last executing test programs: 1m9.716403703s ago: executing program 0 (id=60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 1m8.869216375s ago: executing program 0 (id=63): socket$netlink(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 1m8.868596755s ago: executing program 0 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x3a, 0x22, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000009240)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="abee2f0a", 0x4}], 0x1}}], 0x1, 0x20000040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x183a01, 0x55) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x4, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)=""/241, 0xf1}], 0x1, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x10002) close(r7) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000080), 0x8) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040814) 1m8.054410543s ago: executing program 0 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregs(0xe, r1, 0x45, &(0x7f0000000080)) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x273) 1m8.036838235s ago: executing program 0 (id=66): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x80) fchdir(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) unshare(0xc040480) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x46, &(0x7f0000000280)={0x0, 0x0}, 0x10) open(&(0x7f0000000140)='./file0/file1\x00', 0x88440, 0x84) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x20) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r8 = eventfd2(0x800, 0x0) (async) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x7, 0x1, r7, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r8}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005020102091124060604059611d6f66b5eda7901000509a4030506030501f909240702020005cbad0924030601220303df092403fb020309"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 1m7.952144062s ago: executing program 0 (id=67): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @broadcast}, {0x306, @local}, 0x1e, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x0, @multicast2, 0x4e21, 0x1, 'none\x00', 0x0, 0x9, 0x54}, 0x2c) 1m7.951798462s ago: executing program 32 (id=67): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @broadcast}, {0x306, @local}, 0x1e, {0x2, 0x4e23, @remote}, 'gretap0\x00'}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x0, @multicast2, 0x4e21, 0x1, 'none\x00', 0x0, 0x9, 0x54}, 0x2c) 1m4.136402296s ago: executing program 2 (id=102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', '', [{0x20, '\xb2z\xae\xd3\xf3\b\xeb\xa7\x91\xef\xaf\xb4\xfc\b\to\x81\x9d\xde\xa9\xbc\x85G\x1e\x98\xa3\x8bu2\xb9V\x0e\x00\xd28\xadAr\x8d>\x18\xa5\x87\xebg\xb9\x9a8\x12\x14\x92s\xd8+9\f\xb7rvw\x17\xab\xda\x92z\b\xbd\\>H?\xf7D<\xb5k\xd5\x89)\x0fw\xaf\xcd!\xa8g\x86rXW$\xaa\'\xd9\xd6=\xaa\xdf\xdb+\n\x89\xc2^\x9e\x85\xe6\a(\xcf\xcf`]\xfbw\xfae\xe6\x0eY\xe2\x13\xae\x9dlofa\\vC\x94Bi\xc8\x82\x02\x19\x86\x883\xeb\x17\xec\x01\x8fy\xbe\xe9\xc8m\x90\x88\x06\x1b\xa3\xb2P\xaf\xea/\x00'/173}]}, 0xb2) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000380)='Q', 0x1}], 0x1, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x22, 0x20000007, 0x3, 0x44233, 0x200000000000007, 0x81, 0x9bf, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x6002, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m4.108341308s ago: executing program 2 (id=103): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000022c0)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount$9p_unix(&(0x7f0000003680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0), 0x20200c0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x109e9a, 0xfffffffffffffffd, 0x400000, 0x6, 0x0, 0x400, 0x7, 0x48d6, 0x8, 0x20000000000006, 0x5, 0x1, 0x6], 0xd5d5c004, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000062000/0x18000)=nil, 0x0, 0x0, 0x21, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) lremovexattr(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="627480367266732e2f6465762f6b766d00"]) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/63, 0x328000, 0x400}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000180)={0x2c, 0xa, r6, 0x10}, 0x10) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) request_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0) setuid(0xee01) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000240)={'bridge0\x00', @remote}) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r7, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x80, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) 1m4.002048357s ago: executing program 2 (id=105): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000540)={0x6, 0x74}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0xa70) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2000001}}, 0x50) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000002380)="0f20c035000004000f22c00f491da990000066ba4300ecb9800000c00f3235001000000f30b9d0080000b800680000ba000000000f30f30f09b9800000c00f3235000800000f30660f388037660ffa54e97166ba4300b00aee", 0x59}], 0x1, 0x74, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000280)={0x40000001}) mount(&(0x7f0000002040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000002080)='./file0\x00', &(0x7f0000002280)='esdfs\x00', 0x100040, &(0x7f00000022c0)='\x00') ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100000, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0xffffffff8002200c, 0xa, 0x8, 0x7, 0xcdd, 0x0, 0x0, 0x40, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x2, 0x5, 0xfffffffffffffff9, 0x400, 0xc, {0x0, 0xb, 0x7, 0x1, 0x1, 0x4, 0x9, 0x0, 0x4, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000006400)={0x10, 0x0, r7}, 0x10) 1m3.73243869s ago: executing program 2 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000080)='./file0/file0\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0xc, 0x20000, {r0}}, 0x20) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffc}) clock_nanosleep(0x1, 0x0, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/149, 0x95}, {0x0}], 0x2, &(0x7f0000000840)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 1m2.848255455s ago: executing program 2 (id=116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0xffffffffffffff18}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl(r3, 0x8000451a, 0x0) r4 = epoll_create1(0x80000) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000000)={0x80000002}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000640)={0x42, 0x3, 0x2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$uac1(0x2, 0xab, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x9, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xf}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x4, 0x4, [0x5, 0x1, 0x5, 0x1], 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x4, 0x1, 0x8}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x3, 0x4, [0x7, 0x5, 0x6, 0x6], 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0x8001, 0x9, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x6, 0x6, 0x42, {0x7, 0x25, 0x1, 0x80, 0x10, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x10, 0x0, 0x1000}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x8, 0xc0, {0x7, 0x25, 0x1, 0x7, 0x40, 0x7fff}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x6, 0x1, 0xa4, 0x8, 0xe9}, 0xf8, &(0x7f0000000940)={0x5, 0xf, 0xf8, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x81, 0x7, 0x6, 0x72}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xb0, 0x1, 0xfffa}, @generic={0xca, 0x10, 0x3, "42c5fd7c0e0148a977a7b396bbd2545f43665411c6f7542a1676800a07b8a8edcd1b907171bcc1ff3329d85394cc5c28e4bd9fdfc4eb57396c78a987a577a487d58f0f819011b8a5c8c298cf5988d5842389076f06206771b7ebca87e3012bd886a76b8f89507278799b39801ea7ee4729e613b919b5278c398dcf68af6459d37bcb025d10bb693e9b5767ff08e6b88b43c0f5f8534e4d250b7e7686b5fd38052fba0500fa3fe30869389bf7a1eedd6825f8f39b47e1ef8ad50c17390e161c72d3b0f91b00d97a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0xd, 0x2}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x2, 0x7}]}, 0x5, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42c}}, {0xbb, &(0x7f0000000480)=@string={0xbb, 0x3, "2446112c62d244e87047db9789f7efe8b1e917a8e668329531f9037c590674862d879d4a31efb8a58437b2a87ee8936ea8e6d3e997a4e9f2482838444d0ee1df399d047af85de3c5de7636362156cde7a7ad066ccee3385bef2fcf9a0fd1903fe57013944ce34b0415407e44baf737a3f2299f6c82ed8f279f1b4c7f960b410611a4465a0cb58cc5198d9bf2e4c8360de740911387edd71fd5725c1af0bc8e36e9c5262727c223d0478153a0cb0b2e40088d4d599102d3cb80"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x812}}, {0x4b, &(0x7f0000000800)=@string={0x4b, 0x3, "5b8e0394953834f69001db168d92734cfedb55df7291dc92398d4775b4d2373eee16c496951adec6c43c684ec1012880707cf5195e1627d63812c9a98cbf50f9f571b6fcc7291d878a"}}]}) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r6, 0x20b, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) getsockopt$sock_buf(r8, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_012={0x1, 0x0, 0x9, 'a'}, @global=@item_012={0x1, 0x1, 0x1, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080026bd7000fbdbdf2501a439860fa6fe000000000000004b84e508745e05ae9f7d4f533300000014000900fe8000000017000000000000000000aa082000000000070000000000"], 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x8041) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e402010902270001000000000904", @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES8=0x0, @ANYRESHEX=r0], 0x0) 1m2.808235668s ago: executing program 2 (id=117): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x20000080) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0xffffbffc, 0x4) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160016000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 1m2.767347102s ago: executing program 33 (id=117): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x20000080) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0xffffbffc, 0x4) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160016000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 52.304220048s ago: executing program 5 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) fsmount(r0, 0x0, 0x20) creat(&(0x7f0000000240)='./file0\x00', 0x28) 52.299395089s ago: executing program 5 (id=185): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) syz_usb_connect(0x3, 0x7f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000044d6b2099042510f69c0000000109026d0001022440020904c20004a2f8ab000524060000052400f5ff0d240f01080000000700008036042402050524060000052400ec000d240f01030000000600050081051d01000309050904100000050f090582e64103060c0309050a03300607"], 0x0) 51.013075588s ago: executing program 5 (id=194): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)=0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x10, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x9000}, 0x2c, {'user_id', 0x3d, r1}}) r2 = socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xee) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001f00000000", 0x39}], 0x1) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001f00000000", 0x39}], 0x1) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800b7, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000200)="9b00941f76640255eaf2ec254892bd4f8bf9d073504a360af3adcca1fd40d2c6843eaec95d7019dbc785f060a64578c675dc7253b401d475d80dea217553678ee37b41c5d5dd7394edb332de03689f03dea7091b0c53208c6eb53aa22c1804e82aeb0fcbb98742fdae88f01b97515300c2bfa6c76426b86b8dc9814674c5116327fd605a99651c8628ca94f797cafff2d614a50d9c48e23966c589dbf78d464efc72b112a3e67fa2f75537d86ad9ebbc6249fd4aa541194034", 0xb9}], 0x1, 0x80, 0x1) (async) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000200)="9b00941f76640255eaf2ec254892bd4f8bf9d073504a360af3adcca1fd40d2c6843eaec95d7019dbc785f060a64578c675dc7253b401d475d80dea217553678ee37b41c5d5dd7394edb332de03689f03dea7091b0c53208c6eb53aa22c1804e82aeb0fcbb98742fdae88f01b97515300c2bfa6c76426b86b8dc9814674c5116327fd605a99651c8628ca94f797cafff2d614a50d9c48e23966c589dbf78d464efc72b112a3e67fa2f75537d86ad9ebbc6249fd4aa541194034", 0xb9}], 0x1, 0x80, 0x1) 50.892465748s ago: executing program 5 (id=195): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x18d883, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000080)='./file0/file0\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0xc, 0x20000, {r4}}, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdf25070000001800ca80140006"], 0x2c}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0xfffe, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x9, 0xe, 0x7fff, 0x7fff, 0x14, "807774aa2491d8e8c9d29171e9e7565af3d531"}) 50.892230518s ago: executing program 5 (id=196): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) tkill(r2, 0x36) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r4, 0x0, 0xf, 0x8) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000240)={0x1, {{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401000}}, {{0xa, 0x4e31, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000400)=0x4, 0x4) sendmmsg$inet(r6, &(0x7f0000000040)=[{{&(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) 50.874717479s ago: executing program 5 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680), 0x1d}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x5, 0x8e6, &(0x7f0000000500)="0c59ff964a8d0c6ef53e1f768570bb52e47176810d4a46ebe6f9439e0aec549b461124de283d1340d603a231cc1d81f82b0d84df18f7abc1512255663a886ec2e18f7cd3b10d68447a302379af294c39ae1ef5a7a558a21358c60eaeabfebb6ee59b24d23b2f3c79abe5789dadd1f367d98b82e59f9fb9516cb3f908ed15a5a0bbab8970ef10c090eabdbf0fb6f1e5ccd60688325dd259cb9cdbeca3a3ce", &(0x7f00000001c0)="6203d2b6d9cba50bc66290c1ba3111016dccd3a1ba03b379c0e068da6716e27df0cf0af6d1b80890b18b0b7ae2", 0x9e, 0x2d}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x7f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aaa8fa017242ba9380d419", 0x21) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.790890687s ago: executing program 34 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680), 0x1d}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x5, 0x8e6, &(0x7f0000000500)="0c59ff964a8d0c6ef53e1f768570bb52e47176810d4a46ebe6f9439e0aec549b461124de283d1340d603a231cc1d81f82b0d84df18f7abc1512255663a886ec2e18f7cd3b10d68447a302379af294c39ae1ef5a7a558a21358c60eaeabfebb6ee59b24d23b2f3c79abe5789dadd1f367d98b82e59f9fb9516cb3f908ed15a5a0bbab8970ef10c090eabdbf0fb6f1e5ccd60688325dd259cb9cdbeca3a3ce", &(0x7f00000001c0)="6203d2b6d9cba50bc66290c1ba3111016dccd3a1ba03b379c0e068da6716e27df0cf0af6d1b80890b18b0b7ae2", 0x9e, 0x2d}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x4, 0x5, 0x4, 0x7f, 0x4230, 0x500000000000000, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)="0bbb288dd6ffa80800431c00000000000000210d0000aaa8fa017242ba9380d419", 0x21) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.784368114s ago: executing program 6 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x47, 0x0, &(0x7f0000000680)) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4000000000000c2, 0x3a, '', 0x3a, '', 0x3a, './file0'}, 0x27) r1 = geteuid() quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@rnullb, r1, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000c40)=@abs={0x1}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1}, 0x6e) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)={'U-', 0x2}, 0x16, 0x0) 38.783792614s ago: executing program 6 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000000)={&(0x7f0000000340)="2220a1bbb4faed03f7fddb73451ab2e0f44830105402548258259a42b2d9683f9d1b7be1ca17554b2079debb0f4988721b2bf10d0b6e325200cf01b779f29eb9673c27557c8f6886a3d0004c37b37ab9473e3700592a5b750348f5408d7284880bf9a40ccca8c4cd583dc55787e8951d3c9f3d2f7fac889805203c7b554d9e94b06ec3f6854689ddcafbd267a0fb45fcbf5d92f0b8f9c8762accae7f9ff08409a52cc7f10700ba6088e83c6903cf3ded286f583d27f6acab541c845f7ed139c03fa432cb63dcc2f0cb3e8a006d3d505755298fa7c1f8e7daf4e59e7fdd5397", 0xdf}) flock(r2, 0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r5, 0x1) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 37.941900466s ago: executing program 6 (id=267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) (async, rerun: 64) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) (rerun: 64) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) (async) statfs(0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r1) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000017c0)={0x18, r3, 0x21, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4050) (async, rerun: 64) r4 = socket$inet6(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000880)=0xfbf, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) 37.918588247s ago: executing program 6 (id=268): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000d30000007f00000004"], 0x58) close(r0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000001100)='.\x00', 0x48f) (async) inotify_add_watch(r1, &(0x7f0000001100)='.\x00', 0x48f) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000001c0)={{'\x00', 0x2}, {0x81}, 0x4, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="eddbc9602d6bbf13f0a86fb6204d6b10cbb3c28ee62bfcea7a94d70e5e31e3477baa1dd53535850ca1c9950a8d1a920ee09e595706cb48db86f4695438211cdeacfc066ca269c5d18c34260b5e9cce46fd15f1c5f6cbcdd7bf5b7261c88cb1954c95445b88ab9e7faaf9e23d61db9ca4986d64b82e2e75d0b949be2a47cdbe0ade38c100bd93045350f6853aa0cf3acdf2210642c062569ecbf088c5415d433ce431346715", 0xa5, 0x0, &(0x7f0000001140)={0x2, 0x10c4, {0x1, 0xc, 0x1000, "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", 0xb7, "c75cde39c29b3098a1ac3807c593124f63f8d3c29b5bc5a7235a22397702bf277c9b88b7b495f227258f63f65181130adbd851bc99421e6e665992fcf03727d17477322432b224d740651f8f6a9303d285d032b12973e7580801cca485e31af567356afe99dbfff529ebb21e82e7385029366f78fe923157944908d363d777decd433d9e09df9a463cae1a2e1a69eca498b683db8ac05095642d0de4938d83d83b3d0ff36678ff26282049d66df71245b76c6033c75e65"}, 0x62, "4b3c8c392398dfac467ec95f4be5f287e5cea4d2b8f97f42e0db8eb2d34396da0108ef81a3025f7577738a9e8aabe79bd913f44a1b2eaa646648d63f536c4ea1d6c30d71ac9b19e7da4ac75ca10d2da86f76247b752bd3d1ff1a825b036a7ef0aab1"}, 0x1132}) close(r0) execve(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0) 37.848373593s ago: executing program 6 (id=269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010002, 0xec000000, 0xcd}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) fcntl$setpipe(r4, 0x407, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000006140), 0xe0000, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x100000001) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x7, "c2f2eb6c39"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = timerfd_create(0x0, 0x800) timerfd_settime(r7, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) read(r7, &(0x7f0000000000)=""/162, 0xa2) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) fcntl$setpipe(r3, 0x407, 0x2) 36.136594448s ago: executing program 6 (id=277): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201d800000000206d0427c200000001000109022400010000180009040084030300010009210a04000122050009058103b7"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) creat(&(0x7f0000000240)='./file0\x00', 0x28) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='source', 0x0, 0xffffffffffffffff) unshare(0x22020400) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5202) syz_usb_connect(0x0, 0x57, &(0x7f00000012c0)={{0x12, 0x1, 0x10, 0xf0, 0x5f, 0x82, 0x10, 0x19d2, 0x1065, 0x7457, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x6, 0x22, 0x30, 0x1, [{{0x9, 0x4, 0x20, 0x7f, 0x4, 0xa, 0x76, 0x13, 0x10, [], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x49, 0xb9}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x0, 0x1a, 0x40}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0xf5, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}]}}, {{0x9, 0x5, 0x2, 0x2ea85af273790d4a, 0x400, 0x2, 0x4, 0x5, [@generic={0x8, 0xb, "100938646c9e"}]}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x0, 0xc, 0x10, 0x10, 0xb2}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r5, &(0x7f000000b240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/72, 0x48}, 0xfffffe01}], 0x1, 0x40010141, 0x0) request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=',\x00', r2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x40, 0x11, 0x23, {0x23, 0x30, "ef5212eca6f386ffd0ae7a2b426ad6b2b77eb0e4368a04479a7802c395a200016b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 21.155220707s ago: executing program 35 (id=277): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201d800000000206d0427c200000001000109022400010000180009040084030300010009210a04000122050009058103b7"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) creat(&(0x7f0000000240)='./file0\x00', 0x28) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='source', 0x0, 0xffffffffffffffff) unshare(0x22020400) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5202) syz_usb_connect(0x0, 0x57, &(0x7f00000012c0)={{0x12, 0x1, 0x10, 0xf0, 0x5f, 0x82, 0x10, 0x19d2, 0x1065, 0x7457, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x6, 0x22, 0x30, 0x1, [{{0x9, 0x4, 0x20, 0x7f, 0x4, 0xa, 0x76, 0x13, 0x10, [], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x49, 0xb9}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x0, 0x1a, 0x40}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0xf5, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}]}}, {{0x9, 0x5, 0x2, 0x2ea85af273790d4a, 0x400, 0x2, 0x4, 0x5, [@generic={0x8, 0xb, "100938646c9e"}]}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x0, 0xc, 0x10, 0x10, 0xb2}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r5, &(0x7f000000b240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/72, 0x48}, 0xfffffe01}], 0x1, 0x40010141, 0x0) request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=',\x00', r2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x40, 0x11, 0x23, {0x23, 0x30, "ef5212eca6f386ffd0ae7a2b426ad6b2b77eb0e4368a04479a7802c395a200016b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.994574672s ago: executing program 3 (id=452): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[], 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x88) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x1fffffffe, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x6c}, 0x2, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) chroot(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00') (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8001a80}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}}, 0x8000) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x24004800) (async) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x2e, 0x5, 0x915}}) (async) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x8863}, @val={0x1, 0x0, 0x0, 0xfffe, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x1, 0x5, 0x80, 0x2, 0x1}}}, 0x36) (async) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000380)="66b807018ee03e672e670f01c2c74424003ae81539c744240209000000c7442406000000000f011c24c4c269b8c7b9800000c00f3235001000000f300f01cf0f019f00180000b91b0b0000b809000000ba000000000f300f01b5003000000f2123"}], 0x0, 0xfcda57273b6e62af, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403013c2cbae2381a49a86b3ec4c802546beb25dc0f67a8cc3c39a8d48a283b9e5fd59158"], 0x0, 0x0, 0x0}, 0x0) 3.939940336s ago: executing program 3 (id=453): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x24f8fab54b9875b) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) (async) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x1) r1 = getuid() mount$tmpfs(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x1b14022, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x121408fc554bf169, 0x39, 0xdd0dec0c6e399a8f, 0x0, 0x35, 0x70, 0x25, 0x42]}}, {@huge_always}], [{@subj_type={'subj_type', 0x3d, 'security.selinux\x00'}}, {@pcr={'pcr', 0x3d, 0x14}}, {@hash}, {@dont_measure}, {@euid_lt={'euid<', r1}}]}) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mknodat$loop(r0, &(0x7f0000000280)='./file1\x00', 0x100, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) (async) landlock_create_ruleset(&(0x7f0000000300)={0x8020, 0x9, 0x7}, 0x18, 0x3) (async) recvmsg$unix(r2, &(0x7f0000001880)={&(0x7f0000000340), 0x6e, &(0x7f0000001740)=[{&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f00000004c0)=""/173, 0xad}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/161, 0xa1}, {&(0x7f0000001640)=""/219, 0xdb}], 0x5, &(0x7f00000017c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x40010124) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f00000018c0)={0x6, 'gre0\x00', {0x1}, 0x2}) (async) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001900)='./file1\x00', &(0x7f0000001940)={0x10000, 0x50, 0x26}, 0x18) getdents64(r10, &(0x7f0000001980)=""/16, 0x10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x5, &(0x7f00000019c0)=0xffffffbc, 0x4) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a40), r6) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r9, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a80)={0xd0, r12, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4010}, 0x20000800) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r13, &(0x7f0000002040)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002000)={&(0x7f0000001c40)={0x3b4, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x77c4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62a36f9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd38}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xacc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6f63c74d102796a76d2407514e8d46bec8944a2a12a04dc8efcea50bac73"}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x23c8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}}}}]}]}, 0x3b4}}, 0x4040010) open$dir(&(0x7f0000002080)='./file1\x00', 0x10100, 0x6) r14 = syz_open_dev$ptys(0xc, 0x3, 0x0) fchown(r14, r1, r7) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002200)={&(0x7f0000002100)={0xe8, r12, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x3}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48040}, 0x20008840) (async) pipe(&(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000022c0), &(0x7f0000002300)=0xc) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), r5) (async) getsockopt$inet6_mreq(r15, 0x29, 0x15, &(0x7f00000023c0)={@private2, 0x0}, &(0x7f0000002400)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000002500)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x58, r16, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9a75a6e02be8b524}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 3.903189269s ago: executing program 3 (id=455): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100003a370520810705000500010203010902240001000010000904e60a025bbd97000905020200020200000905820200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000040)={0x20, 0x9}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0xf, 0x1, '\x00'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f00000002c0)={0x40, 0x0, 0x4, "25b8275c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 3.019637284s ago: executing program 1 (id=459): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r2, 0x3) connect$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) sendto$packet(r0, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, &(0x7f00000010c0), 0x3fffff) r4 = syz_io_uring_setup(0x11d39, &(0x7f0000000180)={0x0, 0x20f9d6, 0x3fff, 0x1, 0x29d}, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) fcntl$lock(r4, 0x27, &(0x7f0000000100)={0x0, 0x3, 0x9, 0x8, r5}) clock_adjtime(0xbb9b53f2e0ec05ae, &(0x7f0000000000)={0x7ff, 0x2, 0xfff, 0x1, 0x10, 0x3, 0x8, 0x9, 0x3, 0x200, 0x4, 0x2, 0x4, 0x7, 0x3, 0x0, 0x7, 0x8, 0x3, 0x2, 0xff, 0x6, 0x9, 0x4, 0x1, 0xcd}) 2.96025497s ago: executing program 1 (id=460): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x200000000000003, 0x0, 0x4000000000006, 0xfffffffd, 0x6, {0x2, 0xb, 0x8, 0x100000000000, 0x7, 0x401, 0x8, 0x6, 0x2008, 0xc000, 0xe44, 0x0, 0x0, 0x1, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x256c, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x3, 0x1) getdents64(r3, 0x0, 0x22) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='proc\x00', 0x200000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @mcast1, 0x73}, 0xfffffffffffffecb) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f88db8626db862600000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x4c}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000080)={0x16, 0x4, 0x3f}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.0080889s ago: executing program 4 (id=461): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f000000c240)={0x2, 0x4e22, @multicast2}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x8c) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x1, 0x840000000000a132, 0xffffffffffffffff, 0x1000) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r5 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r5], 0x20}}, 0x40816) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) mkdirat(r6, &(0x7f0000000080)='./file1\x00', 0x48) (async) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback, 0x6}, 0x4eb163de249103c6) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x4002, 0x4) 1.966806903s ago: executing program 4 (id=462): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000006401010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003d"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async) lsm_set_self_attr(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="65000000000000000500000000000000220000000000000002000000006a76b7cf78"], 0x20, 0x0) lsm_get_self_attr(0x65, &(0x7f0000000000)={0x0, 0x0, 0x44, 0x24, ""/36}, &(0x7f0000000080)=0x44, 0x0) 1.900273339s ago: executing program 4 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @remote}, 0x1c) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000a00fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) sendto$inet6(r1, &(0x7f00000005c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xd1, 0xc001, 0x0, 0x0) close(0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r2 = open(&(0x7f0000000480)='./file2\x00', 0x0, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f000056b000/0x1000)=nil, 0x1000, 0x15) (async) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) sendfile(r5, r5, 0x0, 0x1) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') stat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000280)) 1.836344084s ago: executing program 4 (id=464): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000008c0)="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", 0xfc) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, r1, &(0x7f00000001c0)='m', 0x1}]) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7fffffffffffffff) io_destroy(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) 1.720716964s ago: executing program 4 (id=465): mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x3ae4c21, &(0x7f0000000340)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x64, 0x61, 0x38, 0x34, 0x34, 0x33, 0x31], 0x2d, [0x38, 0x38, 0x31, 0x30], 0x2d, [0x37, 0x30, 0x66, 0x36], 0x2d, [0x62, 0x65, 0x62, 0x64], 0x2d, [0x30, 0x36, 0x63, 0x66, 0x63, 0x37, 0x34, 0x34]}}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e4c54, 0xed, 0x4}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0xfffffffffffffffe, 0x0, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/199, 0xc7}], 0x1}, 0x9}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f00009e6000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x465e7000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000240)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, 0x0}) 1.591883115s ago: executing program 4 (id=468): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x10b900) read$usbmon(r1, &(0x7f0000000140)=""/112, 0x70) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r3, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x100000000000000, 0x0, 0x20004074}, 0x8010) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x40, 0xc4acde141ca2cafa, 0x3, "4c93c4"}, 0x0, 0x0}) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r4, 0x0, 0x0, 0x40010, &(0x7f0000000000)={0x2, 0x1, @broadcast}, 0x10) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x2, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x44040200) 1.577344446s ago: executing program 7 (id=470): r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000029c0)=""/4116, 0x1014}], 0x1}, 0xb}], 0x1, 0x2000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000029c0)=""/4116, 0x1014}], 0x1}, 0xb}], 0x1, 0x2000, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) (async) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async) 1.541879159s ago: executing program 7 (id=471): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x5, 0x0, r0, 0x0}]) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ffffffff0000000006002b00020300000000000000000000fe880000000000000000000000000001"], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) io_pgetevents(r3, 0xc, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3]}, 0x8}) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000003000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.42038096s ago: executing program 7 (id=472): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x70, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x59, 0x1, 0x0, 0x0, @str='/dev/rnlb0\x00\xe1\xb6y\xe7\xa3\xd3o\x8a\x84\xb7@~Z\xb4t\x87\x19\x87\xa6u\x80\xe4\x81\xad\xe7\xb4 \xc9\xcd\xd5o\xb6V\xc3\xebs\x8f\xba\xd5\xc4wm6\xb5\x85\xa2\x89<\fY\xc6K\xef[\xd0\x9a($R[C\x1d\x13/\x93\xea\x9f\xd1\xf8r\xca:\x88\x8d'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x10, 0x4) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x22, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x40, 0x9, 0x17, {0x17, 0x5, "35ecb05bc3f7b0226d879376c7704bc4b347cf89dd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.293483311s ago: executing program 1 (id=473): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES32=r2], 0x20}}, 0x40816) r4 = dup(r0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x10, 0x9, 0x100, 0x8003, 0x6, 0x200, 0x1, 0x800, 0x4}}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x3300, 0x4) connect$bt_l2cap(r5, &(0x7f00000001c0)={0x1f, 0x80}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x5c7080, 0x0) memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|=\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6Y\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\"DnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xca\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x972\x80\x1c\n\xed\xb7\x8f\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c\x96\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x00\x00\x00', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000000040)="80000000", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) recvmmsg(r8, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000480)="ef8d3b2648df676a2743e1461f11eba932b4df76d04f1b77aad512e5958e98551da270779f924d434431d8a91ccb9c48fbfb7771a3be62b4203e4b96c6e1781cbb1e6d4c66f4429d27c207b83010ed3a05d3d8c665757da583191165fedea54d6f1f63", 0x63) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) r10 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r11, 0x2) fsmount(r10, 0x0, 0x82) 1.281689092s ago: executing program 1 (id=474): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x5, 0xff, 0x53, 0xfffff00c}]}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0xa0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) (async) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x140409, &(0x7f0000000240)={[{@clone_children}, {@none}, {@favordynmods}], [{@obj_user={'obj_user', 0x3d, 'overlay\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'upperdir'}}, {@euid_eq={'euid', 0x3d, r2}}]}) getsockopt$inet_int(r0, 0x0, 0x22, 0x0, &(0x7f0000000200)) 1.1884807s ago: executing program 1 (id=475): r0 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905", @ANYRES64], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (fail_nth: 1) 381.729468ms ago: executing program 3 (id=476): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000004580)=""/4081, 0xff1}], 0x4}, 0x5e}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x10}], 0x4, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) 360.48502ms ago: executing program 3 (id=477): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000980)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) 206.221813ms ago: executing program 3 (id=478): r0 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905", @ANYRES64], 0x0) capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000140)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x6}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x117, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x105, 0x3, 0x1, 0x85, 0x0, 0x11, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1e}, [@selector_unit={0x5, 0x24, 0x5, 0x3, 0xa}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x6, 0x5, [0x2, 0x3, 0x8, 0x2, 0x5], 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x4, 0x5, 0x3}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x2, 0xe, "45efe8"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x5, "57b526d1ef"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x4, 0xe2, 0x9, "94055d657fa411d8"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x10, 0x3, 0xa, 0x7, "c19f012e"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x72, 0x1, 0x4, 0xff, "eb"}, @as_header={0x7, 0x24, 0x1, 0xae, 0x7, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf6, 0x4, 0x10, 0x2, "da8eecff065749552a"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x51, 0x7, {0x7, 0x25, 0x1, 0x82, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xcb, 0x3, 0x1, 0xff, "217eb0"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x8, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa4, 0x1, 0x40, 0x9, "f736d7"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x57, 0x1, 0x51, 0x9, '}\vr'}, @as_header={0x7, 0x24, 0x1, 0x89, 0x99, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xff, 0x2, {0x7, 0x25, 0x1, 0x6, 0x4, 0x8}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x6, 0x4, 0xc7, 0xff, 0x5}, 0x25, &(0x7f0000000200)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x3, 0xf, 0x7, [0xff0000, 0x0, 0xc000, 0x3f0f, 0x0]}]}, 0x1, [{0x70, &(0x7f0000000240)=@string={0x70, 0x3, "70ac955cc62b69487644959c6cb6b60c1e5ec6a3f54beb94c1258fd5af1446cc41c96ef498a2e1438af0ee2fc42cb736d53310df230497f1561d186f4d3df9e1a58f8def419384e423cecee2c7779769ea39e13481be26b28682fcf6c79de2e742c053cc539deda83467b65e6b84"}}]}) 101.719222ms ago: executing program 7 (id=479): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 100.356202ms ago: executing program 7 (id=480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="0f090f3566b842000f00d8b8050000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x28}], 0x1, 0x12, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) (async) sendmsg$inet6(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="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", 0x101}, {&(0x7f0000000600)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed698e9d1015794e38f83dc9d177719cb1f7991ee501ad1ff9d69f88d4bb78c0b76402fd5b363a275a95533bc9300c69d731162f7d6591a1b120ae0aabdef8442bd3f3fcc0a8928ca09c02696e77c4a5344365ad0cddf7ae2313cf21a3677d60a3eafb6b0da9fd92de9a62986ab654c007488442d960a80f67bf2818b90107398ff4fa56183282bbb", 0xae}, {&(0x7f0000002a00)="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", 0xa98}, {&(0x7f0000000780)="a2446674edd4275bc83e412b8c09a1c8e7409b9b315ecceb090d4d90cd27c803d8cde772bb5151df31d975085361bd3da584", 0x32}], 0x4}, 0x20000000) (async, rerun: 32) clock_gettime(0x1, &(0x7f0000000040)) (rerun: 32) 304.53µs ago: executing program 7 (id=481): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000b40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x20, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x6b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x18, 0x8, 0x8, 0x92, {0x7, 0x25, 0x1, 0x1, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x81, 0x4}}}}}}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000000)={0x0, 0x6, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xffffffff, 0xf000, 0x4, 0x7f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0xfe}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xb, 0x1, 0x44, 0xe, 0x3, 0x3}, {0x10b002, 0xe000, 0x10, 0x0, 0x5, 0x0, 0x3, 0x0, 0x4, 0x1}, {0x2000, 0x0, 0x8, 0x0, 0x0, 0x80, 0x0, 0xff, 0x0, 0xfc, 0x1a, 0xa8}, {0x210004, 0x200000, 0x0, 0x0, 0x6, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xb000, 0x80a0000, 0x0, 0x82, 0x0, 0x9, 0x4, 0x11}, {0x6000, 0xd}, {0xeeee8000, 0xff7e}, 0x60000004, 0x0, 0x4, 0x10, 0x0, 0x0, 0x900, [0x80000000000, 0x0, 0x10000, 0x6]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r7, 0xd6, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000f00)={0x14, 0x0, &(0x7f0000000e40)={0x0, 0x3, 0x8, @string={0x8, 0x3, "07844e008ffb"}}}, 0x0) 0s ago: executing program 1 (id=482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000280)=[@rdmsr={0x66, 0x18, {0xc0010140}}], 0x18}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000940)={@flat=@binder={0x77622a85, 0x1100}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) kernel console output (not intermixed with test programs): ass=anon_inode permissive=1 [ 48.482879][ T9] usb 5-1: config 0 descriptor?? [ 48.509459][ T36] audit: type=1400 audit(2000000007.630:265): avc: denied { read write } for pid=942 comm="syz.3.192" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.583106][ T36] audit: type=1400 audit(2000000007.760:266): avc: denied { accept } for pid=944 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.768169][ T948] fuseblk: Invalid rootmode [ 48.773644][ T949] sit0: entered promiscuous mode [ 48.779453][ T949] netlink: 'syz.5.194': attribute type 1 has an invalid length. [ 48.787238][ T949] netlink: 1 bytes leftover after parsing attributes in process `syz.5.194'. [ 48.796115][ T948] netlink: 'syz.5.194': attribute type 1 has an invalid length. [ 48.804221][ T948] netlink: 1 bytes leftover after parsing attributes in process `syz.5.194'. [ 48.814168][ T36] audit: type=1400 audit(2000000007.990:267): avc: denied { remount } for pid=947 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.840253][ T408] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 48.892395][ T735] bridge_slave_1: left allmulticast mode [ 48.898075][ T735] bridge_slave_1: left promiscuous mode [ 48.903937][ T735] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.911937][ T735] bridge_slave_0: left allmulticast mode [ 48.917701][ T735] bridge_slave_0: left promiscuous mode [ 48.923601][ T735] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.928764][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0007/input/input11 [ 48.944206][ T9] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 48.971204][ T408] usb 4-1: device descriptor read/64, error -71 [ 49.062221][ T955] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.069292][ T955] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.076683][ T955] bridge_slave_0: entered allmulticast mode [ 49.083128][ T955] bridge_slave_0: entered promiscuous mode [ 49.090338][ T735] veth1_macvtap: left promiscuous mode [ 49.095913][ T735] veth0_vlan: left promiscuous mode [ 49.119217][ T936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.140343][ T955] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.140810][ T936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.148180][ T955] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.168742][ T955] bridge_slave_1: entered allmulticast mode [ 49.181238][ T955] bridge_slave_1: entered promiscuous mode [ 49.200293][ T962] pim6reg1: entered promiscuous mode [ 49.205621][ T962] pim6reg1: entered allmulticast mode [ 49.230260][ T408] usb 4-1: device descriptor read/64, error -71 [ 49.238341][ T955] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.245401][ T955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.252696][ T955] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.259719][ T955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.280387][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.287769][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.296844][ T590] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.303910][ T590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.312864][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.319928][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.343656][ T955] veth0_vlan: entered promiscuous mode [ 49.354416][ T955] veth1_macvtap: entered promiscuous mode [ 49.371527][ T36] audit: type=1400 audit(2000000008.550:268): avc: denied { mounton } for pid=955 comm="syz-executor" path="/root/syzkaller.acifqi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.470283][ T408] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 49.500261][ T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 49.600595][ T408] usb 4-1: device descriptor read/64, error -71 [ 49.650300][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 49.656543][ T45] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 49.664592][ T45] usb 2-1: config 0 has no interface number 0 [ 49.670850][ T45] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.681768][ T45] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.691567][ T45] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 49.700656][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.709190][ T45] usb 2-1: config 0 descriptor?? [ 49.800301][ T330] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.840273][ T408] usb 4-1: device descriptor read/64, error -71 [ 49.950283][ T330] usb 7-1: Using ep0 maxpacket: 8 [ 49.955510][ T408] usb usb4-port1: attempt power cycle [ 49.961942][ T330] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 49.970300][ T330] usb 7-1: config 179 has no interface number 0 [ 49.976616][ T330] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 49.987672][ T330] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 49.998964][ T330] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 50.010152][ T330] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 50.021824][ T330] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 50.035381][ T330] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 50.044486][ T330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.053392][ T974] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 50.300262][ T408] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 50.317948][ T45] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0008/input/input12 [ 50.330718][ T408] usb 4-1: device descriptor read/8, error -71 [ 50.337425][ T45] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0008/input/input13 [ 50.354136][ T45] uclogic 0003:28BD:0071.0008: input,hidraw1: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 50.471284][ T408] usb 4-1: device descriptor read/8, error -71 [ 50.519032][ T969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.527623][ T969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.730687][ T408] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 50.751293][ T408] usb 4-1: device descriptor read/8, error -71 [ 50.881217][ T408] usb 4-1: device descriptor read/8, error -71 [ 51.000379][ T408] usb usb4-port1: unable to enumerate USB device [ 51.003192][ T9] usb 5-1: USB disconnect, device number 12 [ 51.390266][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 51.541378][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.551280][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 51.560498][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.569398][ T9] usb 5-1: config 0 descriptor?? [ 51.976922][ T9] wacom 0003:056A:0003.0009: unbalanced delimiter at end of report description [ 51.986534][ T522] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 51.994352][ T9] wacom 0003:056A:0003.0009: parse failed [ 52.000118][ T9] wacom 0003:056A:0003.0009: probe with driver wacom failed with error -22 [ 52.160262][ T522] usb 4-1: Using ep0 maxpacket: 32 [ 52.166499][ T522] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 52.174776][ T522] usb 4-1: config 0 has no interface number 0 [ 52.180862][ T408] usb 5-1: USB disconnect, device number 13 [ 52.187095][ T522] usb 4-1: config 0 interface 230 altsetting 10 endpoint 0x82 has invalid wMaxPacketSize 0 [ 52.200997][ T522] usb 4-1: config 0 interface 230 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 0 [ 52.213889][ T522] usb 4-1: config 0 interface 230 has no altsetting 0 [ 52.222086][ T522] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 52.232392][ T522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.240421][ T522] usb 4-1: Product: syz [ 52.244585][ T522] usb 4-1: Manufacturer: syz [ 52.249173][ T522] usb 4-1: SerialNumber: syz [ 52.254496][ T522] usb 4-1: config 0 descriptor?? [ 52.260364][ T522] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 52.270520][ T364] usb 2-1: USB disconnect, device number 20 [ 52.281578][ T522] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 52.579217][ T9] usb 7-1: USB disconnect, device number 2 [ 52.579253][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 52.585517][ T364] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 52.593325][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 52.616790][ T988] fuse: Unknown parameter 'fd[HAC~L'+ ThziKc)_' [ 52.761749][ T364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.772963][ T364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 52.783739][ T364] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 52.793396][ T364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.809357][ T364] usb 2-1: config 0 descriptor?? [ 52.826547][ T986] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 53.060261][ T408] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.150273][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 53.210279][ T408] usb 7-1: Using ep0 maxpacket: 32 [ 53.216471][ T408] usb 7-1: config 0 has an invalid interface number: 230 but max is 0 [ 53.224713][ T408] usb 7-1: config 0 has no interface number 0 [ 53.230826][ T408] usb 7-1: config 0 interface 230 altsetting 10 endpoint 0x82 has invalid wMaxPacketSize 0 [ 53.235345][ T986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.241293][ T408] usb 7-1: config 0 interface 230 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 0 [ 53.250110][ T986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.259569][ T408] usb 7-1: config 0 interface 230 has no altsetting 0 [ 53.273188][ T986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.275484][ T408] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 53.283057][ T986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.298811][ T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.304706][ T364] usbhid 2-1:0.0: can't add hid device: -71 [ 53.307760][ T408] usb 7-1: Product: syz [ 53.312763][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 53.316871][ T408] usb 7-1: Manufacturer: syz [ 53.323627][ T364] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 53.326730][ T408] usb 7-1: SerialNumber: syz [ 53.336238][ T364] usb 2-1: USB disconnect, device number 21 [ 53.340253][ T408] usb 7-1: config 0 descriptor?? [ 53.350455][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 98, using maximum allowed: 30 [ 53.361673][ T408] ums-usbat 7-1:0.230: USB Mass Storage device detected [ 53.362459][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 53.382481][ T408] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 53.382657][ T9] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 53.399763][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.410534][ T9] usb 5-1: config 0 descriptor?? [ 53.418894][ T9] ums-jumpshot 5-1:0.0: USB Mass Storage device detected [ 53.431692][ T9] ums-jumpshot 5-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 53.616161][ T364] usb 5-1: USB disconnect, device number 14 [ 53.843284][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 53.843301][ T36] audit: type=1400 audit(2000000013.020:271): avc: denied { getopt } for pid=1012 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.882134][ T1013] kvm: kvm [1012]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x0 [ 53.892572][ T1013] kvm: kvm [1012]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x187) = 0xf00 [ 53.982665][ T1016] can0: slcan on ptm0. [ 53.987096][ T36] audit: type=1400 audit(2000000013.160:272): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 54.010905][ T36] audit: type=1400 audit(2000000013.160:273): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.032421][ T36] audit: type=1400 audit(2000000013.160:274): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.060333][ T36] audit: type=1400 audit(2000000013.160:275): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.083540][ T1015] can0 (unregistered): slcan off ptm0. [ 54.083730][ T36] audit: type=1400 audit(2000000013.160:276): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.112523][ T36] audit: type=1400 audit(2000000013.200:277): avc: denied { read } for pid=1019 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.155708][ T36] audit: type=1400 audit(2000000013.200:278): avc: denied { open } for pid=1019 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.172270][ T1037] input: syz1 as /devices/virtual/input/input14 [ 54.202106][ T36] audit: type=1400 audit(2000000013.200:279): avc: denied { getattr } for pid=1019 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.227916][ T36] audit: type=1400 audit(2000000013.300:280): avc: denied { write } for pid=1018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.307575][ T590] tipc: Subscription rejected, illegal request [ 54.751075][ T522] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 54.760740][ T522] usb 4-1: USB disconnect, device number 30 [ 55.350280][ T522] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 55.501323][ T522] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 55.510118][ T522] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.520372][ T522] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 55.529232][ T522] usb 5-1: config 1 has no interface number 0 [ 55.535378][ T522] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 55.546107][ T522] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 55.560240][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 55.567893][ T522] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.577007][ T522] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.585030][ T522] usb 5-1: Product: syz [ 55.589343][ T522] usb 5-1: Manufacturer: syz [ 55.593958][ T522] usb 5-1: SerialNumber: syz [ 55.670829][ T408] ums-usbat 7-1:0.230: probe with driver ums-usbat failed with error -5 [ 55.731262][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 55.741042][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 55.752526][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 55.764675][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 55.773817][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.781845][ T9] usb 4-1: Product: syz [ 55.786052][ T9] usb 4-1: Manufacturer: syz [ 55.790685][ T9] usb 4-1: SerialNumber: syz [ 55.795828][ T9] usb 4-1: config 0 descriptor?? [ 55.801626][ T522] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 55.814951][ T522] usb 5-1: USB disconnect, device number 15 [ 56.009508][ T9] usb 4-1: USB disconnect, device number 31 [ 56.022711][ T1089] tipc: Started in network mode [ 56.027731][ T1089] tipc: Node identity ac1e0002, cluster identity 4711 [ 56.034060][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.037514][ T1089] tipc: Enabling of bearer rejected, failed to enable media [ 56.570312][ T330] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 56.720294][ T330] usb 5-1: Using ep0 maxpacket: 32 [ 56.726688][ T330] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 56.735110][ T330] usb 5-1: config 0 has no interface number 0 [ 56.741278][ T330] usb 5-1: config 0 interface 184 has no altsetting 0 [ 56.751527][ T330] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 56.763921][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.772058][ T330] usb 5-1: Product: syz [ 56.776221][ T330] usb 5-1: Manufacturer: syz [ 56.780844][ T330] usb 5-1: SerialNumber: syz [ 56.786252][ T330] usb 5-1: config 0 descriptor?? [ 56.792035][ T330] smsc75xx v1.0.0 [ 56.820276][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 56.843261][ T64] usb 7-1: USB disconnect, device number 3 [ 56.950307][ T9] usb 4-1: device descriptor read/64, error -71 [ 56.992924][ T330] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 57.003772][ T330] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 57.013445][ T330] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 57.023720][ T330] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 57.180274][ T64] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.190426][ T9] usb 4-1: device descriptor read/64, error -71 [ 57.330272][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 57.336445][ T64] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.347818][ T64] usb 7-1: config 0 interface 0 has no altsetting 0 [ 57.354642][ T64] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 57.363704][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.372466][ T64] usb 7-1: config 0 descriptor?? [ 57.430254][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 57.560335][ T9] usb 4-1: device descriptor read/64, error -71 [ 57.699744][ T330] usb 5-1: USB disconnect, device number 16 [ 57.780272][ T522] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 57.788383][ T64] smartjoyplus 0003:6666:8804.000A: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.6-1/input0 [ 57.800400][ T9] usb 4-1: device descriptor read/64, error -71 [ 57.808820][ T64] smartjoyplus 0003:6666:8804.000A: no output reports found [ 57.910426][ T9] usb usb4-port1: attempt power cycle [ 57.950259][ T522] usb 2-1: Using ep0 maxpacket: 16 [ 57.961099][ T522] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 57.970152][ T522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.979190][ T522] usb 2-1: config 0 descriptor?? [ 57.986442][ T522] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 57.997774][ T64] usb 7-1: USB disconnect, device number 4 [ 58.187961][ T522] usb 2-1: Detected FT232A [ 58.192964][ T522] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 58.202157][ T522] usb 2-1: USB disconnect, device number 22 [ 58.208584][ T522] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 58.218247][ T522] ftdi_sio 2-1:0.0: device disconnected [ 58.250274][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 58.271333][ T9] usb 4-1: device descriptor read/8, error -71 [ 58.360302][ T364] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 58.401352][ T9] usb 4-1: device descriptor read/8, error -71 [ 58.511495][ T364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.522416][ T364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.532841][ T364] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 58.541916][ T364] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 58.549884][ T364] usb 5-1: Manufacturer: syz [ 58.555000][ T364] usb 5-1: config 0 descriptor?? [ 58.625201][ T1146] fuse: Unknown parameter '' [ 58.640259][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 58.681369][ T9] usb 4-1: device descriptor read/8, error -71 [ 58.811285][ T9] usb 4-1: device descriptor read/8, error -71 [ 58.930284][ T9] usb usb4-port1: unable to enumerate USB device [ 58.940266][ T330] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 58.964073][ T364] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 58.970927][ T364] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 58.977955][ T364] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 58.984755][ T364] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 58.991562][ T364] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 58.998322][ T364] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 59.005111][ T364] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 59.012423][ T364] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 59.092275][ T330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.102481][ T330] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 59.111573][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.120310][ T330] usb 2-1: config 0 descriptor?? [ 59.126090][ T330] usb 2-1: unsupported MDLM descriptors [ 59.327734][ T1150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.336276][ T1150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.344730][ T408] usb 2-1: USB disconnect, device number 23 [ 59.364342][ T364] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 59.372207][ T364] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 59.379229][ T364] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71 [ 59.389335][ T364] usb 5-1: USB disconnect, device number 17 [ 59.407122][ T1157] fido_id[1157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 59.607829][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 59.607847][ T36] audit: type=1400 audit(2000000018.780:304): avc: denied { mounton } for pid=1158 comm="syz.3.247" path="/48/file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 59.644354][ T1161] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.659034][ T36] audit: type=1400 audit(2000000018.830:305): avc: denied { accept } for pid=1160 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.710894][ T36] audit: type=1400 audit(2000000018.890:306): avc: denied { read write } for pid=1160 comm="syz.3.248" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.719210][ T1166] netlink: 37 bytes leftover after parsing attributes in process `syz.3.248'. [ 59.739155][ T36] audit: type=1400 audit(2000000018.890:307): avc: denied { open } for pid=1160 comm="syz.3.248" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.769039][ T36] audit: type=1400 audit(2000000018.890:308): avc: denied { ioctl } for pid=1160 comm="syz.3.248" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.930395][ T64] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 59.972220][ T36] audit: type=1400 audit(2000000019.150:309): avc: denied { write } for pid=1186 comm="syz.1.256" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.000286][ T364] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 60.081214][ T64] usb 7-1: config 0 has an invalid interface number: 125 but max is 0 [ 60.089427][ T64] usb 7-1: config 0 has no interface number 0 [ 60.095578][ T64] usb 7-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=2e.3b [ 60.104636][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.113146][ T64] usb 7-1: config 0 descriptor?? [ 60.150238][ T364] usb 4-1: Using ep0 maxpacket: 8 [ 60.156240][ T364] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.167603][ T364] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 60.176705][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.184707][ T364] usb 4-1: Product: syz [ 60.188871][ T364] usb 4-1: Manufacturer: syz [ 60.193481][ T364] usb 4-1: SerialNumber: syz [ 60.198612][ T364] usb 4-1: config 0 descriptor?? [ 60.270256][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 60.321116][ T1165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.329645][ T1165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.341060][ T1165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.349573][ T1165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.401430][ T64] usb 7-1: string descriptor 0 read error: -71 [ 60.408101][ T64] ax88179_178a 7-1:0.125: probe with driver ax88179_178a failed with error -22 [ 60.420183][ T64] usb 7-1: USB disconnect, device number 5 [ 60.428177][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.440956][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.450774][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.463721][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.472970][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.484139][ T9] usb 2-1: config 0 descriptor?? [ 60.656233][ T1198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.665303][ T1198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.890250][ T64] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 60.898707][ T9] plantronics 0003:047F:FFFF.000C: item fetching failed at offset 14/15 [ 60.907398][ T9] plantronics 0003:047F:FFFF.000C: parse failed [ 60.914016][ T9] plantronics 0003:047F:FFFF.000C: probe with driver plantronics failed with error -22 [ 60.945243][ T1205] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 61.095541][ T330] usb 2-1: USB disconnect, device number 24 [ 61.531440][ T1213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.544285][ T1213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.646735][ T36] audit: type=1400 audit(2000000020.820:310): avc: denied { create } for pid=1216 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 61.836623][ T1226] overlayfs: failed to resolve './file1': -2 [ 61.894904][ T1234] kvm: kvm [1233]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xcd [ 61.970306][ T64] usb 5-1: device descriptor read/64, error -71 [ 62.140295][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 62.160269][ T364] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 62.231307][ T64] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 62.239607][ T64] usb 5-1: config 220 descriptor has 1 excess byte, ignoring [ 62.247062][ T64] usb 5-1: config 220 has no interface number 2 [ 62.254020][ T64] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 62.267726][ T64] usb 5-1: config 220 interface 0 has no altsetting 0 [ 62.274555][ T64] usb 5-1: config 220 interface 76 has no altsetting 0 [ 62.281565][ T64] usb 5-1: config 220 interface 1 has no altsetting 0 [ 62.289728][ T64] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 62.298913][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.307074][ T64] usb 5-1: Product: syz [ 62.311276][ T64] usb 5-1: Manufacturer: syz [ 62.315959][ T64] usb 5-1: SerialNumber: syz [ 62.320597][ T364] usb 2-1: Using ep0 maxpacket: 16 [ 62.326353][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.337552][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.347483][ T9] usb 7-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 62.356680][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.356745][ T364] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.375151][ T364] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 62.384450][ T9] usb 7-1: config 0 descriptor?? [ 62.392991][ T364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.403781][ T364] usb 2-1: config 0 descriptor?? [ 62.655403][ T364] usb 4-1: USB disconnect, device number 36 [ 62.990275][ T364] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 62.999651][ T9] usb 7-1: string descriptor 0 read error: -71 [ 63.006432][ T9] uclogic 0003:5543:0081.000D: failed retrieving string descriptor #200: -71 [ 63.015344][ T9] uclogic 0003:5543:0081.000D: failed retrieving pen parameters: -71 [ 63.023505][ T9] uclogic 0003:5543:0081.000D: failed probing pen v2 parameters: -71 [ 63.031665][ T9] uclogic 0003:5543:0081.000D: failed probing parameters: -71 [ 63.039228][ T9] uclogic 0003:5543:0081.000D: probe with driver uclogic failed with error -71 [ 63.049493][ T9] usb 7-1: USB disconnect, device number 6 [ 63.133599][ T10] usb 2-1: USB disconnect, device number 25 [ 63.151362][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.154250][ T1245] netlink: 2 bytes leftover after parsing attributes in process `syz.1.273'. [ 63.162432][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.181507][ T364] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.195279][ T364] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.204358][ T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.214069][ T364] usb 4-1: config 0 descriptor?? [ 63.240773][ T36] audit: type=1400 audit(2000000022.420:311): avc: denied { read } for pid=1247 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.622427][ T364] plantronics 0003:047F:FFFF.000E: item fetching failed at offset 14/15 [ 63.631355][ T364] plantronics 0003:047F:FFFF.000E: parse failed [ 63.637966][ T364] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 63.825213][ T364] usb 4-1: USB disconnect, device number 37 [ 63.830270][ T330] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 64.000256][ T330] usb 7-1: Using ep0 maxpacket: 32 [ 64.006462][ T330] usb 7-1: config 0 interface 0 altsetting 132 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.018234][ T330] usb 7-1: config 0 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 64.031521][ T330] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.038861][ T330] usb 7-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 64.048062][ T330] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 64.056127][ T330] usb 7-1: Product: syz [ 64.062026][ T330] usb 7-1: config 0 descriptor?? [ 64.065160][ T1271] netlink: 2 bytes leftover after parsing attributes in process `syz.1.282'. [ 64.270012][ T36] audit: type=1400 audit(2000000023.440:312): avc: denied { mounton } for pid=1257 comm="syz.6.277" path="/20/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 64.321430][ T36] audit: type=1400 audit(2000000023.500:313): avc: denied { unmount } for pid=1257 comm="syz.6.277" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.343393][ T1279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.355093][ T1279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.450682][ T64] usb 5-1: selecting invalid altsetting 0 [ 64.456529][ T64] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 64.466243][ T64] usb 5-1: No valid video chain found. [ 64.474479][ T64] usb 5-1: USB disconnect, device number 18 [ 64.500301][ T45] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 64.569719][ T330] lg-g15 0003:046D:C227.000F: unknown main item tag 0x2 [ 64.577457][ T330] lg-g15 0003:046D:C227.000F: hidraw0: USB HID v4.0a Device [syz] on usb-dummy_hcd.6-1/input0 [ 64.650305][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 64.656578][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.667506][ T45] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 64.676565][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.685184][ T45] usb 2-1: config 0 descriptor?? [ 64.820264][ T64] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 64.950268][ T64] usb 5-1: device descriptor read/64, error -71 [ 65.190267][ T64] usb 5-1: device descriptor read/64, error -71 [ 65.223461][ T36] audit: type=1400 audit(2000000024.400:314): avc: denied { load_policy } for pid=1287 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 65.223503][ T1288] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 65.251292][ T1288] SELinux: failed to load policy [ 65.291388][ T1293] fuse: Bad value for 'fd' [ 65.298063][ T36] audit: type=1400 audit(2000000024.470:315): avc: denied { write } for pid=1275 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.320036][ T45] usb 2-1: string descriptor 0 read error: -71 [ 65.326338][ T36] audit: type=1400 audit(2000000024.490:316): avc: denied { bind } for pid=1275 comm="syz.1.284" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.346510][ T45] uclogic 0003:5543:0047.0010: failed retrieving string descriptor #200: -71 [ 65.355498][ T45] uclogic 0003:5543:0047.0010: failed retrieving pen parameters: -71 [ 65.364007][ T45] uclogic 0003:5543:0047.0010: failed probing pen v2 parameters: -71 [ 65.372754][ T36] audit: type=1400 audit(2000000024.490:317): avc: denied { node_bind } for pid=1275 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 65.392959][ T45] uclogic 0003:5543:0047.0010: failed probing parameters: -71 [ 65.400813][ T45] uclogic 0003:5543:0047.0010: probe with driver uclogic failed with error -71 [ 65.414880][ T45] usb 2-1: USB disconnect, device number 26 [ 65.450386][ T64] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 65.590308][ T64] usb 5-1: device descriptor read/64, error -71 [ 65.800321][ T408] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 65.830266][ T64] usb 5-1: device descriptor read/64, error -71 [ 65.943648][ T64] usb usb5-port1: attempt power cycle [ 65.950347][ T408] usb 4-1: Using ep0 maxpacket: 8 [ 65.957070][ T408] usb 4-1: unable to get BOS descriptor or descriptor too short [ 65.966241][ T408] usb 4-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 65.976574][ T408] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.985482][ T408] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 66.000181][ T408] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.009467][ T408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.017594][ T408] usb 4-1: Product: syz [ 66.021768][ T408] usb 4-1: Manufacturer: syz [ 66.026351][ T408] usb 4-1: SerialNumber: syz [ 66.180305][ T45] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 66.232971][ T1296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.241562][ T1296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.253504][ T408] usb 4-1: 0:2 : does not exist [ 66.261664][ T408] usb 4-1: USB disconnect, device number 38 [ 66.280269][ T64] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 66.301255][ T64] usb 5-1: device descriptor read/8, error -71 [ 66.330277][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 66.336532][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.347567][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.357385][ T45] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 66.366454][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.375055][ T45] usb 2-1: config 0 descriptor?? [ 66.431529][ T64] usb 5-1: device descriptor read/8, error -71 [ 66.670289][ T64] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 66.691480][ T64] usb 5-1: device descriptor read/8, error -71 [ 66.771402][ T36] audit: type=1400 audit(2000000025.950:318): avc: denied { ioctl } for pid=1299 comm="syz.3.292" path="/56/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.771733][ T1300] capability: warning: `syz.3.292' uses 32-bit capabilities (legacy support in use) [ 66.812695][ T45] playstation 0003:054C:05C4.0011: hidraw1: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 66.831237][ T64] usb 5-1: device descriptor read/8, error -71 [ 66.890554][ T45] playstation 0003:054C:05C4.0011: Failed to retrieve feature with reportID 18: -71 [ 66.899989][ T45] playstation 0003:054C:05C4.0011: Failed to retrieve DualShock4 pairing info: -71 [ 66.909353][ T45] playstation 0003:054C:05C4.0011: Failed to get MAC address from DualShock4 [ 66.918150][ T45] playstation 0003:054C:05C4.0011: Failed to create dualshock4. [ 66.926436][ T45] playstation 0003:054C:05C4.0011: probe with driver playstation failed with error -71 [ 66.937309][ T45] usb 2-1: USB disconnect, device number 27 [ 66.950392][ T64] usb usb5-port1: unable to enumerate USB device [ 67.080286][ T408] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 67.231760][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.242724][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.252487][ T408] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.265392][ T408] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.274511][ T408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.283097][ T408] usb 4-1: config 0 descriptor?? [ 67.691964][ T408] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x6 [ 67.704582][ T408] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 67.710799][ T1319] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 67.722577][ T1320] kernel profiling enabled (shift: 0) [ 67.732282][ T408] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 67.754169][ T36] audit: type=1400 audit(2000000026.930:319): avc: denied { create } for pid=1322 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 67.788082][ T36] audit: type=1400 audit(2000000026.960:320): avc: denied { read write } for pid=1318 comm="syz.4.297" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 67.814357][ T1325] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 67.824586][ T36] audit: type=1400 audit(2000000026.960:321): avc: denied { open } for pid=1318 comm="syz.4.297" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 67.886846][ T36] audit: type=1400 audit(2000000027.060:322): avc: denied { setopt } for pid=1327 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.891715][ T64] usb 4-1: USB disconnect, device number 39 [ 67.945541][ T1332] overlayfs: workdir and upperdir must be separate subtrees [ 67.953775][ T36] audit: type=1400 audit(2000000000.020:323): avc: denied { module_load } for pid=1331 comm="syz.4.301" path="/sys/power/wakeup_count" dev="sysfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 67.986680][ T1334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.302'. [ 67.995731][ T1335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.302'. [ 68.000313][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 68.121574][ T1338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=160 sclass=netlink_route_socket pid=1338 comm=syz.4.303 [ 68.140344][ T9] usb 2-1: device descriptor read/64, error -71 [ 68.370339][ T408] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 68.380355][ T9] usb 2-1: device descriptor read/64, error -71 [ 68.521336][ T408] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.531473][ T408] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.541127][ T408] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 68.550152][ T408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.558163][ T408] usb 5-1: SerialNumber: syz [ 68.620322][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 68.670277][ T64] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 68.750332][ T9] usb 2-1: device descriptor read/64, error -71 [ 68.765952][ T1341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=160 sclass=netlink_route_socket pid=1341 comm=syz.4.303 [ 68.784470][ T408] usb 5-1: 0:2 : does not exist [ 68.797222][ T408] usb 5-1: USB disconnect, device number 23 [ 68.810822][ T439] udevd[439]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.827394][ T64] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 68.836129][ T64] usb 4-1: config 0 has no interface number 0 [ 68.842787][ T64] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.853777][ T64] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.863586][ T64] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 68.872743][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.881458][ T64] usb 4-1: config 0 descriptor?? [ 69.010298][ T9] usb 2-1: device descriptor read/64, error -71 [ 69.120365][ T9] usb usb2-port1: attempt power cycle [ 69.140283][ T408] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 69.270281][ T408] usb 5-1: device descriptor read/64, error -71 [ 69.352377][ T64] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0013/input/input15 [ 69.424253][ T64] holtek_kbd 0003:04D9:A055.0013: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 69.460324][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 69.481518][ T9] usb 2-1: device descriptor read/8, error -71 [ 69.510322][ T408] usb 5-1: device descriptor read/64, error -71 [ 69.548104][ T64] usb 4-1: USB disconnect, device number 40 [ 69.611497][ T9] usb 2-1: device descriptor read/8, error -71 [ 69.750314][ T408] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 69.850469][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 69.871456][ T9] usb 2-1: device descriptor read/8, error -71 [ 69.880294][ T408] usb 5-1: device descriptor read/64, error -71 [ 70.001311][ T9] usb 2-1: device descriptor read/8, error -71 [ 70.110392][ T9] usb usb2-port1: unable to enumerate USB device [ 70.130335][ T408] usb 5-1: device descriptor read/64, error -71 [ 70.240459][ T408] usb usb5-port1: attempt power cycle [ 70.490302][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 70.580304][ T408] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 70.601376][ T408] usb 5-1: device descriptor read/8, error -71 [ 70.640304][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 70.646630][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 70.655534][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 70.665807][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.676282][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.685390][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.693408][ T9] usb 4-1: Product: syz [ 70.697651][ T9] usb 4-1: Manufacturer: syz [ 70.702266][ T9] usb 4-1: SerialNumber: syz [ 70.731401][ T408] usb 5-1: device descriptor read/8, error -71 [ 70.963240][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 70.963257][ T36] audit: type=1400 audit(2000000002.140:326): avc: denied { read } for pid=1362 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 70.970269][ T408] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 71.011423][ T408] usb 5-1: device descriptor read/8, error -71 [ 71.150298][ T364] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 71.151320][ T408] usb 5-1: device descriptor read/8, error -71 [ 71.270347][ T408] usb usb5-port1: unable to enumerate USB device [ 71.311380][ T364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.322558][ T364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.332349][ T364] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.345301][ T364] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.354379][ T364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.363096][ T364] usb 2-1: config 0 descriptor?? [ 71.771076][ T364] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x6 [ 71.778680][ T364] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 71.791777][ T364] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 71.844382][ T36] audit: type=1400 audit(2000000003.020:327): avc: denied { write } for pid=1375 comm="syz.4.314" name="ptype" dev="proc" ino=4026532646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.867024][ T1376] sit0: entered promiscuous mode [ 71.873436][ T1376] netlink: 'syz.4.314': attribute type 1 has an invalid length. [ 71.881176][ T1376] netlink: 1 bytes leftover after parsing attributes in process `syz.4.314'. [ 71.917403][ T36] audit: type=1400 audit(2000000003.090:328): avc: denied { bind } for pid=1380 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.973125][ T45] usb 2-1: USB disconnect, device number 32 [ 72.158301][ T36] audit: type=1400 audit(2000000003.330:329): avc: denied { remount } for pid=1398 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.197741][ T1402] netlink: 5 bytes leftover after parsing attributes in process `syz.4.321'. [ 72.209258][ T36] audit: type=1400 audit(2000000003.380:330): avc: denied { ioctl } for pid=1401 comm="syz.4.321" path="socket:[11962]" dev="sockfs" ino=11962 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.495437][ T1408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 72.505280][ T1408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 72.514251][ T1408] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 72.520368][ T408] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 72.530685][ T1408] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 72.545550][ T1408] tipc: Enabled bearer , priority 10 [ 72.551909][ T1408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1408 comm=syz.1.324 [ 72.680278][ T408] usb 5-1: Using ep0 maxpacket: 16 [ 72.686535][ T408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.697520][ T408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.707286][ T408] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.720126][ T408] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 72.729195][ T408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.738432][ T408] usb 5-1: config 0 descriptor?? [ 72.890277][ T45] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 73.041289][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.052302][ T45] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 73.063832][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.072953][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.081027][ T45] usb 2-1: Product: syz [ 73.085210][ T45] usb 2-1: Manufacturer: syz [ 73.089819][ T45] usb 2-1: SerialNumber: syz [ 73.101066][ T45] cdc_mbim 2-1:1.0: skipping garbage [ 73.148282][ T1406] No source specified [ 73.260372][ T9] usb 4-1: 0:2 : does not exist [ 73.273899][ T9] usb 4-1: USB disconnect, device number 41 [ 73.283158][ T439] udevd[439]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.300902][ T1420] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 73.354807][ T408] usbhid 5-1:0.0: can't add hid device: -71 [ 73.362692][ T408] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 73.372211][ T408] usb 5-1: USB disconnect, device number 28 [ 73.660297][ T408] tipc: Node number set to 2887647234 [ 73.670271][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 73.820297][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 73.827664][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 73.838462][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 73.850039][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.860905][ T9] usb 4-1: too many endpoints for config 1 interface 2 altsetting 1: 48, using maximum allowed: 30 [ 73.873155][ T9] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 73.893814][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.903768][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.912205][ T9] usb 4-1: Product: syz [ 73.916386][ T9] usb 4-1: Manufacturer: syz [ 73.921253][ T1420] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 73.930519][ T9] usb 4-1: SerialNumber: syz [ 73.931293][ T45] cdc_mbim 2-1:1.0: dwNtbInMaxSize=1 is too small. Using 2048 [ 73.944000][ T45] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 74.137410][ T45] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 74.145462][ T45] wwan wwan0: port wwan0mbim0 attached [ 74.148071][ T9] usb-storage 4-1:1.2: USB Mass Storage device detected [ 74.153354][ T45] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, ce:fa:e2:69:23:f8 [ 74.180821][ T364] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 74.206650][ T9] usb 4-1: USB disconnect, device number 42 [ 74.280924][ T149] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 74.330720][ T364] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 74.339320][ T364] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 74.350508][ T364] usb 5-1: config 1 interface 0 has no altsetting 0 [ 74.358660][ T364] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 74.370020][ T364] usb 5-1: config 1 interface 0 has no altsetting 0 [ 74.377450][ T364] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 74.390242][ T364] usb 5-1: config 1 interface 0 has no altsetting 0 [ 74.397590][ T364] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 74.408607][ T364] usb 5-1: config 1 interface 0 has no altsetting 0 [ 74.416421][ T364] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 74.427443][ T364] usb 5-1: config 1 interface 0 has no altsetting 0 [ 74.434806][ T364] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 74.445791][ T364] usb 5-1: config 1 interface 0 has no altsetting 0 [ 74.453072][ T364] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 74.464058][ T364] usb 5-1: config 1 interface 0 has no altsetting 0 [ 74.471342][ T364] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 74.482334][ T364] usb 5-1: config 1 interface 0 has no altsetting 0 [ 74.490271][ T364] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 74.499460][ T364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.507569][ T364] usb 5-1: Product: syz [ 74.511831][ T364] usb 5-1: Manufacturer: syz [ 74.516414][ T364] usb 5-1: SerialNumber: syz [ 74.517613][ T45] usb 2-1: USB disconnect, device number 33 [ 74.525738][ T1431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 74.529441][ T45] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 74.590730][ T45] wwan wwan0: port wwan0mbim0 disconnected [ 74.727336][ T1472] kvm: MWAIT instruction emulated as NOP! [ 74.771457][ T364] rtl8150 5-1:1.0: couldn't reset the device [ 74.777525][ T364] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 74.787650][ T364] usb 5-1: USB disconnect, device number 29 [ 74.885692][ T1483] kvm: emulating exchange as write [ 75.100298][ T45] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 75.251584][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.262506][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.272267][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.285161][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.294249][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.302981][ T45] usb 4-1: config 0 descriptor?? [ 75.712258][ T45] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x6 [ 75.730567][ T45] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 75.751742][ T45] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 75.913633][ T9] usb 4-1: USB disconnect, device number 43 [ 75.970259][ T364] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 76.000274][ T64] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 76.120252][ T364] usb 2-1: Using ep0 maxpacket: 16 [ 76.129829][ T364] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.138010][ T364] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.148266][ T364] usb 2-1: config 0 has no interface number 0 [ 76.155791][ T364] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 76.165131][ T364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.174072][ T64] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 76.182342][ T64] usb 5-1: config 0 has no interface number 0 [ 76.190281][ T364] usb 2-1: Product: syz [ 76.198646][ T364] usb 2-1: Manufacturer: syz [ 76.203350][ T364] usb 2-1: SerialNumber: syz [ 76.211152][ T364] usb 2-1: config 0 descriptor?? [ 76.221663][ T64] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 76.232172][ T364] snd-usb-audio 2-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 76.241404][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.249422][ T64] usb 5-1: Product: syz [ 76.260245][ T64] usb 5-1: Manufacturer: syz [ 76.265221][ T64] usb 5-1: SerialNumber: syz [ 76.267755][ T439] udevd[439]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.270809][ T64] usb 5-1: config 0 descriptor?? [ 76.419085][ T64] usb 2-1: USB disconnect, device number 34 [ 77.404741][ T36] audit: type=1400 audit(2000000008.580:331): avc: denied { mount } for pid=1547 comm="syz.3.351" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 77.452552][ T1550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.461099][ T1550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.470448][ T36] audit: type=1400 audit(2000000008.610:332): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 77.536381][ T1555] input: syz1 as /devices/virtual/input/input16 [ 77.690481][ T64] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 77.820259][ T64] usb 4-1: device descriptor read/64, error -71 [ 77.860259][ T45] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 78.032426][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.050235][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.060077][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.060298][ T64] usb 4-1: device descriptor read/64, error -71 [ 78.080238][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.090317][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.102914][ T45] usb 2-1: config 0 descriptor?? [ 78.320296][ T64] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 78.450290][ T64] usb 4-1: device descriptor read/64, error -71 [ 78.511156][ T45] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x6 [ 78.519128][ T45] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 78.529411][ T45] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 78.684801][ T1568] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.691924][ T64] usb 4-1: device descriptor read/64, error -71 [ 78.698220][ T1568] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.705367][ T1568] bridge_slave_0: entered allmulticast mode [ 78.711953][ T1568] bridge_slave_0: entered promiscuous mode [ 78.713438][ T45] usb 2-1: USB disconnect, device number 35 [ 78.718544][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.730991][ T1568] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.738382][ T1568] bridge_slave_1: entered allmulticast mode [ 78.744694][ T1568] bridge_slave_1: entered promiscuous mode [ 78.782092][ T1568] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.789154][ T1568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.796464][ T1568] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.803512][ T1568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.810880][ T64] usb usb4-port1: attempt power cycle [ 78.827221][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.834632][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.844671][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.851754][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.861126][ T590] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.868162][ T590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.890413][ T1568] veth0_vlan: entered promiscuous mode [ 78.901393][ T1568] veth1_macvtap: entered promiscuous mode [ 78.917800][ T36] audit: type=1400 audit(2000000010.090:333): avc: denied { mount } for pid=1568 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.976314][ T330] usb 5-1: USB disconnect, device number 30 [ 79.003384][ T1579] netlink: 4 bytes leftover after parsing attributes in process `syz.7.355'. [ 79.161355][ T64] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 79.181295][ T64] usb 4-1: device descriptor read/8, error -71 [ 79.211574][ T36] audit: type=1400 audit(2000000010.390:334): avc: denied { mounton } for pid=1595 comm="syz.4.361" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 79.310896][ T1603] syzkaller0: entered promiscuous mode [ 79.311901][ T64] usb 4-1: device descriptor read/8, error -71 [ 79.316515][ T1603] syzkaller0: entered allmulticast mode [ 79.331312][ T36] audit: type=1400 audit(2000000010.510:335): avc: denied { setattr } for pid=1606 comm="syz.4.364" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.570316][ T522] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 79.577949][ T64] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 79.601259][ T64] usb 4-1: device descriptor read/8, error -71 [ 79.640259][ T45] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 79.731354][ T64] usb 4-1: device descriptor read/8, error -71 [ 79.740379][ T522] usb 5-1: Using ep0 maxpacket: 16 [ 79.746753][ T522] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 79.755924][ T522] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 79.765657][ T522] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 79.775635][ T522] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 79.785423][ T522] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 79.795230][ T522] usb 5-1: config 1 interface 0 has no altsetting 0 [ 79.801858][ T522] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 79.810926][ T522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.811320][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 79.823763][ T522] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 79.832973][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.840757][ T64] usb usb4-port1: unable to enumerate USB device [ 79.848157][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.862710][ T45] usb 2-1: SerialNumber: syz [ 80.003351][ T36] audit: type=1400 audit(2000000011.180:336): avc: denied { write } for pid=1621 comm="syz.7.368" path="socket:[13824]" dev="sockfs" ino=13824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.024525][ T522] scsi host1: usb-storage 5-1:1.0 [ 80.228273][ T408] usb 5-1: USB disconnect, device number 31 [ 80.280314][ T330] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 80.431549][ T330] usb 8-1: unable to get BOS descriptor or descriptor too short [ 80.439571][ T330] usb 8-1: not running at top speed; connect to a high speed hub [ 80.448161][ T330] usb 8-1: config 12 has an invalid interface number: 184 but max is 0 [ 80.456500][ T330] usb 8-1: config 12 has no interface number 0 [ 80.462733][ T330] usb 8-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 80.475319][ T330] usb 8-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 80.484593][ T330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.492905][ T330] usb 8-1: Product: syz [ 80.497127][ T330] usb 8-1: Manufacturer: syz [ 80.501792][ T330] usb 8-1: SerialNumber: syz [ 80.602387][ T45] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 80.612691][ T45] usb 2-1: USB disconnect, device number 36 [ 80.708232][ T1625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.718573][ T1625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.719314][ T1630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.735568][ T1630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.743655][ T1630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.752540][ T1630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.760611][ T1630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.769091][ T1630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.777307][ T1630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.785790][ T1630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.808553][ T330] usb 8-1: USB disconnect, device number 2 [ 80.860278][ T522] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 81.011294][ T522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.022281][ T522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.032054][ T522] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 81.041129][ T522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.049630][ T522] usb 4-1: config 0 descriptor?? [ 81.060336][ T45] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 81.211362][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.222333][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.232114][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.245026][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.254086][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.262797][ T45] usb 5-1: config 0 descriptor?? [ 81.350257][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 81.511263][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.522254][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.532253][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.545212][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.554293][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.560247][ T408] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 81.563172][ T9] usb 2-1: config 0 descriptor?? [ 81.659731][ T36] audit: type=1400 audit(2000000012.830:337): avc: denied { create } for pid=1628 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.660849][ T1629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.683931][ T45] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x6 [ 81.687621][ T1629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.695986][ T45] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 81.713332][ T45] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 81.730674][ T408] usb 8-1: too many configurations: 90, using maximum allowed: 8 [ 81.739332][ T408] usb 8-1: config index 0 descriptor too short (expected 3364, got 36) [ 81.747661][ T408] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 145 [ 81.756305][ T408] usb 8-1: can't read configurations, error -22 [ 81.881162][ T45] usb 5-1: USB disconnect, device number 32 [ 81.890290][ T408] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 81.940557][ T1632] FAULT_INJECTION: forcing a failure. [ 81.940557][ T1632] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.953753][ T1632] CPU: 1 UID: 0 PID: 1632 Comm: syz.4.371 Not tainted syzkaller #0 9061d031fb6aa52dc43cfb6d93fe624fdff0548e [ 81.953789][ T1632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.953804][ T1632] Call Trace: [ 81.953811][ T1632] [ 81.953819][ T1632] __dump_stack+0x21/0x30 [ 81.953849][ T1632] dump_stack_lvl+0x140/0x1c0 [ 81.953871][ T1632] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.953894][ T1632] ? check_stack_object+0x12b/0x150 [ 81.953913][ T1632] dump_stack+0x19/0x20 [ 81.953925][ T1632] should_fail_ex+0x3d7/0x530 [ 81.953936][ T1632] should_fail+0xf/0x20 [ 81.953945][ T1632] should_fail_usercopy+0x1e/0x30 [ 81.953955][ T1632] _copy_to_user+0x24/0xa0 [ 81.953971][ T1632] simple_read_from_buffer+0xed/0x160 [ 81.954005][ T1632] proc_fail_nth_read+0x1aa/0x220 [ 81.954025][ T1632] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 81.954045][ T1632] ? bpf_lsm_file_permission+0xd/0x20 [ 81.954060][ T1632] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 81.954070][ T1632] vfs_read+0x286/0xcb0 [ 81.954082][ T1632] ? __cfi_vfs_read+0x10/0x10 [ 81.954094][ T1632] ? __kasan_check_write+0x18/0x20 [ 81.954106][ T1632] ? mutex_lock+0x97/0x1d0 [ 81.954127][ T1632] ? __cfi_mutex_lock+0x10/0x10 [ 81.954159][ T1632] ? __fget_files+0x2c5/0x340 [ 81.954186][ T1632] ksys_read+0x145/0x260 [ 81.954203][ T1632] ? __cfi_ksys_read+0x10/0x10 [ 81.954215][ T1632] ? __kasan_check_read+0x15/0x20 [ 81.954227][ T1632] __x64_sys_read+0x7f/0x90 [ 81.954239][ T1632] x64_sys_call+0x2638/0x2ee0 [ 81.954255][ T1632] do_syscall_64+0x57/0xf0 [ 81.954274][ T1632] ? clear_bhb_loop+0x50/0xa0 [ 81.954298][ T1632] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.954320][ T1632] RIP: 0033:0x7f488a35b78e [ 81.954341][ T1632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.954350][ T1632] RSP: 002b:00007f488b29bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.954368][ T1632] RAX: ffffffffffffffda RBX: 00007f488b29c6c0 RCX: 00007f488a35b78e [ 81.954376][ T1632] RDX: 000000000000000f RSI: 00007f488b29c0a0 RDI: 0000000000000005 [ 81.954384][ T1632] RBP: 00007f488b29c090 R08: 0000000000000000 R09: 0000000000000000 [ 81.954391][ T1632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.954397][ T1632] R13: 00007f488a616038 R14: 00007f488a615fa0 R15: 00007ffc120131e8 [ 81.954412][ T1632] [ 82.202550][ T9] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x6 [ 82.210612][ T9] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 82.219867][ T9] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 82.252331][ T522] usbhid 4-1:0.0: can't add hid device: -71 [ 82.271147][ T522] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 82.271943][ T408] usb 8-1: too many configurations: 90, using maximum allowed: 8 [ 82.282777][ T522] usb 4-1: USB disconnect, device number 48 [ 82.287548][ T408] usb 8-1: config index 0 descriptor too short (expected 3364, got 36) [ 82.300820][ T408] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 145 [ 82.309405][ T408] usb 8-1: can't read configurations, error -22 [ 82.315825][ T408] usb usb8-port1: attempt power cycle [ 82.399447][ T358] usb 2-1: USB disconnect, device number 37 [ 82.520340][ T45] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 82.580278][ T522] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 82.660255][ T408] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 82.671605][ T1641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.680144][ T1641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.681594][ T408] usb 8-1: too many configurations: 90, using maximum allowed: 8 [ 82.696102][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.704104][ T408] usb 8-1: config index 0 descriptor too short (expected 3364, got 36) [ 82.712491][ T408] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 145 [ 82.721144][ T45] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 82.728695][ T45] usb 5-1: can't read configurations, error -71 [ 82.735463][ T408] usb 8-1: can't read configurations, error -22 [ 82.740925][ T522] usb 4-1: Using ep0 maxpacket: 16 [ 82.748024][ T522] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.756113][ T522] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.766270][ T522] usb 4-1: config 0 has no interface number 0 [ 82.773744][ T522] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 82.782858][ T522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.791029][ T522] usb 4-1: Product: syz [ 82.795198][ T522] usb 4-1: Manufacturer: syz [ 82.799781][ T522] usb 4-1: SerialNumber: syz [ 82.805224][ T522] usb 4-1: config 0 descriptor?? [ 82.812472][ T522] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 82.825963][ T439] udevd[439]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.870299][ T408] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 82.890952][ T408] usb 8-1: too many configurations: 90, using maximum allowed: 8 [ 82.899415][ T408] usb 8-1: config index 0 descriptor too short (expected 3364, got 36) [ 82.907728][ T408] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 145 [ 82.916363][ T408] usb 8-1: can't read configurations, error -22 [ 82.924921][ T408] usb usb8-port1: unable to enumerate USB device [ 82.983697][ T1648] netlink: 2 bytes leftover after parsing attributes in process `syz.1.377'. [ 83.014424][ T408] usb 4-1: USB disconnect, device number 49 [ 83.042327][ T36] audit: type=1400 audit(2000000014.220:338): avc: denied { mount } for pid=1650 comm="syz.1.378" name="/" dev="ramfs" ino=13019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 83.310341][ T358] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 83.461375][ T358] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 83.471738][ T358] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.480639][ T358] usb 2-1: config 1 has no interface number 0 [ 83.486722][ T358] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.497594][ T358] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 83.506652][ T358] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.520963][ T358] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.534243][ T358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.535077][ T1657] netlink: 'syz.3.381': attribute type 27 has an invalid length. [ 83.542691][ T358] usb 2-1: Product: syz [ 83.554311][ T358] usb 2-1: Manufacturer: syz [ 83.558963][ T358] usb 2-1: SerialNumber: syz [ 83.570460][ T45] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 83.596056][ T1659] GUP no longer grows the stack in syz.3.382 (1659): 200000005000-200000008000 (200000004000) [ 83.606431][ T1659] CPU: 0 UID: 0 PID: 1659 Comm: syz.3.382 Not tainted syzkaller #0 9061d031fb6aa52dc43cfb6d93fe624fdff0548e [ 83.606464][ T1659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.606476][ T1659] Call Trace: [ 83.606482][ T1659] [ 83.606489][ T1659] __dump_stack+0x21/0x30 [ 83.606519][ T1659] dump_stack_lvl+0x140/0x1c0 [ 83.606541][ T1659] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.606561][ T1659] ? futex_lock_pi_atomic+0xe3/0xcd0 [ 83.606584][ T1659] dump_stack+0x19/0x20 [ 83.606603][ T1659] fixup_user_fault+0x62a/0x6b0 [ 83.606628][ T1659] fault_in_user_writeable+0x75/0xe0 [ 83.606647][ T1659] futex_lock_pi+0x2d7/0xa70 [ 83.606668][ T1659] ? __cfi_futex_lock_pi+0x10/0x10 [ 83.606689][ T1659] ? __cfi_futex_wake_mark+0x10/0x10 [ 83.606711][ T1659] ? futex_setup_timer+0xb4/0xd0 [ 83.606727][ T1659] ? __cfi_futex_wake_mark+0x10/0x10 [ 83.606750][ T1659] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 83.606771][ T1659] ? mas_find+0x358/0x5f0 [ 83.606790][ T1659] do_futex+0x270/0x510 [ 83.606808][ T1659] ? do_vmi_munmap+0x245/0x2e0 [ 83.606830][ T1659] ? __cfi_do_futex+0x10/0x10 [ 83.606847][ T1659] ? __vm_munmap+0x2de/0x390 [ 83.606868][ T1659] __se_sys_futex+0x13c/0x320 [ 83.606894][ T1659] ? __x64_sys_futex+0x110/0x110 [ 83.606916][ T1659] ? __kasan_check_write+0x18/0x20 [ 83.606937][ T1659] __x64_sys_futex+0xe9/0x110 [ 83.606957][ T1659] x64_sys_call+0x227f/0x2ee0 [ 83.606981][ T1659] do_syscall_64+0x57/0xf0 [ 83.607002][ T1659] ? clear_bhb_loop+0x50/0xa0 [ 83.607024][ T1659] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.607044][ T1659] RIP: 0033:0x7fcc3e79aeb9 [ 83.607059][ T1659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.607074][ T1659] RSP: 002b:00007fcc3f60d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 83.607094][ T1659] RAX: ffffffffffffffda RBX: 00007fcc3ea15fa0 RCX: 00007fcc3e79aeb9 [ 83.607107][ T1659] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 83.607119][ T1659] RBP: 00007fcc3e808c1f R08: 0000000000000000 R09: 0000000000000000 [ 83.607130][ T1659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.607142][ T1659] R13: 00007fcc3ea16038 R14: 00007fcc3ea15fa0 R15: 00007ffd5c32e6f8 [ 83.607157][ T1659] [ 83.720249][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 83.845822][ T45] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 83.854081][ T45] usb 5-1: config 0 has no interface number 0 [ 83.860176][ T45] usb 5-1: config 0 interface 230 altsetting 10 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.871081][ T45] usb 5-1: config 0 interface 230 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 0 [ 83.881148][ T45] usb 5-1: config 0 interface 230 has no altsetting 0 [ 83.889284][ T45] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 83.898389][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.906469][ T45] usb 5-1: Product: syz [ 83.910650][ T45] usb 5-1: Manufacturer: syz [ 83.915267][ T45] usb 5-1: SerialNumber: syz [ 83.920800][ T45] usb 5-1: config 0 descriptor?? [ 83.927176][ T45] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 83.943177][ T45] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 83.988572][ T358] cdc_ncm 2-1:1.1: bind() failure [ 83.995236][ T358] usb 2-1: USB disconnect, device number 38 [ 84.190329][ T408] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 84.341335][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.352253][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.362707][ T408] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 84.371765][ T408] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 84.379730][ T408] usb 4-1: Manufacturer: syz [ 84.385587][ T408] usb 4-1: config 0 descriptor?? [ 84.730015][ T1682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.740874][ T1682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.749774][ T36] audit: type=1400 audit(2000000015.920:339): avc: denied { append } for pid=1678 comm="syz.1.387" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.797342][ T408] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 84.804430][ T408] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 84.812593][ T408] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 84.819738][ T408] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 84.826786][ T408] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 84.834232][ T408] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 84.841306][ T408] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 84.849179][ T408] pyra 0003:1E7D:2CF6.0019: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 84.960253][ T358] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 85.110249][ T358] usb 2-1: Using ep0 maxpacket: 16 [ 85.116415][ T358] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.126575][ T358] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.136847][ T358] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.145981][ T358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.154049][ T358] usb 2-1: Product: syz [ 85.158222][ T358] usb 2-1: Manufacturer: syz [ 85.162836][ T358] usb 2-1: SerialNumber: syz [ 85.372468][ T358] usb 2-1: cannot find UAC_HEADER [ 85.379972][ T358] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 85.390983][ T358] usb 2-1: USB disconnect, device number 39 [ 85.396229][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.481416][ T408] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 85.488858][ T408] pyra 0003:1E7D:2CF6.0019: couldn't install mouse [ 85.495915][ T408] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -71 [ 85.505629][ T408] usb 4-1: USB disconnect, device number 50 [ 85.520985][ T1692] fido_id[1692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 86.008382][ T1696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.017058][ T1696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.154452][ T1701] overlayfs: failed to resolve './file0': -2 [ 86.160769][ T36] audit: type=1400 audit(2000000017.340:340): avc: denied { bind } for pid=1693 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.240246][ T408] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 86.391227][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.402232][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.410281][ T9] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 86.412003][ T408] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.432413][ T358] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 86.439927][ T408] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.449513][ T45] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 86.458019][ T408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.467658][ T45] usb 5-1: USB disconnect, device number 34 [ 86.474134][ T408] usb 4-1: config 0 descriptor?? [ 86.561372][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 86.571887][ T9] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.585856][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 86.594954][ T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 86.603788][ T9] usb 2-1: Product: syz [ 86.607940][ T9] usb 2-1: Manufacturer: syz [ 86.611330][ T358] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 86.622859][ T358] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.631778][ T358] usb 8-1: config 1 has no interface number 0 [ 86.637877][ T358] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.648845][ T358] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 86.658188][ T358] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.672476][ T358] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.681599][ T358] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.689697][ T358] usb 8-1: Product: syz [ 86.694063][ T358] usb 8-1: Manufacturer: syz [ 86.698699][ T358] usb 8-1: SerialNumber: syz [ 86.817863][ T9] hub 2-1:4.0: bad descriptor, ignoring hub [ 86.823860][ T9] hub 2-1:4.0: probe with driver hub failed with error -5 [ 86.831346][ T9] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 86.860747][ T9] usb 2-1: USB disconnect, device number 40 [ 86.890827][ T408] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 86.905301][ T408] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 87.118014][ T358] cdc_ncm 8-1:1.1: bind() failure [ 87.124142][ T358] usb 8-1: USB disconnect, device number 7 [ 87.653776][ T1725] netlink: 'syz.7.399': attribute type 1 has an invalid length. [ 87.810298][ T64] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 87.930274][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 87.961349][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.972349][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.982129][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.995035][ T64] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.004185][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.012965][ T64] usb 5-1: config 0 descriptor?? [ 88.091557][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.102561][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.113063][ T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 88.122156][ T9] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 88.130172][ T9] usb 8-1: Manufacturer: syz [ 88.136204][ T9] usb 8-1: config 0 descriptor?? [ 88.425197][ T64] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x6 [ 88.433330][ T64] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 88.443198][ T64] plantronics 0003:047F:FFFF.001B: hiddev97,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 88.530301][ T358] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 88.543593][ T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 88.550565][ T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 88.557333][ T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 88.564230][ T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 88.571172][ T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 88.578015][ T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 88.584809][ T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 88.592144][ T9] pyra 0003:1E7D:2CF6.001C: hidraw3: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 88.625394][ T408] usb 5-1: USB disconnect, device number 35 [ 88.691306][ T358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.702237][ T358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.714361][ T358] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.727327][ T358] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.736463][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.745307][ T358] usb 2-1: config 0 descriptor?? [ 88.946132][ T9] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 88.953650][ T9] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 88.960941][ T9] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -71 [ 88.970759][ T9] usb 8-1: USB disconnect, device number 8 [ 88.986758][ T1735] fido_id[1735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 89.040294][ T522] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 89.048459][ T522] usb 4-1: device reset changed ep0 maxpacket size! [ 89.055377][ T1704] usb 4-1: USB disconnect, device number 51 [ 89.155512][ T358] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x6 [ 89.163116][ T358] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 89.174491][ T358] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 89.190400][ T1704] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 89.350253][ T1704] usb 4-1: Using ep0 maxpacket: 32 [ 89.356544][ T1704] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 89.357451][ T9] usb 2-1: USB disconnect, device number 41 [ 89.365033][ T1704] usb 4-1: config 0 has no interface number 0 [ 89.376806][ T1704] usb 4-1: config 0 interface 230 altsetting 10 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.386819][ T1704] usb 4-1: config 0 interface 230 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 0 [ 89.396828][ T1704] usb 4-1: config 0 interface 230 has no altsetting 0 [ 89.405024][ T1704] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 89.414079][ T1704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.422074][ T1704] usb 4-1: Product: syz [ 89.426212][ T1704] usb 4-1: Manufacturer: syz [ 89.430804][ T1704] usb 4-1: SerialNumber: syz [ 89.435932][ T1704] usb 4-1: config 0 descriptor?? [ 89.443347][ T1704] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 89.451986][ T1704] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 89.540480][ T358] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 89.700307][ T358] usb 5-1: Using ep0 maxpacket: 32 [ 89.707882][ T358] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52 [ 89.717189][ T358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.725227][ T358] usb 5-1: Product: syz [ 89.729827][ T358] usb 5-1: Manufacturer: syz [ 89.734456][ T358] usb 5-1: SerialNumber: syz [ 89.740265][ T522] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 89.891337][ T522] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 89.901712][ T522] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.910630][ T522] usb 8-1: config 1 has no interface number 0 [ 89.916733][ T522] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.927718][ T522] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 89.936807][ T522] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.954647][ T522] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.966300][ T522] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.979150][ T522] usb 8-1: Product: syz [ 89.983620][ T522] usb 8-1: Manufacturer: syz [ 89.988922][ T522] usb 8-1: SerialNumber: syz [ 90.181866][ T358] usb_ehset_test 5-1:84.0: probe with driver usb_ehset_test failed with error -32 [ 90.191956][ T358] usb 5-1: USB disconnect, device number 36 [ 90.400125][ T522] cdc_ncm 8-1:1.1: bind() failure [ 90.406505][ T522] usb 8-1: USB disconnect, device number 9 [ 90.760576][ T1761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.410'. [ 90.771986][ T1761] netlink: 5 bytes leftover after parsing attributes in process `syz.4.410'. [ 90.781451][ T1761] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 90.861228][ T36] audit: type=1400 audit(2000000022.040:341): avc: denied { bind } for pid=1762 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.913473][ T36] audit: type=1400 audit(2000000022.090:342): avc: denied { lock } for pid=1770 comm="syz.7.414" path="socket:[14391]" dev="sockfs" ino=14391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 90.913567][ T1771] netlink: 92 bytes leftover after parsing attributes in process `syz.7.414'. [ 90.946469][ T36] audit: type=1400 audit(2000000022.120:343): avc: denied { bpf } for pid=1770 comm="syz.7.414" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.973103][ T1775] incfs: Options parsing error. -22 [ 90.978321][ T1775] incfs: mount failed -22 [ 90.988608][ T1780] SELinux: policydb magic number 0xa does not match expected magic number 0xf97cff8c [ 90.998442][ T1780] SELinux: failed to load policy [ 91.006494][ T1782] netlink: 'syz.7.416': attribute type 16 has an invalid length. [ 91.020457][ T1782] netlink: 312 bytes leftover after parsing attributes in process `syz.7.416'. [ 91.046908][ T36] audit: type=1400 audit(2000000022.220:344): avc: denied { audit_write } for pid=1787 comm="syz.7.417" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 91.068247][ T36] audit: type=1107 audit(2000000022.220:345): pid=1787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='YgCz%B%[O0uJ[ؓiRGC*I;vS: /oy}|Oooz|E{֞i)ѻ{sF韡=1Jqa(։[v|' [ 91.070987][ T1788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1788 comm=syz.7.417 [ 91.450314][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 91.601277][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.611628][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.621236][ T9] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 91.630390][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.645676][ T9] usb 8-1: SerialNumber: syz [ 91.652383][ T1795] loop6: detected capacity change from 0 to 7 [ 91.658910][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.668103][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.676096][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.685323][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.693359][ T1795] loop6: unable to read partition table [ 91.699618][ T1795] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 91.702527][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.721131][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.730375][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.739523][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.747712][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.756880][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.765054][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.774205][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.782308][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.782424][ T1795] loop6: unable to read partition table [ 91.791484][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.810234][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.819512][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.831200][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.840594][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 91.860255][ T9] usb 8-1: 0:2 : does not exist [ 91.865198][ T9] usb 8-1: unit 5 not found! [ 91.872591][ T9] usb 8-1: USB disconnect, device number 10 [ 91.898648][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.931502][ T1704] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 91.941805][ T1704] usb 4-1: USB disconnect, device number 52 [ 92.060300][ T358] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 92.211261][ T358] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.220230][ T358] usb 5-1: config 1 has no interface number 0 [ 92.226307][ T358] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.237209][ T358] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 92.246280][ T358] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.260595][ T358] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.269750][ T358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.277768][ T358] usb 5-1: Product: syz [ 92.281947][ T358] usb 5-1: Manufacturer: syz [ 92.286525][ T358] usb 5-1: SerialNumber: syz [ 92.620265][ T1704] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 92.650493][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 92.693566][ T358] cdc_ncm 5-1:1.1: bind() failure [ 92.699680][ T358] usb 5-1: USB disconnect, device number 37 [ 92.770990][ T1704] usb 8-1: Using ep0 maxpacket: 16 [ 92.777285][ T1704] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.788319][ T1704] usb 8-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 92.798526][ T1704] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 92.806607][ T1704] usb 8-1: SerialNumber: syz [ 92.810268][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 92.819898][ T1704] usb 8-1: config 0 descriptor?? [ 92.821062][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 92.827251][ T1704] hub 8-1:0.0: bad descriptor, ignoring hub [ 92.839243][ T1704] hub 8-1:0.0: probe with driver hub failed with error -5 [ 92.840495][ T9] usb 4-1: config 0 has no interface number 0 [ 92.846665][ T1704] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 92.854596][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 92.861271][ T1704] usb 8-1: Detected SIO [ 92.869413][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.881664][ T9] usb 4-1: Product: syz [ 92.884946][ T1704] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 92.885834][ T9] usb 4-1: Manufacturer: syz [ 92.899022][ T9] usb 4-1: SerialNumber: syz [ 92.904668][ T9] usb 4-1: config 0 descriptor?? [ 92.910649][ T9] smsc95xx v2.0.0 [ 93.034100][ T1817] netlink: 25 bytes leftover after parsing attributes in process `syz.7.427'. [ 93.043130][ T1817] macsec0: entered allmulticast mode [ 93.048444][ T1817] veth1_macvtap: entered allmulticast mode [ 93.150404][ T358] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 93.160345][ T408] usb 8-1: USB disconnect, device number 11 [ 93.167124][ T408] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 93.176685][ T408] ftdi_sio 8-1:0.0: device disconnected [ 93.231172][ T36] audit: type=1400 audit(2000000024.410:346): avc: denied { read } for pid=1830 comm="syz.4.432" name="file2" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.277549][ T36] audit: type=1400 audit(2000000024.450:347): avc: granted { setsecparam } for pid=1832 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 93.321804][ T358] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.329931][ T358] usb 2-1: not running at top speed; connect to a high speed hub [ 93.338558][ T358] usb 2-1: config 4 has an invalid interface number: 32 but max is 0 [ 93.347098][ T358] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 93.357610][ T358] usb 2-1: config 4 has no interface number 0 [ 93.365345][ T358] usb 2-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 93.374873][ T358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.375435][ T36] audit: type=1400 audit(2000000024.550:348): avc: denied { mounton } for pid=1835 comm="syz.4.434" path="/101/file0" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.383198][ T358] usb 2-1: Product: syz [ 93.383220][ T358] usb 2-1: Manufacturer: syz [ 93.383235][ T358] usb 2-1: SerialNumber: syz [ 93.420246][ T36] audit: type=1400 audit(2000000024.590:349): avc: denied { mounton } for pid=1835 comm="syz.4.434" path="/101/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 93.444629][ T36] audit: type=1400 audit(2000000024.630:350): avc: denied { mounton } for pid=1835 comm="syz.4.434" path="/syzcgroup/unified/syz4" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 93.501850][ T1836] 9pnet_fd: Insufficient options for proto=fd [ 93.568217][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 93.580338][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.583073][ T1845] Bluetooth: hci0: unexpected event for opcode 0x505e [ 93.593931][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 93.638610][ T358] usb 2-1: USB disconnect, device number 42 [ 93.662713][ T1853] overlay: ./file0 is not a directory [ 93.762836][ T1858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'. [ 93.790315][ T10] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 93.941342][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.951164][ T64] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 93.958749][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 93.968121][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.976701][ T10] usb 5-1: config 0 descriptor?? [ 94.080300][ T1704] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 94.121253][ T64] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.130262][ T64] usb 8-1: config 1 has no interface number 0 [ 94.136355][ T64] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.147283][ T64] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 94.156394][ T64] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.170670][ T64] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.179782][ T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.188059][ T64] usb 8-1: Product: syz [ 94.192333][ T64] usb 8-1: Manufacturer: syz [ 94.197016][ T64] usb 8-1: SerialNumber: syz [ 94.230289][ T1704] usb 2-1: Using ep0 maxpacket: 8 [ 94.236744][ T1704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.245164][ T1704] usb 2-1: config 9 has an invalid interface number: 5 but max is 0 [ 94.253271][ T1704] usb 2-1: config 9 has no interface number 0 [ 94.259357][ T1704] usb 2-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0x2C, changing to 0xC [ 94.270810][ T1704] usb 2-1: config 9 interface 5 altsetting 9 endpoint 0xC has invalid wMaxPacketSize 0 [ 94.282058][ T1704] usb 2-1: config 9 interface 5 has no altsetting 0 [ 94.290165][ T1704] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 94.299342][ T1704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.307375][ T1704] usb 2-1: Product: syz [ 94.311566][ T1704] usb 2-1: Manufacturer: syz [ 94.316154][ T1704] usb 2-1: SerialNumber: syz [ 94.397633][ T1842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.406253][ T1842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.422474][ T10] logitech-djreceiver 0003:046D:C53A.001E: hidraw1: USB HID v0.00 Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 94.527556][ T1704] usb 2-1: USB disconnect, device number 43 [ 94.614421][ T64] cdc_ncm 8-1:1.1: bind() failure [ 94.620774][ T64] usb 8-1: USB disconnect, device number 12 [ 94.622154][ T1842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.635801][ T1842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.673629][ T10] usb 5-1: USB disconnect, device number 38 [ 95.050339][ T10] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 95.201303][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 95.212930][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 95.222015][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=9 [ 95.230303][ T10] usb 5-1: SerialNumber: syz [ 95.235570][ T10] usb 5-1: config 0 descriptor?? [ 95.240822][ T1874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.248561][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 95.390322][ T1704] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 95.430303][ T358] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 95.541403][ T1704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.552399][ T1704] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 95.561551][ T1704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.570285][ T1704] usb 2-1: config 0 descriptor?? [ 95.581313][ T358] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.592341][ T358] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.602134][ T358] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.611210][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.611216][ T358] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.626086][ T358] usb 8-1: config 0 descriptor?? [ 95.632071][ T358] hub 8-1:0.0: USB hub found [ 95.641976][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 95.654279][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 95.664696][ T9] usb 4-1: USB disconnect, device number 53 [ 95.832582][ T358] hub 8-1:0.0: 1 port detected [ 95.838622][ T358] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 95.858237][ T358] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 95.870747][ T358] usbhid 8-1:0.0: can't add hid device: -71 [ 95.884495][ T358] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 95.912259][ T358] usb 8-1: USB disconnect, device number 13 [ 95.960424][ T1913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=51 sclass=netlink_tcpdiag_socket pid=1913 comm=syz.7.454 [ 95.978597][ T1704] zeroplus 0003:0C12:0005.001F: item fetching failed at offset 0/3 [ 95.986789][ T1704] zeroplus 0003:0C12:0005.001F: parse failed [ 95.992827][ T1704] zeroplus 0003:0C12:0005.001F: probe with driver zeroplus failed with error -22 [ 96.160272][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 96.179607][ T358] usb 2-1: USB disconnect, device number 44 [ 96.310271][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 96.316530][ T9] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 96.324810][ T9] usb 4-1: config 0 has no interface number 0 [ 96.330911][ T9] usb 4-1: config 0 interface 230 altsetting 10 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.341010][ T9] usb 4-1: config 0 interface 230 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 0 [ 96.351041][ T9] usb 4-1: config 0 interface 230 has no altsetting 0 [ 96.359319][ T9] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 96.368456][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.376470][ T9] usb 4-1: Product: syz [ 96.380668][ T9] usb 4-1: Manufacturer: syz [ 96.385256][ T9] usb 4-1: SerialNumber: syz [ 96.390625][ T9] usb 4-1: config 0 descriptor?? [ 96.396338][ T9] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 96.404086][ T9] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 96.920298][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 97.000282][ T64] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 97.071318][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.080278][ T10] usb 8-1: config 1 has no interface number 0 [ 97.086347][ T10] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.097221][ T10] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 97.106296][ T10] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.120429][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.129460][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.137577][ T10] usb 8-1: Product: syz [ 97.141810][ T10] usb 8-1: Manufacturer: syz [ 97.146402][ T10] usb 8-1: SerialNumber: syz [ 97.160244][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 97.166430][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.177348][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 97.190142][ T64] usb 2-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 97.199194][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.207751][ T64] usb 2-1: config 0 descriptor?? [ 97.464372][ T1926] kvm: kvm [1925]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x0 [ 97.475242][ T1926] kvm: kvm [1925]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x187) = 0xb800 [ 97.553883][ T10] cdc_ncm 8-1:1.1: bind() failure [ 97.561491][ T10] usb 8-1: USB disconnect, device number 14 [ 97.746762][ T358] usb 5-1: USB disconnect, device number 39 [ 97.762465][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 97.762481][ T36] audit: type=1400 audit(2000000001.060:353): avc: denied { name_bind } for pid=1931 comm="syz.4.461" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 97.805140][ T1936] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1936 comm=syz.4.462 [ 97.828400][ T1940] netlink: 'syz.4.463': attribute type 10 has an invalid length. [ 97.836205][ T1940] netlink: 17 bytes leftover after parsing attributes in process `syz.4.463'. [ 97.938488][ T1946] netlink: 188 bytes leftover after parsing attributes in process `syz.4.464'. [ 97.963212][ T64] usbhid 2-1:0.0: can't add hid device: -71 [ 97.969225][ T64] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 97.978603][ T64] usb 2-1: USB disconnect, device number 45 [ 98.082609][ T1950] overlayfs: workdir and upperdir must reside under the same mount [ 98.309094][ T1972] netlink: 85 bytes leftover after parsing attributes in process `syz.7.472'. [ 98.400277][ T358] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 98.489448][ T1977] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 98.503968][ T1977] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 98.518207][ T1977] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 98.550262][ T1927] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 98.557966][ T358] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.569604][ T358] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 98.580692][ T358] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 98.591772][ T358] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 98.600815][ T358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.609586][ T1961] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.700248][ T1927] usb 8-1: Using ep0 maxpacket: 8 [ 98.706477][ T1927] usb 8-1: config 0 interface 0 has no altsetting 0 [ 98.713362][ T1927] usb 8-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 98.722447][ T1927] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.731955][ T1927] usb 8-1: config 0 descriptor?? [ 98.770282][ T1704] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 98.871018][ T9] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 98.880950][ T9] usb 4-1: USB disconnect, device number 54 [ 98.921313][ T1704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.930296][ T1704] usb 2-1: config 1 has no interface number 0 [ 98.936417][ T1704] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.947499][ T1704] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 98.952374][ T1927] petalynx 0003:18B1:0037.0020: hidraw1: USB HID v0.05 Device [HID 18b1:0037] on usb-dummy_hcd.7-1/input0 [ 98.956592][ T1704] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.979392][ T1704] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 98.990650][ T1704] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.003480][ T1704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.012571][ T1704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.020619][ T1704] usb 2-1: Product: syz [ 99.024894][ T1704] usb 2-1: Manufacturer: syz [ 99.029482][ T1704] usb 2-1: SerialNumber: syz [ 99.149046][ T408] usb 8-1: USB disconnect, device number 15 [ 99.235776][ T1981] FAULT_INJECTION: forcing a failure. [ 99.235776][ T1981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.248886][ T1981] CPU: 1 UID: 0 PID: 1981 Comm: syz.1.475 Not tainted syzkaller #0 9061d031fb6aa52dc43cfb6d93fe624fdff0548e [ 99.248915][ T1981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.248926][ T1981] Call Trace: [ 99.248934][ T1981] [ 99.248942][ T1981] __dump_stack+0x21/0x30 [ 99.248963][ T1981] dump_stack_lvl+0x140/0x1c0 [ 99.248975][ T1981] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.248989][ T1981] dump_stack+0x19/0x20 [ 99.249004][ T1981] should_fail_ex+0x3d7/0x530 [ 99.249015][ T1981] should_fail+0xf/0x20 [ 99.249025][ T1981] should_fail_usercopy+0x1e/0x30 [ 99.249035][ T1981] _copy_from_user+0x20/0xa0 [ 99.249048][ T1981] raw_ioctl+0xbc6/0x37e0 [ 99.249059][ T1981] ? proc_fail_nth_write+0x184/0x220 [ 99.249070][ T1981] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 99.249080][ T1981] ? __cfi_raw_ioctl+0x10/0x10 [ 99.249089][ T1981] ? selinux_file_ioctl+0x732/0x1480 [ 99.249100][ T1981] ? vfs_write+0x9a4/0xf90 [ 99.249112][ T1981] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 99.249123][ T1981] ? __cfi_vfs_write+0x10/0x10 [ 99.249134][ T1981] ? __kasan_check_write+0x18/0x20 [ 99.249147][ T1981] ? mutex_unlock+0x90/0x240 [ 99.249162][ T1981] ? __cfi_mutex_unlock+0x10/0x10 [ 99.249177][ T1981] ? __fget_files+0x2c5/0x340 [ 99.249191][ T1981] ? __fget_files+0x2c5/0x340 [ 99.249205][ T1981] ? bpf_lsm_file_ioctl+0xd/0x20 [ 99.249215][ T1981] ? security_file_ioctl+0x3e/0x110 [ 99.249231][ T1981] ? __cfi_raw_ioctl+0x10/0x10 [ 99.249241][ T1981] __se_sys_ioctl+0x135/0x1b0 [ 99.249256][ T1981] __x64_sys_ioctl+0x7f/0xa0 [ 99.249269][ T1981] x64_sys_call+0x1878/0x2ee0 [ 99.249283][ T1981] do_syscall_64+0x57/0xf0 [ 99.249296][ T1981] ? clear_bhb_loop+0x50/0xa0 [ 99.249310][ T1981] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.249321][ T1981] RIP: 0033:0x7fefed59ab4b [ 99.249332][ T1981] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 99.249341][ T1981] RSP: 002b:00007fefee428f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.249354][ T1981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fefed59ab4b [ 99.249362][ T1981] RDX: 00007fefee429fe0 RSI: 0000000080085502 RDI: 0000000000000003 [ 99.249369][ T1981] RBP: 00007fefee42b090 R08: 0000000000000000 R09: 0000000000000000 [ 99.249376][ T1981] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 99.249382][ T1981] R13: 0000000000000000 R14: 00007fefed815fa0 R15: 00007ffc26f53788 [ 99.249390][ T1981] [ 99.388759][ T1984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1984 comm=syz.3.476 [ 99.392922][ T1704] cdc_ncm 2-1:1.1: bind() failure [ 99.516924][ T1704] usb 2-1: USB disconnect, device number 46 [ 99.577001][ T36] audit: type=1400 audit(2000000002.870:354): avc: denied { name_bind } for pid=1960 comm="syz.4.468" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 99.784838][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.785085][ T36] audit: type=1400 audit(2000000003.080:355): avc: denied { transfer } for pid=2000 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.785124][ T2001] rust_binder: Error while translating object. [ 99.810801][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 99.820868][ C1] BUG: TASK stack guard page was hit at ffffc900125cffb8 (stack is ffffc900125d0000..ffffc900125d8000) [ 99.820903][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 99.820925][ C1] CPU: 1 UID: 0 PID: 2001 Comm: syz.1.482 Not tainted syzkaller #0 9061d031fb6aa52dc43cfb6d93fe624fdff0548e [ 99.820954][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.820965][ C1] RIP: 0010:update_stack_state+0xf4/0x4b0 [ 99.820991][ C1] Code: 84 c0 0f 85 89 03 00 00 41 c6 06 01 b8 a8 00 00 00 49 89 d7 eb 05 b8 10 00 00 00 4c 8d 73 08 48 8d 4b 10 4c 89 7d b0 4c 01 f8 <48> 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 [ 99.821006][ C1] RSP: 0018:ffffc900125cffc0 EFLAGS: 00010282 [ 99.821022][ C1] RAX: ffffc900125d0108 RBX: ffffc900125d0108 RCX: ffffc900125d0118 [ 99.821036][ C1] RDX: ffffc900125d00f8 RSI: ffffc900125d00f8 RDI: ffffc900125d0160 [ 99.821049][ C1] RBP: ffffc900125d0080 R08: ffffc900125d0101 R09: 0000000000000000 [ 99.821061][ C1] R10: ffffc900125d0108 R11: fffff520024ba02d R12: 0000000000000000 [ 99.821074][ C1] R13: dffffc0000000000 R14: ffffc900125d0110 R15: ffffc900125d00f8 [ 99.821087][ C1] FS: 00007fefee42b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 99.821104][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.821115][ C1] CR2: ffffc900125cffb8 CR3: 000000010fba6000 CR4: 00000000003526b0 [ 99.821132][ C1] Call Trace: [ 99.821139][ C1] [ 99.821147][ C1] ? __unwind_start+0x216/0x410 [ 99.821167][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 99.821185][ C1] ? arch_stack_walk+0xf2/0x170 [ 99.821210][ C1] ? stack_trace_save+0xaa/0x100 [ 99.821225][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 99.821241][ C1] ? __asan_memset+0x39/0x50 [ 99.821261][ C1] ? save_stack+0x125/0x240 [ 99.821284][ C1] ? free_contig_range+0x260/0x260 [ 99.821304][ C1] ? __reset_page_owner+0x450/0x450 [ 99.821327][ C1] ? zone_page_state_add+0x43/0x90 [ 99.821352][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 99.821368][ C1] ? sched_clock_noinstr+0xd/0x30 [ 99.821393][ C1] ? __set_page_owner+0x8e/0x600 [ 99.821415][ C1] ? __zone_watermark_ok+0x134/0x630 [ 99.821432][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 99.821456][ C1] ? kasan_unpoison+0x4a/0x70 [ 99.821476][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 99.821500][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 99.821524][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 99.821543][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 99.821563][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 99.821584][ C1] ? prep_new_page+0x1c/0x110 [ 99.821599][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 99.821622][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 99.821639][ C1] ? static_key_count+0x45/0x70 [ 99.821655][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 99.821675][ C1] ? lruvec_init+0x211/0x280 [ 99.821697][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 99.821714][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 99.821730][ C1] ? unwind_get_return_address+0x51/0x90 [ 99.821748][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 99.821765][ C1] ? arch_stack_walk+0x10a/0x170 [ 99.821789][ C1] ? stack_trace_save+0xaa/0x100 [ 99.821805][ C1] ? stack_depot_save_flags+0x672/0x800 [ 99.821822][ C1] ? __kernel_text_address+0x11/0x40 [ 99.821843][ C1] ? kasan_save_track+0x4f/0x80 [ 99.821864][ C1] ? kasan_save_track+0x3e/0x80 [ 99.821885][ C1] ? kasan_save_free_info+0x4a/0x60 [ 99.821902][ C1] ? __kasan_slab_free+0x5f/0x80 [ 99.821924][ C1] ? kfree+0x158/0x440 [ 99.821952][ C1] ? krealloc_noprof+0xfa/0x130 [ 99.821973][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xc6/0x200 [ 99.822005][ C1] ? _RNvXs9_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB5_3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropBR_+0x1a9/0x2b0 [ 99.822070][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1387/0x22a0 [ 99.822093][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1215/0x5110 [ 99.822129][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x26/0x1a0 [ 99.822162][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x2722/0x5500 [ 99.822189][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3b2/0x2120 [ 99.822220][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x30d/0xc20 [ 99.822248][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1bf7/0xa690 [ 99.822283][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 99.822307][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 99.822330][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 99.822351][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 99.822374][ C1] ? do_syscall_64+0x57/0xf0 [ 99.822394][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.822418][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 99.822449][ C1] ? kasan_save_free_info+0x4a/0x60 [ 99.822467][ C1] ? __kasan_slab_free+0x5f/0x80 [ 99.822488][ C1] ? kfree+0x158/0x440 [ 99.822506][ C1] ? krealloc_noprof+0xfa/0x130 [ 99.822525][ C1] ? krealloc_noprof+0xfa/0x130 [ 99.822546][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xc6/0x200 [ 99.822577][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 99.822609][ C1] ? __kasan_slab_free+0x6a/0x80 [ 99.822632][ C1] ? kfree+0x158/0x440 [ 99.822649][ C1] ? krealloc_noprof+0xfa/0x130 [ 99.822670][ C1] ? krealloc_noprof+0xfa/0x130 [ 99.822691][ C1] ? _RNvXs9_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB5_3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropBR_+0x1a9/0x2b0 [ 99.822729][ C1] ? __cfi__RNvXs9_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB5_3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropBR_+0x10/0x10 [ 99.822769][ C1] ? __kasan_check_write+0x18/0x20 [ 99.822788][ C1] ? _raw_spin_lock+0x92/0x120 [ 99.822807][ C1] ? unwind_get_return_address+0x51/0x90 [ 99.822826][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1387/0x22a0 [ 99.822852][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 99.822875][ C1] ? kasan_save_track+0x4f/0x80 [ 99.822896][ C1] ? kasan_save_track+0x3e/0x80 [ 99.822917][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 99.822939][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 99.822961][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 99.822982][ C1] ? krealloc_noprof+0x8d/0x130 [ 99.823002][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 99.823024][ C1] ? __asan_memset+0x39/0x50 [ 99.823042][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 99.823058][ C1] ? _RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x3bd/0x990 [ 99.823111][ C1] ? __cfi__RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x10/0x10 [ 99.823167][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 99.823186][ C1] ? __kasan_check_write+0x18/0x20 [ 99.823205][ C1] ? _raw_spin_lock+0x92/0x120 [ 99.823224][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 99.823245][ C1] ? _RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0xb2/0x250 [ 99.823267][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 99.823289][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x470/0x540 [ 99.823313][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionINtNtCs1ewLyjEZ7Le_6kernel6rbtree10RBTreeNodejmEEECskDQVOo9v79Q_16rust_binder_main+0xd8/0x1b0 [ 99.823347][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 99.823370][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.823389][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 99.823413][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.823432][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 99.823455][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 99.823479][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 99.823503][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1290/0x1f00 [ 99.823529][ C1] ? __kasan_check_write+0x18/0x20 [ 99.823547][ C1] ? _raw_spin_lock+0x92/0x120 [ 99.823566][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 99.823585][ C1] ? __kasan_check_write+0x18/0x20 [ 99.823604][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6cd/0xc90 [ 99.823632][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.823650][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x61e/0xc90 [ 99.823678][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 99.823705][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 99.823729][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.823748][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 99.823771][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 99.823796][ C1] ? krealloc_noprof+0xfa/0x130 [ 99.823817][ C1] ? __kasan_check_write+0x18/0x20 [ 99.823836][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 99.823856][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x302/0x5110 [ 99.823890][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.823909][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1215/0x5110 [ 99.823949][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0xfa9/0x1820 [ 99.823980][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page9write_raw+0x1ea/0x3d0 [ 99.824004][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page9write_raw+0x10/0x10 [ 99.824028][ C1] ? __kasan_slab_free+0x6a/0x80 [ 99.824050][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 99.824070][ C1] ? __wake_up+0x169/0x190 [ 99.824093][ C1] ? audit_log_end+0x1f1/0x240 [ 99.824116][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 99.824150][ C1] ? __kasan_check_write+0x18/0x20 [ 99.824169][ C1] ? _raw_spin_lock+0x92/0x120 [ 99.824188][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 99.824208][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 99.824227][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 99.824247][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView5writeNtNtB8_4defs16FlatBinderObjectEB8_+0x4d0/0x810 [ 99.824280][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView5writeNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 99.824312][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 99.824334][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 99.824356][ C1] ? do_syscall_64+0x57/0xf0 [ 99.824375][ C1] ? put_dec_trunc8+0x229/0x380 [ 99.824395][ C1] ? put_dec+0xd7/0xf0 [ 99.824413][ C1] ? __asan_memset+0x39/0x50 [ 99.824432][ C1] ? move_right+0x8e/0xb0 [ 99.824452][ C1] ? format_decode+0x1bb/0x1610 [ 99.824470][ C1] ? vsnprintf+0x7b4/0x1ad0 [ 99.824485][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.824500][ C1] ? vsnprintf+0x19ef/0x1ad0 [ 99.824517][ C1] ? desc_read+0x202/0x3e0 [ 99.824541][ C1] ? __kasan_check_write+0x18/0x20 [ 99.824561][ C1] ? desc_read+0x1ab/0x3e0 [ 99.824586][ C1] ? prb_first_seq+0x109/0x1d0 [ 99.824610][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 99.824634][ C1] ? __kasan_check_write+0x18/0x20 [ 99.824653][ C1] ? desc_read+0x1ab/0x3e0 [ 99.824676][ C1] ? __kasan_check_read+0x15/0x20 [ 99.824695][ C1] ? this_cpu_in_panic+0x56/0x90 [ 99.824710][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 99.824734][ C1] ? record_print_text+0x290/0x450 [ 99.824755][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 99.824775][ C1] ? __rb_erase_color+0xb33/0xb50 [ 99.824798][ C1] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 99.824821][ C1] ? xfd_validate_state+0x68/0x140 [ 99.824841][ C1] ? save_fpregs_to_fpstate+0x196/0x220 [ 99.824858][ C1] ? __kasan_check_write+0x18/0x20 [ 99.824877][ C1] ? __switch_to+0xc4f/0x1300 [ 99.824898][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 99.824917][ C1] ? __cfi___switch_to+0x10/0x10 [ 99.824944][ C1] ? psi_task_switch+0xad/0xa10 [ 99.824962][ C1] ? _raw_spin_unlock+0x45/0x60 [ 99.824982][ C1] ? finish_task_switch+0x139/0x760 [ 99.824999][ C1] ? __switch_to_asm+0x3d/0x70 [ 99.825021][ C1] ? __schedule+0x1352/0x1dd0 [ 99.825044][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 99.825073][ C1] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 99.825102][ C1] ? __sched_text_start+0x10/0x10 [ 99.825123][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 99.825145][ C1] ? up+0x10a/0x1b0 [ 99.825159][ C1] ? __cfi_up+0x10/0x10 [ 99.825174][ C1] ? krealloc_noprof+0xfa/0x130 [ 99.825195][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 99.825221][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xed/0x200 [ 99.825253][ C1] ? __cfi_llist_add_batch+0x10/0x10 [ 99.825277][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 99.825307][ C1] ? preempt_schedule+0xc5/0xe0 [ 99.825328][ C1] ? __cfi_preempt_schedule+0x10/0x10 [ 99.825350][ C1] ? tick_nohz_tick_stopped+0x4c/0x60 [ 99.825370][ C1] ? __irq_work_queue_local+0xc4/0x260 [ 99.825390][ C1] ? irq_work_queue+0xc2/0x160 [ 99.825407][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x3a3/0x660 [ 99.825440][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 99.825458][ C1] ? _copy_from_user+0x87/0xa0 [ 99.825477][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 99.825512][ C1] ? vprintk_default+0x2a/0x40 [ 99.825529][ C1] ? vprintk+0x93/0xa0 [ 99.825549][ C1] ? _printk+0xde/0x140 [ 99.825565][ C1] ? __cfi__RNvMs5_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB5_12BinderObject9read_from+0x10/0x10 [ 99.825593][ C1] ? __cfi__printk+0x10/0x10 [ 99.825609][ C1] ? __asan_memset+0x39/0x50 [ 99.825628][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x26/0x1a0 [ 99.825662][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation13NewAllocationEBK_+0x5b/0x80 [ 99.825691][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x2722/0x5500 [ 99.825726][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 99.825804][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3b2/0x2120 [ 99.825835][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 99.825871][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8a0 [ 99.825901][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 99.825929][ C1] ? __kasan_check_write+0x18/0x20 [ 99.825952][ C1] ? _raw_spin_lock+0x92/0x120 [ 99.825972][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 99.825992][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 99.826012][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.826032][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 99.826051][ C1] ? avc_has_perm+0x155/0x240 [ 99.826070][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 99.826096][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process20get_transaction_node+0x477/0x620 [ 99.826127][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 99.826148][ C1] ? bpf_lsm_binder_transaction+0xd/0x20 [ 99.826167][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x30d/0xc20 [ 99.826197][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x10/0x10 [ 99.826228][ C1] ? __kasan_check_write+0x18/0x20 [ 99.826247][ C1] ? _raw_spin_lock+0x92/0x120 [ 99.826266][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 99.826286][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1790/0xa690 [ 99.826318][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.826338][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1bf7/0xa690 [ 99.826382][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 99.826464][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 99.826488][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 99.826507][ C1] ? kernel_text_address+0xa9/0xe0 [ 99.826526][ C1] ? __kernel_text_address+0x11/0x40 [ 99.826545][ C1] ? unwind_get_return_address+0x51/0x90 [ 99.826563][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 99.826580][ C1] ? arch_stack_walk+0x10a/0x170 [ 99.826604][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 99.826631][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.826650][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 99.826676][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 99.826702][ C1] ? kasan_save_track+0x4f/0x80 [ 99.826723][ C1] ? kasan_save_track+0x3e/0x80 [ 99.826743][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 99.826761][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 99.826783][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 99.826804][ C1] ? krealloc_noprof+0x8d/0x130 [ 99.826824][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 99.826852][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 99.826878][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 99.826904][ C1] ? desc_read+0x202/0x3e0 [ 99.826927][ C1] ? __kasan_check_write+0x18/0x20 [ 99.826952][ C1] ? desc_read+0x1ab/0x3e0 [ 99.826976][ C1] ? prb_first_seq+0x109/0x1d0 [ 99.827000][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 99.827023][ C1] ? __kasan_check_write+0x18/0x20 [ 99.827042][ C1] ? desc_read+0x1ab/0x3e0 [ 99.827066][ C1] ? __kasan_check_read+0x15/0x20 [ 99.827084][ C1] ? this_cpu_in_panic+0x56/0x90 [ 99.827100][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 99.827124][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.827144][ C1] ? prb_read_valid+0x80/0x80 [ 99.827167][ C1] ? data_alloc+0x4d0/0x7e0 [ 99.827192][ C1] ? desc_read+0x202/0x3e0 [ 99.827215][ C1] ? __kasan_check_write+0x18/0x20 [ 99.827234][ C1] ? desc_read+0x1ab/0x3e0 [ 99.827257][ C1] ? __kasan_check_write+0x18/0x20 [ 99.827276][ C1] ? _raw_spin_lock+0x92/0x120 [ 99.827295][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 99.827314][ C1] ? prb_first_seq+0x109/0x1d0 [ 99.827338][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 99.827362][ C1] ? _raw_spin_unlock+0x45/0x60 [ 99.827382][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 99.827399][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9e6/0x1cf0 [ 99.827432][ C1] ? __kasan_check_read+0x15/0x20 [ 99.827452][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 99.827476][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 99.827509][ C1] ? prb_read_valid+0x80/0x80 [ 99.827532][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 99.827553][ C1] ? up+0x10a/0x1b0 [ 99.827567][ C1] ? __cfi_up+0x10/0x10 [ 99.827583][ C1] ? __kasan_check_write+0x18/0x20 [ 99.827601][ C1] ? llist_add_batch+0x10f/0x1f0 [ 99.827624][ C1] ? prb_read_valid+0x41/0x80 [ 99.827648][ C1] ? __cfi_llist_add_batch+0x10/0x10 [ 99.827670][ C1] ? console_unlock+0x247/0x2c0 [ 99.827688][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8a0 [ 99.827716][ C1] ? tick_nohz_tick_stopped+0x4c/0x60 [ 99.827735][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 99.827765][ C1] ? _raw_spin_lock+0x92/0x120 [ 99.827784][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 99.827803][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 99.827822][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEBK_+0x3e2/0x4f0 [ 99.827854][ C1] ? vprintk_default+0x2a/0x40 [ 99.827872][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEBK_+0x10/0x10 [ 99.827904][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0xf9/0x1f0 [ 99.827946][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 99.827984][ C1] ? __kasan_check_write+0x18/0x20 [ 99.828003][ C1] ? mutex_unlock+0x90/0x240 [ 99.828026][ C1] ? do_pte_missing+0x1476/0x44f0 [ 99.828052][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.828071][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x440/0xa50 [ 99.828102][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 99.828128][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x10/0x10 [ 99.828161][ C1] ? __count_memcg_events+0xdf/0x3b0 [ 99.828186][ C1] ? __kasan_check_read+0x15/0x20 [ 99.828204][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1019/0x5da0 [ 99.828229][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.828248][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 99.828274][ C1] ? follow_page_pte+0x90f/0xbc0 [ 99.828291][ C1] ? gup_must_unshare+0x1e0/0x1e0 [ 99.828307][ C1] ? try_grab_folio_fast+0x155/0x520 [ 99.828323][ C1] ? vma_is_secretmem+0x11/0x50 [ 99.828340][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 99.828365][ C1] ? __pte_offset_map+0x1b0/0x230 [ 99.828384][ C1] ? gup_fast_fallback+0x130d/0x14e0 [ 99.828406][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 99.828426][ C1] ? kernel_text_address+0xa9/0xe0 [ 99.828445][ C1] ? __kernel_text_address+0x11/0x40 [ 99.828463][ C1] ? unwind_get_return_address+0x51/0x90 [ 99.828482][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 99.828499][ C1] ? arch_stack_walk+0x10a/0x170 [ 99.828522][ C1] ? stack_depot_save_flags+0x38/0x800 [ 99.828541][ C1] ? kasan_save_track+0x4f/0x80 [ 99.828562][ C1] ? kasan_save_track+0x3e/0x80 [ 99.828583][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 99.828601][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 99.828622][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 99.828644][ C1] ? krealloc_noprof+0x8d/0x130 [ 99.828664][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 99.828690][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_open+0x268/0x18d0 [ 99.828714][ C1] ? do_dentry_open+0x978/0x1510 [ 99.828729][ C1] ? vfs_open+0x86/0x240 [ 99.828744][ C1] ? path_openat+0x2bb1/0x34f0 [ 99.828768][ C1] ? do_filp_open+0x1f5/0x440 [ 99.828791][ C1] ? do_sys_openat2+0x134/0x1d0 [ 99.828807][ C1] ? __x64_sys_openat+0x13a/0x170 [ 99.828824][ C1] ? x64_sys_call+0xe69/0x2ee0 [ 99.828845][ C1] ? do_syscall_64+0x57/0xf0 [ 99.828866][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.828890][ C1] ? kvm_release_pfn_clean+0x50/0x60 [ 99.828914][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 99.828937][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 99.828961][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 99.828983][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 99.829008][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 99.829033][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 99.829052][ C1] ? update_curr+0x64e/0x890 [ 99.829074][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 99.829098][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 99.829121][ C1] ? __calc_delta+0x280/0x280 [ 99.829143][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_open+0x10bb/0x18d0 [ 99.829168][ C1] ? update_entity_lag+0x28f/0x2c0 [ 99.829193][ C1] ? avc_has_perm+0x155/0x240 [ 99.829211][ C1] ? tg_unthrottle_up+0x9a0/0x9a0 [ 99.829229][ C1] ? __cfi_avc_has_perm+0x10/0x10 [ 99.829249][ C1] ? __cfi_update_misfit_status+0x10/0x10 [ 99.829267][ C1] ? dequeue_entities+0x1d7/0x1400 [ 99.829288][ C1] ? sched_balance_newidle+0x75e/0xba0 [ 99.829309][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 99.829325][ C1] ? sched_clock_noinstr+0xd/0x30 [ 99.829348][ C1] ? __kasan_check_write+0x18/0x20 [ 99.829367][ C1] ? __switch_to+0xc4f/0x1300 [ 99.829388][ C1] ? __cfi___switch_to+0x10/0x10 [ 99.829409][ C1] ? psi_task_switch+0x4f2/0xa10 [ 99.829427][ C1] ? __kasan_check_write+0x18/0x20 [ 99.829446][ C1] ? finish_task_switch+0x1d9/0x760 [ 99.829463][ C1] ? __switch_to_asm+0x3d/0x70 [ 99.829486][ C1] ? __schedule+0x1352/0x1dd0 [ 99.829507][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 99.829526][ C1] ? __asan_memcpy+0x5a/0x80 [ 99.829545][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 99.829566][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 99.829582][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 99.829605][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 99.829629][ C1] ? schedule+0xc5/0x240 [ 99.829650][ C1] ? futex_unqueue+0x136/0x160 [ 99.829671][ C1] ? ioctl_has_perm+0x39a/0x500 [ 99.829687][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 99.829703][ C1] ? futex_wait+0x2ac/0x7b0 [ 99.829724][ C1] ? __cfi_futex_wait+0x10/0x10 [ 99.829746][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 99.829763][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 99.829779][ C1] ? do_futex+0x32a/0x510 [ 99.829797][ C1] ? __cfi_do_futex+0x10/0x10 [ 99.829817][ C1] ? __fget_files+0x2c5/0x340 [ 99.829839][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 99.829855][ C1] ? security_file_ioctl+0x3e/0x110 [ 99.829880][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 99.829904][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 99.829926][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 99.829953][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 99.829975][ C1] ? do_syscall_64+0x57/0xf0 [ 99.829994][ C1] ? clear_bhb_loop+0x50/0xa0 [ 99.830013][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.830035][ C1] [ 99.830041][ C1] Modules linked in: [ 99.830065][ C1] ---[ end trace 0000000000000000 ]--- [ 99.830074][ C1] RIP: 0010:update_stack_state+0xf4/0x4b0 [ 99.830095][ C1] Code: 84 c0 0f 85 89 03 00 00 41 c6 06 01 b8 a8 00 00 00 49 89 d7 eb 05 b8 10 00 00 00 4c 8d 73 08 48 8d 4b 10 4c 89 7d b0 4c 01 f8 <48> 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 [ 99.830110][ C1] RSP: 0018:ffffc900125cffc0 EFLAGS: 00010282 [ 99.830123][ C1] RAX: ffffc900125d0108 RBX: ffffc900125d0108 RCX: ffffc900125d0118 [ 99.830137][ C1] RDX: ffffc900125d00f8 RSI: ffffc900125d00f8 RDI: ffffc900125d0160 [ 99.830151][ C1] RBP: ffffc900125d0080 R08: ffffc900125d0101 R09: 0000000000000000 [ 99.830164][ C1] R10: ffffc900125d0108 R11: fffff520024ba02d R12: 0000000000000000 [ 99.830177][ C1] R13: dffffc0000000000 R14: ffffc900125d0110 R15: ffffc900125d00f8 [ 99.830190][ C1] FS: 00007fefee42b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 99.830206][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.830219][ C1] CR2: ffffc900125cffb8 CR3: 000000010fba6000 CR4: 00000000003526b0 [ 99.830237][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 99.835862][ C1] Kernel Offset: disabled