last executing test programs: 3.361762698s ago: executing program 2 (id=3): syz_usb_connect$midi(0x0, 0xfffffffffffffe33, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x3, 0x90, 0xe6, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, [], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x2, 0x7, 0x5, {0x4}}}]}}}}}]}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x83, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x2, 0x0, 0xb4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "7c04a49d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x8, 0x3, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x1d}, [@acm={0x4, 0x24, 0x2, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x1, 0x40}, @obex={0x5, 0x24, 0x15, 0x4bfe}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xf, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xc1, 0x1, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x8b, 0x8}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x2, 0x8, 0x6, 0x20, 0xff}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x0, [{0x95, &(0x7f0000000580)=@string={0x95, 0x3, "50609823d73533634c2a999ad1e51020a35d1ad2cccb83a6f68669a3d7cbdbe80d977deda6d95be58a385c501310d8f6f2872e3eb9a0736a6a096806d86003bd6fc6ecb6d62eac89cdd36a2ecab8d1e618129685b56d5548d1894066f5801abe6e9ac1f31f246a13192d0bcf41b69d471309a1f05f7bf5effc9a555cdda98f2be36a394c6572bee091630dc511cd97cf9f5a05"}}]}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffe7d}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x58) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000b00)={'#! ', './file0', [{0x20, '^'}, {0x20, '/dev/kvm\x00'}, {}, {0x20, '\x04\x00y\\\x15\a@\xc9<\xfc\\\xd2\xe2\xdb \xcf\'U\xc2\x86\xaac\xcf\xa6*#\x83\xcb\xd2\x9d\xb3y\xaam#_\x1bQbW\x01[\xb9\xa9\xa9\xbb\xa9Q{\xffD\x0eRK\xdb\xc4\x95\x10\x12\x14e\x17\xd1+\xc1$r\x8a\xa7\x17\xdb*\xa6\xffW\xb6oog\x14\xf9\xf6\v\xd0\xe4_5\x03<\x8fw\xa0\xbd\r\x849\xd5\x8b\x95\xda\x8f:\xe1}\xc8x \xb2\x98{\xf8\xd3\x1b0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="3800000000010104000000000019000002000000240001801400018008000100d3b9000008000200e00000010c0002800500010000000000"], 0x38}}, 0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r5, 0x0}]) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)={0x0}, 0x1, 0x0, 0x0, 0x22004014}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000001140)=0x8, 0x4) 3.136654743s ago: executing program 0 (id=5): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setxattr$security_selinux(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:sshd_key_t:s0\x00', 0x20, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 3.136125943s ago: executing program 0 (id=6): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac05650200000000000109022400010000001009040000090300000009240300fe01222900090581030000000000564271cc8ecaca661135d45f6f64010002c815d96ff0c6b1a4620eb520a3f54d397ffb5f6ff65e92a9abbecbb3baded46fde1fa2cc5455957b31afea70a09c8df64145096a629664d60b60bb5baa4cdedfa2dc88ef8679a03382ea5c04a809729f04525d76892249c63229a728998cc370e1a790720277af590cb69f0a0392e168ad8a2ab60a3dfb279608b8fabf8b4ef570492fdd9af5e6d459f61a2f09efcb661aae7a3d75ade98e290b921e3dffbe98da8989a13dbec3952c"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) io_setup(0x9, &(0x7f00000016c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40e41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x80, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x400, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="001c86dd0700100ff0001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) io_setup(0x81, &(0x7f0000001700)) io_setup(0x80, &(0x7f0000001940)) syz_usb_connect$uac3(0x5, 0xd7, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x0, 0xa0, 0x0, {0x8, 0xb, 0x1, 0x0, 0x1, 0x21, 0x30, 0x37}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf6, 0x2, 0x4a, 0x1, 0x2, 0x7, 0x6, 0xa}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x1}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xd7, 0x2, 0xd, 0x0, "e88f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xe, 0x9, 0x1, {0xa, 0x25, 0x25, 0xd, 0x0, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa, 0x9, 0x4, 0x3, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x80}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x2, 0x80, 0x6, "b3b11dd6e06dbde8cf"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x400, 0x100, 0x7, "29c21c86d7d1e7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x2, 0x6, {0xa, 0x25, 0x25, 0x0, 0x5, 0x2}}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x200, 0xa, 0x1, 0xf, 0x10, 0x8}, 0xf, &(0x7f00000009c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xc, 0x7, 0x401}]}, 0x4, [{0x18, &(0x7f0000000a00)=@string={0x18, 0x3, "16eb005410e359c5db75651c38b5e4d85c8713025b92"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xd4f6}}, {0x7d, &(0x7f0000000a80)=@string={0x7d, 0x3, "5729133992f100063eaffe741bfa182ce08207301f536bfb968edb68ce69495a0e7a88ddb69203864679661cd1d82a06b1dd14abb0ee07759a64f75fffb25f0d8fce097afb7020fb1c9a9f6f729757595fec23bae15e4aac1afac95a41fdcdcea674f47f3c8155efdc9a759a561722e36608dade160fc3ddd1364b"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2809}}]}) io_setup(0x2, &(0x7f0000001980)) io_setup(0xd6, &(0x7f0000001a80)) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\t*\x00\x00\x00*!'], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) flistxattr(r4, &(0x7f0000001500)=""/4096, 0x1000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.072422804s ago: executing program 1 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffff624, 0x0, @dev, @empty, 0x0, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0x0, 0x8, 0x9, 0xfb, 0x8, 0x40, 0x17, 0x0, 0x2e, 0x19}, {0xb000, 0x50000, 0x8, 0x0, 0x22, 0x5, 0x79, 0x3, 0x5, 0xb4, 0x3}, {0xeeef0003, 0xa000, 0x0, 0x5, 0x3, 0x3, 0x0, 0x19, 0x1, 0x5, 0x5, 0x81}, {0x3000, 0x1, 0x44e41e77284b2876, 0x1, 0x0, 0x42, 0xb, 0x7f, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x4, 0x3, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x8}, {0x8000000, 0xe000, 0xc, 0xa3, 0xad, 0x4, 0x2, 0xf7, 0x8, 0x5, 0xff}, {0x3000, 0x50000, 0x4, 0x7, 0x8, 0x5, 0x9, 0x5, 0x5, 0x81, 0xff, 0x6d}, {0xb000, 0xa000, 0xe, 0x5, 0xb, 0x7, 0x8, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x30}, {0x8000, 0x6}, 0x80010001, 0x0, 0xeeef0000, 0x1200d, 0x3, 0x0, 0xeeff7000, [0x6800000000000000, 0x6, 0x61, 0xf]}) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000300)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000300)={@val={0xa, 0x88a8}, @void, @eth={@broadcast, @remote, @void, {@arp={0x806, @generic={0x10f, 0xa00, 0x6, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "", @remote}}}}}, 0x26) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r4, 0x0) 1.920979483s ago: executing program 1 (id=10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="580300001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000f4020680f0"], 0x358}, 0x1, 0x0, 0x0, 0x5}, 0x20008080) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000040)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000001300)={0x1, 0x0, @pic={0x5, 0x7, 0x9, 0x92, 0x5, 0xf4, 0x79, 0x9, 0xb, 0xf, 0x3, 0x8f, 0x0, 0xf9, 0x40, 0x3}}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80000, 0xc0) fcntl$setlease(r8, 0x400, 0x0) r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80400, 0x0) fcntl$setlease(r9, 0x400, 0x2) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xda0, 0x0, 0x600000000}]}) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x21c004, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="03080000000000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 1.82173096s ago: executing program 1 (id=11): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472796c6f636b206d65ab"], 0xc) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000340)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000040)=0x672, &(0x7f0000000080)=0x2) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r7 = syz_open_pts(r6, 0x8000) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x4e21, 0xfe00, 0x4e21, 0xfff, 0xa, 0xa0, 0x20, 0x2c, 0x0, 0xffffffffffffffff}, {0x8000, 0x6, 0x1, 0x9f3c, 0x6, 0xfffffffffffffff9, 0x1, 0x2}, {0x100000001, 0x0, 0x3}, 0xfd0b, 0x6e6bbb, 0x0, 0x1, 0x3, 0x1}, {{@in6=@private1, 0x4d5, 0x9c}, 0xa, @in=@rand_addr=0x64010102, 0x3507, 0x4, 0x2, 0x7, 0x8, 0x2, 0xc}}, 0xe8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000bc0)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x34, r10, 0x1, 0x70bd26, 0x0, {0x22}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x2) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x6) r13 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r3, 0xc008aeba, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000180)={&(0x7f0000618000/0x4000)=nil, 0x30000, 0xf}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) 1.684287479s ago: executing program 1 (id=12): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1c, 0x0, 0x14) (async) r1 = syz_open_dev$loop(&(0x7f00000009c0), 0x7, 0xa00) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x40000000, 0x4) (async) getitimer(0x2, &(0x7f0000000000)) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x1274, 0x81) 1.280478016s ago: executing program 3 (id=13): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9f5}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000001000)=""/147, 0x93}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000048, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.116224186s ago: executing program 3 (id=14): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f000000efc0)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @multicast1}, 0x4, 0x4, 0x4, 0x2}}, 0x80, 0x0}}], 0x1, 0x20000000) socket(0x18, 0x6, 0x6) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) (async) tkill(r1, 0x13) tkill(r1, 0x12) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000240)) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 796.593357ms ago: executing program 1 (id=15): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x78, r1}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, @private0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 793.386848ms ago: executing program 1 (id=16): r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r0, r0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x70}}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x4000) (async) r2 = syz_usb_connect(0x3, 0xb02, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xc0, 0x97, 0xb2, 0x10, 0x1371, 0x5743, 0x9170, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf0, 0x2, 0x6, 0x9, 0x40, 0x5, "", [{{0x9, 0x4, 0x68, 0x94, 0x10, 0x98, 0x19, 0x5d, 0x5, [@generic={0x44, 0x24, "ad687886c42753cd2c8c634cc60893cf1d4d918e05fd638726188fce3455bf2dc4062285a6d88d7bb95156da598ff0b263a2285dcafd4e9c406c60648ba640a25082"}, @uac_control={{0xa, 0x24, 0x1, 0x9e20, 0x3a}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x7, 0x9d, "42d9"}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x1, 0xff}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0x8, "dedca9"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x401, 0x3, 0xff, 0x5, 0xe, 0xeb}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x401, 0x5, 0x7, 0x0, 0x6, 0x4}]}], [{{0x9, 0x5, 0x8, 0x3, 0x200, 0xff, 0x4, 0x7, [@generic={0x9a, 0xd, "af79ca60e65025b051f73c01198b77abeb55437f664c8040ccdcacbe55e1ee24b302a71bb65a6977576dc4dd209f1eeeb442459e01308d6ceeb78659d9c18edda7a12f62d67bb1895b5a4b564a7f2c24c2428b6cf4c3b309b137f0d260c6597b3ff4f20e627502a066f4fd17f0631974fd47e94394de0b3c00bcb7d65c525e2a716fa53caa886f8ec332d5ca8454230ce90c144c32dd0891"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x70, 0x1}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0xf7, 0x40, 0x47, [@generic={0x2c, 0xd, "182bfe650eca96f5fedbfd7465910ecbb96c7723ffdadf4a8ea506ae571203589902a44a4b9a1ed0cc4b"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xa, 0x2, 0x8, [@generic={0xc7, 0x11, "74eec9940c18ac8fd12bbb12301b1781363e9a3d99685928998d86801360d88ac77f83cc4c45224639046a6fea6d6b86f55212922feb42118e14980207a8d60cce309239562a94c65c6cd2431f29cf9f4c7da4d565b65e71c744f3f26790ded68c39836922127e89eeb4bf359f3de81085df618a1f020f52e1ce4cf06cc2de4b63d1cd4aef39f16cda09bdcc87daea752f2e5a78125d0bd15a74ae70bc26689323264e2d1951c965fe1dbbbcaad0ce8ed3ff8f355360adc241cabdef8efc45861445d2c3ab"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0x55, 0xd2, [@generic={0xd0, 0x2, "86d9760ed415b22ca60fcb9820d5885c4f962dae2a80fef62482e9c083eb76d09754f64bb0efe22083c398e514ab215eb05be35de2fdf01e878c0c2b41a93dda7dd730f78c5ca46c6b34d7897ea26ba077d95a3d7cacec54bec9eab3bd776e7db93231661a86dcb9834e5709e8d8c607d33281d63c50049bbe319e66ba5355686a3145ca8a5173cc3b867cd1d8f85413aa79e9cd3db5bddc7e2d81c2860bf779db50a27d399b519f1245db78ee55efa9906cd3b367862e52dcb7fe8c41a78eb1d1055a41fb816c8ceb35cee25aa3"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x4, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x80}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x1c, 0x0, 0xe, [@generic={0x23, 0xb, "afc9c26a12689e936bbd25b7495e88a82d970eee54d8f9322eb95aa7b020de43e8"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x5, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2a, 0x4}, @generic={0x3e, 0x24, "3a67b640f5f9c44e569eb9ef82bf803b47e2c27f316f3bdfcfe5a91f8fbb965a8913a04fe71fd30f72f27c33d9a2474b327418792fb951583debe5b0"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x3, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1}, @generic={0x92, 0xc6bd77165f22f7bb, "05a379fc811d632c6d4e929fddff226393fdfb912a77a07979caf830f6205997fcbcfc471201b00c3f7b8baf21b8516f37ed076c6fe747ee59d746d47b07fed7e575796b575ccf829e39a03b040f8dfcae1b6cfc1d657950230763c281f92a22116e5ac5a4ac9085cf40331ebff4f3f614df58bb90fe1fc5c89ce14410309d36696f9977c40460ba0e81681958570f12"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x2, 0x5, [@generic={0xc8, 0x7, "ebe8cc23a3720a42790ec807ccd3814e3a59ec2c75cb8be28a20123a474bfa06f6a15cd9aa174fb43997d69b7950d6721ce53832df068745fc7bf7a4ee245484592739ea78691cc153f015c23ff10b936bd221c918e85575707252d6fdba6652448551b570b4fa1e6b1e2e2b4ad05372f1a1c623e7f2cb2a6da51d90e5101cc9a59289fae5d71d3fc8de257724a6acd65a1d675f751b8d12b742432ac8e77003ef912cec6feb6fee27211ee1bfd95ccdecdc9554f3813ebaf4403b42f08eecdff9d98050be0d"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0x400}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xf, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xce, 0x7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xb, 0x1, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x82}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0x0, 0x0, 0x9, [@generic={0x22, 0x22, "9dc1a2e76b4f2d74b7aa82713766be333e9f9f2d4ebbf262e7375745452e5b16"}, @generic={0x2f, 0x4, "220ad9719daa75e3af91bd67c46f26532529e70015e68ea09ae9d9efd07d2683d852513b93406b017fb7ce9fb0"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x9, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xfc9b}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x31, 0x80, [@generic={0xd5, 0x6, "6df9e040c579434331d2b190ba02999080213c8de0e3325c4f0076d908fdc4d1a3ee51cb88e3194d5bcfbbb3358cdfe86e0429272bb854fd8e8078304caf56144a9ec1e4e3cf8993754b388f0a3a6988d315bdd3dd2fb74a336a59075b1b4eb6736cd5753ba69f91657fcc6f89244bb5a013c9c4a1d6ed502085b47f9d042eb1a6f7f273d580b8ebcf44b6c84e3af32ee60d1dc8b9ac4c23ba09f5770995dee21f8104bdcbe5ba2d61c21feca7bf441c6501e5899165c8ea695536ba64f645756a453bb2f44779bac1dac8d65bc379d2d3a297"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x56, 0x5, 0xc, [@generic={0xda, 0x23, "4e7bc377414608b31f932ad48a0f75b2f13b7ca91e36748766e6bd7f704b6dcbf8d98a65f42bba2d0cc22898f1e7cee7aa7acb498fc396cce729e0504579c79c8c3d15eee98dabf8b6af99182a74f5f436e0ab13fe584a93d056b9c00ea90335f33524719cc355967a9be7c837cb6b04abdae5d229ad303114e0d4021815e92c26f25061ab8612bc2157277dc5f682e185aec162a70c5464c2d4f529e7a7c9ca72227b664b2b7ecba7af043409d9c0db658b67ae6f541220be20320b87d81d1498196432d51b5b6b33fece528d02f478af08c37ff9dae977"}, @generic={0x99, 0x2, "685feae13435167d4986460364bcc2c01019ef6b9726f597b20e411e97749d48c8f5499d23bad84a73613e7fda9a0e48ebb88c30cf6dc365409cb6fde2758e2021ed89daeee021c9b6e272d4605721a5e0bb907fa62a713f45e9871b07c56d649c27058e15dc2e1459b134af0820ce69dfb3c04e81571d7628c423a4ea6c41c78914a94e8f28c54474101c320352dbd5e683ef270b2d43"}]}}]}}, {{0x9, 0x4, 0xd3, 0xcb, 0x5, 0x63, 0x78, 0x55, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x28}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x0, 0x80, "b8bc57"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x6, 0x5, 0x2, 0x0, 0x4}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xd, '#z,'}]}], [{{0x9, 0x5, 0x9, 0x4, 0x40, 0x3, 0x9, 0x7, [@generic={0x78, 0xa, "7946769c70d927d9c4d55f67b49c09e2401fd92ffcf3a447c504637fa51c827644d808a0f291fd769c3769e8f7494d54c1b3c4602889c6d2b041e76f226bb65f574fdfe67aa70be9d267ded5e7f984d21fe48ed321be2f0daddb1de4a32a02958a0b3d095399aeb35f1f330206bdc88504b02b2b3190"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x1, 0x5, 0x0, [@generic={0xfc, 0x22, "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"}]}}, {{0x9, 0x5, 0x35fdb4a01d07181d, 0x1e, 0x10, 0xfa, 0x0, 0x3c, [@generic={0x46, 0xe, "3c3f571ac4d23ce9fdd60b804ddabcc88451da5f4c2d3eb60eabe104a72e26483c482921c51a5d245f4a092cf635e96d24188ec20f8dc7e68567cd4fe8b63e61d3329cda"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0xe, 0x65, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x4}, @generic={0x6b, 0x34, "6cf2f24a3e48628f3e6cbdc7185cab68386ada356d5c6b2e8e9864d8a025878620faf651e65da2eb1ae1cd007a9aff05fee670a70234631542a8ae1fe5ab1d3085dbb8e2d474c56d080a98d7aa39c992478d55da5cd1ba72f5c7f38fdb351d3c077c1ea143510ed738"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x4, 0x10, 0x0, [@generic={0x41, 0xc, "dca920251d284e59533f13503392cf3ed35ab43bb0ff8d37c918278226d389f39240b4894fcf610e7c3b5c6f6896bbc0a121ede16965f546bf723cc0de3e51"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x328, 0x10, 0x8, 0xe0, 0x8, 0x1}, 0xf, &(0x7f0000000e80)=ANY=[@ANYBLOB="01a900051052034b43"], 0x3, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x3465}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x42f}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_lock', 0x802, 0x12b) write$P9_RSTAT(r3, &(0x7f0000000000)=ANY=[], 0x52) mount$overlay(0x0, &(0x7f0000000a40)='./cgroup\x00', &(0x7f0000000440), 0x2000088, &(0x7f0000000180)={[{@userxattr}, {@redirect_dir_nofollow}]}) syz_usb_control_io$uac1(r2, &(0x7f0000001040)={0x14, &(0x7f0000000fc0)={0x20, 0x11, 0xffffffffffffffe6, {0x30, 0x11, "0b2d6548f148994fca4d1039e9cb97eeeeac7844f4a3154f2548b680c00df878503000fc232058d2d10f27a122ac"}}, &(0x7f0000001000)=ANY=[@ANYBLOB="0003310000003103951d8ba525ba4bdc5bd5669502b9a6bc2a744bc563c17ded4ec6ce29b15f5a50afe83904e0c042f507ee8ab97d4d4b"]}, &(0x7f0000001300)={0x44, &(0x7f0000001080)={0x0, 0xf, 0x8f, "b7bd680dce050b64a85c2f83a7405f00e2cf3d98e9c59fc44c876f41c57421f8e3436d5c10a661570115a38cfb983c7ba52fe13051e9fcd53832c526db0664fcc466c92dec1fc64fc747fb11efe0ceea33bfc8fc308468407034fde2cf374facc98678f77260d257632623a26c1aae454ee9610dd703e039dfcba047b851dee492a413719d52fd0ce9209e19c492b3"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000011c0)={0x20, 0x81, 0x3, "a77349"}, &(0x7f0000001200)={0x20, 0x82, 0x3, '\f)f'}, &(0x7f0000001240)={0x20, 0x83, 0x2, "3ee7"}, &(0x7f0000001280)=ANY=[@ANYBLOB="2093432384fffe"], &(0x7f00000012c0)={0x20, 0x85, 0x3, "c36e0b"}}) (async) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x8000, 0x7f, 0x4064}) 753.92486ms ago: executing program 3 (id=17): r0 = inotify_init1(0x80800) read(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000001000000000003000000060001"], 0x1c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x40400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x400, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xa1) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) 735.163551ms ago: executing program 3 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x50}, 0x404c840) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x43, 0xff, 0x10, @loopback, @remote, 0x40, 0x80, 0x97, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, &(0x7f0000000380)={@private2, 0x0}, &(0x7f00000003c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x128, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x128}}, 0x4) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000600)={[0x4, 0x2, 0x8, 0x7, 0x8, 0xfffffffffffffffc, 0x2, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x7ff, 0x100000000, 0xf, 0x1, 0x8, 0x8], 0xb000, 0x200106}) (async) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000940)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0x7}, @nested_vmresume={0x130, 0x18}, @nested_load_code={0x12e, 0x52, {0x0, "3e660f00de66ba420066b8f00066efdde43e0f23d341d8c6f3460fc7fab8010000000f01c166b80e018ed866440f38807036b8010000000f01d9"}}, @rdmsr={0x66, 0x18, {0xd90}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0xa1a, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0xa11a}}, @nested_amd_clgi={0x17f, 0x10}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_load_code={0x12e, 0x64, {0x3, "66f04580868a000000fe0f7076004e450f01ca8f0990020b6767f2400f00150000000066baf80cb893b6548aef66bafc0cb00deec443d142310043f4667b00440f20c03503000000440f22c0"}}, @wr_crn={0x67, 0x20, {0x8, 0x2e1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x80, {0x3, 0x7, [@out_dx={0x6a, 0x28, {0xa650, 0x0, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x96, 0x15, 0x8, 0xfff}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x596, 0x8a51, 0x878, 0xa8}}], 0x27e}) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000980)=0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000c40)={{r0, &(0x7f0000000a40)='veth1_to_team\x00', 0x404000, &(0x7f0000000a80)={@_ha_fsid={[0x7823e939, 0xde]}, {0x8000, 0xa, 0x3, 0x7}}, 0x8, &(0x7f0000000ac0)={@_ha_fsid}, &(0x7f0000000b00)=0x6}, {[0x7, 0x2, 0x9]}, 0x6, 0xec, &(0x7f0000000b40)=""/236}) (async) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000cc0)='ns/pid\x00') (async) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d00)='ns/ipc\x00') r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d40)='ns/pid_for_children\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000f40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x144, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x48894) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, r13, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) timerfd_create(0x1, 0x80800) (async) r14 = openat$incfs(r9, &(0x7f00000010c0)='.log\x00', 0x80000, 0xc1) ioctl$NS_GET_USERNS(r14, 0xb701, 0x0) (async) getsockopt$inet_buf(r9, 0x0, 0x27, &(0x7f0000001100)=""/35, &(0x7f0000001140)=0x23) (async) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x649}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040c0}, 0xd83341a011945a1d) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r15, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xc4, 0x7, 0xa, 0x301, 0x0, 0x0, {0xf, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x84, 0x7, 0x1, 0x0, "2f056fd0d1b00d2c29d2ce48e97056362deeae0d1f5194bd5d4b58ec2872f54353a4f0ee77ac3f2089e2a2752ed90d7c212b9170052a06a4cae591511a89a823398e471f4836f205ab902bc19e439a058c352c2d8dc1b68d734fdceb0502bee6110aafcfa19fa94001d9e1914c7e0a2c1e5b0dcdc4f9a1f98b61ffaa27115a7c"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) write$P9_RRENAME(r14, &(0x7f0000001480)={0x7, 0x15, 0x1}, 0x7) ioctl$NS_GET_PARENT(r12, 0xb702, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000041}, 0x400c0) 676.579946ms ago: executing program 3 (id=19): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) 289.96326ms ago: executing program 2 (id=20): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x2, 0x44d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xc3, 0xce, 0x13, 0x8db33d2c108b2891, 0x12d1, 0xe45e, 0xfc44, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43b, 0x3, 0x4, 0xf6, 0x0, 0xf6, "", [{{0x9, 0x4, 0x97, 0x2, 0x0, 0xff, 0x6, 0x13, 0x9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "f935c22df7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x401, 0x45e9, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x10}, [@mdlm_detail={0xa, 0x24, 0x13, 0x98, "9f05dfc6193c"}, @obex={0x5, 0x24, 0x15, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x6, 0x9, 0x14}, @mdlm={0x15, 0x24, 0x12, 0x40}, @mdlm={0x15, 0x24, 0x12, 0x6ba}]}]}}, {{0x9, 0x4, 0x41, 0x5, 0x0, 0x15, 0xbd, 0xd0, 0xe, [@hid_hid={0x9, 0x21, 0x1, 0xc, 0x1, {0x22, 0x768}}]}}, {{0x9, 0x4, 0xd1, 0x59, 0xe, 0xcf, 0x5, 0xe0, 0x6, [], [{{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x2, 0x5, 0x4, [@generic={0x91, 0x22, "61e96faea004c35ff547ee8d9eb28ab302fabefecf949713f85fecd87f193d4d8574e5b46167949da972215fc0b70968c71e8d2fcc497363c2ac774cbc09937d2068388c3ea3ae5d49e60b6fc93a19584315de41098c931ee9fdb873f25efe7abaf73d91b4a77687443f56520eb737fd2f01d76ff6e5132bb6141d0df5d646857e297557c1f7ea07a8d1c32665ceb3"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x10, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8d, 0xfffd}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x9, 0x8, 0x5, [@generic={0x56, 0x21, "6b92e8ac5c2a7f07a9bcc99414fb104cf2fd1cfb35b575e0d48ba8b8213bf72d96a501733d1f01845350a98b946b6015bf59dbee343d1a65c1bdc869aea3d188d7c394fe76e226e88e58898c516567ee3def3013"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb3, 0xbf7}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x6, 0x5, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6c, 0x800}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x54, 0x6, [@generic={0xfe, 0x1, "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"}, @generic={0x47, 0x0, "089188204934f101bfd863f426be9d7fca38f3d4f66d1de1ec2587c2ed2af7fe913ae7c5657b98fd8e77e87dcf0652359159b3ee4012104993121b83aa0a022eb172a2fa61"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xfb, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x1}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x40, 0x5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x1, 0x6, 0x80}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x8, 0xe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x9}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x3, 0xf9, 0xf9, [@generic={0xca, 0xd, "825b544fe6b16e8ad02fe1a0b29dfd88aaa0562101db6cc0b1645f752910e2bfac64638df108c258540cc3836259268ea6f8fc09c7090039b2539e5e2304a855e55b5a4677410bc98cfe22a22597d469ea8e33cbd0815d5c69a572b5182e58594736e2219973861e01faec60e37ba16eb8febd3b355b1e69637003cb6b135725884e996924a898cdac5309520c9ca3086c14ba1e49ee844de698651bbfd2cac6c8f58e23a586ded8b68d90b77ab52fa894f3bb186c8172cce92c0a5cc51c3383e5664d7406569310"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x2}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x5, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x9}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x6, 0xff, 0x3}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x4, 0x3, 0xc}}, {{0x9, 0x5, 0x9, 0x10, 0x3cf, 0x0, 0x0, 0x6}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0x3, 0x82, 0x7, 0x10}, 0x34, &(0x7f0000000500)={0x5, 0xf, 0x34, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0xf6dc, 0xf0f, 0xf, [0xff003f, 0x410f, 0x0, 0xf0, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0xa, 0x3a, 0x4}]}, 0x2, [{0xb3, &(0x7f0000000540)=@string={0xb3, 0x3, "84957ec0d1afb87bce46cdafdea5a638aeab4cd28c71dd5ce28dd9c01ce9d32ca7b5c3056652eee217a6245f64c071237b6bfc9001fdc0b77b092a3d7be52b698c9646db0d2868ca5281dc749f01a72ebd8f2e9a47ce7e392f8fc4fca3a533fe30d56934a553f6f1362759ec94739d5896bbb4ac86446fd13f9dbfe3a9bbf5f0f21032cd26e8878d611d2fb48215c7d7697797d0fe7ea88a9e94b561f44b7fdbca1129a7dc0b039b0e2ccb9574d600d9fb"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x415}}]}) 0s ago: executing program 0 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40001, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x8001}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) listen(r2, 0x90004) ioctl$sock_TIOCOUTQ(r2, 0x5411, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r3, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000800)={@flat=@weak_binder={0x77622a85, 0x10a}, @flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1040}], 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 22.991539][ T36] audit: type=1400 audit(1775816870.920:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.995279][ T283] cgroup: Unknown subsys name 'net' [ 23.014293][ T36] audit: type=1400 audit(1775816870.920:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.041651][ T36] audit: type=1400 audit(1775816870.950:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.042178][ T283] cgroup: Unknown subsys name 'devices' [ 23.228655][ T283] cgroup: Unknown subsys name 'hugetlb' [ 23.234310][ T283] cgroup: Unknown subsys name 'rlimit' [ 23.391271][ T36] audit: type=1400 audit(1775816871.320:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.414692][ T36] audit: type=1400 audit(1775816871.320:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.439683][ T36] audit: type=1400 audit(1775816871.320:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.464711][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.473647][ T36] audit: type=1400 audit(1775816871.400:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.499425][ T36] audit: type=1400 audit(1775816871.400:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.529796][ T36] audit: type=1400 audit(1775816871.460:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.555453][ T36] audit: type=1400 audit(1775816871.460:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.556505][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.870057][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.877334][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.884478][ T290] bridge_slave_0: entered allmulticast mode [ 24.891205][ T290] bridge_slave_0: entered promiscuous mode [ 24.916437][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.923535][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.930699][ T290] bridge_slave_1: entered allmulticast mode [ 24.937150][ T290] bridge_slave_1: entered promiscuous mode [ 25.065717][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.072872][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.080095][ T296] bridge_slave_0: entered allmulticast mode [ 25.086549][ T296] bridge_slave_0: entered promiscuous mode [ 25.096143][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.103211][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.110382][ T294] bridge_slave_0: entered allmulticast mode [ 25.116729][ T294] bridge_slave_0: entered promiscuous mode [ 25.123127][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.130402][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.137555][ T296] bridge_slave_1: entered allmulticast mode [ 25.143811][ T296] bridge_slave_1: entered promiscuous mode [ 25.169111][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.176373][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.183939][ T294] bridge_slave_1: entered allmulticast mode [ 25.190335][ T294] bridge_slave_1: entered promiscuous mode [ 25.241859][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.248980][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.256324][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.263372][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.291286][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.298664][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.305773][ T295] bridge_slave_0: entered allmulticast mode [ 25.312259][ T295] bridge_slave_0: entered promiscuous mode [ 25.320439][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.327548][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.334731][ T295] bridge_slave_1: entered allmulticast mode [ 25.341178][ T295] bridge_slave_1: entered promiscuous mode [ 25.400549][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.407738][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.415179][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.422349][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.437520][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.444627][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.451953][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.459039][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.471577][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.478965][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.487350][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.494712][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.502180][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.509735][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.522024][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.529236][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.558800][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.565937][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.615804][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.623102][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.632225][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.639332][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.647759][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.654821][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.678823][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.685950][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.718335][ T296] veth0_vlan: entered promiscuous mode [ 25.744709][ T294] veth0_vlan: entered promiscuous mode [ 25.759461][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.766661][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.774948][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.782029][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.796573][ T296] veth1_macvtap: entered promiscuous mode [ 25.811543][ T290] veth0_vlan: entered promiscuous mode [ 25.830037][ T294] veth1_macvtap: entered promiscuous mode [ 25.851734][ T295] veth0_vlan: entered promiscuous mode [ 25.862215][ T290] veth1_macvtap: entered promiscuous mode [ 25.896706][ T295] veth1_macvtap: entered promiscuous mode [ 25.912887][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.982786][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.013149][ T318] Zero length message leads to an empty skb [ 26.225957][ T307] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.246172][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.377684][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.388961][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.399025][ T307] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 26.408593][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.410089][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 26.422138][ T307] usb 4-1: config 0 descriptor?? [ 26.430425][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 26.446090][ T31] usb 3-1: can't read configurations, error -22 [ 26.475261][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 26.490436][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 26.576140][ T333] fido_id[333]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 26.590178][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.597443][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.615956][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.626513][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.639892][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 26.649770][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.660811][ T9] usb 1-1: config 0 descriptor?? [ 26.757660][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 26.765761][ T31] usb 3-1: can't read configurations, error -22 [ 26.772226][ T31] usb usb3-port1: attempt power cycle [ 26.861935][ T307] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 26.870202][ T307] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 27.069467][ T307] cp2112 0003:10C4:EA90.0002: Part Number: 0x0B Device Version: 0xE6 [ 27.115957][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.138094][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 27.146291][ T31] usb 3-1: can't read configurations, error -22 [ 27.236283][ T341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.245901][ T341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.276043][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 27.278542][ T307] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 27.291679][ T307] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -5 [ 27.298752][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 27.311479][ T31] usb 3-1: can't read configurations, error -22 [ 27.318301][ T31] usb usb3-port1: unable to enumerate USB device [ 27.493593][ T31] usb 4-1: USB disconnect, device number 2 [ 27.581162][ T350] syz.1.12: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 27.596267][ T350] CPU: 0 UID: 0 PID: 350 Comm: syz.1.12 Not tainted syzkaller #0 a2fb3ed8c3bd0f53318b258069d3c0dc388d3ecc [ 27.596300][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 27.596317][ T350] Call Trace: [ 27.596324][ T350] [ 27.596332][ T350] __dump_stack+0x21/0x30 [ 27.596372][ T350] dump_stack_lvl+0x140/0x1c0 [ 27.596399][ T350] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.596431][ T350] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 27.596469][ T350] dump_stack+0x19/0x20 [ 27.596498][ T350] warn_alloc+0x1e7/0x2c0 [ 27.596523][ T350] ? stack_depot_save_flags+0x399/0x800 [ 27.596556][ T350] ? common_lsm_audit+0x14fe/0x18e0 [ 27.596589][ T350] ? __cfi_warn_alloc+0x10/0x10 [ 27.596615][ T350] ? kasan_save_track+0x3e/0x80 [ 27.596649][ T350] ? kasan_save_alloc_info+0x40/0x50 [ 27.596678][ T350] ? xsk_init_queue+0xb2/0x120 [ 27.596701][ T350] ? xsk_setsockopt+0x42c/0x760 [ 27.596723][ T350] ? do_sock_setsockopt+0x27f/0x410 [ 27.596755][ T350] ? __x64_sys_setsockopt+0x1b7/0x250 [ 27.596786][ T350] ? x64_sys_call+0x2adc/0x2ee0 [ 27.596819][ T350] ? do_syscall_64+0x57/0xf0 [ 27.596862][ T350] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.596900][ T350] __vmalloc_node_range_noprof+0x132/0x1480 [ 27.596933][ T350] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 27.596962][ T350] ? avc_has_perm+0x1ec/0x240 [ 27.596996][ T350] ? kasan_save_alloc_info+0x40/0x50 [ 27.597026][ T350] ? __kasan_kmalloc+0x96/0xb0 [ 27.597048][ T350] ? __kmalloc_cache_noprof+0x23c/0x470 [ 27.597082][ T350] vmalloc_user_noprof+0x77/0x90 [ 27.597111][ T350] ? xskq_create+0xdb/0x290 [ 27.597136][ T350] xskq_create+0xdb/0x290 [ 27.597160][ T350] xsk_init_queue+0xb2/0x120 [ 27.597183][ T350] xsk_setsockopt+0x42c/0x760 [ 27.597205][ T350] ? __cfi_xsk_setsockopt+0x10/0x10 [ 27.597228][ T350] ? do_futex+0x32a/0x510 [ 27.597255][ T350] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 27.597291][ T350] ? security_socket_setsockopt+0x3d/0x100 [ 27.597316][ T350] ? __cfi_xsk_setsockopt+0x10/0x10 [ 27.597339][ T350] do_sock_setsockopt+0x27f/0x410 [ 27.597372][ T350] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 27.597407][ T350] __x64_sys_setsockopt+0x1b7/0x250 [ 27.597441][ T350] x64_sys_call+0x2adc/0x2ee0 [ 27.597474][ T350] do_syscall_64+0x57/0xf0 [ 27.597507][ T350] ? clear_bhb_loop+0x50/0xa0 [ 27.597530][ T350] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.597566][ T350] RIP: 0033:0x7f234559c819 [ 27.597596][ T350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.597615][ T350] RSP: 002b:00007f234646d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 27.597640][ T350] RAX: ffffffffffffffda RBX: 00007f2345815fa0 RCX: 00007f234559c819 [ 27.597658][ T350] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 27.597672][ T350] RBP: 00007f2345632c91 R08: 0000000000000004 R09: 0000000000000000 [ 27.597688][ T350] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 27.597703][ T350] R13: 00007f2345816038 R14: 00007f2345815fa0 R15: 00007ffeeaa03d88 [ 27.597723][ T350] [ 27.597737][ T350] Mem-Info: [ 27.914302][ T350] active_anon:5410 inactive_anon:0 isolated_anon:0 [ 27.914302][ T350] active_file:5622 inactive_file:2292 isolated_file:0 [ 27.914302][ T350] unevictable:0 dirty:911 writeback:0 [ 27.914302][ T350] slab_reclaimable:3752 slab_unreclaimable:71001 [ 27.914302][ T350] mapped:24034 shmem:165 pagetables:767 [ 27.914302][ T350] sec_pagetables:0 bounce:0 [ 27.914302][ T350] kernel_misc_reclaimable:0 [ 27.914302][ T350] free:1546413 free_pcp:1877 free_cma:0 [ 27.959617][ T350] Node 0 active_anon:21640kB inactive_anon:0kB active_file:22488kB inactive_file:9168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96136kB dirty:3644kB writeback:0kB shmem:660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4384kB pagetables:3068kB sec_pagetables:0kB all_unreclaimable? no [ 27.993093][ T350] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963356kB mlocked:0kB bounce:0kB free_pcp:5192kB local_pcp:5192kB free_cma:0kB [ 28.024064][ T350] lowmem_reserve[]: 0 3921 3921 [ 28.034388][ T350] Normal free:3228940kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21640kB inactive_anon:0kB active_file:22488kB inactive_file:9168kB unevictable:0kB writepending:3644kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2020kB local_pcp:316kB free_cma:0kB [ 28.047758][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 28.047823][ T36] audit: type=1400 audit(1775816875.960:130): avc: denied { read write } for pid=353 comm="syz.3.13" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.067264][ T350] lowmem_reserve[]: [ 28.075403][ T354] ======================================================= [ 28.075403][ T354] WARNING: The mand mount option has been deprecated and [ 28.075403][ T354] and is ignored by this kernel. Remove the mand [ 28.075403][ T354] option from the mount to silence this warning. [ 28.075403][ T354] ======================================================= [ 28.096636][ T350] 0 [ 28.100739][ T36] audit: type=1400 audit(1775816876.000:131): avc: denied { open } for pid=353 comm="syz.3.13" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.156317][ T350] 0 0 [ 28.162391][ T350] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 28.177989][ T350] Normal: 1*4kB (E) 7*8kB (UME) 2*16kB (UE) 38*32kB (ME) 68*64kB (UME) 66*128kB (UME) 40*256kB (UME) 27*512kB (UME) 21*1024kB (UME) 9*2048kB (UME) 769*4096kB (M) = 3227932kB [ 28.198458][ T350] 8075 total pagecache pages [ 28.203436][ T350] 0 pages in swap cache [ 28.207897][ T350] Free swap = 124996kB [ 28.209590][ T36] audit: type=1400 audit(1775816876.140:132): avc: denied { read write } for pid=355 comm="syz.3.14" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.212344][ T350] Total swap = 124996kB [ 28.236395][ T36] audit: type=1400 audit(1775816876.140:133): avc: denied { open } for pid=355 comm="syz.3.14" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.240079][ T350] 2097051 pages RAM [ 28.266356][ T350] 0 pages HighMem/MovableOnly [ 28.271148][ T350] 352246 pages reserved [ 28.275378][ T350] 0 pages cma reserved [ 28.278540][ T36] audit: type=1400 audit(1775816876.200:134): avc: denied { map } for pid=355 comm="syz.3.14" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.288103][ T350] Memory allocations: [ 28.306151][ T36] audit: type=1400 audit(1775816876.200:135): avc: denied { execute } for pid=355 comm="syz.3.14" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.306461][ T350] 0 B 0 init/main.c:1477 func:do_initcalls [ 28.336886][ T36] audit: type=1400 audit(1775816876.200:136): avc: denied { create } for pid=355 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.356701][ T350] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 28.364827][ T350] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 28.372593][ T36] audit: type=1400 audit(1775816876.240:137): avc: denied { ioctl } for pid=355 comm="syz.3.14" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.396977][ T350] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 28.404928][ T350] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 28.412969][ T350] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 28.421703][ T350] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 28.429741][ T350] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 28.437809][ T350] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 28.445924][ T350] 0 B 0 init/initramfs.c:101 func:find_link [ 28.475774][ T36] audit: type=1400 audit(1775816876.400:138): avc: denied { create } for pid=359 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.515899][ T36] audit: type=1400 audit(1775816876.400:139): avc: denied { ioctl } for pid=359 comm="syz.1.15" path="socket:[4118]" dev="sockfs" ino=4118 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.746275][ T67] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.825926][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.895981][ T67] usb 2-1: Using ep0 maxpacket: 16 [ 28.902797][ T67] usb 2-1: config 6 has an invalid interface number: 104 but max is 1 [ 28.911498][ T67] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 28.920395][ T67] usb 2-1: config 6 has an invalid interface number: 34 but max is 1 [ 28.928593][ T67] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 28.937445][ T67] usb 2-1: config 6 has an invalid interface number: 211 but max is 1 [ 28.945647][ T67] usb 2-1: config 6 has 3 interfaces, different from the descriptor's value: 2 [ 28.954680][ T67] usb 2-1: config 6 has no interface number 0 [ 28.960943][ T31] usb 4-1: device descriptor read/64, error -71 [ 28.967262][ T67] usb 2-1: config 6 has no interface number 1 [ 28.973383][ T67] usb 2-1: config 6 has no interface number 2 [ 28.979618][ T67] usb 2-1: config 6 interface 104 altsetting 148 endpoint 0x8 has an invalid bInterval 255, changing to 11 [ 28.991383][ T67] usb 2-1: config 6 interface 104 altsetting 148 has a duplicate endpoint with address 0x8, skipping [ 29.002433][ T67] usb 2-1: config 6 interface 104 altsetting 148 has an invalid descriptor for endpoint zero, skipping [ 29.013859][ T67] usb 2-1: config 6 interface 104 altsetting 148 has a duplicate endpoint with address 0xA, skipping [ 29.025740][ T67] usb 2-1: config 6 interface 104 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 29.036867][ T67] usb 2-1: config 6 interface 104 altsetting 148 has a duplicate endpoint with address 0xA, skipping [ 29.050880][ T67] usb 2-1: config 6 interface 104 altsetting 148 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 29.062298][ T67] usb 2-1: config 6 interface 104 altsetting 148 has a duplicate endpoint with address 0xA, skipping [ 29.073785][ T67] usb 2-1: config 6 interface 104 altsetting 148 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 29.087302][ T67] usb 2-1: too many endpoints for config 6 interface 34 altsetting 10: 217, using maximum allowed: 30 [ 29.098593][ T67] usb 2-1: config 6 interface 34 altsetting 10 has a duplicate endpoint with address 0x3, skipping [ 29.109484][ T67] usb 2-1: config 6 interface 34 altsetting 10 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 29.120622][ T67] usb 2-1: config 6 interface 34 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 29.131635][ T67] usb 2-1: config 6 interface 34 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 217 [ 29.147203][ T67] usb 2-1: config 6 interface 211 altsetting 203 has a duplicate endpoint with address 0x3, skipping [ 29.158151][ T67] usb 2-1: config 6 interface 211 altsetting 203 has an endpoint descriptor with address 0x1D, changing to 0xD [ 29.170160][ T67] usb 2-1: config 6 interface 211 altsetting 203 has a duplicate endpoint with address 0xD, skipping [ 29.181144][ T67] usb 2-1: config 6 interface 211 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 29.192264][ T67] usb 2-1: config 6 interface 211 altsetting 203 bulk endpoint 0x2 has invalid maxpacket 16 [ 29.202681][ T67] usb 2-1: config 6 interface 104 has no altsetting 0 [ 29.209591][ T67] usb 2-1: config 6 interface 34 has no altsetting 0 [ 29.216385][ T67] usb 2-1: config 6 interface 211 has no altsetting 0 [ 29.224628][ T67] usb 2-1: New USB device found, idVendor=1371, idProduct=5743, bcdDevice=91.70 [ 29.233851][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.241968][ T67] usb 2-1: Product: Я [ 29.253066][ T67] usb 2-1: Manufacturer: ᐇ [ 29.258088][ T31] usb 4-1: device descriptor read/64, error -71 [ 29.266541][ T67] usb 2-1: SerialNumber: syz [ 29.310871][ T308] usb 1-1: USB disconnect, device number 2 [ 29.328395][ T375] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.328420][ T375] rust_binder: Read failure Err(EFAULT) in pid:11 [ 29.338244][ T375] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.344828][ T375] rust_binder: Read failure Err(EFAULT) in pid:11 [ 29.354056][ T375] rust_binder: Error while translating object. [ 29.360910][ C0] BUG: TASK stack guard page was hit at ffffc9000d177f78 (stack is ffffc9000d178000..ffffc9000d180000) [ 29.360972][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 29.360997][ C0] CPU: 0 UID: 0 PID: 375 Comm: syz.0.21 Not tainted syzkaller #0 a2fb3ed8c3bd0f53318b258069d3c0dc388d3ecc [ 29.361025][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 29.361034][ C0] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 29.361058][ C0] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 29.361071][ C0] RSP: 0018:ffffc9000d177f80 EFLAGS: 00010a02 [ 29.361105][ C0] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92001a2f02c [ 29.361121][ C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 29.361134][ C0] RBP: ffffc9000d178250 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc [ 29.361149][ C0] R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: dffffc0000000000 [ 29.361170][ C0] R13: dffffc0000000000 R14: 1ffff92001a2f050 R15: ffffc9000d1782f0 [ 29.361182][ C0] FS: 00007f21afbf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.361195][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.361205][ C0] CR2: ffffc9000d177f78 CR3: 0000000134e98000 CR4: 00000000003526b0 [ 29.361219][ C0] Call Trace: [ 29.361239][ C0] [ 29.361254][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 29.361279][ C0] ? static_key_count+0x45/0x70 [ 29.361301][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 29.361331][ C0] ? __cfi_gfp_zone+0x10/0x10 [ 29.361354][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 29.361371][ C0] ? unwind_next_frame+0x3c1/0x750 [ 29.361408][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 29.361432][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 29.361468][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 29.361486][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 29.361507][ C0] ? stack_depot_save_flags+0x672/0x800 [ 29.361543][ C0] ? stack_depot_save+0x12/0x20 [ 29.361570][ C0] ? save_stack+0x133/0x240 [ 29.361590][ C0] ? free_contig_range+0x260/0x260 [ 29.361621][ C0] ? __reset_page_owner+0x450/0x450 [ 29.361636][ C0] ? zone_page_state_add+0x43/0x90 [ 29.361658][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 29.361673][ C0] ? prep_new_page+0x20/0x120 [ 29.361707][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 29.361731][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 29.361754][ C0] ? stack_depot_save_flags+0x672/0x800 [ 29.361784][ C0] ? kasan_save_track+0x4f/0x80 [ 29.361806][ C0] ? kasan_save_free_info+0x4a/0x60 [ 29.361824][ C0] ? __kasan_slab_free+0x5f/0x80 [ 29.361856][ C0] ? kfree+0x158/0x440 [ 29.361882][ C0] ? krealloc_noprof+0xfa/0x130 [ 29.361909][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 29.361967][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 29.362013][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 29.362053][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 29.362095][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 29.362121][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 29.362159][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 29.362185][ C0] ? sched_clock_noinstr+0xd/0x30 [ 29.362207][ C0] ? __set_page_owner+0x8e/0x600 [ 29.362231][ C0] ? __zone_watermark_ok+0x134/0x630 [ 29.362253][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 29.362269][ C0] ? kasan_unpoison+0x4a/0x70 [ 29.362306][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 29.362329][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 29.362350][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 29.362378][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 29.362405][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 29.362428][ C0] ? prep_new_page+0x20/0x120 [ 29.362460][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 29.362493][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 29.362515][ C0] ? static_key_count+0x45/0x70 [ 29.362539][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 29.362560][ C0] ? lruvec_init+0x1a1/0x280 [ 29.362583][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 29.362620][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 29.362643][ C0] ? unwind_get_return_address+0x51/0x90 [ 29.362666][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 29.362691][ C0] ? arch_stack_walk+0x10a/0x170 [ 29.362717][ C0] ? stack_trace_save+0xaa/0x100 [ 29.362731][ C0] ? stack_depot_save_flags+0x672/0x800 [ 29.362771][ C0] ? kasan_save_track+0x4f/0x80 [ 29.362800][ C0] ? kasan_save_track+0x3e/0x80 [ 29.362838][ C0] ? kasan_save_free_info+0x4a/0x60 [ 29.362856][ C0] ? __kasan_slab_free+0x5f/0x80 [ 29.362869][ C0] ? kfree+0x158/0x440 [ 29.362888][ C0] ? krealloc_noprof+0xfa/0x130 [ 29.362930][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 29.362997][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 29.363024][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 29.363070][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 29.363112][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 29.363152][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 29.363172][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 29.363201][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1a01/0xaf80 [ 29.363254][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 29.363279][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 29.363301][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 29.363314][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 29.363336][ C0] ? do_syscall_64+0x57/0xf0 [ 29.363374][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.363412][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 29.363446][ C0] ? kasan_save_free_info+0x4a/0x60 [ 29.363469][ C0] ? __kasan_slab_free+0x5f/0x80 [ 29.363482][ C0] ? kfree+0x158/0x440 [ 29.363500][ C0] ? krealloc_noprof+0xfa/0x130 [ 29.363543][ C0] ? krealloc_noprof+0xfa/0x130 [ 29.363572][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 29.363628][ C0] ? stack_depot_save_flags+0x399/0x800 [ 29.363648][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 29.363717][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 29.363771][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 29.363811][ C0] ? __kasan_check_write+0x18/0x20 [ 29.363851][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.363880][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.363912][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_14AllocationView22transfer_binder_object+0x224/0xc10 [ 29.363942][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 29.363990][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 29.364029][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1a01/0xaf80 [ 29.364065][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 29.364078][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 29.364108][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 29.364157][ C0] ? __kasan_check_write+0x18/0x20 [ 29.364187][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.364219][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 29.364252][ C0] ? __kmalloc_cache_noprof+0x23c/0x470 [ 29.364290][ C0] ? __set_page_owner+0x2af/0x600 [ 29.364312][ C0] ? __kasan_check_write+0x18/0x20 [ 29.364338][ C0] ? __set_page_owner+0x3fe/0x600 [ 29.364363][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 29.364379][ C0] ? kasan_unpoison+0x4a/0x70 [ 29.364399][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 29.364447][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.364474][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 29.364515][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 29.364542][ C0] ? prep_new_page+0x20/0x120 [ 29.364558][ C0] ? __kasan_check_write+0x18/0x20 [ 29.364595][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.364624][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.364653][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 29.364692][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.364713][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 29.364770][ C0] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 29.364817][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 29.364844][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.364863][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 29.364910][ C0] ? __kasan_check_write+0x18/0x20 [ 29.364937][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 29.364981][ C0] ? __kasan_check_write+0x18/0x20 [ 29.365001][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.365036][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 29.365078][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.365104][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 29.365144][ C0] ? __kasan_check_write+0x18/0x20 [ 29.365163][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_7NodeRef6absorb+0x887/0xaa0 [ 29.365216][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 29.365273][ C0] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 29.365302][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 29.365362][ C0] ? __kasan_check_write+0x18/0x20 [ 29.365393][ C0] ? mutex_unlock+0x90/0x240 [ 29.365420][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 29.365438][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 29.365455][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 29.365505][ C0] ? put_dec_trunc8+0x229/0x380 [ 29.365536][ C0] ? put_dec+0xd7/0xf0 [ 29.365562][ C0] ? __asan_memset+0x39/0x50 [ 29.365590][ C0] ? move_right+0x8e/0xb0 [ 29.365612][ C0] ? format_decode+0x1bb/0x1610 [ 29.365656][ C0] ? vsnprintf+0x7b4/0x1ad0 [ 29.365683][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.365932][ C0] ? vsnprintf+0x19ef/0x1ad0 [ 29.365963][ C0] ? desc_read+0x202/0x3e0 [ 29.365982][ C0] ? __kasan_check_write+0x18/0x20 [ 29.366006][ C0] ? desc_read+0x1ab/0x3e0 [ 29.366023][ C0] ? prb_first_seq+0x109/0x1d0 [ 29.366048][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 29.366066][ C0] ? __kasan_check_write+0x18/0x20 [ 29.366096][ C0] ? desc_read+0x1ab/0x3e0 [ 29.366114][ C0] ? __kasan_check_read+0x15/0x20 [ 29.366140][ C0] ? this_cpu_in_panic+0x56/0x90 [ 29.366176][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 29.366194][ C0] ? record_print_text+0x290/0x450 [ 29.366228][ C0] ? prb_read_valid+0x80/0x80 [ 29.366246][ C0] ? __kasan_check_write+0x18/0x20 [ 29.366281][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.366316][ C0] ? desc_read+0x202/0x3e0 [ 29.366334][ C0] ? __kasan_check_write+0x18/0x20 [ 29.366361][ C0] ? desc_read+0x1ab/0x3e0 [ 29.366472][ C0] ? prb_first_seq+0x109/0x1d0 [ 29.366504][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 29.366523][ C0] ? __kasan_check_write+0x18/0x20 [ 29.366548][ C0] ? desc_read+0x1ab/0x3e0 [ 29.366567][ C0] ? __kasan_check_read+0x15/0x20 [ 29.366592][ C0] ? this_cpu_in_panic+0x56/0x90 [ 29.366613][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 29.366647][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 29.366679][ C0] ? prb_read_valid+0x80/0x80 [ 29.366698][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 29.366728][ C0] ? up+0x10a/0x1b0 [ 29.366746][ C0] ? __cfi_up+0x10/0x10 [ 29.366799][ C0] ? __kasan_check_write+0x18/0x20 [ 29.366826][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 29.366901][ C0] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 29.366943][ C0] ? __cfi_llist_add_batch+0x10/0x10 [ 29.366968][ C0] ? console_unlock+0x247/0x2c0 [ 29.366991][ C0] ? __cfi_console_unlock+0x10/0x10 [ 29.367017][ C0] ? krealloc_noprof+0xfa/0x130 [ 29.367052][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 29.367097][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 29.367230][ C0] ? irq_work_queue+0xc2/0x160 [ 29.367256][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 29.367301][ C0] ? vprintk_emit+0x3e3/0x650 [ 29.367325][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 29.367349][ C0] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 29.367388][ C0] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 29.367427][ C0] ? vprintk_default+0x2a/0x40 [ 29.367444][ C0] ? vprintk+0x93/0xa0 [ 29.367484][ C0] ? _printk+0xde/0x140 [ 29.367506][ C0] ? __cfi___check_object_size+0x10/0x10 [ 29.367535][ C0] ? __cfi__printk+0x10/0x10 [ 29.367564][ C0] ? _copy_from_user+0x87/0xa0 [ 29.367579][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 29.367610][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 29.367661][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 29.367729][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 29.367817][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 29.367845][ C0] ? kernel_text_address+0xa9/0xe0 [ 29.367874][ C0] ? __kernel_text_address+0x11/0x40 [ 29.367900][ C0] ? unwind_get_return_address+0x51/0x90 [ 29.367960][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 29.367991][ C0] ? arch_stack_walk+0x10a/0x170 [ 29.368023][ C0] ? stack_depot_save_flags+0x38/0x800 [ 29.368056][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 29.368076][ C0] ? kernel_text_address+0xa9/0xe0 [ 29.368114][ C0] ? __kasan_check_write+0x18/0x20 [ 29.368141][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.368178][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 29.368203][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 29.368226][ C0] ? stack_depot_save_flags+0x399/0x800 [ 29.368266][ C0] ? kasan_save_track+0x4f/0x80 [ 29.368296][ C0] ? kasan_save_track+0x3e/0x80 [ 29.368330][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 29.368349][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 29.368362][ C0] ? __kmalloc_cache_noprof+0x23c/0x470 [ 29.368403][ C0] ? __set_page_owner+0x2af/0x600 [ 29.368425][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 29.368449][ C0] ? prep_new_page+0x20/0x120 [ 29.368468][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 29.368495][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 29.368512][ C0] ? alloc_slab_page+0x6b/0x1e0 [ 29.368525][ C0] ? allocate_slab+0x69/0x420 [ 29.368553][ C0] ? ___slab_alloc+0x5a2/0x8d0 [ 29.368583][ C0] ? __kmalloc_node_track_caller_noprof+0x2e6/0x4f0 [ 29.368612][ C0] ? kmalloc_reserve+0x144/0x4f0 [ 29.368639][ C0] ? __alloc_skb+0x144/0x370 [ 29.368656][ C0] ? audit_log_start+0x42e/0x950 [ 29.368677][ C0] ? common_lsm_audit+0xd6/0x18e0 [ 29.368721][ C0] ? slow_avc_audit+0x19f/0x220 [ 29.368749][ C0] ? avc_has_perm+0x1ec/0x240 [ 29.368788][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 29.368807][ C0] ? security_binder_transaction+0x54/0xf0 [ 29.368832][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x28b/0xd40 [ 29.368890][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1a01/0xaf80 [ 29.368921][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 29.368958][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 29.368973][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 29.368986][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 29.369065][ C0] ? do_syscall_64+0x57/0xf0 [ 29.369124][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.369179][ C0] ? __kasan_check_write+0x18/0x20 [ 29.369207][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.369237][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 29.369268][ C0] ? __kmalloc_cache_noprof+0x23c/0x470 [ 29.369289][ C0] ? __set_page_owner+0x2af/0x600 [ 29.369304][ C0] ? __kasan_check_write+0x18/0x20 [ 29.369348][ C0] ? __set_page_owner+0x3fe/0x600 [ 29.369369][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 29.369408][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 29.369424][ C0] ? __kasan_check_write+0x18/0x20 [ 29.369448][ C0] ? prep_compound_page+0x272/0x5c0 [ 29.369531][ C0] ? __kernel_text_address+0x11/0x40 [ 29.369561][ C0] ? __kasan_check_write+0x18/0x20 [ 29.369590][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.369617][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 29.369659][ C0] ? stack_trace_save+0xaa/0x100 [ 29.369685][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 29.369721][ C0] ? stack_depot_save_flags+0x399/0x800 [ 29.369747][ C0] ? ttwu_queue_wakelist+0x324/0x500 [ 29.369770][ C0] ? native_send_call_func_single_ipi+0x12/0x20 [ 29.369793][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 29.369833][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 29.369866][ C0] ? __kasan_slab_free+0x6a/0x80 [ 29.369894][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 29.369915][ C0] ? __wake_up+0x169/0x190 [ 29.369927][ C0] ? audit_log_end+0x1f1/0x240 [ 29.369964][ C0] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 29.369993][ C0] ? audit_log_end+0x1f1/0x240 [ 29.370021][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 29.370055][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 29.370076][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 29.370099][ C0] ? __cfi_common_lsm_audit+0x10/0x10 [ 29.370141][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.370172][ C0] ? call_rcu_hurry+0x30/0x30 [ 29.370190][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0 [ 29.370223][ C0] ? avc_update_node+0x2f1/0x9c0 [ 29.370245][ C0] ? slow_avc_audit+0x19f/0x220 [ 29.370284][ C0] ? __cfi_slow_avc_audit+0x10/0x10 [ 29.370315][ C0] ? avc_has_perm_noaudit+0x2bd/0x360 [ 29.370346][ C0] ? avc_has_perm+0x1ec/0x240 [ 29.370372][ C0] ? avc_has_perm+0x211/0x240 [ 29.370395][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 29.370443][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 29.370471][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 29.370498][ C0] ? bpf_lsm_binder_transaction+0xd/0x20 [ 29.370523][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 29.370555][ C0] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x10/0x10 [ 29.370609][ C0] ? __kasan_check_write+0x18/0x20 [ 29.370635][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.370666][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.370688][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x155c/0xaf80 [ 29.370733][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.370765][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1a01/0xaf80 [ 29.370815][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 29.370902][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 29.370922][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 29.370967][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.370988][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 29.371016][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 29.371070][ C0] ? _RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0xf8/0x250 [ 29.371101][ C0] ? __cfi__RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0x10/0x10 [ 29.371132][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 29.371291][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 29.371331][ C0] ? _RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0xf8/0x250 [ 29.371365][ C0] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter11debug_tuple+0xad/0x170 [ 29.371409][ C0] ? _RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0xd1/0x210 [ 29.371452][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 29.371493][ C0] ? __cfi__RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0x10/0x10 [ 29.371520][ C0] ? _RNvXs6x_NtCse4H1uDrGHP9_8bindings12bindings_rawNtB6_11user_structNtNtCsb7ts3l0a5c3_4core7default7Default7default+0x30/0x30 [ 29.371571][ C0] ? _RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0xd1/0x210 [ 29.371660][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 29.371693][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.371712][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 29.371792][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 29.371839][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.371868][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 29.371897][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 29.371950][ C0] ? _RNvMs2_NtNtCsb7ts3l0a5c3_4core3fmt8buildersNtB5_10DebugTuple5field+0x222/0x5c0 [ 29.371981][ C0] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter12pad_integral+0x307/0x810 [ 29.372014][ C0] ? put_dec_trunc8+0x229/0x380 [ 29.372037][ C0] ? put_dec+0xd7/0xf0 [ 29.372072][ C0] ? __asan_memset+0x39/0x50 [ 29.372103][ C0] ? move_right+0x8e/0xb0 [ 29.372133][ C0] ? format_decode+0x1bb/0x1610 [ 29.372166][ C0] ? vsnprintf+0x7b4/0x1ad0 [ 29.372193][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.372231][ C0] ? vsnprintf+0x19ef/0x1ad0 [ 29.372260][ C0] ? desc_read+0x202/0x3e0 [ 29.372279][ C0] ? __kasan_check_write+0x18/0x20 [ 29.372311][ C0] ? desc_read+0x1ab/0x3e0 [ 29.372325][ C0] ? prb_first_seq+0x109/0x1d0 [ 29.372338][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 29.372352][ C0] ? __kasan_check_write+0x18/0x20 [ 29.372603][ C0] ? desc_read+0x1ab/0x3e0 [ 29.372625][ C0] ? __kasan_check_read+0x15/0x20 [ 29.372651][ C0] ? this_cpu_in_panic+0x56/0x90 [ 29.372678][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 29.372692][ C0] ? record_print_text+0x290/0x450 [ 29.372719][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 29.372763][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 29.372788][ C0] ? update_curr+0xf8/0x9e0 [ 29.372819][ C0] ? xfd_validate_state+0x68/0x140 [ 29.372843][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 29.372859][ C0] ? __kasan_check_write+0x18/0x20 [ 29.372894][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.372924][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.372953][ C0] ? __cfi___switch_to+0x10/0x10 [ 29.372984][ C0] ? _raw_spin_unlock+0x45/0x60 [ 29.373005][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 29.373022][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 29.373072][ C0] ? finish_task_switch+0x139/0x760 [ 29.373095][ C0] ? __switch_to_asm+0x3d/0x70 [ 29.373129][ C0] ? __schedule+0x13a1/0x1fa0 [ 29.373144][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 29.373170][ C0] ? __sched_text_start+0x10/0x10 [ 29.373200][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 29.373234][ C0] ? __kasan_check_read+0x15/0x20 [ 29.373260][ C0] ? prb_read_valid+0x41/0x80 [ 29.373285][ C0] ? preempt_schedule_common+0x2d/0x60 [ 29.373301][ C0] ? preempt_schedule+0xc5/0xe0 [ 29.373315][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 29.373330][ C0] ? __printk_safe_exit+0xd/0x20 [ 29.373370][ C0] ? console_trylock+0x17e/0x220 [ 29.373393][ C0] ? __cfi_console_trylock+0x10/0x10 [ 29.373416][ C0] ? preempt_schedule_thunk+0x1a/0x40 [ 29.373439][ C0] ? vprintk_emit+0x584/0x650 [ 29.373455][ C0] ? vprintk_emit+0x3e3/0x650 [ 29.373472][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 29.373503][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0xd14/0x1030 [ 29.373537][ C0] ? __kernel_text_address+0x11/0x40 [ 29.373565][ C0] ? _printk+0xde/0x140 [ 29.373590][ C0] ? asm_exc_page_fault+0x2b/0x30 [ 29.373613][ C0] ? __kasan_check_write+0x18/0x20 [ 29.373633][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.373676][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 29.373707][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.373739][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 29.373764][ C0] ? _raw_spin_unlock+0x45/0x60 [ 29.373786][ C0] ? call_rcu_nocb+0x6d7/0xc80 [ 29.373828][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 29.373855][ C0] ? swake_up_one_online_ipi+0x30/0x30 [ 29.373884][ C0] ? __cfi_mt_free_rcu+0x10/0x10 [ 29.373913][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 29.373934][ C0] ? kernel_text_address+0xa9/0xe0 [ 29.373973][ C0] ? __kernel_text_address+0x11/0x40 [ 29.373999][ C0] ? __kasan_check_write+0x18/0x20 [ 29.374025][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.374057][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 29.374080][ C0] ? stack_trace_save+0xaa/0x100 [ 29.374095][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 29.374139][ C0] ? stack_depot_save_flags+0x399/0x800 [ 29.374168][ C0] ? kasan_save_track+0x4f/0x80 [ 29.374201][ C0] ? kasan_save_track+0x3e/0x80 [ 29.374223][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 29.374241][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 29.374270][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 29.374300][ C0] ? krealloc_noprof+0x8d/0x130 [ 29.374329][ C0] ? kvrealloc_noprof+0x59/0x120 [ 29.374358][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_mmap+0x78b/0x11f0 [ 29.374376][ C0] ? mmap_region+0x157c/0x1d60 [ 29.374395][ C0] ? do_mmap+0xb85/0x13c0 [ 29.374433][ C0] ? vm_mmap_pgoff+0x36e/0x4b0 [ 29.374464][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 29.374485][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 29.374507][ C0] ? __kernel_text_address+0x11/0x40 [ 29.374524][ C0] ? unwind_get_return_address+0x51/0x90 [ 29.374542][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 29.374587][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 29.374612][ C0] ? update_curr+0x6c1/0x9e0 [ 29.374643][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 29.374671][ C0] ? __calc_delta+0x280/0x280 [ 29.374692][ C0] ? __kasan_record_aux_stack+0xb2/0xd0 [ 29.374733][ C0] ? update_entity_lag+0x28f/0x2c0 [ 29.374763][ C0] ? dequeue_entity+0x809/0x1380 [ 29.374788][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 29.374814][ C0] ? __cfi_update_misfit_status+0x10/0x10 [ 29.374831][ C0] ? dequeue_entities+0x1d7/0x1400 [ 29.374852][ C0] ? sched_balance_newidle+0x31a/0xab0 [ 29.374893][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 29.374917][ C0] ? sched_clock_noinstr+0xd/0x30 [ 29.374940][ C0] ? __kasan_check_write+0x18/0x20 [ 29.374969][ C0] ? __switch_to+0xc4f/0x1300 [ 29.374990][ C0] ? __cfi___switch_to+0x10/0x10 [ 29.375026][ C0] ? psi_task_switch+0x4f2/0xa10 [ 29.375051][ C0] ? __kasan_check_write+0x18/0x20 [ 29.375078][ C0] ? finish_task_switch+0x1d9/0x760 [ 29.375101][ C0] ? __switch_to_asm+0x3d/0x70 [ 29.375128][ C0] ? __schedule+0x13a1/0x1fa0 [ 29.375143][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 29.375182][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.375210][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 29.375241][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 29.375267][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 29.375281][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 29.375296][ C0] ? schedule+0xc5/0x240 [ 29.375310][ C0] ? futex_unqueue+0x136/0x160 [ 29.375353][ C0] ? ioctl_has_perm+0x39a/0x500 [ 29.375379][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 29.375410][ C0] ? futex_wait+0x2ac/0x7b0 [ 29.375430][ C0] ? __cfi_futex_wait+0x10/0x10 [ 29.375452][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 29.375487][ C0] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 29.375517][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 29.375542][ C0] ? do_futex+0x32a/0x510 [ 29.375569][ C0] ? __cfi_do_futex+0x10/0x10 [ 29.375586][ C0] ? vm_mmap_pgoff+0x153/0x4b0 [ 29.375606][ C0] ? __fget_files+0x2c5/0x340 [ 29.375636][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 29.375659][ C0] ? security_file_ioctl+0x3e/0x110 [ 29.375683][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 29.375714][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 29.375728][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 29.375742][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 29.375763][ C0] ? do_syscall_64+0x57/0xf0 [ 29.375827][ C0] ? clear_bhb_loop+0x50/0xa0 [ 29.375862][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.375895][ C0] [ 29.375901][ C0] Modules linked in: [ 29.375922][ C0] ---[ end trace 0000000000000000 ]--- [ 29.375945][ C0] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 29.375974][ C0] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 29.375991][ C0] RSP: 0018:ffffc9000d177f80 EFLAGS: 00010a02 [ 29.376013][ C0] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92001a2f02c [ 29.376034][ C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 29.376052][ C0] RBP: ffffc9000d178250 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc [ 29.376063][ C0] R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: dffffc0000000000 [ 29.376074][ C0] R13: dffffc0000000000 R14: 1ffff92001a2f050 R15: ffffc9000d1782f0 [ 29.376116][ C0] FS: 00007f21afbf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.376136][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.376150][ C0] CR2: ffffc9000d177f78 CR3: 0000000134e98000 CR4: 00000000003526b0 [ 29.376175][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 29.376333][ C0] Kernel Offset: disabled