last executing test programs: 2m33.742002317s ago: executing program 2 (id=1892): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendfile(r0, r2, 0x0, 0x800a121) 2m33.729592038s ago: executing program 2 (id=1893): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) ppoll(&(0x7f0000000080)=[{r0, 0x80}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={[0xc7d2]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x9, &(0x7f0000000140)=[{0x1, 0x7, 0x1}, {0x1, 0xb, 0x2, 0x9}, {0xf30, 0x4, 0x4c, 0xf56}, {0xa, 0x6, 0x1, 0x3}, {0x800, 0xc0, 0x3, 0xda}, {0x1, 0x62, 0x8, 0x6}, {0x10, 0x1, 0xf, 0x5}, {0x3ff, 0x9, 0x5, 0x3}, {0x10, 0x6, 0x8c, 0x25}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x1}, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r2, &(0x7f0000000240)="30281fefc0320cbef4f6bbd7f0106eaa6e7fb9c4c4b81bf0716a694a02869ee61b80071d3661e213f1b9c7bfd1baf6657f9ca28cb0bb9e8df41bfea44cfe19b906c85e963179d8d90d299b88937e289755b508", 0x53, 0x40000, 0x0, 0x0) socketpair(0x6, 0x3, 0x2219, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000300)) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0xf, 0x7, 0x5, 0x6}, {0x0, 0x1, 0xca, 0x6}, {0x2, 0x7, 0x8}, {0xffff, 0x4, 0xf3, 0x4}, {0x4, 0x4, 0x19, 0x5}, {0x100, 0xa9, 0x1, 0x6c0e}, {0xffff, 0x8, 0xed, 0x913}, {0x0, 0x8, 0x4, 0x4}]}, 0x10) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e24, @private=0xa010101}, 0x10) close_range(r0, r0, 0x2) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0xa214) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) ioctl$TIOCGISO7816(r6, 0x80285442, &(0x7f00000004c0)) sendto$inet(r4, &(0x7f0000000500)="e21666e81288e66e23aea5cc46dc326d9b58f9f96a6c18d3e61051d49d640b7989b564a24b588e863989c604a1e678f4ee9a3d05c99cafba3f740ad3e12f34", 0x3f, 0x4008080, &(0x7f0000000540)={0x2, 0x4e23, @remote}, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x118, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7ec}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$int_in(r3, 0x5452, &(0x7f0000000780)=0xd640) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x44080) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl0\x00', r1, 0x2f, 0xfa, 0x1, 0x9, 0x58, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private1, 0x40, 0x700, 0x7, 0x1}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000d40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a80)={0x260, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "8c60aa7b44accc2992dd91e8dc92412b325a5b8fa38179821e3ef44b9655343623bb7e1bc286d22ed202cb168f0f3c34d9eb30beefb74d52bd"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000000d80)=0x5, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x8c, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1ff}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000f40)={0x1, 0x4}, 0x4) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 2m33.674469318s ago: executing program 2 (id=1894): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x9800, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200402, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0xaece, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.189097476s ago: executing program 2 (id=1913): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f00000cd000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r0, 0x99b33000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdir(0x0, 0x0) chdir(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffd) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201800200000008ef17676009040006010300030009210300060122000009058103c0b9ea5edc"], 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'veth0_vlan\x00', 0x3e}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x12, 0x12, 0x9, "8f4d0ae712e9db98522e581d38bc7144bf538c7f69bbd403c90d84d1ac2043bdc97f98fe08a0bc708006e5a2838642f4cfedac8bb9c5e434a7221790f5576253", "031438010ea45ca40e4044320f0daefce75ff1110800c67fee7e5069e11393f07a308a1cfe04000400a7ee5efa19e8055f9863d7802e0021d55e71b67800", "30d511dd8225bcd90de20e62aa8aa993618164198dae9f38b908ae00f1515b68", [0x2d01, 0x5]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xae3, 0x4) fcntl$lock(0xffffffffffffffff, 0x19d2918054120edc, &(0x7f00000001c0)={0x2, 0x1, 0x4, 0x7}) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) fcntl$setown(r7, 0x8, r8) socket(0x2, 0x2, 0x0) 2m32.618507494s ago: executing program 2 (id=1919): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x103) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x86000, 0x0) sendfile(r0, r1, 0x0, 0x800a121) 2m32.458157757s ago: executing program 2 (id=1925): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x741a80, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x68000, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(0x0, 0x90) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880), 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x6f7b, &(0x7f00000000c0)={0x0, 0x79b2, 0x8, 0x3, 0x40024f}, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x6, r0, 'id1\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r7) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="010000000206000003"], 0x48}}, 0x4000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) read$FUSE(r4, 0x0, 0x14) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 2m32.406074047s ago: executing program 32 (id=1925): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x741a80, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x68000, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = creat(0x0, 0x90) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880), 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x6f7b, &(0x7f00000000c0)={0x0, 0x79b2, 0x8, 0x3, 0x40024f}, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x6, r0, 'id1\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r7) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="010000000206000003"], 0x48}}, 0x4000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) read$FUSE(r4, 0x0, 0x14) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 2m17.510858526s ago: executing program 4 (id=2242): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x24a, 0xfff, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x18922, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="4100000000000000030100c000"/24]) ptrace(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd14433e96d9c06e2, 0x4010, r1, 0x99b39000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) mknod(&(0x7f0000001980)='./file0\x00', 0x8, 0x10000) r3 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e21, 0x1ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="20002abd7000ffdbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x4004) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 2m17.510506336s ago: executing program 4 (id=2243): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000005c0)=ANY=[@ANYBLOB="07000000000000001f0001c0"]) r4 = socket(0x1f, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) 2m17.510257436s ago: executing program 4 (id=2244): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000008b40)={0x5, 0x7fffffff, 0x100, 0x0, 0x8, "748dc4d6ec3287b6934ed6d754789ac2fb60be", 0x800, 0x7f}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (rerun: 64) 2m17.510130106s ago: executing program 4 (id=2245): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0xac506000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e24, @loopback=0x7f000000}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x81, @any, 0x1d2, 0x2}, 0xe) 2m17.450375507s ago: executing program 4 (id=2246): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000000), 0x6) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2d, &(0x7f0000000400)={0x5, {{0xa, 0x4e21, 0x200000f, @mcast2, 0x10000}}, {{0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xdbd4}}}, 0x108) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x27) sendmmsg$inet(r2, &(0x7f0000000700)=[{{&(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000540)="0651ec1345ac3875a2a25a519960c7f1e10019e587565af8ed7879c6ad499fd924697a7c3ed50748b6afeab5908f9084e61505a384fa7cc16ef575aeaa4e69b9dadce029484088efeb2186f58f590f4a80b64966be2889d02f1708b48182ff21e95765209ce337a29b7d1aae2100de0de89def7906e611ddc10bc837aa8852d73f945046", 0x84}, {&(0x7f0000000600)="9ed652d8e21a945cc37dacf30f1bf21c5bb738ea996e9a654a5fd193c899f89ffb6709ddec5c68164e906c1f774ccfcc8e99d94b23dc2724535ca75a6725473d4159efbc969288f2ab97eebdecc4dbc97eece108cbd4de2e531dfd8cb45aeb1b755dc0dfcc24ecd9ddd690c19ab014aa2442b17958afa93080a8dfb418a83a8dd5c560feb345fa97761d3f5500764b47890d45a04e4c917a4e8a9f614aeda02dd9b1e96db669000f16093ecdbc9c77e576ee73ca8a2f29869ac6294a054f58b530f7533befbde2e24db0200cbe5c2fb41276a365fe4a1c94cd3ec29595ccb640e7a9570573b6406b", 0xe8}, {&(0x7f0000000140)="04227f7aff5f73570fd092135e581a0d0e903935c4deb253732ba6471c1d0e75e23a9f80dcab9b1fdb80f137a0b8f8516a3dad2a72169aa00cfda3c015dc69a19d89d96649262d09577c5f6c775c17167fb3fc11221527b7e3635201efc7fd0cf6512540625ead663eb6f80be28cdab9a55d0ee3ae6d47c210c2", 0x7a}], 0x3, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}], 0x1, 0x40000c1) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000380)=0x1040, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r3, &(0x7f00000000c0)="d500b83d1414e8858d5dd5e75521c818d1fa", 0xfffffffffffffecb, 0x24048080, 0x0, 0xfffffffffffffe24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}, 0x4000001) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) prctl$PR_SET_VMA(0x41555856, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1000) 2m17.436271727s ago: executing program 4 (id=2247): setrlimit(0x8, &(0x7f0000000080)) mlockall(0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) gettid() sendmsg$netlink(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001300)={0x10, 0x2e, 0x210, 0x70bd28, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000002ec0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0xefe412efc14f6325}, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000040)) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x1, 0xe4c7) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x8a, &(0x7f0000000140)=0x7, 0x4) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-\'\'%\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='}\x00') sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002"], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000080)={0x1}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x1, 0x110, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000080)={0xd, 0x2a4, 0x2, 0x3, 0xfffffff9, 0x3}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x180}) 2m17.404194908s ago: executing program 33 (id=2247): setrlimit(0x8, &(0x7f0000000080)) mlockall(0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) gettid() sendmsg$netlink(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001300)={0x10, 0x2e, 0x210, 0x70bd28, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000002ec0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0xefe412efc14f6325}, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000040)) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x1, 0xe4c7) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x8a, &(0x7f0000000140)=0x7, 0x4) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-\'\'%\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='}\x00') sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002"], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000080)={0x1}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x0, 0x1, 0x110, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000080)={0xd, 0x2a4, 0x2, 0x3, 0xfffffff9, 0x3}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x180}) 1m59.020541149s ago: executing program 1 (id=2465): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x11, r0, 0x147a5000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r1, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) close_range(r3, 0xffffffffffffffff, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x800) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000040), 0x4) 1m58.95837233s ago: executing program 1 (id=2466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000200)={0xcc, 0x0, 0x1}) (async) setgroups(0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00007f2000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) sendfile(r5, r5, 0x0, 0xffffffffffff9dce) (async) unshare(0x12000c00) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r4, 0x99b33000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40008090) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0xeeee8000, 0x2000, &(0x7f00006f0000/0x2000)=nil}) 1m58.937872871s ago: executing program 1 (id=2469): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r0, 0x0, 0x0, 0x8, 0x8000, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x300, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x3}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'vlan1\x00', 0x4000}) clock_getres(0xfffffffffffffffa, 0x0) dup(r0) 1m58.926248491s ago: executing program 1 (id=2470): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1f, 0x5, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0xff, 0x401, 0x5, 0x5, 0x8, [0x5, 0x9]}}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x1002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540), 0x40001b6, 0x4054) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) move_mount(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', 0x270) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x2, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m55.862251826s ago: executing program 1 (id=2490): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001010f10000904005d120206000005240608"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="54010000100033060000000000000000fc000000000000000000000000000000ffffffff000000000000000000000000ffff4000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268], 0x154}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f0000000b40)=0xc, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000007c0)=@newtclass={0x24, 0x28, 0x1d, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffe0, 0x3a8e58003da8072b}, {0x8, 0xf}, {0xf, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40080) bind$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', r6, 0x4, 0xa, 0x65, 0x1eb7, 0x18, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x3, 0xfffffff8}}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000180)=0x9ebb, 0x4) bind$inet6(r7, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0xfffffefffff3ff3e, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) r8 = memfd_secret(0x80000) ftruncate(r8, 0x1) ftruncate(r8, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x20400}, 0x0) ioctl(r4, 0xf4f, &(0x7f0000000240)="bd67336cdeec84d80b6210afa23c671d38b671195f4ffe249ae0f9f3b545e480199eed24e8f4397509c97233204f6a6ddfe65afbe5e139c34598d69d40e20d2a2836e8bc4a452f2040abd2845912845662bdb978f5027a41c156cc7d831bc91265f876e833218b6d2cfb9b29b4a926f5eebc6cf6ba7ce8cd0f23073bef5b27df7497dbaf14182a87bb227136e3486c79df4ccce1a45d1c52e76c56b27922405186e09a0fd2799a08c2483f4682e4d9409ff54b7720d68a063da339e6c7b6867d6bde6e341560df2864e5c4e51aa4eb7603204f0d279a7321b871") inotify_init1(0x800) 1m55.796146147s ago: executing program 1 (id=2493): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) (async, rerun: 64) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b", 0xb}], 0x1) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m55.719503808s ago: executing program 34 (id=2493): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) (async, rerun: 64) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b", 0xb}], 0x1) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 53.43971392s ago: executing program 5 (id=3604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x3, 0xff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001540)={0x6, &(0x7f0000001480)=[{0xf955, 0xd3, &(0x7f0000000100)="90c782d182e2daa352176400445159fa55e55618dd076dd74f4e7e957358a875069a254f7bb6ec96cac3faabf74c747182ace083f91343d435e736f0eb739bac7924a847fa43e7213b5a8840f9c152053d4cb8b17e73b3178507c5db5f7f9dfe1260284cab69bd29c60f18810ae18b33a221d65485a41e3272f54f2875f9452fa2a49500ae373a5718a3ca377e8adc3b53f24e1853d726383c0fc3b18ffb455248d83a040ea721c29c5270f727d1dd99d9cde067ab009c83c8a4a9e4f1e698b4a59d80605fae2aeee78237c6bc86beb1084f06", 0x1}, {0x0, 0xfd, &(0x7f0000001840)="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"}, {0x8, 0x7a, &(0x7f0000000300)="0a9f9557e4e1081d8d6f05c61425335bd965c9e44e1e707796b49801edad48bbfa837c72ee075baac7447ed716a86c5c3f42cad20e050d0a3772105d34a1dabb0cb2b2cc41a3e687970d246e1b215eef3d2fdba7fa21a4a30f77c7f42c28f1fed7c40e724577f190d4555768eb0fdf59f4414ba72115851b45ed", 0x1, 0x1}, {0x2, 0xd, &(0x7f0000000000)="c1c185b0dc382443d8ba847987"}, {0x7, 0xc7, &(0x7f0000001940)="612c7d30a7563ed995ca5a652e4325e8550bcd9a0331d9f71ee23ba99a92308e586c488794f4e4f928fea0b50a65ff7f93e4ef71bd7c7eb15880db2dae12713be3a2b68eaf4c8470c55b3660e9152f71ba5b190e6da15c3d14d88a82fc85bed0e852959a3fafd3603f43af487948cb7abdc22bf06525c24f21425c9d90a1d4dc2180e6ba9636e16c9d0d1f194b8bd0fbf603c434f9044671e828c950d9ece5de0c60842fd64be6198c0979ecbe6ed726bbea3dc981ee82a85375e8188ce1a44a8fd5ab036b685c", 0x1, 0x1}, {0x2, 0x1000, &(0x7f0000000480)="69b6e0a80cabd824bf17537d81becd529572b358888fd6062e3cff436f2c0430e60aec9352490762dc6686f843543b1ae9d84e8304c8ff37627c8b3819d8e3cc62db08220be9643cde058d47fcb6986fbcd5ea269402bba3396dff508844f1eaac932ec92050c9379dc9eee4429ba9a32dac15ec236d606c5c978d58d5cac9c365ae1a06356c29dd2c129f7ea7977869a4f012d1feaa88f7999204d91aa55f0ca4249e4eb3ac0dc5987ef937dc26298884baf084ef4a23a06017df67e1c300933a45a54d77f3e33cca6c57e9165682a9fa2d273ecb3b5ea6c53888019a0660232c9ed0d1a077f4b32bef03dda621de81b83fcd66aa511ce1436dacf118b117420f699f6309feaf7460e65064a559f01d9b3489efad19b51096d074881f5c7ad904483ef5fc6e166d1452aa1b65cd1b415fc2b2e6b4f6ed16daa45bb221345212dff74b94fbf658d48db9e57648f832d80dae822a389105a92a8d4fc9aae2d121aa547390f102e4c864faf3b02cc16935c26618a851d3e80d144ff5e79bafdb0ff08b19486ceace8cea8d3fe497ae60931ecadd5e2b1dc235aac715d0589fb65aa54e8ba5018d03f4402026f9be13ce5ead5a2e044d3240f2b40a3b76b68d7faa63b16902f52b2dc556eec72cec52885bc99a2fbb7de8ae3f56d9daf946536b5a347d29acfd9c24b13c5f7737d4fb46a3d37418199c1b34b6de1b55299ff64221de55cf6f3b87729cc7fe04e3d2854e246228b52a3305f4b33894df55aa164218e6ec0d75d48c251695c6a7c06e38e88452f106accc222a01aaddd4989e0d209129774f938bff86c3c2dd10c40e6ac03f3f55faed99a911c04ddbb6d20a26519c8eee568ed510b5c5c07d0ad088773467935eacfb1fc7091304643e62dc30f14f3faef96af25836c5749a48383cd7cac5e83e0f1e106c22300975c658bd7b7ac26f27ede8488f5aa13a380f1187f00f722f8f741fa8bd303c623f70ae3eb0fe7bf1dc234f541769debba2ee7e126030ac56799e8c6f55988a5de4479cf6b515ed0ae4a06427a6c6db52f5588291bebd104b474e28578593bd43403991dd3407eac872c3ccc6aae0cd35d8533250c97ec7dcced9bfb95e27d3b4a766e5a6d218886a08762c1e1741bf1f907ef6ac2cc03c450e2bd9b03232ea4e1dc741c7cf5c152323c2a624c0d655f1aeba7bb97c8fd9d1f7def9e4a8e0ca306ece297526accfa9dfb903ec481d72a79e3f5c2cfa43edd018dd04a88b214b9535062a2d025139b0d153a96a36351d66af7fa330f7715111f295ae61df6f1069cf4d6a6c8eeaaabc33d30a146940b0eaefec0e51f0548871f15125794d39842e8a01baf35911bac6a31f66228d85953655f09d70a7e5c1e1098474233c247d2db18a8a2eee6f213770c10b773ee282179cc9de4b574834b8e743cc82eadb71a267c6b0214719625ed6ec50b55a7ad3dd693af7a5ac92b444f67610ff069c95d7714e0abfcf73e27945d0ceebe7247ec17bd353372f2ee22399c3f315cc579798fa8ac5491787f4b96fba2875d4e36f4ac6559c3c0d732f893c3d5ec15876b47146d85a71fc9e6d2ea16619815744a7c83551a1aec34b0ff85e0aed08e0fb560787f4e9736e122adade8db190cda1b6113cf575631587a42ab67e1fcb9437dffb3a471eb051899bc9608521ade7a231ee7a935cd42dce29ffb6216cb3262a8e8ba1c2f634a38ce277c88027362f12f901395b893128c1a518739e3f2e2ba08af974b8cccd61f72570db7476cd5901991876e9c761f9b35760468fd2779a6fecf7ddf58659c51ab75ba5d08b5cdc8b16a9b2794ea130b948f1d3f5950de696dc134e1879a8a42784906846cb2769e55838c6f0616af07bca5b17d24024837181620918ca084d1d39c7c4feeb99dba7a98df17c1b830727d23b089812ae089227b0845832d044f83ba24c090308a226ac8dc5782823efc37a3b07602078a92af94f2f1af874c74cb5176f8b28054aa01be7857da01633ab583805b73de4c3b8f0d4d97ebd44bf2aabc7ec5da2e0a2ea288eb5b5019b3f2a5a93a75a6ac98eb1d39fbda3098281fc7709b8ba0db5d198d12dcbfdeef177905dfb54cc28b2577aa82f0863888c836171766c1c0975634806397917e8c43fb20917058ad5563c696b6865e156554ba36f8b3351a33cb84a5adce4eb4676ad4e8ba9adcb4ad99560baa0aa6c6da7b2ea80eb11391722937bcd3203eb88218d65088e14dd69074ce71309c3501f4fda11b33b1d22497e0705891e2be863215181d5200a9180d5754c4a1154a29d639d6985a928584e6c28dc6f90ea7cfede63f83d32185d080aa537fd1ddcd038f797d13cc00cd64b079c27ec7422825227a2aa704fdb62a0f45ce23915724bc6b89d2864c7f32d2c12c83203b62975bbcab8efb4e8044b1ffb56575c6f660f27fd39ac59fbf9c1dcc10e357a08f15e52cccd91f5d613a5c3eeb0289f5821b4705d03a26b3b88065df6530e8ce5247dc79e14278b28f58ce89dac4344408197c83a4ddb7b699c2638bcf86d57e6fcc1b6832475a326ad9f05c96746d6fb9fda20ea0390c5532ad50179ec8f62f3fc339e95685803f38a506843c21e7442eacfb9ea18b2d5e4028baac209e6ff89f28ab118023272facaf09ae4eef4fd6613b241293b09dd7bf196ed5d618bf5fc8ba243ce1ce55b589fbd66340305efbea96424a206e888a578e48572effd6fc30d3d3b2973612d54924cfacf791e8af58ced8ba044dc72354dc6fc7b9c066f2a918ececedf70636d6005dc35a4efe2870e5c46ffc3f49201f20854c12103e422e88f3317c1b4e8605c193985eb0784a923e9d21a1982a864613caa0d8ecc0f25d5c1cba4085cda70f2c6eb20ae44e36663e2c286c9bfef7885986c8a88d5d2f9f682320765a76e23c406f0c66dcc0d1589054438809b7f5be0ba54d6623973a1f98dcb987a618c1a20538759f495be6a5785c021f7dace6f1094c5cb8cc857ee5ad393f99c21cadb6ed7e1e62c754f656b49e0fdbc72bda54b6d2c522f48d0e1525a29ef77c7b38b463b7083bd1b2ca068f84af6b99dd16c92b7e0f9afd137f3a93185b2070f769d83e2ebd259020732132d8d153b269c4a76dbcb02d4023cb6ddef0edc211afd7cc6ce9c72c8e618c4cc2ff16b37651a8cc5ae7204111480cd040c3baaf70027ab5efa12f9f91f20c0f22087cae8fe74f437a821d6add77ba72b761175c58ad284c7023107efc7e182709c7969cc6c23ce9e1fd8b453b2fa0ddc1ead7a767ea8f4c3a493c3e1e54439091e7f6cb4bea368e4a0c8fefce8d4fe73dcd211c976729301a3a905fe0191955669eacf3ae69c14217d49db68807ae3e71e23d4498302c4fbf831720ed009d885220ee1d4188b6702a794da53845b4b2721cc04735f986b455037949905436fbc72442d803d1bdd6048b45d12200f28d4078eb24ebc905cbcfafaa217241322c2621c9d64ddf378282da4f5b8598cf9bdc5458f48ad21673b11c0b9f6d26850681f184ae6ff96ee13b42bfefdbee3a3670ffd0e5192bdba492be2750901d2293128af419280a69f8fe46d02f768e22efe2d49fa2c1652064132779af437cc0894b616565237bf204ac37dcd0e5ff273103f6a59da2fd984d47a557da33639096a221e706f087f9afc1866b5c6c6072cc83d3541209c1f00821d26b3058191f8e846f7ec9472dad3cfacb138d10e276756220df22b15568fda0c9ef81f4be6ddc5aaa5ed9438fb875c6883ba48e1ca005bb82a7389433b506ef26d02a66099e4516b5a4da0f2bb79259a2799cd0da73cfd880bbf8e0c583b31e8a1a8f2d18b66ae9428858c1d2ca1f082c5866b6f126df5565cb8bf2fb862500a13d16a07bef7439dc3020206526cd46863ef01c6b3bbaa910f9011998bdd298437e91a2a5e4b9bb105b7ab23ff50712a25924641f47b5bb7dab650081e29817ab6c604fe9bf65b8b438521c861c9e20c344c9c30edaaf8a39337714fb485eee73546b42624bea201aba2bef5bb9f32467e679124043e16a5cc167096b3de950f115fd4e687fa4d4f071e40959156a8a3f3d38b8128bd6efabcbc7666f7a1d501b4a1ffb3919704d08bd95f4fe4f4afb3c0f1ab1a58c2fc72241c6b3c2cbf2cf02b659f8c1ad31edb24de312cab1ff136f06aea7b5f0dc1247d24c31285bd1dcf9f269b5fa2fea6e85746a52a2179b87bc309296cb57385d16872098fe1289a22f5d45675489890033730d14b96ba09e4e46756c553e5190fa137619a7197bc0cfcfdf44536702defbe90ce2c77eb25dee14a09295332532a6454743c80bb4a6bcd3db75a63b7de77543f944481475626706f1f90f858bca11b8b3242309cdaa2c62a1e058156c911ed7937073dc7391ae6330497c98bcea010fd357caf05cb15bc8869644e3666c5e75f96173642c3021109c7b715852897493334929bd288203de70a5889bd7484510ef33687426553cfc201f226a1d76f29660939d3b86f05306428e423c2e51ae39324ebd729d792a6f12ba7b9e211541c457a512c2d3d17e9f5eb7b734853b81111979de55569cf077134c2c7f920b4db835bfcbafb855674e355104a7a1d2abefcaa04173e901ddd3db52076a350ba76c1730d9b04ad77e68ac8efaaa551745c41291d149732e4a5c90a9c8233f839ae4d9d2667a8d4c687d31b949001c67cb0f171a0dd713e10f239adcac8580e3a30146f4ca6d1516af8da76dd883bf580a31d9284ae04043e91c8f1d2c02ce8d8a1fe13c2e4674b7003005d62e3653dd457bb2034cc2030f0a802c95ee0aaed417c3767b541b7bd7ac9150763ae71116b1c6bfc955c7edfbd6cda18f802816007bcc25da7bb76299b9983e825b0c8a38211e85bc5d906feed6cc2892c233a68b230532ad8c96c38e9f17ad8b2a1073118725cda0ca7d5d131ea74771439e243107488788e3fbb561d700725c65acbc9ac8e3ad340f169af45481ffeaed347ed42462a39d7c4432ebb837cc9d0f4947e7599a8ed1f2d8c3a9de2d10528fd6cc9ce981f53afda3166d20a4029ac9a281b507f5477be9f202397d0b03fd00715d32feeb98053c9789333e548aef663585c466b025f0507b0b636d14ea0cac3a24b97b705b8031c6b10003b860d2742ee1ba769702b8aae0a452cbb0d29b195368fa228cbf8a1f0178bfd2e605c2c15bf224181107ce9fd97de2de9e8a6ffbc6b122cf74ead2c313720a5e88adf9a4fcc924d81f4ca9b6ff5900fcf9d1bb2b17f69b47f47640acba41bba76d626d7628a004f11c76b601b8c6f49f2b932ed38c99e7b4ca6ef76df30f50f19f5cd00d1ad66941e68beffd0a50e25e072f94b68313bf3129874a6f8606edfaa70042271b962d0d56b1510009cd6d4adae2483b205e89bba14f91a4c6aa32493cd4d79705124dbe02fbd390544006e433f03f0a5baddf7d3db5032ba2477977b26c18a4b253f912c99be97915a9570709b692499b313d307df0ffa09b4289dc09a3e4a6f1516a7d9e122cd9a4e4fb6ca46238f5b3b27caf40696933282d1cd00d6a2b9b25cb33f93996cd5122e277e36dc2a248424fa5356f05d22ba4e02d60860c62f3bb2ebb64a89d35c313675b26ed95d9fc637a5344c94b7af02ba6694102d00fe17ef53c06fa07b312afb95c4bd3f3407824fcb7c87797dac18d807385ffa1de15e4935bbe6493c4cf4beed61e931eecf8231b523567c0f7a75f940a8a9c998aa140bb34ddb6d5d4dacf64edba2339d275cd96b93240043de7d3986c74f8561c58ae41e5bf89420a1f0", 0x1, 0x1}]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "5425b774b3afc22715bf33f68550e65e70bccec56b18356ebf526a77ce5cd681a2371c0a06405749b3e281383e7160b35696b3741d04c6ab2213bcbf508da2bd", 0x20}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, 0x0, r5) keyctl$chown(0x4, r5, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r6, &(0x7f0000001600), 0x0) keyctl$instantiate_iov(0x14, r5, &(0x7f00000017c0)=[{&(0x7f0000001580)="78d4c726cf117b622c44dd09b54af86870429999bb256d027a1c383d397b13a6d1dc944be8c744622daf93fcd0f9e93f24ba46991d0753cf3de36b89483de59e66ab378f2fa04a7f8c95157c", 0x4c}, {&(0x7f0000001600)="dafbc9a537f2a633ed82f7ddf29b84b5abe317fddd3585089c9e8da1873593824da77f2c2f1c183bb5a92f0233da11bc2b8bef6fd55294c1cb86071f5582adbcce04e4d7c40fcdf4cd932c81c773d4d99d60d73342f5a816d3904a1cfbe814ab8f4e4c9aa785f18228993bcefa81ff30797a31352a0887bd8e9b7c057860a82eb80475e71682b3ffe978f2b17b92737fbf68e41d42d7f4edbed7422c47b85e8caa4de6422427102a074c11d6268d943b1a740153aa2b9ff52a9c9d3b6c4c507415d36377875e189004c26c5623fb228d0e16b6209665f8a3b034125756d9900367", 0xe1}, {&(0x7f0000001700)}, {&(0x7f0000001740)="f9fdd7a5c8f9a8c3eee68fa1280df559474023dd73e457fa2b960c24", 0x1c}, {&(0x7f0000001780)="d61ec07da573113dc728", 0xa}], 0x5, r6) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 53.302462592s ago: executing program 5 (id=3605): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) (async, rerun: 64) write(r0, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r3 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) sendto$inet(r3, &(0x7f0000000300)="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", 0xfe, 0x10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f00000001c0)={0x9, 0x4, 0x9, 0x1, 0xffff9373, 0x8}) prctl$PR_SET_MM_EXE_FILE(0x36, 0xd, 0xffffffffffffffff) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 53.298208292s ago: executing program 5 (id=3606): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b"]) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x8840) syz_usb_disconnect(r3) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x48) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x6, 0x7f, 0x8b96}}, 0x28) getdents64(r5, &(0x7f0000000040)=""/40, 0x28) getdents64(r5, 0xfffffffffffffffe, 0x29) preadv2(r1, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000840)=""/56, 0x38}], 0x2, 0xa67, 0x2, 0xf) read$FUSE(r4, &(0x7f00000011c0)={0x2020}, 0x2020) 51.529073078s ago: executing program 5 (id=3621): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x14040, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x4}) 51.474467849s ago: executing program 5 (id=3623): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="f36d64670f01cb65f26c0f21306466f00fc7892c89440f20c066350b000000440f22c03e0f22511be30f20d86635200000000f22d8baf80c66b8c007678f66efbafc0cec", 0x44}], 0x1, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = dup2(r6, r7) ioctl$EVIOCREVOKE(r8, 0x40044591, 0x0) (async) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6(0xa, 0x5, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x0, 0x20, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}}}}}) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TUNSETDEBUG(r9, 0x400454c9, &(0x7f0000000000)=0xfffffff7) (async) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0) 51.236453322s ago: executing program 5 (id=3629): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2000, 0x0, 0x0, 0x0, 0x0, "23f50000adb4004408020e90d1beaa82dc1ecf", 0x3}) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x7f}, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "8799"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x7}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r4, 0x0, 0x0) (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ftruncate(r5, 0xc17a) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2100, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) lseek(r5, 0x2000, 0x4) syz_usb_control_io$printer(r4, 0x0, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) 51.146709654s ago: executing program 35 (id=3629): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2000, 0x0, 0x0, 0x0, 0x0, "23f50000adb4004408020e90d1beaa82dc1ecf", 0x3}) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x7f}, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "8799"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x7}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r4, 0x0, 0x0) (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ftruncate(r5, 0xc17a) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2100, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) lseek(r5, 0x2000, 0x4) syz_usb_control_io$printer(r4, 0x0, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) 14.87140642s ago: executing program 7 (id=4054): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x2) read(r5, &(0x7f0000000040)=""/8, 0x8) close_range(0xffffffffffffffff, r0, 0x2) read(r1, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000007, 0x10010, r0, 0x147a5000) socket$can_raw(0x1d, 0x3, 0x1) symlink(&(0x7f0000000080)='.\x00', 0x0) chmod(0x0, 0x38c) io_setup(0x9, &(0x7f0000000280)) io_setup(0x10000, &(0x7f00000001c0)) lchown(0x0, 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) capset(0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 14.256905089s ago: executing program 7 (id=4064): r0 = socket$inet6(0xa, 0x80002, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=')\x00\x00', 0x3}], 0x1) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x400040, 0x11) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x40, 0x40, 0x14}, 0x18) mount$9p_tcp(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', &(0x7f0000000680), 0x2000, &(0x7f00000006c0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@mmap}, {@msize={'msize', 0x3d, 0x3164a8a9}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@nodevmap}, {@aname={'aname', 0x3d, 'overlay\x00'}}, {@privport}, {@version_9p2000}, {@cache_mmap}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) (async) renameat(r1, &(0x7f0000000500)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r3 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)=0x0) timer_settime(r4, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) r5 = gettid() (async) tkill(r3, 0x35) (async) poll(0x0, 0x0, 0xffffffffffbffff8) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r6, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x12) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') getdents64(r7, &(0x7f0000000180)=""/206, 0xce) (async) read$FUSE(r7, &(0x7f0000000f00)={0x2020}, 0x2020) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1ff7, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0xd, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x75, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x72e}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x80, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x2d, 0x3, 0x9, 0x40, 0xc3}, 0x4b, &(0x7f0000000280)={0x5, 0xf, 0x4b, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x6, 0xff00, 0x5, [0xffc000, 0x1fe0000, 0xc00f, 0xffc0ff]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x51, 0x4, 0x81, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf, 0x3, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x9, 0xe, 0x8, 0xe2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xf8, 0x2}]}, 0x2, [{0xaf, &(0x7f0000000340)=@string={0xaf, 0x3, "e14d12b9d0b53155d721753fc0587a1aeb11ca4501ad3bff3c17ee368713aa2c2c0e390eed0d60b682a9612c49db2d61adafd36ca1bd60c6ef0dbdfabee85b4b14a45b3d275137d2f12432203e17bc5fb971ad9a94d41b978f1eb83270636876da5b88492640ccf593c473704ef644f4c00333929e02c1a4e14b6b4295f37664c381b8ccb8e3a4d0dd9625fb72a66197767a94b5803745aa4586502db973f91dedeb8eaf8b5b5bdd5ce67f8eb6"}}, {0x29, &(0x7f0000000440)=@string={0x29, 0x3, "2d3ba5d7527400824e880a436dd016df50afa68aeaa9ce6125a464cdf068f326b1c99be2dc4628"}}]}) 14.24102495s ago: executing program 7 (id=4065): setresuid(0xee01, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) prlimit64(r0, 0x6, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r2, r3, 0x0) 14.054961932s ago: executing program 7 (id=4068): r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x20000, 0x83) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r1, 0x0, 0x3) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x93) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB="303030c2ab09e4b339bf4e3737373700a40f66215f04e88ad3ca3cb7c3b7dea42c5c9bc31f2fead32c00"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x212001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0xa80, 0x104, 0x4}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000139000/0x3000)=nil, 0x3000, 0x800008, 0x100010, 0xffffffffffffffff, 0x45806000) move_mount(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', r6, &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', 0x270) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x9f, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000180)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x74}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) fcntl$getflags(r10, 0x403) 14.027787013s ago: executing program 7 (id=4069): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) futex_waitv(&(0x7f000000b140)=[{0xfe45, &(0x7f000000a780)=0x2, 0x82}], 0x1, 0x0, &(0x7f000000b500)={0x77359400}, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="2b2f43d6f1802807512f570652e5156ae97eee3a8a7c181d52f9ccf3b14ae527a8f7b4a7de092856da8c3ad9575021f6b197a549d745eaf147cc4e52a1bedd1e10c92b2f076116341b8bffecefd5a778b1bf046428", 0x55, 0x14040081, &(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r1) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000180)={0x1, 0x6, [{0x6, 0x0, 0xfffffffffffffff8}]}) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7f3", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}], 0x2, 0x40091) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000040)=0x40) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) futex(&(0x7f00000001c0)=0x1, 0x108, 0x0, &(0x7f0000000240)={r3, r4+10000000}, &(0x7f0000000280), 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) chdir(&(0x7f0000000140)='./file0\x00') sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x4}) close_range(r2, 0xffffffffffffffff, 0x0) 13.930583524s ago: executing program 7 (id=4070): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) fcntl$setlease(r2, 0x400, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, 0x0, 0x4008810) mmap(&(0x7f00005db000/0x3000)=nil, 0x3000, 0x3000001, 0x30, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010141}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 13.907064525s ago: executing program 36 (id=4070): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) fcntl$setlease(r2, 0x400, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, 0x0, 0x4008810) mmap(&(0x7f00005db000/0x3000)=nil, 0x3000, 0x3000001, 0x30, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010141}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.730732465s ago: executing program 0 (id=4283): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x900, 0x0) r1 = syz_pidfd_open(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r2 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={r3, r4+10000000}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) setns(r1, 0x24020000) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x200006, &(0x7f0000000440)=0x0) eventfd(0x6) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000180)="d632d3a1f7118c7f8764def69c9b2aab6cece358d2cbb6fa9284fe8995936629674ec4a3cebd12c002457aa9c202dbccb30a8774207b6634a138640b370f2e6eb39145a4526413a90c9463ac3dba4053fa50e703", 0x54, 0x8, 0x0, 0x1, r5}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x20, &(0x7f00000000c0)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@index_on}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x1a1444, 0x0) fsetxattr(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="2e000e38ef50ff34e0d6adad6b7be6d2fb8eefa2f8e05d060000000000000034d74dbbd020e7a541d18452379206d701f53409a183466dda4838740e9c893286a764a3166860f4"], 0x0, 0x0, 0x3) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x54001, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.729711995s ago: executing program 8 (id=4284): socket$igmp6(0xa, 0x3, 0x2) readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)=""/4096, 0x1000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x442b42, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x101301) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf250c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="1400038061d726125897d204945304000500040004000800020000000000"], 0x34}}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) ppoll(&(0x7f00000001c0)=[{r5, 0x100}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={[0x10000]}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f00008dd000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000003c0)=@usbdevfs_driver={0x7fff, 0x4, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x13, r0, 0xa050e000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) 1.640912726s ago: executing program 8 (id=4286): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0']) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000280)={[{@gid={'gid', 0x3d, r1}}]}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x110, 0x218, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000100), {[{{@arp={@rand_addr=0x64010102, @multicast2, 0xffffffff, 0xff, 0xe, 0xe, {@empty, {[0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x6, 0xfe00, 0x8, 0x9, 0x8, 0x0, 'ipvlan0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@local, @private=0xa010101, @remote, 0x6, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010102, 0x0, 0x7f0000ff, 0x8, 0x6, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="c76729701c14", {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xd1f6, 0x452, 0x100, 0x1, 0x9, 0x6, 'vxcan1\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x40}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xfffffffe, {0xf5}}}}, {{@arp={@private=0xa010100, @private=0xa010100, 0x0, 0xff, 0xa, 0x6, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0xc1, 0x9, 0x3, 0x0, 0x2, 0x3, 'macvlan0\x00', 'veth0_vlan\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@remote, @local, @remote, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) chown(&(0x7f0000000040)='./bus\x00', 0xee01, r1) 1.593389327s ago: executing program 8 (id=4288): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffd, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) gettid() gettid() r3 = syz_clone(0x3000080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'wg0\x00', 0x4000}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r5, &(0x7f0000000100), 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1.587926027s ago: executing program 8 (id=4289): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x2000005) socket$packet(0x11, 0x2, 0x300) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) (async) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x1) fchdir(r3) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async) chdir(0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r6 = socket(0xf, 0x5, 0x0) (async) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$unix(r6, 0x0, 0x0, 0x10023, 0x0, 0x0) (async) getdents(r5, 0x0, 0x0) 1.316492261s ago: executing program 8 (id=4290): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='vcan0\x00') r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000000400)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000003c0)=""/51, 0x33}, 0x40000040) mmap(&(0x7f00009ff000/0x4000)=nil, 0x4000, 0x0, 0x40010, r1, 0x62442000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000065c0)={0x0, 0x0, 0x0}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.246167762s ago: executing program 8 (id=4291): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f0000000380)='./file1\x00', 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x1, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x8000079b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0xfffffe00, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80400000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a) copy_file_range(r0, 0x0, r1, 0x0, 0x9, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000000c0)={0x0, 0x18, 0xf, "62125c329a381797d5f80b5579315d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c9130001", 0x1f}], 0x1}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000810400"]) r10 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r10, 0x0, 0x4ffe6, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0']) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r11, &(0x7f0000003480)={0x2020}, 0x2020) 1.089564684s ago: executing program 3 (id=4294): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3ea, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x4810) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001d0001160000f356fc1de90007"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) timer_settime(0x0, 0x1, 0x0, 0x0) (async) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212"], 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x10) mprotect(&(0x7f0000697000/0x4000)=nil, 0x4000, 0x0) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x1, 0x24, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (async) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 932.030127ms ago: executing program 0 (id=4295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="01010000000000206a0557000000000000010902240001000000030904000201030001000921270b000122060009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000a40)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="16"], 0x0, 0x0, 0x0, 0x0}, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) close(r0) getsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder-control\x00', 0x804, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000300)={'custom1\x00'}) select(0x40, &(0x7f00000001c0)={0xf70, 0xdc33, 0x81, 0x0, 0x4, 0xbfc, 0x1, 0x2000000000}, &(0x7f0000000200)={0x9, 0xfffffffffffffffe, 0x1, 0x6, 0x400, 0xfffffffffffffff2, 0x365, 0x100}, &(0x7f0000000240)={0xa, 0x9e7, 0x7fffffff, 0xfffffffffffffffd, 0x6, 0x1, 0x9, 0xc}, &(0x7f0000000280)) 570.562002ms ago: executing program 3 (id=4296): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000140)=""/16, 0x10}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = userfaultfd(0x801) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000002b40)=[{{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000440)="db8fb3ce252e56163ddd2e3e55007dddc6afc5320149804f84e9b51102862dd5973222e2305a5e7740711fa23774fcb928c393", 0x33}, {&(0x7f0000000600)="587ac158822f418caa01fc2318227ae58f69fbe1928cd69a7c10651ec8c3afd0344a1f2ac518e699b9a38a71d95bfa088cd9091a2ccad353748b65e4da43d3ea49d6f85e6b8069f9e9d1445a5f0f3c999f208d38f444c60fbb18e2c412c8fab16722539abdb849d5d2b170fc7e743055e2be0db858f1d8dd840d76716b09f9e535ca909045089ab1f2230fc2370519450f1967dc85b63bf393b5f187bc3d0865b5f62ab7f3e7911933749dae3cc2ea76159153a90706f3c398c46a8ad7c698312c409df8923d10779d016b0c0cdc68f5a40c6490c9a10ae6b54a", 0xda}, {&(0x7f0000000700)="132a9aaacea2aa7cdaec16017eb8dbb55c84e9b15122b8d141b7e3833c38f7c26b24884839ba3d4af13ee8008014edcb74558a5d987da0d48a7bb4475fe5b8f4669b149e99edd13f7106308e37b4404282f8c735d5084546cd4b89f7dac69f2234272ad88d914543dae753499d5c8e01cb4aa1d44220bd93c770fb7fb089e75fa2358698a71eb7471c16696e620d734f2c", 0x91}, {&(0x7f0000000500)="63084cf62d547961316e2ea26a9609b017158d0656bf38a99c306fe31a1adce1954e695fe3e1fad4f1ed88e5357d04fb12b015690f020edc16ff3a053f04e79077fd9c16a75b18e9707ce5b2ae23999935475e34bcfeb22e5e78d06c415c9a9a2afcff3f5ccdc765cc621ec5a6efa1f5dfcafc02da6bbeef92", 0x79}, {&(0x7f00000007c0)="ca778504cec84ef18571b93eb7f7b56dbcd0655003656d36083d3a8fdd4521c05fefb46864292361c7073f756f7c51765aef043eaf1c12f528f8cbe823ef99861994f12bdc771c109472840e54e77a7243cb7916babfbd564853795e8e0de981538f86a119ffb1e87a4fe40c7160f0c605a6a31c969ba3edd4541afd7cd4a209d987c4f09488b1431eb6927ad381d636fffc6c93988dcd65", 0x98}, {&(0x7f0000000480)="1deca2478a9c7322e3ba324258", 0xd}, {&(0x7f0000000880)="c40f800ab3b60464b2daf4b9e9c9ddcacb194c4c9721cf1c24894aa4592f1fbd27bfda120300f16b09e411ba555f7d2dc95a6d", 0x33}, {&(0x7f00000009c0)="040557a7eda04f0c9983c0a4cfe3da662692652abb4108da0ec0eb748f9a24dfebffba5cbc50b23dcdfe74e11ab03fa12f2c7b2f86bb35839fa42edb6533775732e6f6a3ad6c7329cbd6fef9671ce859911bf4065cbb60723fa541e07c892edf4f9411a340e5b4000ead150b2f80adb1b43fc0ce86f4f7fcab7303c6309cd6f62d7dca397290ff0d2cd7b59786cf55a5dbd7bf5c5649a227634f65215f2c641b8f033b9936702d68899c7ae234c808a4ee265ede66c8234a4e45ca2e13c4592fc632429bddd39bb166bde7e38bc57cb2c74bb075ff761d402ef3d1209d81d6fd58d9a6", 0xe3}, {&(0x7f0000000ac0)="805ac55c7b5500abefcca867c4434092c06f988d2035322a3f3c496ace123108e7a9d9de5f38881065efedb51d6c35f4f70f45431ff014b3fef4420828b3941a25e9d4e3b2d8fc75d0a2e3e7116b72255fb44caa15731c1ff04388c0a378cc9c63919c8815aac018e29bf1cc1b3e02e12872dcfa3477cad45d44f32c46f0059c182e3aa472a4ff", 0x87}, {&(0x7f00000008c0)="804574dc9f43bf20befe3f090cc84b2436b80e881d787969b6e92afb7b", 0x1d}], 0xa, &(0x7f0000000c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000cc0)="aa66d8bfe272d6865420cdb357ac2c9825", 0x11}, {&(0x7f0000000d00)="6a7bbbe29d961a02d5fb765d95cf5d99b1a8860725a8ddec0259341cee2ac54cf4cd0d180b386864af26e7f16c253a65321064867ca0746f4275855cd575c2d94ff70985779199fc4cf484b077021360a10c69293ca9dd025be096e5aeb6f6cb017f13add912d06f50af8dcea14309529ffbc7690358f4e21c6c7ee402b3a0fcfe2594979fbe07705c0fcb557e727369f0851f20e1ae92a4b53321fce1bf65e283a51afbe6a1497308df52eec2f69c9e045aa43a84d7585701320e7626ef25", 0xbf}, {&(0x7f0000000dc0)="24211b1c3ba1302d52808d1e33df5aba4b6a7b50b1e8944453fc190ee4c58f2ff3f58b8c52222e9c19d1641347b51b17a09fc1604e4b98a4e02a504fa8b9", 0x3e}, {&(0x7f0000000e00)="b5d6e83270f33d612ca6d3487defeb286d96dd57e989c9f2730908d224ca4d7f7d35a372165e93594248c5e05cd2c423b2f4e3f8c5baf9c90f54bc8a5cc45e7480157fdc0ea6b2a3ede572f0a50e1800ae739def78631517cfffbccc4174656598f06eec79e02e7b484b6b9eda56c6fcc57424c2456fc6cccdfd94142af020d1c5c2dcffc67aa3edd8a95f2ef5fcaa14614007824bb1eed03bee0c92a99c1ac5", 0xa0}, {&(0x7f0000000ec0)="7ca4d5bd1bcad6c01e9e6b930b0ae89bbfb5a9fdd6613406158cb3b758987c8cff0beb1c58f74b09a2fe15760fc604032ea613568c07cd3734a6fb7aab8ef23bf42ab431a8e498a2238f86a7", 0x4c}], 0x5, &(0x7f0000001080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0xb8}}, {{&(0x7f0000000fc0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000025c0)=[{&(0x7f0000001000)}, {&(0x7f0000001140)="680c391ee045720a73752c7b6cce9ae5c9a0e33234bbd24ac92157325a20cafa9d458e9fc573d972ad9e5c567deafb6d8b40ce5aeed2144b697311b893a864df08fedd89726c57b738f237fa463a54a74d66364c413cff00c24e6b397eec062f8bf2d904cf40369f483d016d34b506440106474ed8846ca3c981cc8b201d7f40e41cb90b0f6536cc78a43d59b5887b215bf1716f1b776a005babeb06a123aa0eaf840c738ab6dfac0b7941a1242c1b9a8c3c84dfaa5ed52d89a4fe85a735a0a3f83030ccb16f77ff88824afd4c19232af9bdeb44a9715fabe2ff8a0ec38bdd9eb7db71bd8d3c62b78aa01e836d0cd422b29d55", 0xf3}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="e745a581f54e4f2cd2a265cf3dddd4311fcae2461dbc4776d8a61d952962fad203e5e31ca1a1bd555ffeb164c5f1310addd61162a4ef57fd9f8f408ca78c07120baf997658304a1f627cb94345d1ff1f1e535f1578e964504cba4116f0a7d2ef98bc1fffb01cbc6af4f9440a850a4da3a3ddc248391d010ac158ada737501c03efbcfc75bde77549eac378cd8b867c76923993c69285f7eb4527b91dede0af18448e9b8a5a54c7126f3bf0659b9730abe19e2ab1a5df14395e08150f235b4250ba7ea3bc68b0693e1d89a71320a5f6bebdec2c80b979c7b8c05c9ab16f4607c7f98d9cef2a450d464e62d9a4118920", 0xef}, {&(0x7f0000002340)="a883132a0bf8b9e15f2f35", 0xb}, {&(0x7f0000002380)="0e4ab6e90c8ba41439d04aa8f5ebc8af89858e01704f001f23229d1609fc04f90991db5701e7d1425ac2d56f0881d2cf22ee78b9c7bc2c84b5ba448194ee5a2102aa532a9197b9fdfef88bce73173a4adfdbb2bdd407e34c31bccc08b7695538fe9d47156f4fb483db2e6c6c55e588b2625771d6f90552355f21ec8b6d9413a642c09def02fdac47e86099f26536bb2e20166b5da8124a93155fecb332a517d889c7558216250fda8eb56362b01794baef39470f", 0xb4}, {&(0x7f0000002440)="2f7667912afa3dce7bbb516c6147624238ab1cadab4baa761b7dcad22fe89773c55fb7c8bde390d601c703e03b6563285c4444180a72ab4b7010b43a2c077b133ac414cbb207793c295e73a273577e4e10e5c74fc8d67b11b951a4a0cca20427a90e0c1bf1fab49ae5c13744541b12fd1501d81894cbc78904e709221bc4c32ea4e35636089c9f5cfaf2f7f9d730438b504402af6ae8a7d97bea28395243f781cad673e43c146e062290845ca70c2433b5ef968b09e58c9b7402e1e4", 0xbc}, {&(0x7f0000002500)="c58c2af8c495cf50b78c9745741277b65ab1331185b27d9f9ef17c532342df59fb4bd728ec417f6c49c6deb98dc38ef232ac0fcea3318432c4362ce9ddce6c7b765b95d0cb540982062d770e39f72b8821b028ba71173547e172587d99a67e496c039058c4e5fc68ad66d8793f90175ee05e88d88453446006693b5bca73c05d4e6d84fd6206ea21c390ffac3f9480ce8d8275b579664a38241dc7882548536bb7ac19fbd6722318cccb37f560087d0b424433b6203c", 0xb6}], 0x8}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002640)="fdcee2cabd729c8988dbd28f839284f84d61d2097c07bdfb4792bd78ce069b7b0c023c3b4532a431e57bdf5ce8c6a11145dde80cbb9b211cda27dd1e8fa81e86cdf70c4357d88cad9506e985a406de38e54ca3f9204fff67cd17a120da7b0fff3bcea33b106c78921aa0d7c0a19bcf7db4d99857fa4463f65f59b9b728a2907761ca713f6369dcd75b9bd96bc3d473fe4c1d20fe518a023c213992346884e8e533fd7ebe80d21546dfab48ed2332f56d9ca42b9055632a", 0xb7}, {&(0x7f0000002700)="b796ce7c43d6e7a361f1f6bd758bb7f95c39903190dde199d038dd", 0x1b}, {&(0x7f0000002740)="131d7fdcb3ca46bc0c4b3dfd04e907df74a419b3e06f34e96caa96a463c9c6a6221d9a3449960a2448a0f0d0a1fbfb7403cc6ef23a5bb2291d61f63f0e028aa7fb3427439f37ccb000c8740ccd91d37003c1cee7d642a80fd28a514d200c82", 0x5f}, {&(0x7f00000027c0)="8c99ad8c676eb44905921ac7b613168ec1c2e0c7ec73a1dff422452ff021785d90ee6dad29fafca87b47dc778508046c749c12d274e72f7e59f47f121be37ac27953abc9d422c1ab5b632d6e299f0bce5fdc47adfe388386fe262efaf5e5bde7", 0x60}, {&(0x7f0000002840)="a4b8d9cf03e3ad284a4e980c72f11fccaef8fb5ce95830f29257c7c37f4939697656374cf6a077687e506cca96657d7488090664dad60e01c560a610eabd9365790e5e495c0f2cceadef3c699523ac53c2043de8956ced26bf5b1e14bb858c0c5e08da68b5169a35bc8eaca28b", 0x6d}], 0x5, &(0x7f0000002940)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xa8, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x7}, {@broadcast, 0x100}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xeb93}, {@multicast1, 0x7fffffff}, {@remote, 0x1}, {@multicast2, 0xfe}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}], 0x70}}, {{&(0x7f00000029c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000002a00)="4cdb1a00a9b716ff4f8a03c7e8ecef846533cc2f90c956ffbaa8", 0x1a}], 0x1, &(0x7f0000002a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010101, @private=0xa010101}}}], 0xb0}}], 0x5, 0x48011) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r10, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_usb_control_io(r9, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)={0x20, 0x30, 0x4, "c53fe07a"}, 0x0, 0x0, 0x0, 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x1, 0x84, 0x3, {0x0, 0x2710}, {0x77359400}, {0x2, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "a286a4ce4b24faf4"}}, 0x48}, 0x1, 0x0, 0x0, 0x404c001}, 0x81) sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x2, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000e001000000000000a0030100001b43217733ba7204"], 0x48}, 0x1, 0x0, 0x0, 0x800d}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1c, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r4}, @clear_death={0x400c630f, 0x80000002}], 0x0, 0x0, 0x0}) 378.895405ms ago: executing program 0 (id=4297): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f00005c2000/0x3000)=nil, 0x3000) 378.626465ms ago: executing program 0 (id=4298): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x225000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/45, 0x2d}], 0x1}, 0x22100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) getpid() (async) syz_pidfd_open(r0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_procfs$namespace(r0, 0x0) (async) setns(r1, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0) (async) ftruncate(0xffffffffffffffff, 0xc17a) (async) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x225000, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) (async) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/45, 0x2d}], 0x1}, 0x22100) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) 378.226985ms ago: executing program 0 (id=4299): fsopen(0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) writev(r0, &(0x7f0000001280)=[{0x0}, {&(0x7f0000003200)="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", 0x1000}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @multicast2, r3}, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000b00)={[0x6, 0x109e, 0x480, 0xfffffff7, 0x0, 0x9, 0x8, 0x10, 0x4, 0x99d5, 0x280000, 0x562, 0x8, 0x7, 0x5, 0x10001, 0x100, 0x7, 0x0, 0x9, 0xe, 0x72ae465f, 0x7, 0xff, 0xfffffffd, 0xffffffff, 0x7, 0x9, 0x7f, 0xffffff4d, 0x31, 0x200, 0xd, 0x101, 0x8, 0x5, 0x401, 0xb, 0x101, 0x3, 0x0, 0x7, 0x8, 0x7, 0x3, 0x4, 0x200, 0x200, 0x2, 0x3, 0x81, 0x799f8230, 0x4, 0xfff, 0x8d4, 0x6, 0x30, 0x4, 0x10001, 0x200, 0x200, 0x3ff, 0x3, 0x8001, 0x0, 0x366d, 0x0, 0x0, 0x6, 0x5, 0x2, 0xfffffb68, 0x8, 0x4, 0x5, 0x8, 0xf88f, 0xf46c, 0xe, 0x400, 0x5, 0x9, 0x9, 0x3, 0xa64, 0x8, 0x4, 0x9f, 0x5, 0x0, 0x7, 0x40, 0x2, 0x4, 0x1ff, 0x6, 0x2, 0x7, 0x1, 0x5, 0x6, 0xec1, 0x10, 0x9, 0x8, 0xf716, 0x9, 0x101, 0x2, 0x2, 0x6f, 0x1, 0x70000000, 0x0, 0xc, 0x3, 0x7ff, 0x401, 0x8, 0xffffff00, 0xd2f, 0x6, 0xfffffffb, 0x10000, 0xffff04e6, 0xda29, 0x2, 0x8, 0x7, 0x6, 0x2, 0x7f, 0x9, 0x8, 0x2a8c, 0x9, 0x9, 0x6, 0x7, 0x9d, 0x6, 0xd, 0x200, 0x8000, 0x1, 0x6, 0x4, 0x4, 0x8, 0x1, 0x4, 0x8, 0xce, 0xcb8c, 0x80000001, 0x1, 0xdd1, 0x2, 0x7, 0x2, 0x8000, 0x8, 0x6f9, 0xe1f2, 0x8, 0x9, 0x8, 0x6c, 0x5, 0xfffffffb, 0x7, 0x5, 0x200, 0x0, 0x49a7, 0x6, 0x9, 0x8, 0x6, 0x3, 0x7fff, 0x4, 0x8, 0xc, 0x5, 0xc, 0x7, 0x2, 0x0, 0x5, 0x1, 0x1, 0x1000, 0xc2f, 0x3ff, 0xffffffff, 0xc2, 0x8, 0x6, 0x6, 0x5, 0x6, 0x10000, 0x8, 0x4, 0x5, 0xfffffffb, 0x9, 0x4, 0xff, 0x4, 0x8000, 0xffff, 0x6, 0x400, 0xf8d, 0x400, 0x1, 0x0, 0x5, 0x47c, 0x10, 0x2, 0x5, 0x3, 0x7, 0x8, 0xec41, 0x6, 0x6c4, 0xd62, 0xa89346f, 0x1, 0x8475, 0x3c, 0x40, 0xc1d, 0xb395, 0xb7e, 0x3, 0x9, 0xcc, 0x6, 0x5, 0xffffff1b, 0x5, 0x1000, 0x0, 0x4, 0x95, 0xb, 0xe71, 0x5, 0x8d0, 0xe678, 0x7fffffff, 0x14b8b8c6, 0x0, 0x6, 0x5, 0x2610d6ef, 0x4, 0x8, 0x3, 0x0, 0xfffffff7, 0x5, 0x1, 0x7f, 0x7fff, 0xffffffff, 0x4, 0xffff767b, 0x7, 0x7, 0x8, 0x5, 0x0, 0x2392, 0x7f, 0x0, 0x2, 0x1000, 0x650, 0x5, 0x9, 0xda, 0x6, 0x9, 0xfffffff2, 0x4, 0x5, 0x8, 0x80000001, 0x3, 0x1, 0x5, 0x4, 0x4, 0x1, 0xdb5, 0x5, 0x4, 0x6f6c, 0x800, 0xe, 0x7, 0x3, 0x4, 0x7, 0x6, 0x1, 0x7, 0x7, 0xffffffff, 0x6, 0x3, 0x8, 0x8, 0x8e, 0x8, 0x3, 0x8, 0x5, 0x31a2, 0x0, 0x8, 0x1, 0x8, 0x9, 0x6, 0x7f, 0xb, 0x7, 0x7, 0x0, 0x8, 0x9, 0x0, 0xfffffff8, 0x6, 0xffffffff, 0x9a, 0x10001, 0xffff, 0x8000, 0x9, 0x5, 0xb18e, 0x9, 0x459, 0x1, 0x3c96, 0x800, 0x7, 0x7, 0x4, 0x7, 0x5, 0x6a65, 0x0, 0xa, 0x1, 0x401, 0x242b, 0x1, 0xfff, 0x5, 0x7, 0x4, 0xfffffff7, 0x300000, 0x200, 0x0, 0x3, 0x6, 0x9, 0x483, 0x7ff, 0x4b71, 0x2, 0xfe000000, 0x2, 0x2, 0x5, 0x0, 0x8c3, 0x51, 0xfff, 0x4, 0x6, 0x3, 0x7ff, 0xaea5, 0xfffffffd, 0x2, 0x2, 0x2, 0x7, 0x6, 0x8001, 0x101, 0xd, 0x6b000, 0x8, 0x255, 0x1, 0x9, 0x1, 0x4, 0x3, 0xe5c, 0xf6, 0x4, 0x80000001, 0x0, 0x5, 0x400, 0xffffffff, 0x1, 0x2, 0x5, 0x3, 0x1, 0x4, 0x7, 0x0, 0xef11, 0x2, 0x4, 0x7, 0x1, 0x6, 0x4, 0x5, 0x72, 0x800, 0x0, 0x0, 0x3, 0x7b0, 0x3, 0x101, 0x80000001, 0xfffffff7, 0x3, 0x7, 0x9, 0x8, 0x9, 0x0, 0x2c00000, 0x3ff, 0xde, 0x0, 0x317eea0e, 0x3, 0x80000001, 0x5, 0x1, 0x5, 0xfe, 0x10000, 0x8, 0x365, 0x81b, 0x9, 0x1, 0x9, 0x9, 0x3, 0xfff, 0x6, 0x8, 0x6, 0x3, 0x5, 0x400, 0x6981, 0x8, 0x2, 0x401, 0xfe000000, 0x3, 0x5954, 0x7af, 0x2, 0x3252b61e, 0x1ff, 0x8, 0xffffff1c, 0xb6f7, 0x7, 0x0, 0x6051, 0x4, 0xad, 0x4, 0x28, 0x2, 0x6, 0xe, 0xffff, 0xf, 0x9, 0x6, 0x7a6, 0xe, 0xb, 0x400, 0x6, 0x4, 0xa3, 0x4, 0x1, 0x6, 0x800, 0x2, 0x285, 0x2, 0x70, 0xad39, 0x6, 0x3, 0x3, 0x2, 0xd, 0x10001, 0x96e, 0x8, 0x578, 0x9, 0x8, 0xffff, 0x39d2, 0x1, 0x9, 0x9, 0x4, 0x9, 0x5, 0x2, 0x1, 0x0, 0x5, 0xfffffffd, 0x4f972ec5, 0x0, 0x4, 0x2, 0xc, 0xf, 0x80000000, 0x2, 0x5, 0x2, 0x78f, 0x200, 0x2, 0x3, 0x9, 0x7, 0x3f, 0x5, 0x8, 0x80000000, 0x7fffffff, 0x68b, 0x80000000, 0x4, 0xfffff001, 0x93, 0x8, 0x2, 0x3d, 0x3, 0x3, 0x8, 0x3, 0x8001, 0x8, 0x4000000, 0x6, 0x7, 0x4, 0xb73, 0x0, 0xbcfd, 0x1ff, 0xffffffe6, 0x3, 0x4, 0x7, 0x4b, 0x3, 0x9, 0xc000000, 0x2, 0x7, 0x1ff, 0x3, 0x2, 0x803, 0x8, 0x7, 0x0, 0xad, 0x2757, 0x2, 0x10001, 0xf11, 0x9, 0x7, 0x8, 0x8, 0x1, 0x8, 0x283, 0x5, 0xa, 0x3, 0x40, 0x200, 0x5, 0x3, 0x1ad6, 0xe80b, 0xffffffff, 0x0, 0x3, 0x5, 0x1, 0x5, 0x10, 0x1, 0x54, 0xffffffff, 0x8, 0x4, 0x73b9, 0x80, 0x0, 0x10001, 0x7, 0x7, 0x3, 0x7f, 0x1, 0x9, 0xffffffc0, 0x9, 0x2, 0x1, 0xfffeffff, 0x1, 0x3, 0x4ff, 0xc9b7, 0x7fff, 0x0, 0x80000000, 0x82be, 0x5e, 0x10001, 0x6, 0x7, 0xc, 0x0, 0x4, 0x4, 0x4, 0x4, 0x7, 0xf, 0x0, 0x6, 0x1, 0x8, 0x3, 0x9, 0x4, 0x7, 0x10, 0x400, 0x4, 0x6, 0xfffffff8, 0x7, 0x1, 0x6, 0x1, 0x563240ed, 0xaf4, 0x401, 0x7, 0xffffffff, 0x6, 0xfffffffa, 0x0, 0x100, 0xd6a7, 0x10001, 0x0, 0x3, 0x7, 0x1, 0x19a3, 0xbdc, 0x6, 0x3, 0x4, 0x3, 0xfffffc00, 0x6, 0x30b747e5, 0xf1af, 0x1, 0xfffffff8, 0x1, 0x4, 0xb, 0x2, 0xffffffc0, 0x81, 0x588, 0x8, 0xef6d, 0x9, 0x0, 0x7, 0x7c, 0x2, 0x6, 0xfffffffc, 0x1, 0xffffffc0, 0xbe83, 0xa8, 0xfcba, 0x10001, 0x6, 0x0, 0x3, 0x6, 0x401, 0x0, 0x2, 0xc, 0x1, 0xffff, 0x6, 0x0, 0xffff, 0x419f, 0x3, 0x0, 0x6, 0xc, 0xd6, 0x10a, 0x0, 0x2, 0x5, 0xffff, 0x7c9d, 0x1, 0x9, 0x0, 0x2, 0xfffffffd, 0x6000, 0x4, 0x0, 0x101, 0x762, 0x400, 0x39a0, 0xd1fa, 0x1, 0x10000, 0x8, 0x8, 0x80000000, 0x1000, 0xc1e5, 0xce59, 0xfff, 0x1, 0xbd, 0x1, 0x10, 0x2, 0x4, 0x3, 0x9, 0xffffffc0, 0x10000, 0xab32, 0x9, 0x4, 0xffffffff, 0x8274, 0x1f0, 0x3, 0x2c3, 0x61, 0x5, 0x1ff, 0x3, 0x3, 0x401, 0x5, 0x80000001, 0xfffffff7, 0x1000, 0x1800, 0x651, 0x693b, 0x1, 0x80000001, 0x1, 0x2, 0x7f, 0x5, 0x8, 0x48f, 0x2, 0x1000, 0x8, 0x0, 0x7, 0x9, 0x1, 0x7, 0xfffffffb, 0x10, 0x8, 0x7, 0x0, 0x8, 0x7, 0x8, 0x1, 0x9, 0xd, 0xfffffff8, 0x0, 0x5, 0x80000001, 0x6, 0x7, 0x2, 0x7ce4, 0x6, 0x4, 0x2, 0x4e, 0x7f02, 0xffff, 0x5, 0x70, 0x20e1, 0x200, 0x6, 0x4, 0xd088, 0x800000, 0x6, 0x7ff, 0x8, 0x2, 0x5, 0x10001, 0x287, 0x8, 0x4, 0x7, 0x6, 0x0, 0x7f, 0x1, 0x5f6e, 0x3, 0x9, 0x8, 0x1, 0x9, 0x7c7, 0x3, 0x4, 0xfffffffc, 0x7, 0x4, 0x2, 0x2, 0x1ac, 0x8, 0x101, 0x7ff, 0x10, 0x8, 0x8000, 0x6, 0x6d3, 0x8, 0x9, 0x0, 0x4, 0x1, 0x4, 0x2, 0x2, 0xd693, 0x5, 0x9, 0x1, 0x8, 0x8, 0x0, 0x3, 0x1, 0x0, 0x7, 0x9140, 0x0, 0xfffffff8, 0x6, 0x3, 0x8, 0x1, 0x9, 0x0, 0x8, 0xfd000, 0x200, 0x40, 0x4, 0x8000, 0x2, 0x926096c, 0x9, 0xd, 0x0, 0xaeb, 0xa20, 0x8, 0x1ff, 0xfffffffe, 0x39b, 0x4, 0x0, 0x5, 0x2, 0x5, 0x5, 0x2, 0xa, 0x5, 0x2dcc, 0xfe, 0x8000, 0x5, 0x800, 0x8, 0x8000, 0x0, 0x75ff, 0x1000, 0x9, 0x6, 0x1, 0xaf, 0x8, 0x7, 0x3, 0x8, 0x2b5ab7ea, 0x0, 0x1, 0x2, 0x7, 0xfffffffb, 0x2, 0x0, 0x7ff, 0xec, 0x6, 0x3ff, 0x9, 0x5, 0x9, 0x6, 0x1, 0x2, 0xfffffff7, 0x5, 0x701, 0x9, 0xb05, 0x3, 0x3ff, 0x0, 0x9, 0x8, 0x4, 0x20, 0x3, 0x9, 0x26ec, 0x40, 0x6, 0x267, 0x80000001, 0xff, 0x9, 0x1, 0x8, 0x100, 0x1ff, 0x8, 0xd, 0x7, 0x7, 0x7]}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000580)={0x0, 0x58, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="330300000000000000001c000000200001801400020064766d7270310000000000000000000008000100", @ANYRES32=r7], 0x34}}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x33}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x6}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 378.072765ms ago: executing program 0 (id=4300): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r1, &(0x7f000000b800)={0x2020}, 0xe80) r2 = getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) tkill(r2, 0x2f) 118.508249ms ago: executing program 6 (id=4304): r0 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, 0x0) 118.363179ms ago: executing program 6 (id=4305): linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 118.216029ms ago: executing program 6 (id=4306): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) 118.151809ms ago: executing program 6 (id=4307): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r0, 0x560f, &(0x7f0000000000)) 111.098859ms ago: executing program 6 (id=4308): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 95.719629ms ago: executing program 6 (id=4309): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7c, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4010001) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x40106726, &(0x7f00000000c0)) 2.49445ms ago: executing program 3 (id=4310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x24}}, 0x0) 2.26572ms ago: executing program 3 (id=4311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000480)="c4e178296216670f30ef67660fc7b769b6660f388059e0b805000000b91e4200000f01c10f20c00f300f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b921000000fa3ec5c4e17929d8", 0x54}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.15223ms ago: executing program 3 (id=4312): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa"], 0x1c) 0s ago: executing program 3 (id=4313): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/nf_conntrack\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/152, 0x98}], 0x1, 0x9, 0x0) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.3.3005'. [ 203.757978][ T36] kauditd_printk_skb: 40652 callbacks suppressed [ 203.757995][ T36] audit: type=1400 audit(1751708962.978:69208): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.759858][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 203.764446][ T36] audit: type=1400 audit(1751708962.978:69209): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.764476][ T36] audit: type=1400 audit(1751708962.978:69210): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.764503][ T36] audit: type=1400 audit(1751708962.978:69211): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.786079][ T148] audit: audit_lost=356 audit_rate_limit=0 audit_backlog_limit=64 [ 203.828812][ T36] audit: type=1400 audit(1751708962.978:69212): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.845322][ T148] audit: backlog limit exceeded [ 203.867200][ T8781] audit: audit_backlog=65 > audit_backlog_limit=64 [ 203.885885][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.091875][ T8799] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 204.401495][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3016'. [ 204.477156][ T8818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3019'. [ 204.490859][ T8818] syz.5.3019: attempt to access beyond end of device [ 204.490859][ T8818] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 205.562502][ T8876] syz.3.3043 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 205.915391][ T8884] netlink: 'syz.6.3045': attribute type 2 has an invalid length. [ 205.923312][ T8884] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3045'. [ 206.795524][ T8929] selinux_netlink_send: 55 callbacks suppressed [ 206.795545][ T8929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=8929 comm=syz.3.3062 [ 207.043018][ T8945] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 207.879769][ T9006] can0: slcan on ttyS3. [ 207.948291][ T9006] can0 (unregistered): slcan off ttyS3. [ 208.760434][ T36] kauditd_printk_skb: 39647 callbacks suppressed [ 208.760453][ T36] audit: type=1400 audit(1751708967.998:107866): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.796666][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.802335][ T9061] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.803519][ T148] audit: audit_lost=689 audit_rate_limit=0 audit_backlog_limit=64 [ 208.818001][ T36] audit: type=1400 audit(1751708968.028:107867): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 208.820137][ T9057] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.839578][ T9063] audit: audit_backlog=65 > audit_backlog_limit=64 [ 208.852306][ T148] audit: backlog limit exceeded [ 208.853287][ T9061] audit: audit_lost=690 audit_rate_limit=0 audit_backlog_limit=64 [ 208.857625][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 209.457092][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3122'. [ 210.463033][ T9153] netlink: 37 bytes leftover after parsing attributes in process `syz.0.3141'. [ 210.613700][ T9166] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3146'. [ 210.623420][ T9166] gretap0: entered promiscuous mode [ 210.629127][ T9166] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3146'. [ 210.640824][ T9166] 0{X: renamed from gretap0 [ 210.647139][ T9166] 0{X: left promiscuous mode [ 210.652542][ T9166] 0{X: entered allmulticast mode [ 210.658711][ T9166] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 211.101038][ T9191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9191 comm=syz.3.3155 [ 212.058196][ T7580] Bluetooth: hci0: Frame reassembly failed (-84) [ 212.064762][ T7580] Bluetooth: hci0: Frame reassembly failed (-84) [ 213.770347][ T36] kauditd_printk_skb: 41014 callbacks suppressed [ 213.770367][ T36] audit: type=1400 audit(1751708973.001:147852): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.778943][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.798400][ T36] audit: type=1400 audit(1751708973.011:147853): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.805074][ T148] audit: audit_lost=1035 audit_rate_limit=0 audit_backlog_limit=64 [ 213.826090][ T36] audit: type=1400 audit(1751708973.011:147854): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.834264][ T148] audit: backlog limit exceeded [ 213.855023][ T36] audit: type=1400 audit(1751708973.011:147855): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.860621][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.881092][ T36] audit: type=1400 audit(1751708973.011:147856): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 213.887537][ T148] audit: audit_lost=1036 audit_rate_limit=0 audit_backlog_limit=64 [ 214.110314][ T961] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 214.110640][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 214.297778][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3218'. [ 214.593014][ T9393] netlink: 'syz.0.3228': attribute type 4 has an invalid length. [ 214.603782][ T9393] netlink: 'syz.0.3228': attribute type 4 has an invalid length. [ 216.575115][ T9538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9538 comm=syz.5.3277 [ 217.848332][ T9597] netlink: 'syz.6.3290': attribute type 4 has an invalid length. [ 218.780294][ T36] kauditd_printk_skb: 34774 callbacks suppressed [ 218.780313][ T36] audit: type=1400 audit(1751709207.010:181823): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.794406][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.808092][ T36] audit: type=1400 audit(1751709207.020:181824): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.815086][ T148] audit: audit_lost=1306 audit_rate_limit=0 audit_backlog_limit=64 [ 218.840159][ T36] audit: type=1400 audit(1751709207.020:181825): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.851610][ T148] audit: backlog limit exceeded [ 218.870502][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.872011][ T36] audit: type=1400 audit(1751709207.020:181826): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 218.878940][ T148] audit: audit_lost=1307 audit_rate_limit=0 audit_backlog_limit=64 [ 218.898991][ T36] audit: type=1400 audit(1751709207.020:181827): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.280704][ T9782] futex_wake_op: syz.0.3350 tries to shift op by -1; fix this program [ 220.544620][ T9808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9808 comm=syz.5.3357 [ 220.856590][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3367'. [ 222.555839][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3393'. [ 223.774267][ T36] kauditd_printk_skb: 38776 callbacks suppressed [ 223.774286][ T36] audit: type=1400 audit(2000000002.885:219592): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.782636][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.801893][ T36] audit: type=1400 audit(2000000002.896:219593): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.808921][ T148] audit: audit_lost=1645 audit_rate_limit=0 audit_backlog_limit=64 [ 223.829562][ T36] audit: type=1400 audit(2000000002.896:219594): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.829615][ T36] audit: type=1400 audit(2000000002.896:219595): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.838100][ T148] audit: backlog limit exceeded [ 223.874252][ T36] audit: type=1400 audit(2000000002.896:219596): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 223.897953][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.912694][ T148] audit: audit_lost=1646 audit_rate_limit=0 audit_backlog_limit=64 [ 224.449637][T10006] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3425'. [ 224.797192][T10025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3432'. [ 226.083925][T10103] netlink: 'syz.0.3457': attribute type 11 has an invalid length. [ 226.102117][T10103] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3457'. [ 226.454682][T10156] netlink: 'syz.6.3472': attribute type 12 has an invalid length. [ 226.692745][T10164] netlink: 57 bytes leftover after parsing attributes in process `syz.6.3476'. [ 227.431655][T10198] can0: slcan on ptm0. [ 227.486331][T10197] can0 (unregistered): slcan off ptm0. [ 228.745265][ T36] kauditd_printk_skb: 36787 callbacks suppressed [ 228.745284][ T36] audit: type=1400 audit(2000000007.894:255873): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 228.753685][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.772892][ T36] audit: type=1400 audit(2000000007.905:255874): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 228.779918][ T148] audit: audit_lost=1817 audit_rate_limit=0 audit_backlog_limit=64 [ 228.800586][ T36] audit: type=1400 audit(2000000007.905:255875): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 228.808875][ T148] audit: backlog limit exceeded [ 228.829729][ T36] audit: type=1400 audit(2000000007.905:255876): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 228.829772][ T36] audit: type=1400 audit(2000000007.905:255877): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 228.835448][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.856199][ T36] audit: type=1400 audit(2000000007.905:255878): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.554141][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3514'. [ 229.872491][T10306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10306 comm=syz.6.3527 [ 230.575419][T10351] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3542'. [ 231.534628][ T31] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 231.684915][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 231.693283][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 231.702677][ T31] usb 6-1: config 174 has an invalid interface number: 235 but max is 1 [ 231.711695][ T31] usb 6-1: config 174 has an invalid interface number: 151 but max is 1 [ 231.720769][ T31] usb 6-1: config 174 has no interface number 0 [ 231.727864][ T31] usb 6-1: config 174 has no interface number 1 [ 231.734615][ T31] usb 6-1: config 174 interface 235 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 231.745959][ T31] usb 6-1: config 174 interface 235 altsetting 3 endpoint 0x5 has invalid maxpacket 511, setting to 64 [ 231.757407][ T31] usb 6-1: config 174 interface 235 has no altsetting 0 [ 231.766203][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=04d8, bcdDevice=fa.9a [ 231.775318][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.783398][ T31] usb 6-1: Product: syz [ 231.787757][ T31] usb 6-1: Manufacturer: syz [ 231.792445][ T31] usb 6-1: SerialNumber: syz [ 231.798502][ T31] usb 6-1: Interface #151 referenced by multiple IADs [ 231.805730][T10396] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 232.015425][T10396] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 232.030864][ T31] usb 6-1: USB disconnect, device number 15 [ 232.129374][T10416] rust_binder: Error while translating object. [ 232.129419][T10416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.135976][T10416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:663 [ 232.151450][T10414] 9pnet: Could not find request transport: xen [ 232.190526][T10424] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 232.552922][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3572'. [ 232.561926][T10439] netlink: 'syz.5.3572': attribute type 1 has an invalid length. [ 232.802057][ T328] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 232.951952][ T328] usb 6-1: Invalid ep0 maxpacket: 16 [ 233.013861][T10458] netlink: 'syz.6.3579': attribute type 16 has an invalid length. [ 233.021843][T10458] netlink: 'syz.6.3579': attribute type 1 has an invalid length. [ 233.029771][T10458] netlink: 'syz.6.3579': attribute type 1 has an invalid length. [ 233.037619][T10458] netlink: 'syz.6.3579': attribute type 2 has an invalid length. [ 233.045450][T10458] netlink: 64006 bytes leftover after parsing attributes in process `syz.6.3579'. [ 233.092062][ T328] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 233.231840][ T65] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 233.241849][ T328] usb 6-1: Invalid ep0 maxpacket: 16 [ 233.247342][ T328] usb usb6-port1: attempt power cycle [ 233.381747][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 233.388076][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.399759][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.409576][ T65] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 233.418665][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.427360][ T65] usb 4-1: config 0 descriptor?? [ 233.591675][ T328] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 233.611965][ T328] usb 6-1: Invalid ep0 maxpacket: 16 [ 233.741575][ T328] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 233.761961][ T328] usb 6-1: Invalid ep0 maxpacket: 16 [ 233.767441][ T328] usb usb6-port1: unable to enumerate USB device [ 233.835826][ T65] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0 [ 233.843061][ T65] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0 [ 233.850248][ T65] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0 [ 233.857530][ T65] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0 [ 233.864713][ T65] koneplus 0003:1E7D:2D51.0009: unknown main item tag 0x0 [ 233.872615][ T65] koneplus 0003:1E7D:2D51.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 233.988055][ T36] kauditd_printk_skb: 19933 callbacks suppressed [ 233.988074][ T36] audit: type=1400 audit(2000000014.167:274310): avc: denied { create } for pid=10469 comm="syz.0.3582" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 234.016155][ T36] audit: type=1400 audit(2000000014.167:274311): avc: denied { map } for pid=10469 comm="syz.0.3582" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 234.041674][ T36] audit: type=1400 audit(2000000014.167:274312): avc: denied { read write } for pid=10469 comm="syz.0.3582" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 234.043390][T10456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.067084][ T36] audit: type=1400 audit(2000000014.177:274313): avc: denied { mount } for pid=10469 comm="syz.0.3582" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 234.078529][T10456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.115446][T10456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.124141][T10456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.446175][ T36] audit: type=1400 audit(2000000014.627:274314): avc: denied { wake_alarm } for pid=10472 comm="syz.6.3583" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.451552][ T65] koneplus 0003:1E7D:2D51.0009: couldn't init struct koneplus_device [ 234.477210][ T36] audit: type=1400 audit(2000000014.657:274315): avc: denied { write } for pid=10472 comm="syz.6.3583" name="snmp" dev="proc" ino=4026533366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 234.509500][ T65] koneplus 0003:1E7D:2D51.0009: couldn't install mouse [ 234.520628][ T65] koneplus 0003:1E7D:2D51.0009: probe with driver koneplus failed with error -71 [ 234.530596][ T36] audit: type=1400 audit(2000000014.707:274316): avc: denied { ioctl } for pid=10474 comm="syz.6.3585" path="socket:[45709]" dev="sockfs" ino=45709 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.532358][ T65] usb 4-1: USB disconnect, device number 37 [ 234.645541][ T36] audit: type=1400 audit(2000000014.828:274317): avc: denied { write } for pid=10476 comm="syz.0.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.696349][ T36] audit: type=1400 audit(2000000014.878:274318): avc: denied { create } for pid=10476 comm="syz.0.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.731069][ T36] audit: type=1400 audit(2000000014.898:274319): avc: denied { read } for pid=10476 comm="syz.0.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.821876][T10489] rust_binder: Write failure EFAULT in pid:1060 [ 234.903761][T10495] rust_binder: Write failure EFAULT in pid:703 [ 235.190853][ T10] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 235.351858][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.362966][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.372802][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 235.381900][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.390548][ T10] usb 7-1: config 0 descriptor?? [ 235.396713][ T10] hub 7-1:0.0: USB hub found [ 235.596531][ T10] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 235.940477][ T5930] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 235.998083][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 236.004181][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 236.031088][ T10] usb 7-1: USB disconnect, device number 7 [ 236.091874][ T5930] usb 6-1: unable to get BOS descriptor or descriptor too short [ 236.099966][ T5930] usb 6-1: not running at top speed; connect to a high speed hub [ 236.108559][ T5930] usb 6-1: config index 0 descriptor too short (expected 12336, got 27) [ 236.117063][ T5930] usb 6-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 236.126103][ T5930] usb 6-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 236.136407][ T5930] usb 6-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 236.147653][ T5930] usb 6-1: string descriptor 0 read error: -22 [ 236.153917][ T5930] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 236.163120][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 236.373772][ T5930] usb 6-1: USB disconnect, device number 20 [ 236.591615][T10527] kvm: emulating exchange as write [ 236.710149][ T328] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 236.881544][ T328] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.901088][ T328] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.913655][ T328] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.923520][ T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.931999][ T328] usb 4-1: Product: syz [ 236.936409][ T328] usb 4-1: Manufacturer: syz [ 236.941567][ T328] usb 4-1: SerialNumber: syz [ 237.154798][ T328] usb 4-1: 0:2 : does not exist [ 237.174234][ T328] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 237.188494][ T328] usb 4-1: USB disconnect, device number 38 [ 237.269859][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 237.430842][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 237.449720][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 237.464724][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.485514][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 237.494831][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.503839][ T10] usb 6-1: Product: syz [ 237.508090][ T10] usb 6-1: Manufacturer: syz [ 237.512883][ T10] usb 6-1: SerialNumber: syz [ 237.528729][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 237.539726][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 237.729738][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 237.979479][ T328] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 238.038965][ T31] usb 6-1: USB disconnect, device number 21 [ 238.102563][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3616'. [ 238.111833][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3616'. [ 238.129379][ T328] usb 4-1: Using ep0 maxpacket: 16 [ 238.135887][ T328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.147122][ T328] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 238.167580][ T328] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.183460][ T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.192526][ T328] usb 4-1: Product: ꅺ芐週걼誄岔⒁㥶軲å봿ݪ㚑ຳ [ 238.200288][ T328] usb 4-1: Manufacturer: ଲ岭䵢⧬ᷘ牢雁꣰䃧钜靹ʏ⴪떊뛈䍵귂﮶핐묫妡嵖⼿饛臻耏넁莔췻꫽ᣟ帨祦敖ຣᝪㄶἲ肨붊赡۶륔絺漰᪯틃⨩势砛阫梲븵͵ꀥ⟃㇭㎎겤犰놢⪏ߣꐯꅤﮉ䈤ꄮ㗹半驥骦䯍醑뫯죞蘌繈ᚓ绹槐 [ 238.229082][ T328] usb 4-1: SerialNumber: 澽꬯㚭ೡ峲忶鹌号郍븒④존映ꚜᩎ邡䱉턳徛惮㯐盜⑁슧㾕蒻 [ 238.263022][T10539] usblp0: removed [ 238.446781][ T328] cdc_ncm 4-1:1.0: bind() failure [ 238.453766][ T328] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 238.461238][ T328] cdc_ncm 4-1:1.1: bind() failure [ 238.469296][ T328] usb 4-1: USB disconnect, device number 39 [ 238.780788][T10584] tipc: Started in network mode [ 238.785853][T10584] tipc: Node identity 7f000001, cluster identity 4711 [ 238.793041][T10584] tipc: Enabled bearer , priority 10 [ 238.881006][T10597] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 238.888155][T10597] overlayfs: failed to set xattr on upper [ 238.893990][T10597] overlayfs: ...falling back to redirect_dir=nofollow. [ 238.900959][T10597] overlayfs: ...falling back to uuid=null. [ 239.010663][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 239.010683][ T36] audit: type=1400 audit(2000000019.200:274358): avc: denied { create } for pid=10596 comm="syz.0.3626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.038518][T10600] exFAT-fs (rnullb0): invalid boot record signature [ 239.039233][ T36] audit: type=1400 audit(2000000019.220:274359): avc: denied { bind } for pid=10596 comm="syz.0.3626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.058974][T10600] exFAT-fs (rnullb0): failed to read boot sector [ 239.065239][ T36] audit: type=1400 audit(2000000019.220:274360): avc: denied { mounton } for pid=10596 comm="syz.0.3626" path="/bus/file0" dev="overlay" ino=47238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 239.088469][T10600] exFAT-fs (rnullb0): failed to recognize exfat type [ 239.121646][ T36] audit: type=1400 audit(2000000019.220:274361): avc: denied { mount } for pid=10596 comm="syz.0.3626" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 239.164092][ T36] audit: type=1400 audit(2000000019.220:274362): avc: denied { unmount } for pid=10596 comm="syz.0.3626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 239.184902][ T36] audit: type=1400 audit(2000000019.340:274363): avc: denied { unmount } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 239.210396][T10608] exFAT-fs (rnullb0): invalid boot record signature [ 239.217151][T10608] exFAT-fs (rnullb0): failed to read boot sector [ 239.224270][T10608] exFAT-fs (rnullb0): failed to recognize exfat type [ 239.233298][T10608] 9pnet: Could not find request transport: xen [ 239.241416][ T7560] bridge_slave_1: left allmulticast mode [ 239.247104][ T7560] bridge_slave_1: left promiscuous mode [ 239.254033][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.269522][ T7560] bridge_slave_0: left allmulticast mode [ 239.276969][ T7560] bridge_slave_0: left promiscuous mode [ 239.284040][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.291856][ T36] audit: type=1400 audit(2000000019.480:274364): avc: denied { ioctl } for pid=10609 comm="syz.3.3632" path="/dev/input/event2" dev="devtmpfs" ino=208 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 239.331661][ T36] audit: type=1400 audit(2000000019.490:274365): avc: denied { mounton } for pid=10611 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 239.340708][T10604] TCP: out of memory -- consider tuning tcp_mem [ 239.436703][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.443821][T10611] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.451141][T10611] bridge_slave_0: entered allmulticast mode [ 239.457688][T10611] bridge_slave_0: entered promiscuous mode [ 239.465065][ T7560] veth1_macvtap: left promiscuous mode [ 239.470634][ T7560] veth0_vlan: left promiscuous mode [ 239.513156][T10611] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.520327][T10611] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.527432][T10611] bridge_slave_1: entered allmulticast mode [ 239.533959][T10611] bridge_slave_1: entered promiscuous mode [ 239.608684][ T328] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 239.611183][T10611] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.623370][T10611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.630732][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.637789][T10611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.666065][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.674580][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.685114][ T36] audit: type=1400 audit(2000000019.870:274366): avc: denied { write } for pid=10619 comm="syz.0.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.685793][ T7559] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.712007][ T7559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.722968][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.730085][ T7559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.764274][T10611] veth0_vlan: entered promiscuous mode [ 239.768211][T10623] overlayfs: failed to clone upperpath [ 239.778073][T10611] veth1_macvtap: entered promiscuous mode [ 239.798587][ T328] usb 4-1: Using ep0 maxpacket: 32 [ 239.806823][ T328] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 239.807404][T10625] overlay: Unknown parameter 'euid>00000000000000000000' [ 239.816010][ T328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.835084][ T36] audit: type=1400 audit(2000000020.020:274367): avc: denied { mounton } for pid=10611 comm="syz-executor" path="/root/syzkaller.c96so4/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 239.840862][ T328] usb 4-1: Product: syz [ 239.880298][ T328] usb 4-1: Manufacturer: syz [ 239.898521][ T328] usb 4-1: SerialNumber: syz [ 239.915769][ T328] usb 4-1: config 0 descriptor?? [ 239.918539][ T10] tipc: Node number set to 2130706433 [ 239.950735][T10635] can: request_module (can-proto-0) failed. [ 240.131368][T10613] rust_binder: Write failure EFAULT in pid:1079 [ 240.138688][ T328] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 240.218431][ T328] usb 4-1: USB disconnect, device number 40 [ 240.348431][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 240.518179][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 240.522500][T10663] rust_binder: Write failure EFAULT in pid:18 [ 240.539703][ T9] usb 7-1: config 3 has an invalid interface number: 185 but max is 0 [ 240.569323][ T9] usb 7-1: config 3 has no interface number 0 [ 240.575573][ T9] usb 7-1: config 3 interface 185 has no altsetting 0 [ 240.586718][ T9] usb 7-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=7b.bb [ 240.595369][T10666] __vm_enough_memory: pid: 10666, comm: syz.7.3648, bytes: 70373039144960 not enough memory for the allocation [ 240.606860][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.613137][T10668] __vm_enough_memory: pid: 10668, comm: syz.7.3648, bytes: 70373039144960 not enough memory for the allocation [ 240.616644][ T9] usb 7-1: Product: syz [ 240.631546][ T9] usb 7-1: Manufacturer: syz [ 240.638023][ T9] usb 7-1: SerialNumber: syz [ 240.716175][T10678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 240.716212][T10678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1086 [ 240.725885][T10678] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 240.735195][T10678] rust_binder: Read failure Err(EFAULT) in pid:1086 [ 241.037939][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 241.197826][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 241.204082][ T10] usb 8-1: config index 0 descriptor too short (expected 539, got 27) [ 241.212608][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.222794][ T10] usb 8-1: config 0 has no interfaces? [ 241.230024][ T10] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 241.239192][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.247277][ T10] usb 8-1: Product: syz [ 241.251478][ T10] usb 8-1: Manufacturer: syz [ 241.256103][ T10] usb 8-1: SerialNumber: syz [ 241.261958][ T10] usb 8-1: config 0 descriptor?? [ 241.350663][ T9] usb 7-1: USB disconnect, device number 8 [ 241.469274][ T10] usb 8-1: USB disconnect, device number 2 [ 241.550388][T10697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=129 sclass=netlink_route_socket pid=10697 comm=syz.0.3659 [ 241.603779][T10700] rust_binder: Write failure EFAULT in pid:1091 [ 241.767712][T10714] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 241.774018][T10714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 241.782579][T10714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1103 [ 241.984928][T10721] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3674'. [ 242.023603][T10726] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 242.055951][T10731] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.056974][T10731] rust_binder: Error while translating object. [ 242.063854][T10731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 242.074094][T10731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:750 [ 242.125677][T10729] rust_binder: 10729: no such ref 0 [ 242.217417][ T328] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 242.236634][T10747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.254639][T10729] rust_binder: Write failure EINVAL in pid:32 [ 242.283035][T10753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 242.290372][T10753] rust_binder: Error while translating object. [ 242.300655][T10753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.306899][T10753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 242.338740][T10760] rust_binder: Write failure EFAULT in pid:762 [ 242.388964][ T328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.406423][ T328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.418151][ T328] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.428031][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.443156][ T328] usb 4-1: config 0 descriptor?? [ 242.453556][ T328] hub 4-1:0.0: USB hub found [ 242.603295][T10770] fuse: Bad value for 'fd' [ 242.649913][ T328] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 242.677125][ T9] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 242.828227][ T9] usb 7-1: config index 0 descriptor too short (expected 31, got 27) [ 242.836485][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 242.844629][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 242.853766][ T9] usb 7-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 242.861993][ T9] usb 7-1: Product: syz [ 242.866181][ T9] usb 7-1: Manufacturer: syz [ 242.870829][ T9] usb 7-1: SerialNumber: syz [ 243.063719][ T328] usbhid 4-1:0.0: can't add hid device: -71 [ 243.069885][ T328] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 243.097314][ T328] usb 4-1: USB disconnect, device number 41 [ 243.347593][T10769] overlayfs: statfs failed on './file0' [ 243.378363][T10777] input: syz0 as /devices/virtual/input/input11 [ 243.642280][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 243.657801][T10789] 8021q: VLANs not supported on vcan0 [ 243.684915][ T9] usb 7-1: USB disconnect, device number 9 [ 243.704003][ T9] usblp0: removed [ 243.751789][T10800] cgroup: No subsys list or none specified [ 244.006463][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 244.156364][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 244.162701][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 58, changing to 9 [ 244.173915][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 244.185044][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 244.191714][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 244.200814][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.209445][ T9] usb 7-1: config 0 descriptor?? [ 244.343058][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 244.343071][ T36] audit: type=1326 audit(2000000024.522:274397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.0.3699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbfd78e929 code=0x0 [ 244.506193][ T328] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 244.617416][ T9] apple 0003:05AC:0247.000A: unexpected long global item [ 244.624950][ T9] apple 0003:05AC:0247.000A: parse failed [ 244.630779][ T9] apple 0003:05AC:0247.000A: probe with driver apple failed with error -22 [ 244.657235][ T328] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.668612][ T328] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.678738][ T328] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 244.687860][ T328] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.696632][ T328] usb 8-1: config 0 descriptor?? [ 244.702608][ T328] hub 8-1:0.0: USB hub found [ 244.781921][T10817] FAT-fs (rnullb0): bogus number of reserved sectors [ 244.788789][T10817] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 244.822135][ T7560] Bluetooth: hci0: Frame reassembly failed (-84) [ 244.888410][ T36] audit: type=1400 audit(2000000025.073:274398): avc: denied { accept } for pid=10818 comm="syz.3.3702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.908265][ T36] audit: type=1400 audit(2000000025.073:274399): avc: denied { setopt } for pid=10818 comm="syz.3.3702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.928210][ T328] hub 8-1:0.0: config failed, can't read hub descriptor (err -90) [ 244.936434][ T36] audit: type=1400 audit(2000000025.073:274400): avc: denied { bind } for pid=10818 comm="syz.3.3702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.957081][ T36] audit: type=1400 audit(2000000025.103:274401): avc: denied { bind } for pid=10820 comm="syz.3.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.959431][T10825] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=10825 comm=syz.3.3705 [ 244.977524][ T36] audit: type=1400 audit(2000000025.103:274402): avc: denied { read } for pid=10820 comm="syz.3.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.994584][T10825] binder: Unknown parameter 'fscontext?}' [ 245.011771][ T36] audit: type=1400 audit(2000000025.183:274403): avc: denied { mounton } for pid=10824 comm="syz.3.3705" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.049088][ T36] audit: type=1400 audit(2000000025.233:274404): avc: denied { setopt } for pid=10826 comm="syz.3.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 245.122107][ T36] audit: type=1400 audit(2000000025.303:274405): avc: denied { ioctl } for pid=10828 comm="syz.3.3707" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 245.149566][ T328] usbhid 8-1:0.0: can't add hid device: -71 [ 245.155616][ T328] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 245.196266][ T328] usb 8-1: USB disconnect, device number 3 [ 245.224999][ T36] audit: type=1400 audit(2000000025.403:274406): avc: denied { execute } for pid=10830 comm="syz.0.3708" path="/dev/rnullb0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 245.605638][ T321] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 245.755983][ T321] usb 4-1: too many configurations: 190, using maximum allowed: 8 [ 245.764892][ T321] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 245.772529][ T321] usb 4-1: can't read configurations, error -61 [ 245.895511][ T10] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 245.915505][ T321] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 245.918124][T10855] cgroup: No subsys list or none specified [ 246.046485][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.057557][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 246.068492][ T10] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 246.077576][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.086313][ T10] usb 8-1: config 0 descriptor?? [ 246.091565][T10847] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 246.095870][ T321] usb 4-1: too many configurations: 190, using maximum allowed: 8 [ 246.107943][ T321] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 246.115585][ T321] usb 4-1: can't read configurations, error -61 [ 246.121993][ T321] usb usb4-port1: attempt power cycle [ 246.465259][ T321] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 246.485938][ T321] usb 4-1: too many configurations: 190, using maximum allowed: 8 [ 246.494849][ T321] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 246.502558][ T321] usb 4-1: can't read configurations, error -61 [ 246.635171][ T321] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 246.655873][ T321] usb 4-1: too many configurations: 190, using maximum allowed: 8 [ 246.664845][ T321] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 246.672489][ T321] usb 4-1: can't read configurations, error -61 [ 246.678939][ T321] usb usb4-port1: unable to enumerate USB device [ 246.701141][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 246.707262][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 246.716066][ T10] usb 8-1: USB disconnect, device number 4 [ 246.825081][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 246.825223][ T961] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 246.838257][ T321] usb 7-1: USB disconnect, device number 10 [ 246.859231][T10862] cgroup: No subsys list or none specified [ 247.174979][ T321] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 247.324843][ T321] usb 7-1: Using ep0 maxpacket: 8 [ 247.335874][ T321] usb 7-1: unable to get BOS descriptor or descriptor too short [ 247.346477][ T321] usb 7-1: config 143 has an invalid interface number: 213 but max is 1 [ 247.355006][ T321] usb 7-1: config 143 has an invalid interface number: 2 but max is 1 [ 247.363257][ T321] usb 7-1: config 143 has an invalid descriptor of length 53, skipping remainder of the config [ 247.377896][ T321] usb 7-1: config 143 has no interface number 0 [ 247.386086][ T321] usb 7-1: config 143 has no interface number 1 [ 247.392398][ T321] usb 7-1: config 143 interface 213 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.406278][ T321] usb 7-1: config 143 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 247.419611][ T321] usb 7-1: config 143 interface 213 has no altsetting 0 [ 247.426803][ T321] usb 7-1: config 143 interface 2 has no altsetting 0 [ 247.444836][ T321] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 247.453991][ T321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.464081][ T321] usb 7-1: Product: syz [ 247.474168][ T321] usb 7-1: Manufacturer: syz [ 247.478923][ T321] usb 7-1: SerialNumber: syz [ 247.734186][ T321] asix 7-1:143.213 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 247.756840][T10886] binder: Unknown parameter '0xffffffffffffffff' [ 247.757492][ T321] asix 7-1:143.213: probe with driver asix failed with error -71 [ 247.774002][ T321] asix 7-1:143.2 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 247.785147][ T321] asix 7-1:143.2: probe with driver asix failed with error -71 [ 247.799496][ T321] usb 7-1: USB disconnect, device number 11 [ 248.034474][ T10] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 248.045792][T10890] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25710 sclass=netlink_xfrm_socket pid=10890 comm=syz.0.3732 [ 248.185560][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.196749][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.206549][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.215649][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.224305][ T10] usb 8-1: config 0 descriptor?? [ 248.230256][ T10] hub 8-1:0.0: USB hub found [ 248.430792][ T10] hub 8-1:0.0: 1 port detected [ 248.764053][ T321] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 248.836156][ T10] usb 8-1: USB disconnect, device number 5 [ 248.880180][T10909] SELinux: failed to load policy [ 248.943976][ T321] usb 4-1: Using ep0 maxpacket: 16 [ 248.951425][ T321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.962365][ T321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.973094][ T321] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.993927][ T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.001986][ T321] usb 4-1: Product: syz [ 249.011938][ T321] usb 4-1: Manufacturer: syz [ 249.016828][ T321] usb 4-1: SerialNumber: syz [ 249.227088][T10904] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.229503][ T321] usb 4-1: 0:2 : does not exist [ 249.244056][ T321] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 249.256653][ T321] usb 4-1: USB disconnect, device number 46 [ 249.266797][T10412] udevd[10412]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 249.293821][ T328] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 249.444847][ T328] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.455986][ T328] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 249.467126][ T328] usb 7-1: config 0 interface 0 has no altsetting 0 [ 249.473962][ T328] usb 7-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 249.483284][ T328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.492794][ T328] usb 7-1: config 0 descriptor?? [ 249.501512][T10918] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 249.593662][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 249.744635][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.755614][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.765410][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 249.778257][ T10] usb 8-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 249.791657][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.802085][ T7558] bridge_slave_1: left allmulticast mode [ 249.815040][ T7558] bridge_slave_1: left promiscuous mode [ 249.823861][ T10] usb 8-1: config 0 descriptor?? [ 249.829683][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.848959][ T7558] bridge_slave_0: left allmulticast mode [ 249.854774][ T7558] bridge_slave_0: left promiscuous mode [ 249.860556][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.914513][ T328] wacom 0003:056A:0300.000B: item fetching failed at offset 5/8 [ 249.922453][ T328] wacom 0003:056A:0300.000B: parse failed [ 249.928406][ T328] wacom 0003:056A:0300.000B: probe with driver wacom failed with error -22 [ 249.965842][ T7558] veth1_macvtap: left promiscuous mode [ 249.971435][ T7558] veth0_vlan: left promiscuous mode [ 250.113565][ T328] usb 7-1: USB disconnect, device number 12 [ 250.119847][ T65] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 250.205401][ T7558] bridge_slave_1: left allmulticast mode [ 250.211113][ T7558] bridge_slave_1: left promiscuous mode [ 250.216841][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.224523][ T7558] bridge_slave_0: left allmulticast mode [ 250.230249][ T7558] bridge_slave_0: left promiscuous mode [ 250.235963][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.244941][ T10] kye 0003:0458:501A.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 250.255815][ T10] kye 0003:0458:501A.000C: item fetching failed at offset 0/5 [ 250.263645][ T10] kye 0003:0458:501A.000C: parse failed [ 250.269316][ T10] kye 0003:0458:501A.000C: probe with driver kye failed with error -22 [ 250.275726][ T65] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 250.286988][ T65] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 250.298948][ T65] usb 4-1: config 220 has no interface number 2 [ 250.306666][ T65] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 250.320101][ T65] usb 4-1: config 220 interface 0 has no altsetting 0 [ 250.326966][ T65] usb 4-1: config 220 interface 76 has no altsetting 0 [ 250.334065][ T65] usb 4-1: config 220 interface 1 has no altsetting 0 [ 250.342189][ T65] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 250.351329][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.359402][ T65] usb 4-1: Product: syz [ 250.365736][ T65] usb 4-1: Manufacturer: syz [ 250.370382][ T65] usb 4-1: SerialNumber: syz [ 250.427536][ T7558] tipc: Left network mode [ 250.433671][ T7558] veth1_macvtap: left promiscuous mode [ 250.439216][ T7558] veth0_vlan: left promiscuous mode [ 250.444810][ T7558] veth1_macvtap: left promiscuous mode [ 250.447011][T10920] rust_binder: Error while translating object. [ 250.450343][T10920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.450368][ T7558] veth0_vlan: left promiscuous mode [ 250.456951][T10920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 250.474307][ T328] usb 8-1: USB disconnect, device number 6 [ 250.650183][ T65] usb 4-1: selecting invalid altsetting 0 [ 250.656195][ T65] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 250.662604][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 250.662622][ T36] audit: type=1400 audit(2000000030.846:274425): avc: denied { create } for pid=10959 comm="syz.0.3759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 250.689333][ T65] usb 4-1: No valid video chain found. [ 250.697173][ T65] usb 4-1: USB disconnect, device number 47 [ 250.883051][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 251.008257][ T36] audit: type=1400 audit(2000000031.196:274426): avc: denied { read write } for pid=10962 comm="syz.7.3760" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 251.033214][ T36] audit: type=1400 audit(2000000031.196:274427): avc: denied { open } for pid=10962 comm="syz.7.3760" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 251.034267][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.069578][ T10] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.070072][ T36] audit: type=1400 audit(2000000031.256:274428): avc: denied { getopt } for pid=10962 comm="syz.7.3760" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.084015][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.112372][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.120444][ T10] usb 7-1: Product: syz [ 251.124731][ T10] usb 7-1: Manufacturer: syz [ 251.129362][ T10] usb 7-1: SerialNumber: syz [ 251.171067][T10966] binder: Unknown parameter 'fscontext?}' [ 251.249857][T10974] macsec0: entered promiscuous mode [ 251.255260][T10974] macsec0: entered allmulticast mode [ 251.260591][T10974] veth1_macvtap: entered allmulticast mode [ 251.336465][ T10] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 251.342553][ T10] cdc_ncm 7-1:1.0: bind() failure [ 251.348569][ T10] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 251.355433][ T10] cdc_ncm 7-1:1.1: bind() failure [ 251.474907][ T36] audit: type=1400 audit(2000000031.666:274429): avc: denied { create } for pid=10990 comm="syz.3.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 251.494841][ T36] audit: type=1400 audit(2000000031.666:274430): avc: denied { connect } for pid=10990 comm="syz.3.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 251.524138][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 251.598568][T10996] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 251.659485][T10997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3771'. [ 251.669915][ T36] audit: type=1400 audit(2000000031.856:274431): avc: denied { ioctl } for pid=10995 comm="syz.0.3771" path="socket:[49549]" dev="sockfs" ino=49549 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.928582][T11002] binder: Unknown parameter 'fscontext?}' [ 251.941231][ T36] audit: type=1400 audit(2000000032.126:274432): avc: denied { execute } for pid=11001 comm="syz.7.3773" name="file0" dev="ramfs" ino=49013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 251.963574][ T36] audit: type=1400 audit(2000000032.126:274433): avc: denied { execute_no_trans } for pid=11001 comm="syz.7.3773" path="/file0" dev="ramfs" ino=49013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 251.993536][ T36] audit: type=1400 audit(2000000032.176:274434): avc: denied { getopt } for pid=11006 comm="syz.7.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.054468][T11014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 252.242663][ T10] usb 7-1: USB disconnect, device number 13 [ 252.292298][ T328] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 252.301206][ T65] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 252.441243][ T328] usb 4-1: device descriptor read/64, error -71 [ 252.452211][ T65] usb 8-1: Using ep0 maxpacket: 16 [ 252.459397][ T65] usb 8-1: config 7 has an invalid interface number: 207 but max is 2 [ 252.468899][ T65] usb 8-1: config 7 has an invalid interface number: 8 but max is 2 [ 252.494802][ T65] usb 8-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 252.503664][ T65] usb 8-1: config 7 has an invalid interface number: 150 but max is 2 [ 252.511857][ T65] usb 8-1: config 7 has no interface number 0 [ 252.517978][ T65] usb 8-1: config 7 has no interface number 1 [ 252.524098][ T65] usb 8-1: config 7 has no interface number 2 [ 252.530196][ T65] usb 8-1: config 7 interface 207 altsetting 11 bulk endpoint 0xE has invalid maxpacket 16 [ 252.540229][ T65] usb 8-1: config 7 interface 207 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 252.551222][ T65] usb 8-1: config 7 interface 207 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 252.562083][ T65] usb 8-1: config 7 interface 207 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 252.573154][ T65] usb 8-1: config 7 interface 207 altsetting 11 has a duplicate endpoint with address 0x1, skipping [ 252.584022][ T65] usb 8-1: config 7 interface 207 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 252.595067][ T65] usb 8-1: config 7 interface 207 altsetting 11 has a duplicate endpoint with address 0x3, skipping [ 252.605918][ T65] usb 8-1: config 7 interface 8 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 252.616545][ T65] usb 8-1: config 7 interface 8 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 252.627132][ T65] usb 8-1: config 7 interface 8 altsetting 7 endpoint 0xA has invalid maxpacket 1040, setting to 64 [ 252.638112][ T65] usb 8-1: config 7 interface 8 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 252.648687][ T65] usb 8-1: config 7 interface 8 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 252.659261][ T65] usb 8-1: config 7 interface 8 altsetting 7 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 252.670137][ T65] usb 8-1: config 7 interface 8 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 252.680690][ T65] usb 8-1: config 7 interface 8 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 252.691498][ T65] usb 8-1: config 7 interface 8 altsetting 7 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 252.702485][ T65] usb 8-1: config 7 interface 8 altsetting 7 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 252.713327][ T65] usb 8-1: config 7 interface 8 altsetting 7 has an endpoint descriptor with address 0x32, changing to 0x2 [ 252.724767][ T65] usb 8-1: config 7 interface 8 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 252.735337][ T65] usb 8-1: config 7 interface 8 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 252.742100][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 252.745905][ T65] usb 8-1: config 7 interface 8 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 252.764052][ T328] usb 4-1: device descriptor read/64, error -71 [ 252.770354][ T65] usb 8-1: config 7 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 252.781093][ T65] usb 8-1: config 7 interface 150 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 252.791930][ T65] usb 8-1: config 7 interface 150 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 252.802777][ T65] usb 8-1: config 7 interface 207 has no altsetting 0 [ 252.809603][ T65] usb 8-1: config 7 interface 8 has no altsetting 0 [ 252.816242][ T65] usb 8-1: config 7 interface 150 has no altsetting 0 [ 252.824386][ T65] usb 8-1: Dual-Role OTG device on HNP port [ 252.830531][ T65] usb 8-1: New USB device found, idVendor=19d2, idProduct=1068, bcdDevice= b.d5 [ 252.839633][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.847656][ T65] usb 8-1: Product: 䐊 [ 252.851818][ T65] usb 8-1: Manufacturer: 榥䖖∹釞㡛䗾ᶻ吗닕⢫蚌ꂈ䛑⣡鋢羵❔䣠粴䉩㊮╁瀞턀售젥㊼栧尿䓩袪㬬쑶땻뾞ￚ᧡佋쿏좞力픛䄸巳蘭뷲릎䤟䷂廉⊏㵶㵑䎸唆媓穦咵䛒潏岨坛ຶ祙蔽ൄ⭋쒤츞ؚ⩎꘲产嶯硞ᅨ꺗胶䢮㉭곬ༀ㻘Ꙏ [ 252.881993][ T65] usb 8-1: SerialNumber: syz [ 252.887230][ T65] usb 8-1: rejected 1 configuration due to insufficient available bus power [ 252.895984][ T65] usb 8-1: no configuration chosen from 1 choice [ 252.912008][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 252.918307][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.929226][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.939016][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 252.948090][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.956739][ T10] usb 7-1: config 0 descriptor?? [ 253.021934][ T328] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 253.151871][ T328] usb 4-1: device descriptor read/64, error -71 [ 253.221930][ T10] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf3 found [ 253.229663][ T10] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf4 found [ 253.239345][ T10] usb 7-1: USB disconnect, device number 14 [ 253.391748][ T328] usb 4-1: device descriptor read/64, error -71 [ 253.511730][ T328] usb usb4-port1: attempt power cycle [ 253.571664][ T10] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 253.701591][ T10] usb 7-1: device descriptor read/64, error -71 [ 253.851534][ T328] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 253.872664][ T328] usb 4-1: device descriptor read/8, error -71 [ 253.941470][ T10] usb 7-1: device descriptor read/64, error -71 [ 254.002554][ T328] usb 4-1: device descriptor read/8, error -71 [ 254.191406][ T10] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 254.241337][ T328] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 254.263037][ T328] usb 4-1: device descriptor read/8, error -71 [ 254.331308][ T10] usb 7-1: device descriptor read/64, error -71 [ 254.392316][ T328] usb 4-1: device descriptor read/8, error -71 [ 254.475776][T11095] netlink: 'syz.0.3809': attribute type 12 has an invalid length. [ 254.501371][ T328] usb usb4-port1: unable to enumerate USB device [ 254.571202][ T10] usb 7-1: device descriptor read/64, error -71 [ 254.681241][ T10] usb usb7-port1: attempt power cycle [ 255.021482][ T10] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 255.042026][ T10] usb 7-1: device descriptor read/8, error -71 [ 255.116074][ T5930] usb 8-1: USB disconnect, device number 7 [ 255.153567][T11109] netlink: 'syz.7.3815': attribute type 4 has an invalid length. [ 255.168611][T11109] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.3815'. [ 255.181665][ T10] usb 7-1: device descriptor read/8, error -71 [ 255.345329][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'. [ 255.354309][T11111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3816'. [ 255.440727][ T10] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 255.473756][ T10] usb 7-1: device descriptor read/8, error -71 [ 255.601722][ T10] usb 7-1: device descriptor read/8, error -71 [ 255.710926][ T10] usb usb7-port1: unable to enumerate USB device [ 255.760569][ T5930] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 255.910475][ T5930] usb 8-1: Using ep0 maxpacket: 32 [ 255.917436][ T5930] usb 8-1: config 2 has an invalid interface number: 49 but max is 2 [ 255.925626][ T5930] usb 8-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 255.934431][ T5930] usb 8-1: config 2 has an invalid interface number: 43 but max is 2 [ 255.942591][ T5930] usb 8-1: config 2 has an invalid interface number: 58 but max is 2 [ 255.950753][ T5930] usb 8-1: config 2 has no interface number 0 [ 255.956862][ T5930] usb 8-1: config 2 has no interface number 1 [ 255.962995][ T5930] usb 8-1: config 2 has no interface number 2 [ 255.969138][ T5930] usb 8-1: config 2 interface 49 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 255.980179][ T5930] usb 8-1: config 2 interface 49 altsetting 128 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 255.991379][ T5930] usb 8-1: config 2 interface 49 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 256.002226][ T5930] usb 8-1: config 2 interface 49 altsetting 128 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 256.013397][ T5930] usb 8-1: config 2 interface 49 altsetting 128 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 256.024507][ T5930] usb 8-1: config 2 interface 49 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 256.035375][ T5930] usb 8-1: config 2 interface 49 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 256.046245][ T5930] usb 8-1: config 2 interface 49 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 256.057173][ T5930] usb 8-1: config 2 interface 43 altsetting 91 has a duplicate endpoint with address 0x1, skipping [ 256.068050][ T5930] usb 8-1: config 2 interface 58 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 256.079032][ T5930] usb 8-1: config 2 interface 58 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 256.089716][ T5930] usb 8-1: config 2 interface 58 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 256.100431][ T5930] usb 8-1: config 2 interface 58 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 256.110591][ T5930] usb 8-1: config 2 interface 58 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 256.121279][ T5930] usb 8-1: config 2 interface 49 has no altsetting 0 [ 256.127999][ T5930] usb 8-1: config 2 interface 43 has no altsetting 0 [ 256.136266][ T5930] usb 8-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice=39.15 [ 256.145400][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.153462][ T5930] usb 8-1: Product: syz [ 256.157737][ T5930] usb 8-1: Manufacturer: syz [ 256.162410][ T5930] usb 8-1: SerialNumber: syz [ 256.183810][T11141] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 256.323677][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 256.323696][ T36] audit: type=1326 audit(2000000036.518:274452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed38e929 code=0x7fc00000 [ 256.360601][ T36] audit: type=1326 audit(2000000036.518:274453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10ed38e929 code=0x7fc00000 [ 256.385910][T11131] audit: audit_backlog=65 > audit_backlog_limit=64 [ 256.392572][T11131] audit: audit_lost=2319 audit_rate_limit=0 audit_backlog_limit=64 [ 256.400691][ T36] audit: type=1326 audit(2000000036.518:274454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed38e929 code=0x7fc00000 [ 256.430571][T11131] audit: backlog limit exceeded [ 256.437215][T11131] audit: audit_backlog=65 > audit_backlog_limit=64 [ 256.444007][T11131] audit: audit_lost=2320 audit_rate_limit=0 audit_backlog_limit=64 [ 256.452963][ T36] audit: type=1326 audit(2000000036.518:274455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.3.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ed38e929 code=0x7fc00000 [ 256.476748][T11131] audit: backlog limit exceeded [ 256.482778][T11131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.494088][T11131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.518361][ T5930] usb 8-1: USB disconnect, device number 8 [ 256.524060][T11151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1210 [ 257.379790][ T5930] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 257.457054][T11175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 257.457082][T11175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1220 [ 257.466892][T11175] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 257.478276][T11175] rust_binder: Read failure Err(EFAULT) in pid:1220 [ 257.549651][ T5930] usb 8-1: Using ep0 maxpacket: 16 [ 257.564627][ T5930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.575806][ T5930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.585789][ T5930] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 257.595023][ T5930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.605530][ T5930] usb 8-1: config 0 descriptor?? [ 257.839534][ T328] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 257.990629][ T328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.001728][ T328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.011661][ T328] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.018547][ T5930] hid-multitouch 0003:1FD2:6007.000E: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.7-1/input0 [ 258.021008][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.049657][ T328] usb 4-1: config 0 descriptor?? [ 258.055703][ T328] hub 4-1:0.0: USB hub found [ 258.257813][ T328] hub 4-1:0.0: 1 port detected [ 258.286828][T11200] netlink: 'syz.0.3846': attribute type 28 has an invalid length. [ 258.295663][T11200] tmpfs: Unknown parameter '$' [ 258.363321][ T45] usb 8-1: USB disconnect, device number 9 [ 258.661653][ T328] usb 4-1: USB disconnect, device number 52 [ 258.821995][T11203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:840 [ 258.846268][T11205] kvm: Disabled LAPIC found during irq injection [ 258.890701][T11214] overlayfs: failed to clone upperpath [ 259.010989][T11230] sock: sock_set_timeout: `syz.7.3852' (pid 11230) tries to set negative timeout [ 259.189901][T11248] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.190521][T11248] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 259.197091][T11248] rust_binder: Error while translating object. [ 259.207648][T11248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 259.214015][T11248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1240 [ 259.214145][ T305] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 259.240935][T11250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.241456][T11250] rust_binder: Error in use_page_slow: ESRCH [ 259.247992][T11250] rust_binder: use_range failure ESRCH [ 259.254077][T11250] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 259.259603][T11250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 259.267606][T11250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1242 [ 259.368857][ T305] usb 7-1: device descriptor read/64, error -71 [ 259.618642][ T305] usb 7-1: device descriptor read/64, error -71 [ 259.858586][ T305] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 259.921941][T11264] netlink: 'syz.7.3868': attribute type 4 has an invalid length. [ 259.929793][T11264] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.3868'. [ 259.988473][ T305] usb 7-1: device descriptor read/64, error -71 [ 260.178401][ T5930] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 260.228362][ T305] usb 7-1: device descriptor read/64, error -71 [ 260.318293][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 260.328291][ T5930] usb 8-1: Using ep0 maxpacket: 32 [ 260.334560][ T5930] usb 8-1: config 0 has no interfaces? [ 260.340472][ T305] usb usb7-port1: attempt power cycle [ 260.345941][ T5930] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 260.355764][ T5930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.364808][ T5930] usb 8-1: config 0 descriptor?? [ 260.468207][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 260.474526][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 260.482909][ T10] usb 4-1: config 179 has no interface number 0 [ 260.489225][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 260.500305][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 260.511554][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.522703][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 260.532732][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 260.546064][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 260.555132][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.564355][T11267] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 260.572831][ T10] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 260.575144][ T45] usb 8-1: USB disconnect, device number 10 [ 260.650647][T11270] tipc: Started in network mode [ 260.655561][T11270] tipc: Node identity e0000001, cluster identity 4711 [ 260.662763][T11270] tipc: Enabling of bearer rejected, failed to enable media [ 260.689720][ T305] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 260.707135][T11277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 260.707162][T11277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:137 [ 260.719620][ T305] usb 7-1: device descriptor read/8, error -71 [ 260.773756][ T31] usb 4-1: USB disconnect, device number 53 [ 260.859080][ T305] usb 7-1: device descriptor read/8, error -71 [ 260.997934][ T45] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 261.097914][ T305] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 261.118944][ T305] usb 7-1: device descriptor read/8, error -71 [ 261.147853][ T45] usb 8-1: Using ep0 maxpacket: 32 [ 261.154324][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.165343][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.175129][ T45] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.188194][ T45] usb 8-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 261.197249][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.205919][ T45] usb 8-1: config 0 descriptor?? [ 261.248926][ T305] usb 7-1: device descriptor read/8, error -71 [ 261.287509][T11282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.287866][T11282] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 261.294350][T11282] rust_binder: Read failure Err(EFAULT) in pid:1247 [ 261.357851][ T305] usb usb7-port1: unable to enumerate USB device [ 261.385847][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3876'. [ 261.435208][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 261.435229][ T36] audit: type=1400 audit(2000000041.631:274527): avc: denied { watch watch_reads } for pid=11295 comm="syz.3.3879" path="/457/file0" dev="tmpfs" ino=2498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 261.492361][T11300] tipc: Enabling of bearer rejected, failed to enable media [ 261.514355][ T36] audit: type=1400 audit(2000000041.711:274528): avc: denied { setopt } for pid=11301 comm="syz.3.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 261.516305][T11302] overlay: ./file1 is not a directory [ 261.534259][ T36] audit: type=1400 audit(2000000041.711:274529): avc: denied { read } for pid=11301 comm="syz.3.3882" lport=24 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 261.562308][T11302] overlay: ./file1 is not a directory [ 261.568429][ T36] audit: type=1400 audit(2000000041.771:274530): avc: denied { remount } for pid=11301 comm="syz.3.3882" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 261.614726][ T45] hid-generic 0003:0B05:1866.000F: unknown main item tag 0x7 [ 261.623771][ T45] hid-generic 0003:0B05:1866.000F: hidraw0: USB HID v0.00 Device [HID 0b05:1866] on usb-dummy_hcd.7-1/input0 [ 261.964542][T11279] netlink: 'syz.7.3873': attribute type 12 has an invalid length. [ 262.029251][ T45] usb 8-1: USB disconnect, device number 11 [ 262.048347][ T36] audit: type=1400 audit(2000000042.251:274531): avc: denied { read write } for pid=11312 comm="syz.7.3886" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 262.073879][ T36] audit: type=1400 audit(2000000042.251:274532): avc: denied { open } for pid=11312 comm="syz.7.3886" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 262.106533][ T36] audit: type=1400 audit(2000000042.301:274533): avc: denied { relabelfrom } for pid=11317 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 262.126983][ T36] audit: type=1400 audit(2000000042.301:274534): avc: denied { relabelto } for pid=11317 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 262.229928][T11328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 262.272860][T11339] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 262.473969][T11350] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 262.495952][T11350] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 262.511721][ T36] audit: type=1400 audit(2000000042.704:274535): avc: denied { remount } for pid=11347 comm="syz.6.3896" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 262.545098][ T36] audit: type=1400 audit(2000000042.734:274536): avc: denied { bind } for pid=11351 comm="syz.0.3897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 263.131897][T11378] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 263.146398][T11378] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 263.206110][T11382] syz.6.3908: attempt to access beyond end of device [ 263.206110][T11382] loop6: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 263.219298][T11382] EXT4-fs (loop6): unable to read superblock [ 263.228089][T11382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:878 [ 263.355552][T11398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11398 comm=syz.7.3916 [ 263.391434][T11401] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 263.507352][ T305] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 263.647324][ T31] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 263.668623][ T305] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.678881][ T305] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.689450][ T305] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.699119][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.707296][ T305] usb 7-1: Product: syz [ 263.711797][ T305] usb 7-1: Manufacturer: syz [ 263.716428][ T305] usb 7-1: SerialNumber: syz [ 263.797324][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 263.804676][ T31] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 263.812481][ T31] usb 8-1: can't read configurations, error -61 [ 263.947384][ T31] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 264.084933][ T305] usb 7-1: 0:2 : does not exist [ 264.092277][ T305] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 264.097409][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 264.104902][ T305] usb 7-1: USB disconnect, device number 24 [ 264.109208][ T31] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 264.118803][T10412] udevd[10412]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 264.120543][ T31] usb 8-1: can't read configurations, error -61 [ 264.142751][ T31] usb usb8-port1: attempt power cycle [ 264.487352][ T31] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 264.507676][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 264.514946][ T31] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 264.522632][ T31] usb 8-1: can't read configurations, error -61 [ 264.587843][T11436] fuse: Bad value for 'fd' [ 264.657388][ T31] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 264.677653][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 264.684829][ T31] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 264.692471][ T31] usb 8-1: can't read configurations, error -61 [ 264.698874][ T31] usb usb8-port1: unable to enumerate USB device [ 264.707337][ T45] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 264.858386][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.869490][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.879298][ T45] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 264.888429][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.897066][ T45] usb 7-1: config 0 descriptor?? [ 264.903090][ T45] hub 7-1:0.0: USB hub found [ 265.103095][ T45] hub 7-1:0.0: 1 port detected [ 265.495448][T11453] bridge_slave_0: left allmulticast mode [ 265.501319][T11453] bridge_slave_0: left promiscuous mode [ 265.507045][T11453] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.517347][ T45] usb 7-1: USB disconnect, device number 25 [ 265.523165][T11453] overlayfs: failed to clone upperpath [ 265.572995][T11459] overlayfs: failed to clone upperpath [ 265.579166][T11459] overlayfs: failed to clone upperpath [ 266.086433][T11497] sock: sock_set_timeout: `syz.6.3950' (pid 11497) tries to set negative timeout [ 266.807313][ T45] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 266.883421][T11508] macsec0: entered promiscuous mode [ 266.888856][T11508] macsec0: entered allmulticast mode [ 266.894256][T11508] veth1_macvtap: entered allmulticast mode [ 266.901855][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 266.901871][ T36] audit: type=1326 audit(2000000047.094:274545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.6.3953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff68a78e929 code=0x0 [ 266.961388][ T45] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 266.972598][ T45] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.982676][ T45] usb 8-1: config 0 interface 0 has no altsetting 0 [ 266.989380][ T45] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 266.998726][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.008333][ T36] audit: type=1400 audit(2000000047.204:274546): avc: denied { create } for pid=11507 comm="syz.6.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 267.030173][ T45] usb 8-1: config 0 descriptor?? [ 267.030503][ T36] audit: type=1326 audit(2000000047.224:274547): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.6.3953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff68a78e929 code=0x0 [ 267.438541][ T45] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 267.445893][ T45] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 267.453435][ T45] hid-steam 0003:28DE:1102.0010: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 267.517335][ T45] hid-steam 0003:28DE:1102.0010: Steam Controller 'XXXXXXXXXX' connected [ 267.527811][ T45] input: Steam Controller as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28DE:1102.0010/input/input14 [ 267.548756][ T45] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 267.564109][T11527] overlayfs: failed to clone lowerpath [ 267.569819][ T45] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 267.578257][ T45] hid-steam 0003:28DE:1102.0011: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 267.581083][T11527] overlayfs: failed to clone lowerpath [ 267.639133][T11506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.647712][T11506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.660475][ T5930] usb 8-1: USB disconnect, device number 16 [ 267.671753][ T5930] hid-steam 0003:28DE:1102.0010: Steam Controller 'XXXXXXXXXX' disconnected [ 267.788267][ T7564] Bluetooth: hci0: Frame reassembly failed (-84) [ 268.576276][T11564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 268.576317][T11564] rust_binder: Read failure Err(EFAULT) in pid:204 [ 269.437353][ T5930] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 269.562482][ T36] audit: type=1400 audit(2000000049.754:274548): avc: denied { name_bind } for pid=11580 comm="syz.3.3976" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 269.608128][ T5930] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.621004][ T5930] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.630539][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.638693][ T5930] usb 8-1: Product: syz [ 269.642882][ T5930] usb 8-1: Manufacturer: syz [ 269.647533][ T5930] usb 8-1: SerialNumber: syz [ 269.739770][ T36] audit: type=1400 audit(2000000049.934:274549): avc: denied { create } for pid=11584 comm="syz.0.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 269.742965][T11585] cgroup2: Unknown parameter 'localevents' [ 269.766371][T11585] cgroup2: Unknown parameter 'localevents' [ 269.772371][T11585] cgroup2: Unknown parameter 'localevents' [ 269.778491][T11585] cgroup2: Unknown parameter 'localevents' [ 269.785199][T11585] cgroup2: Unknown parameter 'localevents' [ 269.791390][T11585] cgroup2: Unknown parameter 'localevents' [ 269.797466][T11585] cgroup2: Unknown parameter 'localevents' [ 269.803502][T11585] cgroup2: Unknown parameter 'localevents' [ 269.809692][T11585] cgroup2: Unknown parameter 'localevents' [ 269.815709][T11585] cgroup2: Unknown parameter 'localevents' [ 269.821906][T11585] cgroup2: Unknown parameter 'localevents' [ 269.828062][T11585] cgroup2: Unknown parameter 'localevents' [ 269.834006][T11585] cgroup2: Unknown parameter 'localevents' [ 269.840230][T11585] cgroup2: Unknown parameter 'localevents' [ 269.846173][T11585] cgroup2: Unknown parameter 'localevents' [ 269.852413][T11585] cgroup2: Unknown parameter 'localevents' [ 269.866034][T11585] cgroup2: Unknown parameter 'localevents' [ 269.867313][ T961] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.872071][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 269.878153][T11585] cgroup2: Unknown parameter 'localevents' [ 269.891905][T11585] cgroup2: Unknown parameter 'localevents' [ 269.897890][T11585] cgroup2: Unknown parameter 'localevents' [ 269.904025][T11585] cgroup2: Unknown parameter 'localevents' [ 269.909978][T11585] cgroup2: Unknown parameter 'localevents' [ 269.915942][T11585] cgroup2: Unknown parameter 'localevents' [ 269.921954][T11585] cgroup2: Unknown parameter 'localevents' [ 269.927971][T11585] cgroup2: Unknown parameter 'localevents' [ 269.933967][T11585] cgroup2: Unknown parameter 'localevents' [ 269.939932][T11585] cgroup2: Unknown parameter 'localevents' [ 269.945933][T11585] cgroup2: Unknown parameter 'localevents' [ 269.951896][T11585] cgroup2: Unknown parameter 'localevents' [ 269.957887][T11585] cgroup2: Unknown parameter 'localevents' [ 269.963797][T11585] cgroup2: Unknown parameter 'localevents' [ 269.969720][T11585] cgroup2: Unknown parameter 'localevents' [ 269.975654][T11585] cgroup2: Unknown parameter 'localevents' [ 270.059176][ T5930] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 270.065312][ T5930] cdc_ncm 8-1:1.0: bind() failure [ 270.071480][ T5930] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 270.078314][ T5930] cdc_ncm 8-1:1.1: bind() failure [ 270.151401][T11597] sock: sock_set_timeout: `syz.0.3981' (pid 11597) tries to set negative timeout [ 270.404513][T11600] overlay: Unknown parameter 'subj_type' [ 270.411454][T11600] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3982'. [ 270.434364][ T36] audit: type=1400 audit(2000000050.624:274550): avc: denied { getopt } for pid=11601 comm="syz.6.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 270.467117][ T45] usb 8-1: USB disconnect, device number 17 [ 270.737592][ T10] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 270.817309][ T45] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 270.891571][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.903185][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.912981][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 270.923426][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.932135][ T10] usb 7-1: config 0 descriptor?? [ 270.939617][ T10] hub 7-1:0.0: USB hub found [ 270.968398][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.979490][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.989287][ T45] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 270.998501][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.007368][ T45] usb 8-1: config 0 descriptor?? [ 271.013322][ T45] hub 8-1:0.0: USB hub found [ 271.138624][ T10] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 271.213384][ T45] hub 8-1:0.0: 1 port detected [ 271.340642][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 271.346678][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 271.367659][ T10] usb 7-1: USB disconnect, device number 26 [ 271.425608][T11616] overlayfs: failed to clone upperpath [ 271.431729][T11616] overlayfs: failed to clone upperpath [ 271.615019][ T45] usb 8-1: USB disconnect, device number 18 [ 271.932173][T11640] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 271.932193][T11640] rust_binder: Read failure Err(EFAULT) in pid:924 [ 272.049389][ T36] audit: type=1400 audit(2000000052.244:274551): avc: denied { mount } for pid=11645 comm="syz.6.4002" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 272.078493][ T36] audit: type=1400 audit(2000000052.244:274552): avc: denied { remount } for pid=11645 comm="syz.6.4002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 272.100157][ T36] audit: type=1400 audit(2000000052.254:274553): avc: denied { unmount } for pid=7355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 272.144838][T11662] binder: Unknown parameter 'fscontext?}' [ 272.152110][T11662] binder: Unknown parameter 'fscontext?}' [ 272.417338][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 272.547385][ T10] usb 7-1: device descriptor read/64, error -71 [ 272.787329][ T10] usb 7-1: device descriptor read/64, error -71 [ 273.027382][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 273.057070][ T36] audit: type=1400 audit(2000000053.244:274554): avc: denied { map } for pid=11679 comm="syz.7.4012" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 273.151183][T11684] rust_binder: 11684: no such ref 3 [ 273.167328][ T10] usb 7-1: device descriptor read/64, error -71 [ 273.214014][T11688] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.221663][T11688] rust_binder: got new transaction with bad transaction stack [ 273.221688][T11688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:234 [ 273.247787][ T36] audit: type=1400 audit(2000000053.444:274555): avc: denied { execute_no_trans } for pid=11691 comm="syz.7.4016" path="/79/file0" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 273.280753][ T36] audit: type=1400 audit(2000000053.444:274556): avc: denied { create } for pid=11691 comm="syz.7.4016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 273.407331][ T10] usb 7-1: device descriptor read/64, error -71 [ 273.487351][ T305] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 273.517421][ T10] usb usb7-port1: attempt power cycle [ 273.570518][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4017'. [ 273.647310][ T305] usb 8-1: Using ep0 maxpacket: 32 [ 273.653551][ T305] usb 8-1: config 1 interface 0 has no altsetting 0 [ 273.661527][ T305] usb 8-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.40 [ 273.670621][ T305] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.678657][ T305] usb 8-1: Product: syz [ 273.682837][ T305] usb 8-1: Manufacturer: syz [ 273.687480][ T305] usb 8-1: SerialNumber: syz [ 273.857509][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 273.878378][ T10] usb 7-1: device descriptor read/8, error -71 [ 273.898329][ T305] usbhid 8-1:1.0: can't add hid device: -71 [ 273.904374][ T305] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 273.913165][ T305] usb 8-1: USB disconnect, device number 19 [ 274.008418][ T10] usb 7-1: device descriptor read/8, error -71 [ 274.131799][T11702] netlink: 'syz.3.4019': attribute type 4 has an invalid length. [ 274.139695][T11702] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4019'. [ 274.198322][T11712] 9pnet_fd: Insufficient options for proto=fd [ 274.226652][ T36] audit: type=1400 audit(2000000054.414:274557): avc: denied { ioctl } for pid=11716 comm="syz.3.4024" path="socket:[55644]" dev="sockfs" ino=55644 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.247225][T11719] overlayfs: failed to clone upperpath [ 274.251753][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 274.266150][T11719] overlayfs: failed to clone upperpath [ 274.281088][ T10] usb 7-1: device descriptor read/8, error -71 [ 274.418351][ T10] usb 7-1: device descriptor read/8, error -71 [ 274.476422][ T36] audit: type=1400 audit(2000000054.664:274558): avc: denied { remount } for pid=11724 comm="syz.7.4028" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 274.511222][T11728] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 274.511270][T11728] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 274.519485][T11728] rust_binder: Read failure Err(EFAULT) in pid:244 [ 274.527783][ T10] usb usb7-port1: unable to enumerate USB device [ 274.541528][ T36] audit: type=1400 audit(2000000054.744:274559): avc: denied { accept } for pid=11727 comm="syz.7.4029" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.787857][T11744] tipc: MTU too low for tipc bearer [ 274.793428][T11744] binder: Bad value for 'stats' [ 274.819664][T11747] rust_binder: Write failure EFAULT in pid:262 [ 275.001150][ T36] audit: type=1400 audit(2000000055.194:274560): avc: denied { shutdown } for pid=11759 comm="syz.7.4040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 275.049175][T11764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11764 comm=syz.7.4042 [ 275.068338][T11766] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 275.091829][T11768] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4044'. [ 275.116843][T11764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 275.116883][T11764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:271 [ 275.150755][T11776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 275.157068][T11778] overlayfs: failed to clone upperpath [ 275.167407][T11776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:274 [ 275.219951][T11782] __vm_enough_memory: pid: 11782, comm: syz.6.4048, bytes: 70373039144960 not enough memory for the allocation [ 275.497327][ T45] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 275.648389][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.659805][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.670099][ T45] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.679390][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.688397][ T45] usb 7-1: config 0 descriptor?? [ 275.695827][ T45] hub 7-1:0.0: USB hub found [ 275.894284][ T45] hub 7-1:0.0: 1 port detected [ 276.043760][T11824] overlayfs: failed to clone lowerpath [ 276.095111][ T45] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 276.102396][ T45] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 276.113611][ T45] usbhid 7-1:0.0: can't add hid device: -71 [ 276.119662][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 276.147709][ T45] usb 7-1: USB disconnect, device number 31 [ 276.360897][ T7561] bridge_slave_1: left allmulticast mode [ 276.366621][ T7561] bridge_slave_1: left promiscuous mode [ 276.372617][ T7561] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.380843][ T7561] bridge_slave_0: left allmulticast mode [ 276.386595][ T7561] bridge_slave_0: left promiscuous mode [ 276.392562][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.521815][T11843] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.528940][T11843] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.536050][T11843] bridge_slave_0: entered allmulticast mode [ 276.542468][T11843] bridge_slave_0: entered promiscuous mode [ 276.548689][ T7561] tipc: Left network mode [ 276.549038][T11843] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.560134][T11843] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.567242][T11843] bridge_slave_1: entered allmulticast mode [ 276.573658][T11843] bridge_slave_1: entered promiscuous mode [ 276.584643][ T7561] veth1_macvtap: left promiscuous mode [ 276.590248][ T7561] veth0_vlan: left promiscuous mode [ 276.619465][T11851] SELinux: policydb version -108398774 does not match my version range 15-33 [ 276.633459][T11851] SELinux: failed to load policy [ 276.723762][T11843] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.730925][T11843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.738263][T11843] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.745321][T11843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.773027][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.782802][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.802548][ T7558] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.809656][ T7558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.822029][ T7558] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.829131][ T7558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.856509][T11843] veth0_vlan: entered promiscuous mode [ 276.867533][T11843] veth1_macvtap: entered promiscuous mode [ 276.950927][T11877] binder: Unknown parameter 'context' [ 276.950943][T11876] binder: Unknown parameter 'context' [ 277.087463][T11897] rust_binder: inc_ref_done called when no active inc_refs [ 277.087497][T11897] rust_binder: Write failure EINVAL in pid:968 [ 277.126978][T11904] netlink: 'syz.0.4084': attribute type 25 has an invalid length. [ 277.237214][T11907] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 277.237236][T11907] rust_binder: Read failure Err(EFAULT) in pid:973 [ 277.257338][ T65] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 277.263043][T11911] can0: slcan on ptm0. [ 277.268458][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 277.268495][ T36] audit: type=1400 audit(2000000057.454:274570): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.303817][ T36] audit: type=1400 audit(2000000057.474:274571): avc: denied { ioctl } for pid=11910 comm="syz.6.4086" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 277.330972][ T36] audit: type=1400 audit(2000000057.474:274572): avc: denied { read } for pid=148 comm="dhcpcd" name="n20" dev="tmpfs" ino=5951 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.365429][ T36] audit: type=1400 audit(2000000057.474:274573): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n20" dev="tmpfs" ino=5951 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.389647][ T36] audit: type=1400 audit(2000000057.474:274574): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n20" dev="tmpfs" ino=5951 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.413909][ T36] audit: type=1400 audit(2000000057.504:274575): avc: denied { read } for pid=11914 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.441231][T11910] can0 (unregistered): slcan off ptm0. [ 277.441513][ T65] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.460102][ T65] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.470336][ T36] audit: type=1400 audit(2000000057.504:274576): avc: denied { open } for pid=11914 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.498570][ T65] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 277.511112][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.521948][ T36] audit: type=1400 audit(2000000057.504:274577): avc: denied { getattr } for pid=11914 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.549337][ T36] audit: type=1400 audit(2000000057.614:274578): avc: denied { write } for pid=11913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.572860][ T65] usb 9-1: config 0 descriptor?? [ 277.579306][ T65] hub 9-1:0.0: USB hub found [ 277.592352][ T36] audit: type=1400 audit(2000000057.614:274579): avc: denied { add_name } for pid=11913 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.762359][T11951] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 277.784975][ T65] hub 9-1:0.0: config failed, can't read hub descriptor (err -90) [ 277.813064][T11958] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 277.827996][ T7564] Bluetooth: hci0: Frame reassembly failed (-84) [ 277.988112][ T65] usbhid 9-1:0.0: can't add hid device: -71 [ 277.994579][ T65] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 278.027768][ T65] usb 9-1: USB disconnect, device number 2 [ 278.070212][T11978] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 278.077215][T11978] overlayfs: failed to set xattr on upper [ 278.083072][T11978] overlayfs: ...falling back to redirect_dir=nofollow. [ 278.089992][T11978] overlayfs: ...falling back to uuid=null. [ 278.504676][T11982] rust_binder: Write failure EFAULT in pid:10 [ 279.857330][ T961] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 279.857351][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 279.891366][T12064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:998 [ 279.902043][T12066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1000 [ 279.902404][T12067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1000 [ 279.932932][T12069] tmpfs: Unknown parameter 'noswap' [ 280.610458][T12090] overlayfs: missing 'lowerdir' [ 280.744867][T12111] rust_binder: 12111: no such ref 1 [ 280.750264][T12111] rust_binder: Write failure EINVAL in pid:41 [ 280.779130][T12113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 280.785419][T12113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:43 [ 280.893593][T12117] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 41) [ 280.903049][T12117] rust_binder: Error while translating object. [ 280.913845][T12117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 280.920676][T12117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1010 [ 280.980882][T12125] rust_binder: Write failure EFAULT in pid:1017 [ 280.991071][T12126] binder: Bad value for 'max' [ 281.050043][T12133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.227306][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 281.377404][ T10] usb 9-1: device descriptor read/64, error -71 [ 281.617553][ T10] usb 9-1: device descriptor read/64, error -71 [ 281.857794][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 281.997316][ T10] usb 9-1: device descriptor read/64, error -71 [ 282.237336][ T10] usb 9-1: device descriptor read/64, error -71 [ 282.307595][ T36] kauditd_printk_skb: 113 callbacks suppressed [ 282.307616][ T36] audit: type=1326 audit(2000000062.504:274693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff68a78e52b code=0x7ffc0000 [ 282.347559][ T10] usb usb9-port1: attempt power cycle [ 282.377699][ T36] audit: type=1326 audit(2000000062.574:274694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff68a78e52b code=0x7ffc0000 [ 282.437457][ T5930] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 282.445430][ T36] audit: type=1326 audit(2000000062.634:274695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff68a78e52b code=0x7ffc0000 [ 282.469123][ T36] audit: type=1326 audit(2000000062.634:274696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff68a78e52b code=0x7ffc0000 [ 282.492915][ T36] audit: type=1326 audit(2000000062.634:274697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff68a78e52b code=0x7ffc0000 [ 282.517302][ T36] audit: type=1326 audit(2000000062.704:274698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff68a78e52b code=0x7ffc0000 [ 282.587338][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 282.592918][ T36] audit: type=1326 audit(2000000062.784:274699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff68a78e52b code=0x7ffc0000 [ 282.594277][ T5930] usb 7-1: config 8 has an invalid interface number: 2 but max is 0 [ 282.617163][ T36] audit: type=1326 audit(2000000062.784:274700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff68a78e52b code=0x7ffc0000 [ 282.625147][ T5930] usb 7-1: config 8 has an invalid descriptor of length 8, skipping remainder of the config [ 282.659284][ T5930] usb 7-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 282.665778][ T36] audit: type=1326 audit(2000000062.784:274701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff68a78e52b code=0x7ffc0000 [ 282.670284][ T5930] usb 7-1: config 8 has no interface number 1 [ 282.692699][ T36] audit: type=1326 audit(2000000062.784:274702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12192 comm="syz.6.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff68a78e52b code=0x7ffc0000 [ 282.699451][ T5930] usb 7-1: config 8 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 282.734826][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 282.744282][ T5930] usb 7-1: too many endpoints for config 8 interface 2 altsetting 4: 174, using maximum allowed: 30 [ 282.746952][T12209] overlayfs: failed to clone upperpath [ 282.755367][ T5930] usb 7-1: config 8 interface 2 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 174 [ 282.773891][ T5930] usb 7-1: config 8 interface 0 has no altsetting 0 [ 282.780631][ T5930] usb 7-1: config 8 interface 2 has no altsetting 0 [ 282.788257][ T10] usb 9-1: device descriptor read/8, error -71 [ 282.795676][ T5930] usb 7-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice=a7.31 [ 282.795946][T12211] netlink: 37 bytes leftover after parsing attributes in process `syz.0.4181'. [ 282.805107][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.821894][ T5930] usb 7-1: Product: syz [ 282.832865][ T5930] usb 7-1: Manufacturer: syz [ 282.837761][ T5930] usb 7-1: SerialNumber: syz [ 282.918355][ T10] usb 9-1: device descriptor read/8, error -71 [ 283.053902][ T5930] usb 7-1: selecting invalid altsetting 0 [ 283.066253][ T5930] usb 7-1: USB disconnect, device number 32 [ 283.077901][T10412] udevd[10412]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 283.157371][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 283.178454][ T10] usb 9-1: device descriptor read/8, error -71 [ 283.308389][ T10] usb 9-1: device descriptor read/8, error -71 [ 283.417411][ T10] usb usb9-port1: unable to enumerate USB device [ 283.487709][T12226] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4187'. [ 284.042794][T12272] netlink: 'syz.0.4200': attribute type 12 has an invalid length. [ 284.434077][T12299] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 284.434117][T12299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 284.442343][T12299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1042 [ 284.480813][T12306] bridge0: port 3(syz_tun) entered blocking state [ 284.496697][T12306] bridge0: port 3(syz_tun) entered disabled state [ 284.509613][T12306] syz_tun: entered allmulticast mode [ 284.515501][T12306] syz_tun: entered promiscuous mode [ 284.533605][T12306] bridge0: port 3(syz_tun) entered blocking state [ 284.540138][T12306] bridge0: port 3(syz_tun) entered forwarding state [ 284.640904][T12313] rust_binder: Error while translating object. [ 284.640949][T12313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 284.647181][T12313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1052 [ 285.356399][T12386] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 285.379792][T12386] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 285.648368][T12404] input: syz1 as /devices/virtual/input/input17 [ 285.662078][T12404] rust_binder: Error while translating object. [ 285.662114][T12404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 285.668669][T12404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 285.735356][T12406] netlink: 1351 bytes leftover after parsing attributes in process `syz.8.4247'. [ 285.809694][T12410] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 285.823911][T12410] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 286.681236][T12450] netlink: 'syz.8.4264': attribute type 12 has an invalid length. [ 286.847348][ T31] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 286.947312][ T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 286.998404][ T31] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.010020][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 287.021223][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 287.032400][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.045335][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.054437][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.063222][ T31] usb 7-1: config 0 descriptor?? [ 287.068535][T12438] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 287.098441][ T10] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.106515][ T10] usb 9-1: config 0 has no interface number 0 [ 287.112696][ T10] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.123617][ T10] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.133420][ T10] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 287.142510][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.151267][ T10] usb 9-1: config 0 descriptor?? [ 287.471223][T12471] overlayfs: failed to clone upperpath [ 287.478072][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 287.486562][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 287.486583][ T36] audit: type=1400 audit(2000000067.674:274757): avc: denied { link } for pid=12470 comm="syz.0.4273" name="file1" dev="tmpfs" ino=3081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 287.515433][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 287.522919][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 287.530392][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 287.537907][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 287.545339][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 287.553614][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 287.561191][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 287.568696][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 287.576116][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 287.583741][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 287.591933][ T31] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 287.601238][ T31] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 287.620870][ T10] prodikeys 0003:041E:2801.0013: hidraw1: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.8-1/input1 [ 287.638273][ T10] hid_prodikeys: hid-prodikeys: failed to find output report [ 287.638273][ T10] [ 287.724598][ T36] audit: type=1400 audit(2000000067.914:274758): avc: denied { create } for pid=12472 comm="syz.0.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 287.745288][ T36] audit: type=1400 audit(2000000067.914:274759): avc: denied { write } for pid=12472 comm="syz.0.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 287.750220][T12438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.775326][T12438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.808985][ T10] usb 7-1: USB disconnect, device number 34 [ 287.877899][ T5930] usb 9-1: USB disconnect, device number 7 [ 288.181023][T12479] overlayfs: failed to clone upperpath [ 288.272778][T12482] /dev/rnullb0: Can't lookup blockdev [ 288.438301][ T36] audit: type=1326 audit(2000000068.624:274760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472878e929 code=0x7ffc0000 [ 288.463942][ T36] audit: type=1326 audit(2000000068.664:274761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472878e929 code=0x7ffc0000 [ 288.487836][ T36] audit: type=1326 audit(2000000068.664:274762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f472878e929 code=0x7ffc0000 [ 288.512381][ T36] audit: type=1326 audit(2000000068.704:274763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472878e929 code=0x7ffc0000 [ 288.541362][T12489] FAT-fs (rnullb0): bogus number of reserved sectors [ 288.548121][T12489] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 288.555293][ T36] audit: type=1326 audit(2000000068.704:274764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472878e929 code=0x7ffc0000 [ 288.579612][ T36] audit: type=1326 audit(2000000068.724:274765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12494 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47287c11e5 code=0x7ffc0000 [ 288.603861][ T36] audit: type=1326 audit(2000000068.734:274766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f472878e929 code=0x7ffc0000 [ 288.644194][T12502] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4284'. [ 288.719550][T12510] netlink: 'syz.6.4287': attribute type 11 has an invalid length. [ 288.740497][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4287'. [ 289.027325][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 289.177300][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 289.184209][ T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 289.197055][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.206608][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.214851][ T10] usb 7-1: Product: 疕峬꣑ꪬ⒛셏︧ [ 289.220812][ T10] usb 7-1: Manufacturer: 郄訐䘦읁羈ֆ䮿孛ᦋ䵇삷䶨蚟⟤삚겺㈧镪ꄼʫङꀖ⫢嚓᠛摅宬㯶벡붖ｖ썶౧Ⱞዽ↻嚧헢쓾惉䤍艇 [ 289.237098][ T10] usb 7-1: SerialNumber: а [ 289.327299][ T5930] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 289.458005][ T10] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 289.468095][ T10] usb 7-1: USB disconnect, device number 35 [ 289.477780][ T5930] usb 9-1: Using ep0 maxpacket: 32 [ 289.479481][T10412] udevd[10412]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 289.485678][ T5930] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 289.508642][ T5930] usb 9-1: config 0 has no interface number 0 [ 289.516954][ T5930] usb 9-1: config 0 interface 184 has no altsetting 0 [ 289.526604][ T5930] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 289.535715][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.543791][ T5930] usb 9-1: Product: syz [ 289.547983][ T5930] usb 9-1: Manufacturer: syz [ 289.552592][ T5930] usb 9-1: SerialNumber: syz [ 289.558187][ T5930] usb 9-1: config 0 descriptor?? [ 289.563905][ T5930] smsc75xx v1.0.0 [ 290.160435][T12554] overlayfs: failed to resolve './file0': -2 [ 290.257382][T12567] ------------[ cut here ]------------ [ 290.262943][T12567] WARNING: CPU: 0 PID: 12567 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0 [ 290.272492][T12567] Modules linked in: [ 290.276456][T12567] CPU: 0 UID: 0 PID: 12567 Comm: syz.6.4309 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 290.290093][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.300238][T12567] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 290.306207][T12567] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d d4 32 ee 05 00 0f 85 c4 00 00 00 c6 05 c7 32 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 290.325905][T12567] RSP: 0018:ffffc90005fdf9a0 EFLAGS: 00010246 [ 290.332059][T12567] RAX: 0000000000000000 RBX: 1ffff92000bfbf38 RCX: 0000000000000000 [ 290.340114][T12567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90005fdfa48 [ 290.348179][T12567] RBP: ffffc90005fdfad0 R08: ffffc90005fdfa47 R09: 0000000000000000 [ 290.356201][T12567] R10: ffffc90005fdfa30 R11: fffff52000bfbf49 R12: ffffc90005fdf9e0 [ 290.364248][T12567] R13: 0000000000000034 R14: dffffc0000000000 R15: 0000000000000000 [ 290.372291][T12567] FS: 00007ff68b5d06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 290.381294][T12567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.387939][T12567] CR2: 0000000000000000 CR3: 0000000114a7a000 CR4: 00000000003526b0 [ 290.395943][T12567] Call Trace: [ 290.399275][T12567] [ 290.402241][T12567] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 290.407945][T12567] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 290.413708][T12567] ? futex_wait_setup+0x1bc/0x260 [ 290.418791][T12567] ? __futex_wait+0x218/0x2a0 [ 290.423504][T12567] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 290.429712][T12567] ___kmalloc_large_node+0x9c/0x1d0 [ 290.434973][T12567] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 290.441178][T12567] __kmalloc_large_node_noprof+0x1e/0xe0 [ 290.446860][T12567] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 290.453084][T12567] __kmalloc_noprof+0x26d/0x450 [ 290.458011][T12567] ? __kasan_check_write+0x18/0x20 [ 290.463176][T12567] pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 290.469224][T12567] ? futex_setup_timer+0xb4/0xd0 [ 290.474208][T12567] ? futex_wait+0x288/0x540 [ 290.478756][T12567] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 290.485209][T12567] ? selinux_file_ioctl+0x6e0/0x1360 [ 290.490557][T12567] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 290.496162][T12567] ? do_futex+0x309/0x500 [ 290.500724][T12567] ? __cfi_do_futex+0x10/0x10 [ 290.505442][T12567] ? __fget_files+0x2c5/0x340 [ 290.510208][T12567] ? bpf_lsm_file_ioctl+0xd/0x20 [ 290.515193][T12567] ? security_file_ioctl+0x34/0xd0 [ 290.520358][T12567] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 290.526814][T12567] __se_sys_ioctl+0x132/0x1b0 [ 290.531561][T12567] __x64_sys_ioctl+0x7f/0xa0 [ 290.536208][T12567] x64_sys_call+0x1878/0x2ee0 [ 290.540949][T12567] do_syscall_64+0x58/0xf0 [ 290.545403][T12567] ? clear_bhb_loop+0x50/0xa0 [ 290.550138][T12567] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 290.556090][T12567] RIP: 0033:0x7ff68a78e929 [ 290.560581][T12567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.580311][T12567] RSP: 002b:00007ff68b5d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.588794][T12567] RAX: ffffffffffffffda RBX: 00007ff68a9b5fa0 RCX: 00007ff68a78e929 [ 290.596809][T12567] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000007 [ 290.604830][T12567] RBP: 00007ff68a810b39 R08: 0000000000000000 R09: 0000000000000000 [ 290.612878][T12567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.620956][T12567] R13: 0000000000000000 R14: 00007ff68a9b5fa0 R15: 00007ffe712caf08 [ 290.629019][T12567] [ 290.632064][T12567] ---[ end trace 0000000000000000 ]--- [ 292.148837][ T5930] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 292.159749][ T5930] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 292.169447][ T5930] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 292.179714][ T5930] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 292.189321][ T5930] usb 9-1: USB disconnect, device number 8