [ 249.796774][ T784] usb 2-1: USB disconnect, device number 7 [ 249.840201][ T5340] netlink: 'syz.0.1634': attribute type 5 has an invalid length. [ 249.858795][ T393] usb usb3-port1: attempt power cycle [ 250.198688][ T393] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 250.220007][ T393] usb 3-1: device descriptor read/8, error -71 [ 250.288632][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 250.349780][ T393] usb 3-1: device descriptor read/8, error -71 [ 250.436520][ T5354] overlayfs: failed to resolve './file0': -2 [ 250.442709][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 250.449138][ T10] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 250.459339][ T10] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 250.468823][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.490105][ T5356] netlink: 'syz.1.1640': attribute type 33 has an invalid length. [ 250.498717][ T5356] fuse: Bad value for 'user_id' [ 250.503644][ T5356] fuse: Bad value for 'user_id' [ 250.514768][ T5356] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 250.596175][ T5358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.599880][ T393] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 250.605202][ T5358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.622561][ T5358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.631288][ T393] usb 3-1: device descriptor read/8, error -71 [ 250.631557][ T5358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.680090][ T10] usb 6-1: string descriptor 0 read error: -71 [ 250.688771][ T10] hub 6-1:32.0: bad descriptor, ignoring hub [ 250.694947][ T10] hub 6-1:32.0: probe with driver hub failed with error -5 [ 250.718907][ T10] usb 6-1: USB disconnect, device number 14 [ 250.758642][ T784] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 250.769883][ T393] usb 3-1: device descriptor read/8, error -71 [ 250.878945][ T393] usb usb3-port1: unable to enumerate USB device [ 250.910703][ T784] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 250.919145][ T784] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 250.928083][ T784] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 250.938419][ T784] usb 2-1: config 220 has no interface number 2 [ 250.944806][ T784] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 250.957914][ T784] usb 2-1: config 220 interface 0 has no altsetting 0 [ 250.964773][ T784] usb 2-1: config 220 interface 76 has no altsetting 0 [ 250.971700][ T784] usb 2-1: config 220 interface 1 has no altsetting 0 [ 250.980126][ T784] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 250.989404][ T784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.997404][ T784] usb 2-1: Product: syz [ 251.001635][ T784] usb 2-1: Manufacturer: syz [ 251.006252][ T784] usb 2-1: SerialNumber: syz [ 251.220018][ T784] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 251.233485][ T784] usb 2-1: No valid video chain found. [ 251.242244][ T784] usb 2-1: selecting invalid altsetting 0 [ 251.249436][ T5366] netlink: 'syz.5.1645': attribute type 16 has an invalid length. [ 251.257399][ T5366] netlink: 'syz.5.1645': attribute type 2 has an invalid length. [ 251.267036][ T5366] netlink: 64086 bytes leftover after parsing attributes in process `syz.5.1645'. [ 251.278358][ T784] usb 2-1: USB disconnect, device number 8 [ 251.510016][ T5389] fuse: Bad value for 'fd' [ 251.748595][ T46] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 251.899666][ T46] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.913717][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.924950][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.934980][ T46] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.948163][ T46] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.957529][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.967937][ T46] usb 6-1: config 0 descriptor?? [ 251.988596][ T784] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 252.118614][ T784] usb 2-1: device descriptor read/64, error -71 [ 252.256040][ T5393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.264812][ T5393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.306679][ T36] kauditd_printk_skb: 106 callbacks suppressed [ 252.306701][ T36] audit: type=1400 audit(2000000010.819:3303): avc: denied { shutdown } for pid=5394 comm="syz.2.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.358618][ T784] usb 2-1: device descriptor read/64, error -71 [ 252.387740][ T46] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 252.397807][ T46] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 252.598662][ T784] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 252.618729][ T393] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 252.728643][ T784] usb 2-1: device descriptor read/64, error -71 [ 252.768821][ T393] usb 3-1: Using ep0 maxpacket: 16 [ 252.779444][ T393] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.790004][ T393] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.801855][ T393] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.811071][ T393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.819173][ T393] usb 3-1: Product: syz [ 252.823418][ T393] usb 3-1: Manufacturer: syz [ 252.828062][ T393] usb 3-1: SerialNumber: syz [ 252.968643][ T784] usb 2-1: device descriptor read/64, error -71 [ 252.989403][ T5413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.998737][ T5413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.024304][ T36] audit: type=1400 audit(2000000011.539:3304): avc: denied { write } for pid=5414 comm="syz.0.1661" path="socket:[44235]" dev="sockfs" ino=44235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 253.027961][ T5415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.057226][ T5401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.060227][ T5415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.069584][ T5401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.081205][ T784] usb usb2-port1: attempt power cycle [ 253.088408][ T393] usb 3-1: 0:2 : does not exist [ 253.093456][ T393] usb 3-1: unit 9 not found! [ 253.100054][ T393] usb 3-1: USB disconnect, device number 68 [ 253.110101][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 253.438628][ T784] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 253.459839][ T784] usb 2-1: device descriptor read/8, error -71 [ 253.599228][ T784] usb 2-1: device descriptor read/8, error -71 [ 253.649358][ T5417] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 253.729546][ T5431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.738143][ T5431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.848620][ T784] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 253.870349][ T784] usb 2-1: device descriptor read/8, error -71 [ 254.009818][ T784] usb 2-1: device descriptor read/8, error -71 [ 254.118645][ T46] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 254.118792][ T784] usb usb2-port1: unable to enumerate USB device [ 254.168650][ T345] usb 6-1: reset high-speed USB device number 15 using dummy_hcd [ 254.269718][ T46] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 254.277431][ T46] usb 3-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 254.290348][ T46] usb 3-1: string descriptor 0 read error: -22 [ 254.296717][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.306307][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.314264][ T5444] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1671'. [ 254.325093][ T46] usb 3-1: bad CDC descriptors [ 254.356731][ T5444] kvm: kvm [5443]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 254.365865][ T5444] kvm: kvm [5443]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 254.522780][ T393] usb 3-1: USB disconnect, device number 69 [ 254.658328][ T5457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.667119][ T5457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.675945][ T5457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.684897][ T5457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.846829][ T5460] cgroup: fork rejected by pids controller in /syz1 [ 255.071495][ T5500] vlan1: entered promiscuous mode [ 255.077347][ T5499] vlan1: left promiscuous mode [ 255.103290][ T36] audit: type=1400 audit(2000000013.619:3305): avc: denied { ioctl } for pid=5501 comm="syz.5.1680" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 255.260721][ T5508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.269427][ T5508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.368618][ T46] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 255.519924][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.530475][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.540555][ T46] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.549947][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.558059][ T46] usb 3-1: SerialNumber: syz [ 255.688880][ T313] usb 6-1: USB disconnect, device number 15 [ 255.770247][ T46] usb 3-1: 0:2 : does not exist [ 255.775246][ T46] usb 3-1: unit 5 not found! [ 255.783897][ T46] usb 3-1: USB disconnect, device number 70 [ 255.795170][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 255.811594][ T784] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 255.828702][ T313] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 255.969737][ T784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.979567][ T784] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.980750][ T313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 255.989301][ T784] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.001390][ T313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.015580][ T784] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 256.023111][ T313] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.032884][ T784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 256.042365][ T313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.050356][ T784] usb 2-1: Product: syz [ 256.061751][ T784] usb 2-1: Manufacturer: syz [ 256.066392][ T784] usb 2-1: SerialNumber: syz [ 256.068524][ T313] usb 6-1: config 0 descriptor?? [ 256.078130][ T313] hub 6-1:0.0: USB hub found [ 256.277338][ T313] hub 6-1:0.0: 1 port detected [ 256.279906][ T784] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 256.482982][ T5511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.491748][ T5511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.579587][ T784] usb 2-1: USB disconnect, device number 13 [ 256.587473][ T784] usblp0: removed [ 256.590806][ T46] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 256.748606][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 256.755055][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 256.763735][ T46] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 256.774187][ T46] usb 3-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.787681][ T46] usb 3-1: config 1 interface 0 has no altsetting 0 [ 256.795946][ T46] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 256.805180][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.813368][ T46] usb 3-1: Product: syz [ 256.817612][ T46] usb 3-1: Manufacturer: syz [ 256.822308][ T46] usb 3-1: SerialNumber: syz [ 257.031828][ T46] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 257.040198][ T46] usb 3-1: USB disconnect, device number 71 [ 257.291451][ T5523] 9p: Unknown Cache mode or invalid value loose $ [ 257.338592][ T345] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 257.488591][ T345] usb 2-1: Using ep0 maxpacket: 16 [ 257.495125][ T345] usb 2-1: config 0 has no interfaces? [ 257.502662][ T345] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 257.511920][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.520120][ T345] usb 2-1: Product: syz [ 257.524326][ T345] usb 2-1: Manufacturer: syz [ 257.529011][ T345] usb 2-1: SerialNumber: syz [ 257.539456][ T345] r8152-cfgselector 2-1: Unknown version 0x0000 [ 257.545922][ T345] r8152-cfgselector 2-1: config 0 descriptor?? [ 257.689745][ T313] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 257.798659][ T345] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 257.958601][ T345] usb 3-1: Using ep0 maxpacket: 32 [ 257.966027][ T345] usb 3-1: unable to get BOS descriptor or descriptor too short [ 257.975338][ T345] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 257.983072][ T345] usb 3-1: can't read configurations, error -61 [ 258.118627][ T345] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 258.272962][ T345] usb 3-1: Using ep0 maxpacket: 32 [ 258.281280][ T345] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.290641][ T345] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 258.298452][ T345] usb 3-1: can't read configurations, error -61 [ 258.305408][ T345] usb usb3-port1: attempt power cycle [ 258.340821][ T784] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 258.437067][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1696'. [ 258.532575][ T36] audit: type=1400 audit(2000000017.049:3306): avc: denied { lock } for pid=5562 comm="syz.0.1698" path="socket:[45381]" dev="sockfs" ino=45381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 258.632930][ T5571] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1701'. [ 258.668635][ T345] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 258.678474][ T5573] kvm: Disabled LAPIC found during irq injection [ 258.689033][ T345] usb 3-1: Using ep0 maxpacket: 32 [ 258.695675][ T345] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.709428][ T345] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 258.717098][ T345] usb 3-1: can't read configurations, error -61 [ 258.769982][ T784] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 258.827058][ T5576] syzkaller1: entered promiscuous mode [ 258.832650][ T5576] syzkaller1: entered allmulticast mode [ 258.868611][ T345] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 258.890782][ T345] usb 3-1: Using ep0 maxpacket: 32 [ 258.895487][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.904921][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.909146][ T345] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.916524][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.925430][ T345] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 258.932996][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.938318][ T345] usb 3-1: can't read configurations, error -61 [ 258.950854][ T345] usb usb3-port1: unable to enumerate USB device [ 258.953081][ T784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 258.966696][ T784] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 258.974882][ T784] usb 2-1: can't read configurations, error -22 [ 259.108625][ T784] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 259.260025][ T784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 259.268982][ T784] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 259.277898][ T784] usb 2-1: can't read configurations, error -22 [ 259.284653][ T784] usb usb2-port1: attempt power cycle [ 259.561292][ T5588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.569974][ T5588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.583137][ T36] audit: type=1400 audit(2000000018.099:3307): avc: denied { mounton } for pid=5589 comm="syz.5.1708" path="/proc/169/cgroup" dev="proc" ino=45019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 259.648609][ T784] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 259.680533][ T784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 259.692740][ T784] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 259.701142][ T784] usb 2-1: can't read configurations, error -22 [ 259.828655][ T784] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 259.850639][ T784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 259.859416][ T784] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 259.867382][ T784] usb 2-1: can't read configurations, error -22 [ 259.874010][ T784] usb usb2-port1: unable to enumerate USB device [ 260.306960][ T5598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.315615][ T5598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.479187][ T5600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.487787][ T5600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.873520][ T36] audit: type=1400 audit(2000000019.389:3308): avc: denied { getopt } for pid=5603 comm="syz.0.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 260.958633][ T345] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 261.108720][ T345] usb 3-1: Using ep0 maxpacket: 32 [ 261.115532][ T345] usb 3-1: unable to get BOS descriptor or descriptor too short [ 261.124011][ T345] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 261.136477][ T345] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 261.145619][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.153691][ T345] usb 3-1: Product: syz [ 261.157892][ T345] usb 3-1: Manufacturer: syz [ 261.162542][ T345] usb 3-1: SerialNumber: syz [ 261.371768][ T345] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 261.378814][ T345] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 261.390442][ T345] usb 3-1: USB disconnect, device number 76 [ 261.402167][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 261.472831][ T5622] syzkaller1: entered promiscuous mode [ 261.478381][ T5622] syzkaller1: entered allmulticast mode [ 261.606762][ T5628] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 261.612743][ T5628] syzkaller1: Linktype set failed because interface is up [ 261.671806][ T5630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.681039][ T5630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.785592][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.794256][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.198634][ T339] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 262.358613][ T339] usb 3-1: Using ep0 maxpacket: 16 [ 262.365156][ T339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.375710][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.386896][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.396794][ T339] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 262.406056][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.422954][ T339] usb 3-1: config 0 descriptor?? [ 262.585666][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.596064][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.898649][ T339] hid-picolcd 0003:04D8:F002.0029: No report with id 0xf3 found [ 262.906558][ T339] hid-picolcd 0003:04D8:F002.0029: No report with id 0xf4 found [ 263.533764][ T5657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5657 comm=syz.1.1732 [ 263.798622][ T339] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 263.948605][ T339] usb 2-1: Using ep0 maxpacket: 32 [ 263.955441][ T339] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.964071][ T339] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023 [ 263.974067][ T339] usb 2-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.987037][ T339] usb 2-1: config 1 interface 0 has no altsetting 0 [ 263.994095][ T339] usb 2-1: language id specifier not provided by device, defaulting to English [ 264.006405][ T339] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 264.015660][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.023900][ T339] usb 2-1: Manufacturer: 㾇 [ 264.028941][ T339] usb 2-1: SerialNumber: syz [ 264.034650][ T5659] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 264.041951][ T5659] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 264.078592][ T313] usb 3-1: reset high-speed USB device number 77 using dummy_hcd [ 264.177505][ T5661] overlayfs: missing 'lowerdir' [ 264.227187][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.235863][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.343970][ T339] usb 2-1: USB disconnect, device number 19 [ 264.627553][ T5679] netlink: 'syz.2.1740': attribute type 4 has an invalid length. [ 264.741532][ T5683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.750193][ T5683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.751647][ T5681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.766932][ T5681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.917248][ T5689] netlink: 'syz.0.1742': attribute type 4 has an invalid length. [ 265.098626][ T784] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 265.118611][ T313] usb 3-1: device descriptor read/64, error -71 [ 265.250177][ T784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.258668][ T784] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 246, changing to 7 [ 265.271335][ T784] usb 2-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 265.280525][ T784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.288613][ T784] usb 2-1: Product: 콫幩ʃ뫟緙侢몱鹎䝕ᇹἵ岖㦧㓸콩瑢턿碸艓쁷㙟⥇矋讠̞視펍㡴㐭骻涑᫅藈⡊ኔ㟡燧絊蜖꣠贳⿧쨙ⲷ톳ਹӱ૩焾뭝幃 [ 265.309952][ T784] usb 2-1: Manufacturer:  [ 265.314618][ T784] usb 2-1: SerialNumber: syz [ 265.335341][ T5693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.335376][ T5693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.357772][ T5549] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.368761][ T313] usb 3-1: device descriptor read/64, error -71 [ 265.371237][ T5698] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 265.384901][ T5549] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.524196][ T784] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 265.533852][ T784] usb 2-1: USB disconnect, device number 20 [ 265.545794][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 265.628669][ T313] usb 3-1: reset high-speed USB device number 77 using dummy_hcd [ 265.661624][ T5700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.670369][ T5700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.758685][ T313] usb 3-1: device descriptor read/64, error -71 [ 265.998654][ T313] usb 3-1: device descriptor read/64, error -71 [ 266.106287][ T36] audit: type=1400 audit(2000000024.619:3309): avc: denied { remount } for pid=5701 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 266.248620][ T313] usb 3-1: reset high-speed USB device number 77 using dummy_hcd [ 266.269793][ T313] usb 3-1: device descriptor read/8, error -71 [ 266.399915][ T5707] virtio-fs: tag not found [ 266.405448][ T313] usb 3-1: device descriptor read/8, error -71 [ 266.648620][ T313] usb 3-1: reset high-speed USB device number 77 using dummy_hcd [ 266.669754][ T313] usb 3-1: device descriptor read/8, error -71 [ 266.799840][ T313] usb 3-1: device descriptor read/8, error -71 [ 266.908961][ T393] usb 3-1: USB disconnect, device number 77 [ 267.048655][ T393] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 267.052660][ T5718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.064973][ T5718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.178624][ T393] usb 3-1: device descriptor read/64, error -71 [ 267.258611][ T346] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 267.408656][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.408656][ T3114] Bluetooth: hci0: command 0x1003 tx timeout [ 267.420901][ T346] usb 2-1: Using ep0 maxpacket: 32 [ 267.426142][ T393] usb 3-1: device descriptor read/64, error -71 [ 267.434568][ T346] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 267.442789][ T346] usb 2-1: can't read configurations, error -61 [ 267.457188][ T5721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.465795][ T5721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.578649][ T346] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 267.597399][ T5723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.606082][ T5723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.668756][ T393] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 267.728635][ T346] usb 2-1: Using ep0 maxpacket: 32 [ 267.740168][ T346] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 267.747881][ T346] usb 2-1: can't read configurations, error -61 [ 267.754408][ T346] usb usb2-port1: attempt power cycle [ 267.994541][ T5752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.003232][ T5752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.074783][ T5752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.098858][ T346] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 268.119014][ T346] usb 2-1: Using ep0 maxpacket: 32 [ 268.125681][ T346] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 268.134246][ T346] usb 2-1: can't read configurations, error -61 [ 268.167832][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.176466][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.268635][ T346] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 268.289182][ T346] usb 2-1: Using ep0 maxpacket: 32 [ 268.295972][ T346] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 268.303707][ T346] usb 2-1: can't read configurations, error -61 [ 268.310412][ T346] usb usb2-port1: unable to enumerate USB device [ 268.443317][ T5762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5762 comm=syz.2.1760 [ 268.646432][ T5778] fuse: Bad value for 'rootmode' [ 268.652977][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.662575][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.863532][ T5795] syzkaller1: entered promiscuous mode [ 268.869476][ T5795] syzkaller1: entered allmulticast mode [ 268.914783][ T5795] syzkaller1: left promiscuous mode [ 268.920139][ T5795] syzkaller1: left allmulticast mode [ 268.984860][ T36] audit: type=1400 audit(2000000027.499:3310): avc: denied { ioctl } for pid=5796 comm="syz.0.1772" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 268.988856][ T5797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.018214][ T313] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 269.021951][ T5797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.035353][ T5797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.043939][ T5797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.052877][ T5797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.061475][ T5797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.069997][ T36] audit: type=1400 audit(2000000027.589:3311): avc: denied { ioctl } for pid=5796 comm="syz.0.1772" path="socket:[47428]" dev="sockfs" ino=47428 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 269.169771][ T313] usb 3-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 269.180075][ T313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.189715][ T313] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 269.198820][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 269.206935][ T313] usb 3-1: SerialNumber: syz [ 269.248751][ T5801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.258249][ T5801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.415460][ T313] usb 3-1: 0:2 : does not exist [ 269.421135][ T313] usb 3-1: unit 5 not found! [ 269.427686][ T313] usb 3-1: USB disconnect, device number 80 [ 269.440434][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 269.640175][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.648824][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.657916][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.666695][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.675479][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.684124][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.030683][ T5827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.040351][ T5827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.051214][ T5827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.062741][ T5827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.176117][ T5832] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=134220032 (268440064 ns) > initial count (200000 ns). Using initial count to start timer. [ 270.188717][ T346] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 270.328411][ T36] audit: type=1400 audit(2000000028.839:3312): avc: denied { setcheckreqprot } for pid=5842 comm="syz.0.1785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 270.380095][ T346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 270.402354][ T346] usb 3-1: not running at top speed; connect to a high speed hub [ 270.410868][ T346] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.421259][ T346] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.432559][ T346] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 270.445616][ T5850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1787'. [ 270.448291][ T346] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 270.463831][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.472030][ T346] usb 3-1: Product: syz [ 270.476389][ T346] usb 3-1: Manufacturer: syz [ 270.481105][ T346] usb 3-1: SerialNumber: syz [ 270.490405][ T346] usb 3-1: config 0 descriptor?? [ 270.502100][ T346] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 270.518190][ T3002] udevd[3002]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 270.613170][ T5858] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 270.668618][ T339] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 270.696722][ T346] usb 3-1: USB disconnect, device number 81 [ 270.794163][ T5868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.803444][ T5868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.818572][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 270.829615][ T339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.845562][ T5869] rust_binder: Error while translating object. [ 270.845602][ T5869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 270.848651][ T339] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.852661][ T5868] rust_binder: Error while translating object. [ 270.870980][ T5869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1424 [ 270.877425][ T5868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 270.880960][ T339] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.887935][ T5868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1424 [ 270.898614][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.936672][ T339] usb 2-1: Product: syz [ 270.944399][ T339] usb 2-1: Manufacturer: syz [ 270.950854][ T339] usb 2-1: SerialNumber: syz [ 270.981098][ T5873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.990866][ T5873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.006860][ T5865] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1792'. [ 271.016121][ T36] audit: type=1400 audit(2000000029.519:3313): avc: denied { nlmsg_read } for pid=5864 comm="syz.5.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.498584][ T346] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 271.627368][ T5880] fuse: Bad value for 'fd' [ 271.658624][ T346] usb 3-1: Using ep0 maxpacket: 32 [ 271.665083][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.678356][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.689744][ T346] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 271.702899][ T346] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 271.712381][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.725133][ T346] usb 3-1: config 0 descriptor?? [ 271.802952][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.824663][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.880595][ T5891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.890529][ T5891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.003934][ T346] usbhid 3-1:0.0: can't add hid device: -71 [ 272.017274][ T346] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 272.028275][ T346] usb 3-1: USB disconnect, device number 82 [ 272.358587][ T346] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 272.508608][ T346] usb 3-1: Using ep0 maxpacket: 8 [ 272.515531][ T346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.526684][ T346] usb 3-1: config 127 has an invalid interface number: 159 but max is 1 [ 272.535703][ T346] usb 3-1: config 127 has an invalid interface number: 92 but max is 1 [ 272.544853][ T346] usb 3-1: config 127 has an invalid interface association descriptor of length 2, skipping [ 272.556267][ T346] usb 3-1: config 127 has no interface number 0 [ 272.564269][ T346] usb 3-1: config 127 has no interface number 1 [ 272.574379][ T346] usb 3-1: config 127 interface 159 altsetting 5 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 272.586583][ T346] usb 3-1: config 127 interface 159 altsetting 5 endpoint 0x8 has an invalid bInterval 185, changing to 7 [ 272.598258][ T346] usb 3-1: config 127 interface 159 has no altsetting 0 [ 272.622311][ T346] usb 3-1: config 127 interface 92 has no altsetting 0 [ 272.644162][ T346] usb 3-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=e2.70 [ 272.656145][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.666606][ T346] usb 3-1: Product: syz [ 272.671112][ T346] usb 3-1: Manufacturer: syz [ 272.677233][ T346] usb 3-1: SerialNumber: syz [ 272.889102][ T346] cdc_acm 3-1:127.92: invalid descriptor buffer length [ 272.899783][ T346] usb 3-1: USB disconnect, device number 83 [ 273.140067][ T339] usb 2-1: 0:2 : does not exist [ 273.147705][ T339] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 273.176676][ T339] usb 2-1: USB disconnect, device number 25 [ 273.208950][ T5914] netlink: 'syz.0.1806': attribute type 6 has an invalid length. [ 273.218937][ T5914] IPv6: NLM_F_CREATE should be specified when creating new route [ 273.413012][ T36] audit: type=1400 audit(2000000031.929:3314): avc: denied { bind } for pid=5917 comm="syz.1.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 273.461133][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 273.763921][ T5930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60446 sclass=netlink_route_socket pid=5930 comm=syz.5.1812 [ 273.793054][ T5930] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 273.851549][ T36] audit: type=1400 audit(2000000032.369:3315): avc: denied { module_load } for pid=5929 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 273.852718][ T5930] Invalid ELF header magic: != ELF [ 273.967486][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.976147][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.046721][ T5937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.055570][ T5937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.066352][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.075722][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.359468][ T5950] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1820'. [ 274.388752][ T5952] syzkaller1: entered promiscuous mode [ 274.394349][ T5952] syzkaller1: entered allmulticast mode [ 274.398703][ T346] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 274.404658][ T5952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=5952 comm=syz.1.1821 [ 274.505862][ T5956] overlayfs: failed to resolve './bus': -2 [ 274.513128][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.521803][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.559786][ T346] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 274.567977][ T346] usb 3-1: config 0 has no interface number 0 [ 274.574523][ T346] usb 3-1: config 0 interface 41 has no altsetting 0 [ 274.582888][ T346] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 274.592079][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.600470][ T346] usb 3-1: Product: syz [ 274.604673][ T346] usb 3-1: Manufacturer: syz [ 274.609338][ T346] usb 3-1: SerialNumber: syz [ 274.614858][ T346] usb 3-1: config 0 descriptor?? [ 274.641197][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.649868][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.660046][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.668975][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.728596][ T10] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 274.879588][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.887721][ T10] usb 2-1: config 0 has no interface number 0 [ 274.894025][ T10] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.905249][ T10] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.915135][ T10] usb 2-1: config 0 interface 1 has no altsetting 0 [ 274.921800][ T10] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 274.930905][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.939882][ T10] usb 2-1: config 0 descriptor?? [ 275.024304][ T346] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 275.055313][ T5967] rust_binder: Write failure EFAULT in pid:243 [ 275.126149][ T36] audit: type=1400 audit(2000000033.639:3316): avc: denied { lock } for pid=5969 comm="syz.5.1827" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 275.158642][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.170895][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.179741][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.188406][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.207335][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.216980][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.226130][ T346] usb 3-1: USB disconnect, device number 84 [ 275.589547][ T10] uclogic 0003:2179:0053.002A: failed retrieving string descriptor #100: -71 [ 275.598626][ T10] uclogic 0003:2179:0053.002A: failed retrieving pen parameters: -71 [ 275.606776][ T10] uclogic 0003:2179:0053.002A: pen probing failed: -71 [ 275.613728][ T10] uclogic 0003:2179:0053.002A: failed probing parameters: -71 [ 275.621439][ T10] uclogic 0003:2179:0053.002A: probe with driver uclogic failed with error -71 [ 275.632507][ T10] usb 2-1: USB disconnect, device number 26 [ 275.982353][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.991298][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.512668][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.521374][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.530490][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.539182][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.548035][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.556735][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.597165][ T5998] input: syz1 as /devices/virtual/input/input44 [ 276.604520][ T5999] cgroup: Unknown subsys name 'measure' [ 276.918595][ T339] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 276.995476][ T36] audit: type=1400 audit(2000000035.509:3317): avc: denied { audit_control } for pid=6010 comm="syz.1.1840" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 277.048606][ T339] usb 3-1: device descriptor read/64, error -71 [ 277.140926][ T6025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.149630][ T6025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.268652][ T345] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 277.288588][ T339] usb 3-1: device descriptor read/64, error -71 [ 277.398691][ T345] usb 2-1: device descriptor read/64, error -71 [ 277.528587][ T339] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 277.638625][ T345] usb 2-1: device descriptor read/64, error -71 [ 277.658584][ T339] usb 3-1: device descriptor read/64, error -71 [ 277.751312][ T6028] fuse: Bad value for 'fd' [ 277.771055][ T53] tipc: Subscription rejected, illegal request [ 277.878670][ T345] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 277.898612][ T339] usb 3-1: device descriptor read/64, error -71 [ 278.008686][ T345] usb 2-1: device descriptor read/64, error -71 [ 278.015060][ T339] usb usb3-port1: attempt power cycle [ 278.258618][ T345] usb 2-1: device descriptor read/64, error -71 [ 278.359347][ T339] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 278.369299][ T345] usb usb2-port1: attempt power cycle [ 278.379954][ T339] usb 3-1: device descriptor read/8, error -71 [ 278.509768][ T339] usb 3-1: device descriptor read/8, error -71 [ 278.708685][ T345] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 278.729723][ T345] usb 2-1: device descriptor read/8, error -71 [ 278.748610][ T339] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 278.769786][ T339] usb 3-1: device descriptor read/8, error -71 [ 278.859740][ T345] usb 2-1: device descriptor read/8, error -71 [ 278.899579][ T339] usb 3-1: device descriptor read/8, error -71 [ 279.008697][ T339] usb usb3-port1: unable to enumerate USB device [ 279.047339][ T36] audit: type=1400 audit(2000000037.559:3318): avc: denied { connect } for pid=6074 comm="syz.0.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 279.098607][ T345] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 279.119723][ T345] usb 2-1: device descriptor read/8, error -71 [ 279.224262][ T6082] can0: slcan on ttyS3. [ 279.249760][ T345] usb 2-1: device descriptor read/8, error -71 [ 279.302372][ T6089] can0 (unregistered): slcan off ttyS3. [ 279.365817][ T345] usb usb2-port1: unable to enumerate USB device [ 279.371689][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.390657][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.495684][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.505896][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.997742][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.006420][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.088612][ T345] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 280.162426][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.171058][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.182203][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.191646][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.228608][ T345] usb 3-1: device descriptor read/64, error -71 [ 280.428635][ T339] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 280.452470][ T6148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:326 [ 280.453354][ T36] audit: type=1326 audit(2000000038.969:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.5.1872" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7face059c819 code=0x0 [ 280.485608][ T345] usb 3-1: device descriptor read/64, error -71 [ 280.504960][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.513738][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.558597][ T339] usb 2-1: device descriptor read/64, error -71 [ 280.728603][ T345] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 280.745950][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'. [ 280.755556][ T6160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6160 comm=syz.0.1876 [ 280.780521][ T6162] batadv_slave_1: entered promiscuous mode [ 280.787104][ T6162] batadv_slave_1: left promiscuous mode [ 280.798602][ T339] usb 2-1: device descriptor read/64, error -71 [ 280.868584][ T345] usb 3-1: device descriptor read/64, error -71 [ 281.038160][ T6166] SELinux: failed to load policy [ 281.039915][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.051612][ T339] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 281.052547][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.096856][ T6171] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 281.108625][ T345] usb 3-1: device descriptor read/64, error -71 [ 281.121135][ T6173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.129774][ T6173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.139180][ T6173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.147775][ T6173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.178580][ T339] usb 2-1: device descriptor read/64, error -71 [ 281.218711][ T345] usb usb3-port1: attempt power cycle [ 281.418631][ T339] usb 2-1: device descriptor read/64, error -71 [ 281.528738][ T339] usb usb2-port1: attempt power cycle [ 281.558623][ T345] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 281.579875][ T345] usb 3-1: device descriptor read/8, error -71 [ 281.709820][ T345] usb 3-1: device descriptor read/8, error -71 [ 281.836255][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.844941][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.868591][ T339] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 281.889722][ T339] usb 2-1: device descriptor read/8, error -71 [ 281.948602][ T345] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 281.969729][ T345] usb 3-1: device descriptor read/8, error -71 [ 282.019765][ T339] usb 2-1: device descriptor read/8, error -71 [ 282.099867][ T345] usb 3-1: device descriptor read/8, error -71 [ 282.208787][ T345] usb usb3-port1: unable to enumerate USB device [ 282.258583][ T339] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 282.279900][ T339] usb 2-1: device descriptor read/8, error -71 [ 282.381949][ T6189] overlay: Unknown parameter 'obj_user' [ 282.383874][ T6190] overlay: Unknown parameter 'obj_user' [ 282.409713][ T339] usb 2-1: device descriptor read/8, error -71 [ 282.440970][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.449717][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.518703][ T339] usb usb2-port1: unable to enumerate USB device [ 282.714962][ T6202] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1889'. [ 282.724295][ T6202] gretap0: entered promiscuous mode [ 282.853614][ T6205] incfs: Error accessing: ./file0. [ 282.858906][ T6205] incfs: mount failed -20 [ 283.730072][ T6230] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 283.737727][ T6230] SELinux: failed to load policy [ 284.081437][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.090205][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.318616][ T393] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 284.468572][ T393] usb 2-1: Using ep0 maxpacket: 32 [ 284.475410][ T393] usb 2-1: unable to get BOS descriptor or descriptor too short [ 284.484025][ T393] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 284.496604][ T393] usb 2-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice= 0.40 [ 284.505920][ T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.514148][ T393] usb 2-1: Product: syz [ 284.518946][ T393] usb 2-1: Manufacturer: syz [ 284.523970][ T393] usb 2-1: SerialNumber: syz [ 284.683040][ T6264] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 284.738795][ T393] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 284.748125][ T393] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 284.759528][ T393] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 284.771847][ T393] usb 2-1: USB disconnect, device number 35 [ 284.795889][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 284.858664][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 285.028597][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 285.035869][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 285.047722][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.056375][ T6268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.061181][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.066645][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.077241][ T10] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.083831][ T6268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.098298][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.110335][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 285.120038][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.129056][ T10] usb 3-1: config 0 descriptor?? [ 285.140928][ T6270] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 285.159666][ T6270] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 285.633606][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1910'. [ 285.667278][ T6284] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1911'. [ 285.676881][ T6284] gretap0: entered promiscuous mode [ 285.683852][ T6284] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1911'. [ 285.693791][ T6284] 0{X: renamed from gretap0 [ 285.700093][ T6284] 0{X: left promiscuous mode [ 285.705269][ T6284] 0{X: entered allmulticast mode [ 285.711831][ T6284] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 285.742198][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 285.759788][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 285.780968][ T6292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=6292 comm=syz.5.1913 [ 285.789360][ T10] usb 3-1: USB disconnect, device number 93 [ 285.807274][ T6292] netlink: 'syz.5.1913': attribute type 12 has an invalid length. [ 285.835545][ T6292] overlayfs: conflicting options: userxattr,metacopy=on [ 285.890530][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.909355][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.408666][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 286.560012][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.571052][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.580890][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.594055][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.603184][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.612059][ T10] usb 2-1: config 0 descriptor?? [ 286.618955][ T339] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 286.650353][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.659373][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.758688][ T339] usb 3-1: device descriptor read/64, error -71 [ 286.998719][ T339] usb 3-1: device descriptor read/64, error -71 [ 287.029506][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 287.035596][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 287.044468][ T10] usb 2-1: USB disconnect, device number 36 [ 287.238607][ T339] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 287.255106][ T6321] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1922'. [ 287.359885][ T6326] batadv_slave_1: entered promiscuous mode [ 287.366703][ T6326] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1924'. [ 287.368715][ T339] usb 3-1: device descriptor read/64, error -71 [ 287.376517][ T6326] tipc: Invalid UDP bearer configuration [ 287.382069][ T6326] tipc: Enabling of bearer rejected, failed to enable media [ 287.397077][ T6326] batadv_slave_1: left promiscuous mode [ 287.403658][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.412547][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.618592][ T339] usb 3-1: device descriptor read/64, error -71 [ 287.728802][ T339] usb usb3-port1: attempt power cycle [ 287.943165][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.951729][ T6339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.953229][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.962070][ T6339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.976511][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.985444][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.068599][ T339] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 288.089841][ T339] usb 3-1: device descriptor read/8, error -71 [ 288.219736][ T339] usb 3-1: device descriptor read/8, error -71 [ 288.458604][ T339] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 288.489689][ T339] usb 3-1: device descriptor read/8, error -71 [ 288.518926][ T6347] incfs: Error accessing: ./file0. [ 288.524136][ T6347] incfs: mount failed -2 [ 288.619718][ T339] usb 3-1: device descriptor read/8, error -71 [ 288.738609][ T339] usb usb3-port1: unable to enumerate USB device [ 288.758594][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 288.918572][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 288.925724][ T10] usb 2-1: config 7 has an invalid interface number: 19 but max is 0 [ 288.934206][ T10] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 288.943228][ T10] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 288.953798][ T10] usb 2-1: config 7 has no interface number 0 [ 288.960203][ T10] usb 2-1: config 7 interface 19 altsetting 1 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 288.971389][ T10] usb 2-1: config 7 interface 19 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 288.981607][ T10] usb 2-1: config 7 interface 19 has no altsetting 0 [ 288.990013][ T10] usb 2-1: New USB device found, idVendor=2001, idProduct=3d02, bcdDevice=b3.10 [ 288.999205][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.007294][ T10] usb 2-1: Product: syz [ 289.011927][ T10] usb 2-1: Manufacturer: ꎧᇢ쵡ᄁ䠇柴ङ끾敽䪺쏛ጛꀞ巄㾳楟잤ᄟꀀ畕ꨖఋ楛అ镹䔺㲚㮠䬶匧泧ㅪǶ䭚㡐箓 [ 289.027439][ T10] usb 2-1: SerialNumber: syz [ 289.235965][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.245905][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.259804][ T6344] overlayfs: workdir and upperdir must be separate subtrees [ 289.306659][ T10] usb 2-1: USB disconnect, device number 37 [ 289.419071][ T6362] fuse: Bad value for 'fd' [ 289.480036][ T6365] overlay: filesystem on ./file0 not supported as upperdir [ 289.487950][ T6365] netlink: 'syz.1.1935': attribute type 7 has an invalid length. [ 289.495805][ T6365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1935'. [ 289.798604][ T339] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 289.948578][ T339] usb 3-1: Using ep0 maxpacket: 32 [ 289.955244][ T339] usb 3-1: unable to get BOS descriptor or descriptor too short [ 289.963996][ T339] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 289.976655][ T339] usb 3-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice= 0.40 [ 289.985880][ T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.994011][ T339] usb 3-1: Product: syz [ 289.998180][ T339] usb 3-1: Manufacturer: syz [ 290.002825][ T339] usb 3-1: SerialNumber: syz [ 290.211647][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.221134][ T6364] bridge_slave_0 (unregistering): left allmulticast mode [ 290.228253][ T6364] bridge_slave_0 (unregistering): left promiscuous mode [ 290.235514][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.285449][ T6373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6373 comm=syz.1.1938 [ 290.306368][ T339] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 290.313519][ T339] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 290.326152][ T339] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 290.339157][ T339] usb 3-1: USB disconnect, device number 98 [ 290.355378][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 290.407759][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.416489][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.689326][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 290.838578][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 290.845247][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 290.854279][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 290.866903][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 290.876141][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.884323][ T10] usb 2-1: Product: syz [ 290.888561][ T10] usb 2-1: Manufacturer: syz [ 290.893216][ T10] usb 2-1: SerialNumber: syz [ 290.943901][ T6395] +$<: renamed from bridge0 (while UP) [ 291.059868][ T6403] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 291.095972][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 291.105281][ T6406] fuse: Bad value for 'group_id' [ 291.110448][ T6406] fuse: Bad value for 'group_id' [ 291.438614][ T313] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 291.588579][ T313] usb 3-1: Using ep0 maxpacket: 8 [ 291.594862][ T313] usb 3-1: config index 0 descriptor too short (expected 42530, got 34) [ 291.603468][ T313] usb 3-1: config 0 has too many interfaces: 222, using maximum allowed: 32 [ 291.612232][ T313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.622366][ T313] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 222 [ 291.631485][ T313] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 291.640602][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.649537][ T313] usb 3-1: config 0 descriptor?? [ 291.859441][ T313] usb 3-1: string descriptor 0 read error: -71 [ 291.868240][ T313] usb 3-1: USB disconnect, device number 99 [ 292.001289][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.010023][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.539514][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1954'. [ 292.573062][ T6437] rust_binder: Write failure EFAULT in pid:1644 [ 292.591897][ T36] audit: type=1400 audit(2000000051.109:3320): avc: denied { mounton } for pid=6438 comm="syz.0.1958" path="/1646/net/raw" dev="proc" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 292.808633][ T313] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 292.959798][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.970926][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.980744][ T313] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 292.989852][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.998777][ T313] usb 3-1: config 0 descriptor?? [ 293.206846][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.215662][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.357242][ T6445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1960'. [ 293.364055][ T10] usb 2-1: USB disconnect, device number 38 [ 293.366506][ T6445] tipc: Invalid UDP bearer configuration [ 293.374356][ T6445] tipc: Enabling of bearer rejected, failed to enable media [ 293.408741][ T6448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.417843][ T6448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.425780][ T36] audit: type=1400 audit(2000000051.929:3321): avc: denied { read } for pid=6435 comm="syz.2.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 293.461439][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.470120][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.494105][ T36] audit: type=1400 audit(2000000052.009:3322): avc: denied { associate } for pid=6455 comm="syz.0.1963" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 293.555089][ T6461] fuse: Bad value for 'user_id' [ 293.560142][ T6461] fuse: Bad value for 'user_id' [ 293.617339][ T6469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.625971][ T6469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.633214][ T313] usbhid 3-1:0.0: can't add hid device: -71 [ 293.641539][ T313] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 293.649270][ T6469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.658777][ T6469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.658806][ T313] usb 3-1: USB disconnect, device number 100 [ 293.768592][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 293.918575][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 293.927052][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 293.936262][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.944395][ T10] usb 2-1: Product: syz [ 293.948640][ T10] usb 2-1: Manufacturer: syz [ 293.953266][ T10] usb 2-1: SerialNumber: syz [ 293.958730][ T10] usb 2-1: config 0 descriptor?? [ 293.964923][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 293.972987][ T10] usb 2-1: Detected FT-X [ 294.165975][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 294.174961][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 294.195102][ T10] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 294.206292][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 294.216414][ T10] usb 2-1: USB disconnect, device number 39 [ 294.223390][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 294.233852][ T10] ftdi_sio 2-1:0.0: device disconnected [ 294.356014][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.364724][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.424351][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'. [ 294.438642][ T393] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 294.588607][ T393] usb 3-1: Using ep0 maxpacket: 16 [ 294.594983][ T393] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.605413][ T393] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.615873][ T393] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.625049][ T393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.633174][ T393] usb 3-1: Product: syz [ 294.637402][ T393] usb 3-1: Manufacturer: syz [ 294.642059][ T393] usb 3-1: SerialNumber: syz [ 294.955232][ T6487] 9pnet_fd: Insufficient options for proto=fd [ 295.541224][ T6489] netlink: 'syz.1.1972': attribute type 27 has an invalid length. [ 295.602809][ T6489] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1972'. [ 295.630441][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.639290][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.868639][ T313] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 296.018608][ T313] usb 2-1: Using ep0 maxpacket: 32 [ 296.025045][ T313] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.036559][ T313] usb 2-1: config 0 interface 0 has no altsetting 0 [ 296.043396][ T313] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 296.052680][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.061693][ T313] usb 2-1: config 0 descriptor?? [ 296.268933][ T313] usbhid 2-1:0.0: can't add hid device: -71 [ 296.275421][ T313] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 296.284270][ T313] usb 2-1: USB disconnect, device number 40 [ 297.148632][ T346] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 297.199506][ T393] usb 3-1: 0:2 : does not exist [ 297.207480][ T393] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 297.223949][ T393] usb 3-1: USB disconnect, device number 101 [ 297.243245][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 297.278610][ T346] usb 2-1: device descriptor read/64, error -71 [ 297.518590][ T346] usb 2-1: device descriptor read/64, error -71 [ 297.528794][ T393] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 297.678629][ T393] usb 3-1: Using ep0 maxpacket: 16 [ 297.684923][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.696294][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.706235][ T393] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 297.715667][ T393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.724769][ T393] usb 3-1: config 0 descriptor?? [ 297.768757][ T346] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 297.898634][ T346] usb 2-1: device descriptor read/64, error -71 [ 298.134303][ T393] kye 0003:0458:5016.002B: control desc unexpectedly large [ 298.142920][ T393] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.002B/input/input47 [ 298.154488][ T346] usb 2-1: device descriptor read/64, error -71 [ 298.162505][ T393] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.002B/input/input48 [ 298.180820][ T393] kye 0003:0458:5016.002B: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 298.268704][ T346] usb usb2-port1: attempt power cycle [ 298.533562][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.542323][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.555684][ T313] usb 3-1: USB disconnect, device number 102 [ 298.608585][ T346] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 298.629876][ T346] usb 2-1: device descriptor read/8, error -71 [ 298.706806][ T6526] loop7: detected capacity change from 0 to 7 [ 298.726214][ C0] blk_print_req_error: 1 callbacks suppressed [ 298.726234][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 298.737767][ T6525] fuseblk: Bad value for 'fd' [ 298.742193][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 298.770140][ T346] usb 2-1: device descriptor read/8, error -71 [ 298.900183][ T6536] syzkaller1: entered promiscuous mode [ 298.905735][ T6536] syzkaller1: entered allmulticast mode [ 298.986069][ T6536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 298.986118][ T6536] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 298.996012][ T6536] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1682 [ 299.068712][ T346] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 299.099819][ T346] usb 2-1: device descriptor read/8, error -71 [ 299.229811][ T346] usb 2-1: device descriptor read/8, error -71 [ 299.338738][ T346] usb usb2-port1: unable to enumerate USB device [ 299.762231][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1987'. [ 299.869737][ T6548] SELinux: failed to load policy [ 299.918641][ T313] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 299.946114][ T36] audit: type=1400 audit(2000000058.459:3323): avc: denied { read } for pid=345 comm="kworker/1:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55890 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 299.992502][ T36] audit: type=1400 audit(2000000058.509:3324): avc: denied { append } for pid=6553 comm="syz.1.1991" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 300.020878][ T6552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 300.089893][ T313] usb 3-1: unable to get BOS descriptor or descriptor too short [ 300.098442][ T313] usb 3-1: not running at top speed; connect to a high speed hub [ 300.108039][ T313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.118221][ T313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.129017][ T313] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 300.138103][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.146348][ T313] usb 3-1: Product: syz [ 300.150606][ T313] usb 3-1: Manufacturer: syz [ 300.155389][ T313] usb 3-1: SerialNumber: syz [ 300.368157][ T313] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 300.376186][ T313] usb 3-1: 3:0: cannot get min/max values for control 4 (id 3) [ 300.384188][ T313] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 300.392103][ T313] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 300.400023][ T313] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 300.407688][ T313] usb 3-1: 3:0: cannot get min/max values for control 11 (id 3) [ 300.415933][ T313] usb 3-1: 3:0: cannot get min/max values for control 12 (id 3) [ 300.426761][ T313] usb 3-1: USB disconnect, device number 103 [ 300.435997][ T2914] udevd[2914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 300.643179][ T36] audit: type=1400 audit(2000000059.159:3325): avc: denied { listen } for pid=6558 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.643736][ T6559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6559 comm=syz.1.1992 [ 301.038720][ T313] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 301.118680][ T346] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 301.189666][ T313] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.201285][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 301.212228][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 301.222037][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 301.234987][ T313] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.244092][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.252934][ T313] usb 2-1: config 0 descriptor?? [ 301.279945][ T346] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 301.288191][ T346] usb 3-1: config 0 has no interface number 0 [ 301.294430][ T346] usb 3-1: config 0 interface 41 has no altsetting 0 [ 301.302915][ T346] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 301.312074][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.320212][ T346] usb 3-1: Product: syz [ 301.324665][ T346] usb 3-1: Manufacturer: syz [ 301.329364][ T346] usb 3-1: SerialNumber: syz [ 301.334900][ T346] usb 3-1: config 0 descriptor?? [ 301.663083][ T313] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 301.672390][ T313] plantronics 0003:047F:FFFF.002C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 302.008681][ T313] usb 6-1: USB disconnect, device number 16 [ 302.040887][ T6568] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.048130][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.055491][ T6568] bridge_slave_0: entered allmulticast mode [ 302.062257][ T6568] bridge_slave_0: entered promiscuous mode [ 302.069684][ T6568] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.076901][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.084387][ T6568] bridge_slave_1: entered allmulticast mode [ 302.091058][ T6568] bridge_slave_1: entered promiscuous mode [ 302.158235][ T6568] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.165440][ T6568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.172809][ T6568] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.179898][ T6568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.208337][ T5551] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.216190][ T5551] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.226581][ T5549] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.233807][ T5549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.244569][ T5551] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.251660][ T5551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.280174][ T6573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.282483][ T6568] veth0_vlan: entered promiscuous mode [ 302.295193][ T6573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.310133][ T6568] veth1_macvtap: entered promiscuous mode [ 302.641771][ T346] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 302.651175][ T346] usb 3-1: USB disconnect, device number 104 [ 303.192390][ T6586] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1999'. [ 303.315826][ T36] audit: type=1326 audit(2000000061.829:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6589 comm="syz.0.2000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85a6d9c819 code=0x0 [ 303.338906][ T36] audit: type=1400 audit(2000000061.829:3327): avc: denied { setopt } for pid=6582 comm="syz.2.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 303.438621][ T346] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 303.468573][ T313] usb 2-1: reset high-speed USB device number 45 using dummy_hcd [ 303.589929][ T346] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.601631][ T346] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 303.612811][ T346] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 303.624427][ T346] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 303.633623][ T346] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.643318][ T6586] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 304.012660][ T6597] tipc: Enabling of bearer rejected, failed to enable media [ 304.258612][ T393] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 304.331430][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.340103][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.398556][ T393] usb 3-1: device descriptor read/64, error -71 [ 304.458806][ T346] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 304.467367][ T346] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input50 [ 304.480771][ T346] usb 7-1: USB disconnect, device number 2 [ 304.480810][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 304.579062][ T339] usb 2-1: USB disconnect, device number 45 [ 304.638598][ T393] usb 3-1: device descriptor read/64, error -71 [ 304.724467][ T36] audit: type=1400 audit(2000000063.239:3328): avc: denied { validate_trans } for pid=6605 comm="syz.1.2006" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 304.746353][ T36] audit: type=1400 audit(2000000063.259:3329): avc: denied { create } for pid=6605 comm="syz.1.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 304.767564][ T36] audit: type=1400 audit(2000000063.259:3330): avc: denied { write } for pid=6605 comm="syz.1.2006" path="socket:[56429]" dev="sockfs" ino=56429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 304.860972][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.869577][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.879877][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.888680][ T393] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 304.890013][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.919214][ T6617] kvm: kvm [6616]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000 [ 305.038586][ T393] usb 3-1: device descriptor read/64, error -71 [ 305.278589][ T393] usb 3-1: device descriptor read/64, error -71 [ 305.388699][ T393] usb usb3-port1: attempt power cycle [ 305.439437][ T6629] kvm: kvm [6628]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 305.448143][ T6629] kvm: kvm [6628]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 305.528625][ T346] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 305.658562][ T346] usb 2-1: device descriptor read/64, error -71 [ 305.738681][ T393] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 305.759754][ T393] usb 3-1: device descriptor read/8, error -71 [ 305.889826][ T393] usb 3-1: device descriptor read/8, error -71 [ 305.898663][ T346] usb 2-1: device descriptor read/64, error -71 [ 305.938600][ T313] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 306.088562][ T313] usb 7-1: Using ep0 maxpacket: 32 [ 306.094901][ T313] usb 7-1: config 0 has an invalid descriptor of length 76, skipping remainder of the config [ 306.106807][ T313] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 306.115967][ T313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.124084][ T313] usb 7-1: Product: syz [ 306.128278][ T313] usb 7-1: Manufacturer: syz [ 306.132923][ T313] usb 7-1: SerialNumber: syz [ 306.138261][ T313] usb 7-1: config 0 descriptor?? [ 306.139238][ T393] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 306.151335][ T346] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 306.153554][ T313] usb 7-1: bad CDC descriptors [ 306.164120][ T313] usb 7-1: unsupported MDLM descriptors [ 306.179729][ T393] usb 3-1: device descriptor read/8, error -71 [ 306.289000][ T346] usb 2-1: device descriptor read/64, error -71 [ 306.309727][ T393] usb 3-1: device descriptor read/8, error -71 [ 306.352769][ T6638] TCP: TCP_TX_DELAY enabled [ 306.357969][ T313] usb 7-1: USB disconnect, device number 3 [ 306.405410][ T6640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.414851][ T6640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.423025][ T393] usb usb3-port1: unable to enumerate USB device [ 306.528635][ T346] usb 2-1: device descriptor read/64, error -71 [ 306.638711][ T346] usb usb2-port1: attempt power cycle [ 306.876861][ T36] audit: type=1400 audit(2000000065.389:3331): avc: denied { lock } for pid=6641 comm="syz.6.2018" path="socket:[56643]" dev="sockfs" ino=56643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 306.978611][ T346] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 306.990624][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'. [ 306.999988][ T346] usb 2-1: device descriptor read/8, error -71 [ 307.039777][ T6652] pim6reg1: tun_chr_ioctl cmd 1074025672 [ 307.045570][ T6652] pim6reg1: ignored: set checksum disabled [ 307.104132][ T6654] 9p: Unknown Cache mode or invalid value loose [ 307.129851][ T346] usb 2-1: device descriptor read/8, error -71 [ 307.168238][ T6656] loop7: detected capacity change from 0 to 7 [ 307.368633][ T346] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 307.389728][ T346] usb 2-1: device descriptor read/8, error -71 [ 307.409035][ T393] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 307.519830][ T346] usb 2-1: device descriptor read/8, error -71 [ 307.559889][ T393] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.571767][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 307.582724][ T393] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 307.593197][ T393] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.606144][ T393] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.615225][ T393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.624055][ T393] usb 3-1: config 0 descriptor?? [ 307.629312][ T346] usb usb2-port1: unable to enumerate USB device [ 307.958608][ T313] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 308.039703][ T393] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 308.050973][ T393] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 308.088605][ T313] usb 7-1: device descriptor read/64, error -71 [ 308.096874][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.105532][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.314534][ T6668] syzkaller1: entered promiscuous mode [ 308.320130][ T6668] syzkaller1: entered allmulticast mode [ 308.329990][ T313] usb 7-1: device descriptor read/64, error -71 [ 308.568643][ T313] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 308.649163][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.657762][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.688612][ T339] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 308.698708][ T313] usb 7-1: device descriptor read/64, error -71 [ 308.699788][ T6678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2581 sclass=netlink_tcpdiag_socket pid=6678 comm=syz.0.2031 [ 308.724100][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.732856][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.839979][ T339] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 308.849861][ T339] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 308.861539][ T339] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 308.870672][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.878864][ T339] usb 2-1: Product: syz [ 308.883057][ T339] usb 2-1: Manufacturer: syz [ 308.887651][ T339] usb 2-1: SerialNumber: syz [ 308.893242][ T339] usb 2-1: config 0 descriptor?? [ 308.898627][ T6673] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 308.905822][ T6673] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 308.919361][ T393] usb 3-1: USB disconnect, device number 109 [ 308.948553][ T313] usb 7-1: device descriptor read/64, error -71 [ 309.058707][ T313] usb usb7-port1: attempt power cycle [ 309.115453][ T6673] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 309.122814][ T6673] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 309.398556][ T313] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 309.419748][ T313] usb 7-1: device descriptor read/8, error -71 [ 309.531065][ T339] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 309.549692][ T313] usb 7-1: device descriptor read/8, error -71 [ 309.557755][ T6691] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 309.571070][ T36] audit: type=1400 audit(2000000068.079:3332): avc: denied { mounton } for pid=6689 comm="syz.2.2034" path="/syzcgroup/unified/syz2" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 309.731836][ T339] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 309.741795][ T339] usb 2-1: USB disconnect, device number 50 [ 309.828614][ T313] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 309.849660][ T313] usb 7-1: device descriptor read/8, error -71 [ 309.979773][ T313] usb 7-1: device descriptor read/8, error -71 [ 310.088676][ T313] usb usb7-port1: unable to enumerate USB device [ 310.463576][ T6705] rust_binder: Error while translating object. [ 310.463645][ C0] BUG: TASK stack guard page was hit at ffffc90001047f58 (stack is ffffc90001048000..ffffc90001050000) [ 310.463670][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 310.463706][ C0] CPU: 0 UID: 0 PID: 6705 Comm: syz.0.2039 Not tainted syzkaller #0 916f3d974aa0fa32e8d6ac226cea77ce335b314b [ 310.463725][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 310.463735][ C0] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 310.463761][ C0] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 310.463774][ C0] RSP: 0018:ffffc90001047f60 EFLAGS: 00010a06 [ 310.463788][ C0] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92000209028 [ 310.463800][ C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 310.463810][ C0] RBP: ffffc90001048230 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 310.463822][ C0] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: dffffc0000000000 [ 310.463836][ C0] R13: dffffc0000000000 R14: 1ffff9200020904c R15: ffffc900010482d0 [ 310.463849][ C0] FS: 00007f85a7c796c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 310.463862][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.463873][ C0] CR2: ffffc90001047f58 CR3: 000000011a2c2000 CR4: 00000000003526b0 [ 310.463888][ C0] Call Trace: [ 310.463895][ C0] [ 310.463905][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 310.463925][ C0] ? static_key_count+0x45/0x70 [ 310.463941][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 310.463963][ C0] ? __cfi_gfp_zone+0x10/0x10 [ 310.463986][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 310.464004][ C0] ? unwind_next_frame+0x3c1/0x750 [ 310.464022][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 310.464040][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 310.464063][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 310.464082][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 310.464104][ C0] ? stack_depot_save_flags+0x672/0x800 [ 310.464126][ C0] ? stack_depot_save+0x12/0x20 [ 310.464146][ C0] ? save_stack+0x133/0x240 [ 310.464162][ C0] ? free_contig_range+0x260/0x260 [ 310.464182][ C0] ? __reset_page_owner+0x450/0x450 [ 310.464197][ C0] ? zone_page_state_add+0x43/0x90 [ 310.464220][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 310.464236][ C0] ? prep_new_page+0x20/0x120 [ 310.464251][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 310.464269][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 310.464287][ C0] ? stack_depot_save_flags+0x672/0x800 [ 310.464307][ C0] ? kasan_save_track+0x4f/0x80 [ 310.464331][ C0] ? kasan_save_free_info+0x4a/0x60 [ 310.464350][ C0] ? __kasan_slab_free+0x5f/0x80 [ 310.464365][ C0] ? kfree+0x158/0x440 [ 310.464384][ C0] ? krealloc_noprof+0xfa/0x130 [ 310.464406][ C0] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 310.464448][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 310.464479][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 310.464509][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 310.464546][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 310.464573][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 310.464601][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 310.464620][ C0] ? sched_clock_noinstr+0xd/0x30 [ 310.464637][ C0] ? __set_page_owner+0x8e/0x600 [ 310.464652][ C0] ? __zone_watermark_ok+0x134/0x630 [ 310.464670][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 310.464685][ C0] ? kasan_unpoison+0x4a/0x70 [ 310.464708][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 310.464724][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 310.464740][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 310.464761][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 310.464783][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 310.464805][ C0] ? prep_new_page+0x20/0x120 [ 310.464821][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 310.464848][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 310.464865][ C0] ? static_key_count+0x45/0x70 [ 310.464881][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 310.464903][ C0] ? lruvec_init+0x201/0x280 [ 310.464925][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 310.464944][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 310.464962][ C0] ? unwind_get_return_address+0x51/0x90 [ 310.464979][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 310.464995][ C0] ? arch_stack_walk+0x10a/0x170 [ 310.465020][ C0] ? stack_trace_save+0xaa/0x100 [ 310.465035][ C0] ? stack_depot_save_flags+0x672/0x800 [ 310.465057][ C0] ? kasan_save_track+0x4f/0x80 [ 310.465079][ C0] ? kasan_save_track+0x3e/0x80 [ 310.465100][ C0] ? kasan_save_free_info+0x4a/0x60 [ 310.465119][ C0] ? __kasan_slab_free+0x5f/0x80 [ 310.465133][ C0] ? kfree+0x158/0x440 [ 310.465156][ C0] ? krealloc_noprof+0xfa/0x130 [ 310.465178][ C0] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 310.465217][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 310.465245][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 310.465275][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 310.465306][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 310.465332][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 310.465353][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 310.465383][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x19d1/0xaf80 [ 310.465406][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 310.465424][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 310.465438][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 310.465451][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 310.465474][ C0] ? do_syscall_64+0x57/0xf0 [ 310.465496][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 310.465524][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 310.465548][ C0] ? kasan_save_free_info+0x4a/0x60 [ 310.465567][ C0] ? __kasan_slab_free+0x5f/0x80 [ 310.465585][ C0] ? kfree+0x158/0x440 [ 310.465604][ C0] ? krealloc_noprof+0xfa/0x130 [ 310.465626][ C0] ? krealloc_noprof+0xfa/0x130 [ 310.465648][ C0] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 310.465687][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 310.465709][ C0] ? __cfi__RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x10/0x10 [ 310.465747][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 310.465788][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 310.465828][ C0] ? __kasan_check_write+0x18/0x20 [ 310.465848][ C0] ? _raw_spin_lock+0x92/0x120 [ 310.465870][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 310.465893][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 310.465922][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 310.465957][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 310.465984][ C0] ? __asan_memcpy+0x5a/0x80 [ 310.466004][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 310.466031][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 310.466060][ C0] ? __kasan_check_write+0x18/0x20 [ 310.466080][ C0] ? _raw_spin_lock+0x92/0x120 [ 310.466102][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 310.466124][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 310.466157][ C0] ? __asan_memcpy+0x5a/0x80 [ 310.466178][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 310.466211][ C0] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 310.466243][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 310.466271][ C0] ? __asan_memcpy+0x5a/0x80 [ 310.466291][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 310.466319][ C0] ? __kasan_check_write+0x18/0x20 [ 310.466340][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 310.466369][ C0] ? __kasan_check_write+0x18/0x20 [ 310.466389][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 310.466412][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 310.466443][ C0] ? __asan_memcpy+0x5a/0x80 [ 310.466463][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 310.466500][ C0] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 310.466528][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 310.466557][ C0] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 310.466593][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 310.466633][ C0] ? __kasan_check_write+0x18/0x20 [ 310.466653][ C0] ? mutex_unlock+0x90/0x240 [ 310.466669][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 310.466687][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 310.466707][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 310.466740][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 310.466770][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 310.466791][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 310.466821][ C0] ? __asan_memcpy+0x5a/0x80 [ 310.466841][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 310.466882][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 310.466910][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 310.466938][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 310.466966][ C0] ? desc_read+0x202/0x3e0 [ 310.466980][ C0] ? __kasan_check_write+0x18/0x20 [ 310.466999][ C0] ? desc_read+0x1ab/0x3e0 [ 310.467013][ C0] ? prb_first_seq+0x109/0x1d0 [ 310.467027][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 310.467041][ C0] ? __kasan_check_write+0x18/0x20 [ 310.467060][ C0] ? desc_read+0x1ab/0x3e0 [ 310.467074][ C0] ? __kasan_check_read+0x15/0x20 [ 310.467093][ C0] ? this_cpu_in_panic+0x56/0x90 [ 310.467108][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 310.467123][ C0] ? __asan_memcpy+0x5a/0x80 [ 310.467143][ C0] ? prb_read_valid+0x80/0x80 [ 310.467157][ C0] ? data_alloc+0x4d0/0x7e0 [ 310.467170][ C0] ? desc_read+0x202/0x3e0 [ 310.467184][ C0] ? __kasan_check_write+0x18/0x20 [ 310.467204][ C0] ? desc_read+0x1ab/0x3e0 [ 310.467218][ C0] ? prb_first_seq+0x109/0x1d0 [ 310.467232][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 310.467246][ C0] ? __kasan_check_write+0x18/0x20 [ 310.467266][ C0] ? desc_read+0x1ab/0x3e0 [ 310.467279][ C0] ? __kasan_check_read+0x15/0x20 [ 310.467298][ C0] ? this_cpu_in_panic+0x56/0x90 [ 310.467314][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 310.467328][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 310.467352][ C0] ? prb_read_valid+0x80/0x80 [ 310.467365][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 310.467388][ C0] ? up+0x10a/0x1b0 [ 310.467404][ C0] ? __cfi_up+0x10/0x10 [ 310.467421][ C0] ? __kasan_check_write+0x18/0x20 [ 310.467441][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 310.467464][ C0] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 310.467487][ C0] ? __cfi_llist_add_batch+0x10/0x10 [ 310.467504][ C0] ? console_unlock+0x247/0x2c0 [ 310.467520][ C0] ? __cfi_console_unlock+0x10/0x10 [ 310.467538][ C0] ? krealloc_noprof+0xfa/0x130 [ 310.467577][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 310.467603][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 310.467637][ C0] ? irq_work_queue+0xc2/0x160 [ 310.467655][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 310.467689][ C0] ? vprintk_emit+0x3e3/0x650 [ 310.467707][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 310.467723][ C0] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 310.467752][ C0] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 310.467782][ C0] ? vprintk_default+0x2a/0x40 [ 310.467799][ C0] ? vprintk+0x93/0xa0 [ 310.467818][ C0] ? _printk+0xde/0x140 [ 310.467834][ C0] ? __cfi___check_object_size+0x10/0x10 [ 310.467857][ C0] ? __cfi__printk+0x10/0x10 [ 310.467873][ C0] ? _copy_from_user+0x87/0xa0 [ 310.467887][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 310.467918][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 310.467945][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 310.467982][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 310.468089][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 310.468114][ C0] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 310.468138][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0 [ 310.468162][ C0] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 310.468187][ C0] ? __kasan_check_write+0x18/0x20 [ 310.468207][ C0] ? _raw_spin_lock+0x92/0x120 [ 310.468229][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 310.468251][ C0] ? __kasan_check_write+0x18/0x20 [ 310.468271][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 310.468295][ C0] ? __asan_memcpy+0x5a/0x80 [ 310.468315][ C0] ? avc_has_perm_noaudit+0x28a/0x360 [ 310.468339][ C0] ? avc_has_perm+0x155/0x240 [ 310.468361][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 310.468380][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 310.468402][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 310.468417][ C0] ? bpf_lsm_binder_transaction+0xd/0x20 [ 310.468436][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 310.468469][ C0] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x10/0x10 [ 310.468500][ C0] ? __kasan_check_write+0x18/0x20 [ 310.468521][ C0] ? _raw_spin_lock+0x92/0x120 [ 310.468542][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 310.468564][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0xfc0/0xaf80 [ 310.468593][ C0] ? __asan_memcpy+0x5a/0x80 [ 310.468613][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x19d1/0xaf80 [ 310.468649][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 310.468725][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 310.468745][ C0] ? kernel_text_address+0xa9/0xe0 [ 310.468765][ C0] ? __kernel_text_address+0x11/0x40 [ 310.468783][ C0] ? unwind_get_return_address+0x51/0x90 [ 310.468800][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 310.468816][ C0] ? arch_stack_walk+0x10a/0x170 [ 310.468844][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 310.468864][ C0] ? kernel_text_address+0xa9/0xe0 [ 310.468882][ C0] ? __kernel_text_address+0x11/0x40 [ 310.468900][ C0] ? unwind_get_return_address+0x51/0x90 [ 310.468918][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 310.468934][ C0] ? arch_stack_walk+0x10a/0x170 [ 310.468958][ C0] ? stack_depot_save_flags+0x38/0x800 [ 310.468979][ C0] ? kasan_save_track+0x4f/0x80 [ 310.469001][ C0] ? kasan_save_track+0x3e/0x80 [ 310.469023][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 310.469042][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 310.469055][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 310.469078][ C0] ? krealloc_noprof+0x8d/0x130 [ 310.469099][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x84c/0x1d80 [ 310.469122][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20 [ 310.469141][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 310.469154][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 310.469168][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 310.469189][ C0] ? do_syscall_64+0x57/0xf0 [ 310.469211][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 310.469239][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 310.469271][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 310.469303][ C0] ? __kasan_check_write+0x18/0x20 [ 310.469323][ C0] ? _raw_spin_lock+0x92/0x120 [ 310.469345][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 310.469368][ C0] ? _raw_spin_unlock+0x45/0x60 [ 310.469389][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 310.469407][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 310.469434][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 310.469461][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 310.469484][ C0] ? __asan_memcpy+0x5a/0x80 [ 310.469509][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 310.469529][ C0] ? kernel_text_address+0xa9/0xe0 [ 310.469548][ C0] ? __kernel_text_address+0x11/0x40 [ 310.469566][ C0] ? unwind_get_return_address+0x51/0x90 [ 310.469588][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 310.469604][ C0] ? arch_stack_walk+0x10a/0x170 [ 310.469628][ C0] ? stack_trace_save+0xaa/0x100 [ 310.469645][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 310.469664][ C0] ? __asan_memcpy+0x5a/0x80 [ 310.469684][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 310.469705][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 310.469728][ C0] ? _raw_spin_unlock+0x45/0x60 [ 310.469749][ C0] ? call_rcu_nocb+0x6d7/0xc80 [ 310.469769][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 310.469789][ C0] ? swake_up_one_online_ipi+0x30/0x30 [ 310.469811][ C0] ? __cfi_mt_free_rcu+0x10/0x10 [ 310.469835][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 310.469856][ C0] ? kernel_text_address+0xa9/0xe0 [ 310.469874][ C0] ? __kernel_text_address+0x11/0x40 [ 310.469892][ C0] ? unwind_get_return_address+0x51/0x90 [ 310.469909][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 310.469925][ C0] ? arch_stack_walk+0x10a/0x170 [ 310.469949][ C0] ? stack_trace_save+0xaa/0x100 [ 310.469964][ C0] ? stack_depot_save_flags+0x38/0x800 [ 310.469986][ C0] ? kasan_save_track+0x4f/0x80 [ 310.470008][ C0] ? kasan_save_track+0x3e/0x80 [ 310.470030][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 310.470049][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 310.470063][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 310.470085][ C0] ? krealloc_noprof+0x8d/0x130 [ 310.470106][ C0] ? kvrealloc_noprof+0x59/0x120 [ 310.470125][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_mmap+0x78b/0x11f0 [ 310.470144][ C0] ? mmap_region+0x1579/0x1d60 [ 310.470164][ C0] ? do_mmap+0xb85/0x13c0 [ 310.470184][ C0] ? vm_mmap_pgoff+0x36e/0x4b0 [ 310.470207][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 310.470223][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 310.470237][ C0] ? __kernel_text_address+0x11/0x40 [ 310.470256][ C0] ? unwind_get_return_address+0x51/0x90 [ 310.470273][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 310.470290][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 310.470315][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 310.470335][ C0] ? update_curr+0x6c1/0x9e0 [ 310.470358][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 310.470382][ C0] ? __calc_delta+0x280/0x280 [ 310.470404][ C0] ? __kasan_record_aux_stack+0xb2/0xd0 [ 310.470424][ C0] ? update_entity_lag+0x28f/0x2c0 [ 310.470448][ C0] ? dequeue_entity+0x809/0x1380 [ 310.470468][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 310.470487][ C0] ? __cfi_update_misfit_status+0x10/0x10 [ 310.470505][ C0] ? dequeue_entities+0x1d7/0x1400 [ 310.470527][ C0] ? sched_balance_newidle+0x31a/0xab0 [ 310.470546][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 310.470565][ C0] ? sched_clock_noinstr+0xd/0x30 [ 310.470586][ C0] ? __kasan_check_write+0x18/0x20 [ 310.470607][ C0] ? __switch_to+0xc4f/0x1300 [ 310.470628][ C0] ? __cfi___switch_to+0x10/0x10 [ 310.470648][ C0] ? psi_task_switch+0x4f2/0xa10 [ 310.470667][ C0] ? __kasan_check_write+0x18/0x20 [ 310.470687][ C0] ? finish_task_switch+0x1d9/0x760 [ 310.470704][ C0] ? __switch_to_asm+0x3d/0x70 [ 310.470726][ C0] ? __schedule+0x13a1/0x1fa0 [ 310.470741][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 310.470763][ C0] ? __asan_memcpy+0x5a/0x80 [ 310.470783][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 310.470807][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 310.470824][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 310.470839][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 310.470854][ C0] ? schedule+0xc5/0x240 [ 310.470868][ C0] ? futex_unqueue+0x136/0x160 [ 310.470889][ C0] ? ioctl_has_perm+0x39a/0x500 [ 310.470908][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 310.470928][ C0] ? futex_wait+0x2ac/0x7b0 [ 310.470949][ C0] ? __cfi_futex_wait+0x10/0x10 [ 310.470970][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 310.470989][ C0] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 310.471012][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 310.471031][ C0] ? do_futex+0x32a/0x510 [ 310.471049][ C0] ? __cfi_do_futex+0x10/0x10 [ 310.471067][ C0] ? vm_mmap_pgoff+0x153/0x4b0 [ 310.471088][ C0] ? __fget_files+0x2c5/0x340 [ 310.471102][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 310.471118][ C0] ? security_file_ioctl+0x3e/0x110 [ 310.471137][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 310.471157][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 310.471171][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 310.471185][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 310.471207][ C0] ? do_syscall_64+0x57/0xf0 [ 310.471229][ C0] ? clear_bhb_loop+0x50/0xa0 [ 310.471244][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 310.471269][ C0] [ 310.471275][ C0] Modules linked in: [ 310.471289][ C0] ---[ end trace 0000000000000000 ]--- [ 310.471296][ C0] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 310.471316][ C0] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 310.471330][ C0] RSP: 0018:ffffc90001047f60 EFLAGS: 00010a06 [ 310.471342][ C0] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92000209028 [ 310.471354][ C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 310.471364][ C0] RBP: ffffc90001048230 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 310.471376][ C0] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: dffffc0000000000 [ 310.471388][ C0] R13: dffffc0000000000 R14: 1ffff9200020904c R15: ffffc900010482d0 [ 310.471400][ C0] FS: 00007f85a7c796c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 310.471413][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.471424][ C0] CR2: ffffc90001047f58 CR3: 000000011a2c2000 CR4: 00000000003526b0 [ 310.471443][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 310.472054][ C0] Kernel Offset: disabled