last executing test programs: 6.065392919s ago: executing program 2 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 64) unshare(0x22020600) (rerun: 64) r3 = socket$unix(0x1, 0x2, 0x0) flistxattr(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.911905356s ago: executing program 2 (id=7): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x9, 0x801) write$eventfd(r1, &(0x7f00000000c0)=0x2, 0x8) shutdown(r0, 0x1) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000040)={0x40, 0x15, 0x4, "98bd09a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x68801, 0x164) lseek(r5, 0x40000000f4, 0x4) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "da9483aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.351787758s ago: executing program 2 (id=8): syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101175129205705092006c70102030109022400010200100009045807028ab53800090506020001"], 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000009b40)={0x0, 0x0}, &(0x7f0000009b80)=0xc) setuid(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 5.339260959s ago: executing program 0 (id=9): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000001300)=""/136, 0x0, 0x7000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0xd000}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8}, 0x1c) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) (async, rerun: 64) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4028af11, &(0x7f00000001c0)) fremovexattr(r2, &(0x7f0000000180)=@random={'osx.', '\\%j-&\xde:\\\'$\x00\x1f\x14\xf6\x15\x15\xcf\a\x99\'\x05\x97\xbb&!\x95>c\x05\xbb\x88\xe6\xf0P\xca+\xc3|\x84Z\xf0\xb1|\xcd8\x94\x98\xfb%\xf1\xdb\xb3\"}\x9bmZ\x00\b\x91os3\xb1\x85E\xb9\xb6\xc9q\xfb\x85AY8\x9d\x0f!\x9cld\xfa\x88\xce\xa0&\xf3\xe2\x9f<\xa0?\x01\x1c\xe7\xf6\x9b\xdf\x0f9'}) (async, rerun: 32) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) splice(r4, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x78, 0x5, 0x3, 0x21, @empty, @empty, 0x8000, 0x10, 0x100, 0x10}}) (async, rerun: 32) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904"], 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) 5.31607298s ago: executing program 0 (id=10): syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000280)={[0xf000, 0x54000, 0x5000, 0x100000], 0x0, 0x10, 0xfffffffffffffeff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@remote, r5}, 0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r6, 0x29, 0x24, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0xdddd0000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.983746356s ago: executing program 0 (id=15): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1ff]}, 0x8, 0x800) syz_clone(0x40, 0x0, 0x60, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0088a8ffffffffffffaaaaaaaaaabb08060001080006040001"], 0x2e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) read$FUSE(r5, &(0x7f0000002bc0)={0x2020}, 0xd0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = openat(r5, &(0x7f0000002140)='./file0\x00', 0x400200, 0x2) syz_usb_control_io$hid(r6, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x408, &(0x7f0000000200)=ANY=[@ANYBLOB="726c6f675f77616b6575705f636e763d3030304030303030303bf6d0b6303030303030362c00b1f777ff1745e85903b573a56454f4be24d56aeedb472c849d4c6419a2922873bd4c09c72c6027f85efb4f92b8edef2bc085a48781613879a80105dde1c3ef173a63dd1148e4c1639dc3ff49ac1bee4e"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x2, 0xa1a}]}, 0x10) sendmmsg(r8, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) r10 = syz_open_dev$hiddev(&(0x7f00000020c0), 0x0, 0x10000) ioctl$HIDIOCSREPORT(r10, 0x400c4808, 0x0) r11 = socket$netlink(0x10, 0x3, 0x2) sendmsg$AUDIT_USER_AVC(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x10}}, 0x24000800) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r12, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000002100)={0x1, 0x1, 0x3613cf58, 0xc40e, 0x4, 0x62}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 3.983545356s ago: executing program 2 (id=16): r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) renameat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') 3.933729368s ago: executing program 2 (id=17): socket(0x1f, 0xe, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKGETZONESZ(r2, 0x80041284, &(0x7f0000000180)=0xd9e4) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0xffffff92}], 0x1}}], 0x1, 0x2400c042) 3.882373019s ago: executing program 2 (id=18): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) (async) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @private=0xa010101}, 'syzkaller1\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x4, 0xbe, [0x1, 0x6, 0x6, 0xffffffffffffffd5, 0x2, 0xe], 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000180)=""/190}, &(0x7f00000002c0)=0x78) (async) r2 = fsopen(&(0x7f0000000300)='hfs\x00', 0x0) (async, rerun: 32) fsetxattr$security_evm(r1, &(0x7f0000000340), &(0x7f0000000380)=@md5={0x1, "42ccc44da58643e1eb140993cee0cbac"}, 0x11, 0x0) (async, rerun: 32) finit_module(0xffffffffffffffff, &(0x7f00000003c0)='\xaa\xaa\xaa\xaa\xaa', 0x0) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000400)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'netpci0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x51080b4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40001) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x35}}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8}]}, 0x80}}, 0x80) socket$unix(0x1, 0x5, 0x0) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xbc, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:power_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:semanage_trans_lock_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:devicekit_disk_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40004}, 0x4008010) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x400, 0x7, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c840}, 0x4000000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000ac0)={0x1, &(0x7f0000000a80)=[{0x9, 0x6, 0xfa, 0x9}]}) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup/syz0\x00', 0x200002, 0x0) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r3) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xa0, r9, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x600c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x345}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe7d9f52ea1826a5a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1c, 0x28}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r3) sendmsg$NL80211_CMD_GET_INTERFACE(r10, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r11, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x800) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000ec0)={'gre0\x00', &(0x7f0000000e80)={'sit0\x00', r6, 0x700, 0x0, 0x5, 0x7, {{0x7, 0x4, 0x1, 0x17, 0x1c, 0x68, 0x0, 0x1, 0x29, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @end, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xf8, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5343dc86fe223545}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48051}, 0x4005) 3.763020975s ago: executing program 32 (id=18): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) (async) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @private=0xa010101}, 'syzkaller1\x00'}) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x4, 0xbe, [0x1, 0x6, 0x6, 0xffffffffffffffd5, 0x2, 0xe], 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000180)=""/190}, &(0x7f00000002c0)=0x78) (async) r2 = fsopen(&(0x7f0000000300)='hfs\x00', 0x0) (async, rerun: 32) fsetxattr$security_evm(r1, &(0x7f0000000340), &(0x7f0000000380)=@md5={0x1, "42ccc44da58643e1eb140993cee0cbac"}, 0x11, 0x0) (async, rerun: 32) finit_module(0xffffffffffffffff, &(0x7f00000003c0)='\xaa\xaa\xaa\xaa\xaa', 0x0) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000400)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'netpci0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x51080b4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40001) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x35}}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8}]}, 0x80}}, 0x80) socket$unix(0x1, 0x5, 0x0) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xbc, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:power_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:semanage_trans_lock_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:devicekit_disk_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40004}, 0x4008010) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x400, 0x7, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c840}, 0x4000000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000ac0)={0x1, &(0x7f0000000a80)=[{0x9, 0x6, 0xfa, 0x9}]}) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup/syz0\x00', 0x200002, 0x0) (async, rerun: 64) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r3) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xa0, r9, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x600c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x345}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe7d9f52ea1826a5a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1c, 0x28}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r3) sendmsg$NL80211_CMD_GET_INTERFACE(r10, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r11, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x800) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000ec0)={'gre0\x00', &(0x7f0000000e80)={'sit0\x00', r6, 0x700, 0x0, 0x5, 0x7, {{0x7, 0x4, 0x1, 0x17, 0x1c, 0x68, 0x0, 0x1, 0x29, 0x0, @remote, @loopback, {[@ra={0x94, 0x4}, @end, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xf8, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5343dc86fe223545}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48051}, 0x4005) 3.223448137s ago: executing program 4 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700"], 0x60}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) (async, rerun: 64) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 3.126456791s ago: executing program 4 (id=21): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) (async) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406a05b8000000000109022400010000b000090400000c0300010009210e050a01222800b78b7891c90ac6e20983d8930bf7d3390cd9eb325073e5b372df044cd73129fdd310efed4861763a4987156c0000000000000000"], 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r6, 0x0, 0x0) (async) ptrace$ARCH_SHSTK_LOCK(0x1e, r6, 0x1, 0x5003) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) (async, rerun: 64) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) dup2(r5, 0xffffffffffffffff) (async, rerun: 32) poll(&(0x7f0000000000)=[{r7, 0x40}, {}, {0xffffffffffffffff, 0x8000}], 0x3, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xffa, &(0x7f0000001d80)=""/4090}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.66665167s ago: executing program 0 (id=23): lsm_list_modules(0x0, 0x0, 0x18) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0x24, 0x5, {0xfe71, 0x6, "0000ea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.408481532s ago: executing program 1 (id=29): r0 = socket(0x28, 0x5, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r1, 0x4) (async) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x40000, 0x0, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x6f38113c}) (async) syz_usb_connect(0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010102cb460e400a1a01012e01010203010902"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 1.331665896s ago: executing program 1 (id=31): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f00000004c0)=@ethtool_cmd={0x4e, 0xa1, 0x9, 0x7, 0x2, 0x8, 0xff, 0xdb, 0x7c, 0xc5, 0x7, 0x8, 0x5, 0x1, 0x4, 0x7, [0x5, 0x9]}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r3) bind$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x38, 0x4}, 0xe) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[], 0x30}, {&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x10c}], 0x2, 0x0, 0x0, 0x4c0c1}, 0x24040040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001e00210000000000000000000a00000005000000000000000a0005"], 0x28}}, 0x0) getsockopt(r5, 0x2, 0x33, &(0x7f0000000140)=""/109, &(0x7f00000001c0)=0x6d) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='vlan1\x00') 1.20581488s ago: executing program 3 (id=33): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x20, 0x8, 0xf7, {0xf7, 0xe, "a78c188cccab6aca4de633f6dd809a6d4dab97eaa24047395c167fded4374ac0ba86a195fdfa2b42e9be8dc6df06ebda5340360a05ef84ef561ee650abbbb66c0fe5cf86049327bdb318a1809451dd06d2778109b8c4f8bc693ca025c9b958e636bf43bd86a72d59688d751ed99f1eaba695d0721563a767431bce1c57fe52f5882a3bd89da0a450bf392e2648f3f463f21a7761da749b39612256e683206d51b84243b2c255adc893a2718795a8dd0680a9242e8323454e4a3423859b4bfb67fb4de82420a472339f6c0d6c1315fd24a2780b5296b14d08ec26e75476d204643736a0bb9f63a3a5ffd9b29ea455f8f301b5e8c233"}}, &(0x7f0000000200)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "c059e23c2da50e22426ce32114cd2a5cd8a69d2aad2180aa96c351eb03cf70e9316cec79611010000d5ac6f65bb962b5ed8bb102608e268bc9142874db7b791c324794aef42b3b104cafa3c53ff54a7103ea3747ac062ba266a6b6dc203fa6a680287c051a90153c2928ba66b652761ee3e5cc6d20133c478cf6639f723a8f4c82a51c68897edcdd8d8d06d083c028e0e6da858972280140006d0d10d6d94c6706eeeda797f30e899034a8cdf67e86ac7f5eebf8f0ba9bb8efe4c26867f0c652172a2ceb0bfe68b73ca6656153b269080255ade759c0e0be2d7fbe8201bddd99ae89d32a"}}, &(0x7f0000000300)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x3, 0x34}, @ssp_cap={0xc, 0x10, 0xa, 0xb, 0x0, 0x7, 0x0, 0x2}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x7f, 0x5, "1a0f865f", "381c721c"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x8, 0x2, 0x8, 0x400}}}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x0, 0x15, 0x6c, "96ecc07cff595393442f335121a76e25d99d5da81673673bad27cb6801a01268f5fcb71c172edb99dedd8af08ee15cf81c1261ac0843ddbf12e8937c8bc0d9de0e3092953bf5810dd1c7040135cd8af1ede79b40cbae6a6a8f9348f9a18a60ba27d1481744df2779df75768c"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x55}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000540)=ANY=[@ANYBLOB="20002200000008012000"], &(0x7f0000000580)={0x40, 0x7, 0x2, 0xe3}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000000600)={0x40, 0xb, 0x2, "8036"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000700)={0x40, 0x19, 0x2, "9f55"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x10}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$uac3(r0, &(0x7f0000000a00)={0x14, &(0x7f0000000900)={0x0, 0x2, 0x7b, {0x7b, 0x1, "c85580adba7ca5556663f205fecb095b782b63a70fa0347fed0cc28c58bb800b4be1f968d94142212374777ee122757430721663a05a5bc4a694b74dafaff3007f9d0c9db638571b6e06d5d815fe2a511b00e18d5a53ca738f21c530218dcdf277b312abe3c528de22ea89a5dcf73b1f27fdfaad9e14bb9b01"}}, &(0x7f00000009c0)={0x0, 0x3, 0xb, @string={0xb, 0x3, "9a40b6a5d2f6600122"}}}, &(0x7f0000000c40)={0x44, &(0x7f0000000a40)={0x20, 0x17, 0xf, "cc3b57b88a9dd4e81c8e4ee11e66ad"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x68}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000b00)={0x20, 0x81, 0x3, "f7e29d"}, &(0x7f0000000b40)={0x20, 0x82, 0x2, "43f4"}, &(0x7f0000000b80)={0x20, 0x83, 0x2, "1fc7"}, &(0x7f0000000bc0)={0x20, 0x84, 0x4, "16e519a7"}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "252d80"}}) 1.202554021s ago: executing program 1 (id=34): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0xb4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000) (rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) (async) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x3}}, 0x30) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) socket$netlink(0x10, 0x3, 0x17) (async) socket$netlink(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='j', 0x1, 0x4011, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x3) (async, rerun: 32) mknodat$null(r5, &(0x7f0000000200)='./cgroup\x00', 0x40, 0x103) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async, rerun: 32) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x10c00, 0x2) (rerun: 32) getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000) (async, rerun: 32) getdents64(r6, 0x0, 0xff4c) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60) (async) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r8, @ANYBLOB='\a'], 0x0) 1.146312563s ago: executing program 1 (id=35): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x1, 0x4, 0x2, 0x3e, 0xfffffff7, 0x1d8, 0x40, 0x223, 0x8, 0x6, 0x38, 0x4, 0x74, 0x7, 0x104}, [{0x5, 0x530, 0x9, 0x79db, 0x100000000000009, 0x2a4, 0xc, 0x49}, {0x2, 0xfffffff2, 0x3, 0x2, 0x0, 0x7, 0x432, 0x1}, {0x2, 0x6, 0x8000, 0x12, 0x40, 0xcd, 0x3, 0xb8}, {0x6474e551, 0x3, 0x8, 0x3, 0x6, 0x3, 0xffffffff00000001, 0x7}]}, 0x120) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.042628807s ago: executing program 1 (id=36): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x3, 0x4, 0xf, 0x6, 0xc}, @ipv4=@udp={{0x9, 0x4, 0x3, 0x1f, 0x88, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x83, 0x7, "b68e3b5844"}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {0x4e21, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x8000003, 0x5, "1502162d50e683b140f1ebb9eadd5eabd9112d00dd0ee5a200", "1a6affff0e533d43dbceed833287627c", {"0e62979705f2c4e14fb2dce8dbce947d", "f30a129c69b5c042b2027a7800"}}}}}, 0x96) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 951.087051ms ago: executing program 1 (id=37): syz_usb_connect$midi(0x2, 0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000020820514004000010242b709022c00010104c00809040000020103000809050100080000ac0204250100090504032000a1070704250100"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc36}}, {0xae, &(0x7f00000001c0)=@string={0xae, 0x3, "f323ae47b32064643565b916cf8a93f5a4198fc5b0df3b8ec039ba05396059a156868f9bc0b2079fd8fabbf58cdf70dfaea038c7080b29aaaf22eb78c6781dee40885a85999df97b9c22183427d54cdfb2ddf1fb5d198e942d16e332ea5dbe745b08aded8ab7b4027a0a3be2f5067b2a39503d645eb0c16cb639ea17bbb9798a138691f3e4634049c8fc1524404a63cb0924188188a50b61eb99451ac782b7f91b9be25b3f4a85528e4343ec"}}, {0xd5, &(0x7f0000000340)=@string={0xd5, 0x3, "15dd84def0081aa919d727d4d73bfa52eca0c1506ac14372e34d8ffb97e945b3df8cd47fc53d6895e99a4aa01377391bdf9f9fd6b934fcebb695c0f1d89bdc3526708dbda15b5e5a4b7a34db8ad92031739ebcecf1be8d415a4f02e7820d3338763d1fa79de24e04c7260680868bb89e22086818467149a917716698e5b8e604973e6ab8501dde5efe2b91f47fd5fb9d57054f7c3eecdb887aca76c682355ed88d23a1481a3bee543529b661544939314b7927c3a91c2795d7812bbecf0b4d5415965dafdbcb2787f9c0ad1059074ecf495f7d"}}]}) 930.971312ms ago: executing program 0 (id=38): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x56202329, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000801) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x56202329, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000801) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) 779.830948ms ago: executing program 0 (id=39): wait4(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000180)) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x5720, 0x2, "aec1ee0758a3"}}) (async) syz_usb_connect$midi(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x14, 0x25, 0x1, 0x10, "4c9f59913791be20068e1d901298b603"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 659.427283ms ago: executing program 3 (id=40): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) (async, rerun: 64) r0 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x180000000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x9) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3ec}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x505, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x3fb, 0x1, 0x0, 0x0, {0xa}}}, 0x44}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10) (async, rerun: 64) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) getpeername(r2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, r5, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x82}, 0x0) (async, rerun: 32) r7 = userfaultfd(0x801) (rerun: 32) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00003d5000/0x800000)=nil, 0x800000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x2}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x34, r5, 0x100, 0x70bd26, 0x1, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}]}, 0x34}}, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) 625.868425ms ago: executing program 3 (id=41): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000180)=""/223, &(0x7f0000000280)=0xdf) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x105c00, 0x153) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet6_int(r4, 0x29, 0xc9, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x8) io_setup(0x2, &(0x7f00000003c0)) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @initdev, @private}, &(0x7f0000000440)=0xc) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000540)={0x2, 0x0, 0x98, &(0x7f0000000480)={0x1c87, 0x8, 0xf}}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000580)={r4, 0x8, 0x3, r4}) r5 = openat$incfs(r4, &(0x7f00000005c0)='.log\x00', 0x480000, 0x7) ioctl$NILFS_IOCTL_GET_CPINFO(r4, 0x80186e82, &(0x7f0000000700)={&(0x7f0000000600)=[{0x0, 0x0, 0xc, 0x8, 0x24, 0x4, 0x2, 0x2}, {0x1, 0x0, 0x4, 0x95, 0x2, 0x4, 0xfffffffffffffffc, 0x7}, {0x3, 0x0, 0x1f67, 0xf, 0x10000, 0x7fff, 0xb, 0xc}, {0x3, 0x0, 0x7fffffffffffffff, 0x7, 0x9, 0x34d9, 0x7, 0x1}], 0x4, 0x38, 0x0, 0x5}) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000780)=@attr_other={0x0, 0x3, 0x9, &(0x7f0000000740)=0x2}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r5, 0xe2d9a000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'pim6reg1\x00'}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000800)=@req3={0x40, 0x8, 0x7ff, 0x7, 0x7, 0x7, 0x4}, 0x1c) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000880)={&(0x7f0000000840)=[{0xc8000000000, 0x0, 0x0, {0x845d, 0x9}}], 0x1, 0x20, 0x6000, 0x10}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x84, r6, 0x82d, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040050}, 0x20044000) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x44041) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000c00)={&(0x7f0000000bc0)=""/25, 0x19}) writev(r0, &(0x7f0000001fc0)=[{&(0x7f0000000c40)="23ca5b4376d974b6f131da6fa062c6837cd88ce4239b44bdbc28aade7029bd3ad4d7f069a1ba8dc6171608236ebc3b2246bc0dcc597e22bf8605e38285883b3d2acb18fa3007e799cf8bc0f2788032412d74023088366dafd56f5f25ee6c4c82d9c5cea17e13ff03ca840a69f341b2459d88e299a0714cc9c66342773f8fa310c54d505d9ca1d49435878cecf226ecabcbda7595bd1be0733b81346df74ba77f10474ce04b255165c852db8a94f16184318c", 0xb2}, {&(0x7f0000000d00)="be4ed47b06c68d5e0689b039d597ba3726db6747ac3300e9e698410907dfb1769c7f05fd5acb25f6933bf16317e36759df4e3ec0515d4e88bff01f5e9d115667d144a2a5f0f4f85e03ad2d9dd3fb987f9921ff50c98192c1e950554a11dc4110f5dee94df39aed6c046c93ee7627764386e781115065909e6d9fad161fb0cf2dff201d9a9dfbf063bf33fdf906b2dd4058afd97a0c91b46db15d116077ebfa52de60deb27fcf35921b7b70d6da28f90db1ec8fee631d7d8adb143f866cdf98fc2a16c6718e7ae81d5f1c4cf69c271f44af690621340f6587a2f5ea188fd6b4634b7c24de410485001877a8910b17da29c168fa8ffd5393d61d6f32cc31d1cb6c541f7bdcc193b770bbe91ab304f3401b681961e0d0d8533afc806144de543e295d79f8bd04db067a4284ad3ed6706b611fb81d2c957a97d96d689e7f1819a27f356bb8f65e95c53631a4cd3ef4ced32e88ce6452becc359035ecb228cac0985f132da4bf87b72566d0d1b55445eaf7498b5e5f21d2845ef689fcd8af46f57fe41a2a04dac6da132e94cb9f239d0c6950e87251f2f6416718c941b3d313346fe53f20c2d9ee3fa93b2f6481dbbcba62d4c69452108dee6f98589ff84863be4c94516ea8b899418da74715e91677d5805289f12edd7ab1e8a4588162090368809d676fef0c05b795eec3df1fb6308a06bb4ae54cb09e337d053259a51c943ca01197703e6aef234200229f48f79bd34fdf6b58ea00e72b87f8220086a3959d93b16832e0c4234818e2dd0c45ae953bf1e0fef2ae7f4af0cd2d67ee5088b36b2e864193f49f600272e280ec79e5ccf964c7d19a330ad1e82ab798b6d559d318c9927d5d4a6b184b2a3b19e52588c084f8bf3b7b7550f387a10cfe12dabc33f76093c9915bbaecf87bf1327b5ff092ad4e5f3258eb56371562d21eb3293d34f4743a948b1741e7ee9f6bc5f7df86ceacb409073f718c5b8001928c84ae92b8fdca57b3b0e245ab7a5b7404eb8d6f70da02d37cd27ff91d29e0fb46f52b08c647038073a78cccd96b14a8d8567b69bce0a9d94d41e9fc9eb924464bd43f96a12bdce41c2997cb80d4c69981a2307f458d4951fd265fa1876cad1d146126b4d634cf7af532ca787bd048e7156ff623cab5e2431b6f5415d488cfbad8c824d584499f3c5c22d0f083d0f0e5a50f7f5ba08e95efef3c22f1f2f4d88f51b3b9abb79765b9e74d77f59e8858e5a1b369da4d133432acde3e1a446b8626bc7a2a03dcfeae56383339792cfa02e390ac51b12d9f58804ce7bdf03484d1e85ad0fb7709352d84caeb4e49ecfc4b9476ecf21e0b0723fd09f9ddd60d1c7ed457781fa947660bc836abfff84380e7d26341d9f47caf4756b512d2b5ca0971e570dd9bd364efbe1cfd81ac46d3305874c6e518c9153097ecf3c49a820d4084dee98b298e9e2bc6e8f90f1ad73c47f553abccb0fc5104ffa3796e3925baef6c1e387aeb933e92229ac0a6def8e31513f433fd789d8a5786596c240f44296375a1697778fa8c4b5249b20a7b59cc69769299f77e555f8a05e921a8d36f2301d6233f4b2c1497409f2d602da6111534f4fb2f9aaa557e0776d011d14e5f2125817be62856ff78e0c59c648ca361625d4e63320228bf3fcedeac48e7b3846af9276ad1e134041d5b269a1341861ef2a66652d5d3b6c7716efdfe1ffef5203217b4e44a4c46c636d499a15a5365f621385897ba7d00df2e3f264643acfcf280e48ce5e53dfe0debdd4311e810ccbead45fba360cfcd2e80b34ff175e8d7e45b36037728f0224dbe896a2c770a068170adab4ad5c812f83a5235cd286a9b75583ed981d85a5f68f91b5bb2535bb3e59f1564710ac6e95b6e40659f6d40a0fc22c4105aea5f063fe58dd8fa01f8f0e8b03e0c4df7e4e134da3624a08a9b071a13f1b0c267d98e20803b6f2112b9735343ea9a57c66fca71a1e1929c53bfcf2e7ec252085d554e80894e826c02db49c92f690d96eadd4c21b45b23e00cb8a177e93217272c57d7ad09de0a3acf19d736545bdfcc79513cd592b24b16d635327812cb36b8058f7e6d5fd627e44c97f494a88bfd5597b32793da6a074580986eaa62a75f1512e481dddddd955f7a7d2528ec83c81d9136ef2bac435d8ff8a60001437f2d55745c47d663ae3719dcc432c3e1a6ca79631b0e2d55e286742655e0149eef8203c2f472595f461a6c792763dff53f113dc3b24fdb17417210c525117dee11fad44ea69a4d4b2d5d62201986732c7b38d73f02281b6f7c79cbbf9b7bfd28341cf5d921738060a11e1dafa473446108445c8f18d5df2480dee98f4cde2e43b009d3d2b1030803c47b524331b8b34392b78506d6f3d8d810a8ee911120722da50a760e63d7d86c07a4d6eb88116ee160c5b11eaaac37380fc82ce3a289fb382a7e1e18a665d41532e0ac447d4648ad07c76553afe4fd74d6a639b59af615ba2907e37deeb29f749f076bd223f9d007b00b92173ba4c1abbc89de462d018f2214ed9afec63b0c87d3dd70d07ec4f3a8aad102282a23b84561ac5618d2e464da958b14c6aae14502ee84e0c88b4b024df7863c80c2d3a099858d5e187519e3c48225f67bc1bf3ab95b525a2192e4bec2eab55ba41bd41b009a1ed24bf7fee1aa30f261c86150e7a4daa9f0d6c51debaad47ff1beeb19aed2956e47884b1acc823b8a1db6ee80cffa8033324543327e43a7211399bb0d71496963e892e32eda7753eca1e40d15d866b00ba9e781fad1b039f2025bef97b20e90a72f72f3a2255f92232c8baccb2d73a831dbe657f6cce5d282448de21707b6a7ce336b13abc40a000f24baa1306e4cf642a914fe64267ec7c0f2c1c90f66fa98801323749be3021ed738e9efe8ae9fb6f759f81e6455ea01e067eb3b9bcebfd3e9b4a503f6d7bfde63d691a797828e6c45f9ee0c668df0d8ea23c8ed3dbcb0093404793635adaaac0c9921019fb17e2fe407db3d9e06668c9fb72d6aec6c7e16ea4a002293283df03f29b7ebf238c938b4fa967dbbdf8874a9567cd78ea5ca2b4fcf45b7d9bcda2cd741e5314578f4ed02e86eeb2b0f0c93784ecf05ca98116d91f85856c0218f3e7c6fba3309589ea6cb830218575a56b02b2ba40d288555df7bca45627f2305cd2fcb24ce6ff8532dae57d3e637032ea4eeb244618bf0ad5191c128c485397deea554f690eb1bcb32fa126524c7ee56c18516faad7a087ff4e5d3bb357191cb893dce5599a27b6e9f6e6c9c35e27d44c7d0f6e3962621be68e3dafc811a9c80691ff90d5010b1009f7f2d31ec4ba4de8643b68676a50c5935a5fb94e52220b7f8bb68117b8cb25cb775072773073c5eb63f23d4c6c24b6d070e2a35dccdc01a54269e7e6976743f5c87bbc8c5153bd20ff26853dba43799768fcccd7be2967413896f005e1c91944e0c175a91b926b361695804b9d1defe814b1a5e87ceef92318af3108f4083f363c7b28b3c15830b4599208b8e4e0af3bd78167b00fa018b4811f48cf4f5cd60fed0518f634e29f784beedb73d7c428ec27436a2edb2ba3fb9c1a5a1c5318670e084d6045a42c9e19f023f0f030235842f1a8cf693fe3e4242626a231086e0b88a9dcd55b50622cabe8c98bded4bb10b15cee05f3e5a410f67f45ba3aec499c9ef43c932f24eff6f02adacdb2558c659cfd2eb40dcb056a4eeabfe58b7e5f1039bdfbaf9f80ba0e777ea7d3220e2874adccb987bc257095b35ee2812bc746201646106499932b8c1fbbb12d91a37364728112cbfbf9dd51a35e68410eb5e32a4df6f7dd93308d26e5f36525c3d1acc9bc852864d903e64d3c0fa8a5aa46a500ee2892758fc8d357c32e9b85efdfbbf9adeaec8d41e6453734a6e510c7dc71842a7b70f9437df8276349e8ecb1b99bff9afcd1608691f2956cfc6a41efcb6713090aae321cefdbe4eb70791aa6b5e42f401d9dc2cc57bd2075d0ebc73195ca1db50b31da54eee54ee6e6e07784c96dbc03454e330d4d80ceffa8ab0672de69edfba6ca2c6974288e5fe1a39bd2f9f71eb5bb16b8db72ccbee1457a43dc74124f853e2380f07cb07172905a5acd2c064e5e96f9af06b8ad72a25454016d59c5026b84967cd5d409cd12c2cd1bf39de33cae43f5d886336b221e0f4c963e9cc37d5c65542190b637c5c5deb6dfbb5f7b76849da0362fb54bfca2ac848cde9ef768410cf79f954cd9c1b12e3ce511defd7571c0dbf0426bda78aa3d06721d4713a1b219a778eea5a376266b3c22cb0b5608ed274858b76cd549500a49eece8ad2d0d05c628a7c290d38bbf27ca5df0dbb4f37bab096af0be90f0d9ab1721ebef51a6bcb4641942498617a07e9a4bc223505f54672f1e9f4f799d0062fafb6d1af6da9185e3467efed091aee841ede370746154f00f9079518141a7a3bbfeeeb60f526f31b5c6d0800e6af15467a840fdc65313e0d8cb0e460d4a7a9429b632b379ee83b6c550f78d5595b6bd032e6186a865f599a8a5289e4f04c688cf8083d2a8230ead7150d663a5b5ce8dcfeebbb02507a8b1961fc961086a075c4424e0a6fb534704d4fc6e9c3c37b5a7fb69b0713a534fa84b3c515e29d2093bf68bc67ff03cb923565836de7ea246b5a982580ab8632d4e59362bbf756c48ebc3ad8ae35940fe4f4eb893493cb4cc5201dc07b548f6608b14b9e6266393864a816ec740e9967ca30405f8263ac2da9109141caa8930548488837e95bdd186f18a1812da66f71763fb66fe21c6ae3b8e2d16952c13a5a7a88d4d66a8549f5752063da455a0050c3712dd8e389f3949394d275c30aa112c4c5e7b41a3876b79aec78005e2d81607318626b963347bb8810c764c0e74ad4266e69929037d4f1f66243115006662d2976040e7b1834d1eff45fe1ff5bd03d47a3b287ca251ba0d73cb972fdfa879e9e0c19eead1793170ad0816e5448be4c3e2f4408645c6617cf6bed0050097f29cb676a87ced3055ffdbfb2f6af94ad57b16abb98fe9ff5f960f19934e90e07fb86f67649aa71cd358b6e678a5424ba31a01b2490c5314667c1420ebcc7d3958c6d985698683427677559b9e5d9f9806a43ba72ac2a0b0de9242b2de8657c6abcacb1373deb5f72484481e3acd7368386c9cee723453b7c653da7b16c3c23a196cd04f50dd393314c622aff71959481cb015a2029b1e2978e4605a3816aed666c59165a0c5c7bb28e913f989a455412c7e364f2576330035ddb37d799142e8053326ad6597f9952b37605408a18962ba53e228d99169f22bf0dafe33b52f482d348a400ba98a0d430e741b0b94f532bc5ac2abcfe4f71bf3c699633bca5f330f9b8833ebcedbda7d1f80252057ad668d8b455c9f46ccf1f7ddce5c7e02121c5983ed66821d359fceec66fdd443739888314e8f31c5a212232f9cdbc61fa09593a7effe20e6488bc90e777ed05c06d089011116d6c7b0554cb16ee1611e4edb522afa94dd084143f6943bc40be93fbaf3fa23023e335322400f48f6a91d26b36687ba5482bb7107841954b682cb0bb99aa58189367640ccba5f4790773802f0c5bfb51b9a29d6e0030aee7577e3a0df2beb4e15e3358299411a742c0c630a4d58907a9d4d473de13cc40bc912a6a5e890adc073130deb99ed7e3e9ef85e428f6ef265bfb61131a23c643e015b635f407479930581ae31f686f1d6f520ed6d0c3aede0e865321973d475d210b0493f0c757581215cef4b2bfae443b13a21bd103825eb854350ca1a10f722cd7c74bf15f0d3be16e3246eefac41b7fe2db3eced8168f2ec", 0x1000}, {&(0x7f0000001d00)="d482d137b3c00aab8558759c2f8466acaa07c0cc4883d1f4f96d3f78b993c4f8055428ac9d4b5b69245768d5b424c708a1da05adcf129bc9be736362889c", 0x3e}, {&(0x7f0000001d40)="7bf6f6c09beb69c9ce683a0461d6cfd78499393f8300056480742aea10b9b9b6430ffae6ee16d1", 0x27}, {&(0x7f0000001d80)='g', 0x1}, {&(0x7f0000001dc0)="d9b47245bcccfbcea94ba9f7fec1f3992da61d8938aef980cc42b9f47fecd1a0fe0434163f228cd5e1be5560fd11504c41005f0f2e36b751a65e40", 0x3b}, {&(0x7f0000001e00)="5bd43aaa869cbe77170a3ac50506df33ca496959e09aea5f99752e9a8b703c065f98324e5187f34ca1f331453f9c23e7b8568477625a384c53c38378631a4dc517ad43f60beaf55582abbded4a7a13cabf6e31b1fe205cc39323e6a9474414c1d1711f329a1c3573", 0x68}, {&(0x7f0000001e80)="ba20e1a988fd60412ac988e5ed9f30378184b29b170060b6efe223842b9f5d77c2a744cf57d15966d68e41038113863452f0c2f2944e3ff8735618d2bc", 0x3d}, {&(0x7f0000001ec0)="fc71be675beaaa6199e6fc170a9c89d18e66918b01b2c00f0568b1f05c043df223338f9644e81f7ed048ae0ac7b53a899d46cdf93df447bc6eb66580e1cc203433ca744802a742a8831d89cdc2ee988f7b63d7ea34889119fb5fa79fa56eba416c1ef59e2e9132b43eb47512355ab7e965b1541bc3694de2ab7454c6f7c3a3c287", 0x81}, {&(0x7f0000001f80)="8a4d9c7a6e125c5005f246dcc2", 0xd}], 0xa) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0xffffffffffffffff, 0x3, 0x5001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000002080)=[@mss={0x2, 0x80000001}, @timestamp, @mss={0x2, 0xff}, @mss={0x2, 0x4}, @window={0x3, 0x800, 0x2}, @timestamp], 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000020c0)={'vcan0\x00'}) 515.734809ms ago: executing program 3 (id=42): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$inet6(0xa, 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r10, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r11, 0x0) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149014006040800", 0x58}], 0x1) syz_ublk_setup_queues(r8, r7, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r6, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x2, {0x8}}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xffffff00, 0x0, 0xb, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x2, 0x4, 0x9, 0x6, 0x9, 0xf, 'macsec0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x240}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @multicast2, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000006}, 0x50) 454.249442ms ago: executing program 3 (id=43): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x6, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x20000000000000, 0x4}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x180}}, 0x8000) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x24, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x24, 0x12, 0x1, 0x70bd23, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1e}]}, 0x24}], 0x1}, 0x0) 428.073353ms ago: executing program 3 (id=44): r0 = syz_io_uring_complete(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x4800) bind$netlink(r1, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x2711, @local}, 0x10) shutdown(r2, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_add_watch(r3, &(0x7f0000000300)='./file1\x00', 0x20000000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x158, 0x4, 0x3, 0x3, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x3}, [@nested={0x144, 0x1c, 0x0, 0x1, [@generic="e7b5745a2132bd9127e8c147e65365fb717c16f1fab4574de0da67900e70200284ef53714cd667acba4f6af9b310a9a6b089c9958ef92e7148abcf1880165e24675a5770f02d68b91334f02b1c60284438c82cd54bb8ecaedd7609bcd5a2e652ca6918a2811801ea045cd0e47f4aedcdd6c26b9d46a014e25254c5af14d68e9770aac416f98574e0b1d6679ec7902efcc117a8ea149ef1c58faa8a7a8f6301b4efc07b1abb6cbd170bd56b1c4cfc17ddbfdc31a9ed3f8f4606f96ec7c2a552380e8799c88e5e27b28deb757d6ec561e1267722cf", @generic="750390a464f94ec62eee804d3036a30646346670f699a51b8edeadc7ae7e070d1f59e13ef5b77ea268a64a228cf95301cfd3bd6fd254457e1d653d3eed90b8aa817d2f20b15ba48fbb1b26ebfd26472a68e6af059b435859c45230050f83d455c28b83569d5352edc4b13351"]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x0) fcntl$dupfd(r0, 0x0, r0) 67.906507ms ago: executing program 4 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) unshare(0x60000600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x1000401) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a009000000000000000afb6c0634e4e86dd694fd2cd00a83aff200100000000000000000000000000022001000000000000000000000000000102007e39e5fd3e1e37ff1b9078000000016af9f06dfe0f1e4b5d830000000000000000000000000001fe8000000000000000000000000000aa3a0e020100000000fe8800000000000000000000000001012001000000000000000000000000000200000000000000000000ffff7f00000100000000000000000000000000000000fc020000000000000000000000000001fc020000000000000000000000000001fe880200000000"], 0xe2) 0s ago: executing program 4 (id=46): mount$incfs(0x0, 0x0, 0x0, 0x1080000, &(0x7f0000000380)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x401}}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000001c0)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x73622a85, 0x0, 0x0, 0x0, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000}, @flat=@handle={0x73682a85, 0x1, 0x2}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x4) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') read$FUSE(r4, &(0x7f0000000d00)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 21.261237][ T36] audit: type=1400 audit(1782006506.929:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.262312][ T286] cgroup: Unknown subsys name 'net' [ 21.283856][ T36] audit: type=1400 audit(1782006506.929:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.311089][ T36] audit: type=1400 audit(1782006506.959:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.311263][ T286] cgroup: Unknown subsys name 'devices' [ 21.431083][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.436670][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.528561][ T36] audit: type=1400 audit(1782006507.189:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.551756][ T36] audit: type=1400 audit(1782006507.189:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.560851][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.576573][ T36] audit: type=1400 audit(1782006507.189:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.608138][ T36] audit: type=1400 audit(1782006507.259:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.633621][ T36] audit: type=1400 audit(1782006507.259:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.662330][ T36] audit: type=1400 audit(1782006507.329:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.687834][ T36] audit: type=1400 audit(1782006507.329:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.688190][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.488980][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.496054][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.503181][ T293] bridge_slave_0: entered allmulticast mode [ 22.509580][ T293] bridge_slave_0: entered promiscuous mode [ 22.515954][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.523202][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.530362][ T293] bridge_slave_1: entered allmulticast mode [ 22.536452][ T293] bridge_slave_1: entered promiscuous mode [ 22.542484][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.549554][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.556618][ T294] bridge_slave_0: entered allmulticast mode [ 22.562826][ T294] bridge_slave_0: entered promiscuous mode [ 22.576959][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.584025][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.591207][ T294] bridge_slave_1: entered allmulticast mode [ 22.597288][ T294] bridge_slave_1: entered promiscuous mode [ 22.656218][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.663389][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.670475][ T295] bridge_slave_0: entered allmulticast mode [ 22.676587][ T295] bridge_slave_0: entered promiscuous mode [ 22.689142][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.696274][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.703414][ T295] bridge_slave_1: entered allmulticast mode [ 22.709625][ T295] bridge_slave_1: entered promiscuous mode [ 22.739748][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.746769][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.753958][ T296] bridge_slave_0: entered allmulticast mode [ 22.760092][ T296] bridge_slave_0: entered promiscuous mode [ 22.766276][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.773325][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.780412][ T296] bridge_slave_1: entered allmulticast mode [ 22.786515][ T296] bridge_slave_1: entered promiscuous mode [ 22.874274][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.881339][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.888608][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.895640][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.906794][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.913840][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.921097][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.928105][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.960329][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.967379][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.974646][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.981677][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.992372][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.999414][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.006673][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.013701][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.043855][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.051308][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.058700][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.066400][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.073580][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.081216][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.088777][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.100916][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.107922][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.115433][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.122462][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.130759][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.137780][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.171229][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.178259][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.188587][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.195628][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.213466][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.220499][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.227961][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.234990][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.268153][ T293] veth0_vlan: entered promiscuous mode [ 23.292020][ T294] veth0_vlan: entered promiscuous mode [ 23.297871][ T295] veth0_vlan: entered promiscuous mode [ 23.304877][ T293] veth1_macvtap: entered promiscuous mode [ 23.323536][ T296] veth0_vlan: entered promiscuous mode [ 23.337880][ T294] veth1_macvtap: entered promiscuous mode [ 23.344460][ T295] veth1_macvtap: entered promiscuous mode [ 23.370451][ T296] veth1_macvtap: entered promiscuous mode [ 23.382204][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.442159][ T315] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 23.442984][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.739366][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.859342][ T311] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 23.889419][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 23.895506][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 23.908536][ T65] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 23.917627][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.926700][ T65] usb 4-1: config 0 descriptor?? [ 24.020748][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 24.028761][ T311] usb 2-1: not running at top speed; connect to a high speed hub [ 24.037231][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.047536][ T311] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 24.056513][ T311] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.070760][ T311] usb 2-1: New USB device found, idVendor=2073, idProduct=000e, bcdDevice= 0.40 [ 24.079846][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.087843][ T311] usb 2-1: Product: syz [ 24.092030][ T311] usb 2-1: Manufacturer: syz [ 24.096637][ T311] usb 2-1: SerialNumber: syz [ 24.305624][ T311] usb 2-1: 0:2 : does not exist [ 24.312988][ T311] usb 2-1: USB disconnect, device number 2 [ 24.324557][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.342154][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.351067][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0xd [ 24.358288][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.366738][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.374543][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.381759][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.388991][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.396588][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.403804][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.411158][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.418365][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.425594][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.432824][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.440449][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.447656][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.454907][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.462190][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.469406][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.476901][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.484361][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.491685][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.498870][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.506080][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.513293][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.521272][ T65] greenasia 0003:0E8F:0012.0001: unknown main item tag 0x0 [ 24.529056][ T65] greenasia 0003:0E8F:0012.0001: hidraw0: USB HID v0.09 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 24.540484][ T65] greenasia 0003:0E8F:0012.0001: no inputs found [ 24.541345][ T321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=320 sclass=netlink_route_socket pid=321 comm=syz.3.4 [ 24.562570][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.565324][ T65] usb 4-1: USB disconnect, device number 2 [ 24.580921][ T347] fido_id[347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 24.639355][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 24.645540][ T9] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 24.653668][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 24.663876][ T9] usb 3-1: config 2 has no interface number 0 [ 24.670021][ T9] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 24.680139][ T9] usb 3-1: config 2 interface 88 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.693018][ T9] usb 3-1: config 2 interface 88 has no altsetting 0 [ 24.701031][ T9] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 24.710149][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.718130][ T9] usb 3-1: Product: syz [ 24.722316][ T9] usb 3-1: Manufacturer: syz [ 24.727062][ T9] usb 3-1: SerialNumber: syz [ 24.729309][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 24.734742][ T335] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 24.737887][ T310] usb 1-1: config 0 has no interfaces? [ 24.744764][ T9] asix 3-1:2.88: probe with driver asix failed with error -22 [ 24.750978][ T310] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 24.765993][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.774001][ T310] usb 1-1: Product: syz [ 24.778219][ T310] usb 1-1: Manufacturer: syz [ 24.784178][ T310] usb 1-1: SerialNumber: syz [ 24.789674][ T310] usb 1-1: config 0 descriptor?? [ 24.882690][ T352] ip_tunnel: non-ECT from 172.30.253.2 with TOS=0x19 [ 25.071315][ T310] usb 1-1: USB disconnect, device number 2 [ 25.108054][ T311] usb 3-1: USB disconnect, device number 2 [ 25.129333][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.191187][ T357] kvm: emulating exchange as write [ 25.199642][ T357] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 25.279345][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 25.285575][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 25.297111][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 25.308007][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 25.317951][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 25.327022][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.335765][ T9] usb 2-1: config 0 descriptor?? [ 25.342130][ T9] hub 2-1:0.0: USB hub found [ 25.509314][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.542469][ T9] hub 2-1:0.0: 1 port detected [ 25.636205][ T365] ======================================================= [ 25.636205][ T365] WARNING: The mand mount option has been deprecated and [ 25.636205][ T365] and is ignored by this kernel. Remove the mand [ 25.636205][ T365] option from the mount to silence this warning. [ 25.636205][ T365] ======================================================= [ 25.689335][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 25.696087][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.707212][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.717177][ T310] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 25.728605][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.736757][ T13] bridge_slave_1: left allmulticast mode [ 25.743046][ T13] bridge_slave_1: left promiscuous mode [ 25.748791][ T310] usb 4-1: config 0 descriptor?? [ 25.750312][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 25.754087][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.768966][ T13] bridge_slave_0: left allmulticast mode [ 25.779088][ T13] bridge_slave_0: left promiscuous mode [ 25.785986][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.789303][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 25.830662][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 25.836626][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 25.845336][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.889382][ T9] usb 2-1: USB disconnect, device number 3 [ 25.904778][ T13] veth1_macvtap: left promiscuous mode [ 25.910345][ T13] veth0_vlan: left promiscuous mode [ 26.022094][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 26.059524][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.062371][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.077804][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.077823][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.077857][ T367] bridge_slave_0: entered allmulticast mode [ 26.099300][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 26.101122][ T367] bridge_slave_0: entered promiscuous mode [ 26.120419][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 26.129920][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.136949][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.144245][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 26.152487][ T367] bridge_slave_1: entered allmulticast mode [ 26.158790][ T367] bridge_slave_1: entered promiscuous mode [ 26.164777][ T10] usb 1-1: Manufacturer: syz [ 26.170220][ T10] usb 1-1: config 0 descriptor?? [ 26.171002][ T310] koneplus 0003:1E7D:2D51.0002: invalid report_count 44034 [ 26.192574][ T310] koneplus 0003:1E7D:2D51.0002: item 0 2 1 9 parsing failed [ 26.218062][ T310] koneplus 0003:1E7D:2D51.0002: parse failed [ 26.230104][ T310] koneplus 0003:1E7D:2D51.0002: probe with driver koneplus failed with error -22 [ 26.231765][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.246240][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.253524][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.260563][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.284145][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.291403][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.301019][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.308042][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.316821][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.323854][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.347267][ T367] veth0_vlan: entered promiscuous mode [ 26.357545][ T367] veth1_macvtap: entered promiscuous mode [ 26.373919][ T310] usb 4-1: USB disconnect, device number 3 [ 26.577380][ T10] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 26.584725][ T10] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 26.593218][ T10] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 26.699319][ T311] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.729367][ T65] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.781311][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 26.781325][ T36] audit: type=1400 audit(1782006512.449:138): avc: denied { mounton } for pid=361 comm="syz.0.15" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.781376][ T362] incfs: Options parsing error. -22 [ 26.814817][ T362] incfs: mount failed -22 [ 26.822375][ T10] usb 1-1: USB disconnect, device number 3 [ 26.849351][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 26.855506][ T311] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 26.866579][ T311] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 26.878283][ T311] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 26.890792][ T65] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 26.896984][ T311] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 26.898380][ T65] usb 5-1: can't read configurations, error -61 [ 26.915102][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 26.936173][ T311] usb 2-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 26.945364][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.957088][ T311] usb 2-1: config 0 descriptor?? [ 26.962386][ T376] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 27.069323][ T65] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 27.199298][ T310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.220710][ T65] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 27.228324][ T65] usb 5-1: can't read configurations, error -61 [ 27.234800][ T65] usb usb5-port1: attempt power cycle [ 27.289307][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.372958][ T311] wacom 0003:056A:0307.0004: unknown main item tag 0x2 [ 27.379936][ T311] wacom 0003:056A:0307.0004: unknown main item tag 0x7 [ 27.387500][ T311] wacom 0003:056A:0307.0004: hidraw0: USB HID v0.08 Device [HID 056a:0307] on usb-dummy_hcd.1-1/input0 [ 27.459314][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 27.465402][ T45] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 27.473418][ T45] usb 1-1: config 0 has no interface number 0 [ 27.479735][ T45] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.490721][ T45] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.500482][ T45] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 27.509574][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.518053][ T45] usb 1-1: config 0 descriptor?? [ 27.576843][ T311] usb 2-1: USB disconnect, device number 4 [ 27.589404][ T65] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 27.611037][ T65] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 27.618622][ T65] usb 5-1: can't read configurations, error -61 [ 27.667213][ T391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.675859][ T391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.690127][ T392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.698579][ T392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.749334][ T65] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 27.770957][ T65] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 27.778510][ T65] usb 5-1: can't read configurations, error -61 [ 27.784859][ T65] usb usb5-port1: unable to enumerate USB device [ 28.126732][ T45] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71 [ 28.171854][ T36] audit: type=1400 audit(1782006513.819:139): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.238917][ T36] audit: type=1400 audit(1782006513.899:140): avc: denied { create } for pid=411 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.328855][ T36] audit: type=1400 audit(1782006513.899:141): avc: denied { bind } for pid=411 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.376478][ T425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.387243][ T36] audit: type=1400 audit(1782006513.899:142): avc: denied { listen } for pid=411 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.414146][ T425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.438241][ T36] audit: type=1400 audit(1782006513.899:143): avc: denied { connect } for pid=411 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.473493][ T432] process 'syz.1.35' launched './file0' with NULL argv: empty string added [ 28.482922][ T36] audit: type=1400 audit(1782006513.899:144): avc: denied { accept } for pid=411 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.502747][ T432] Invalid argument reading file caps for ./file0 [ 28.526606][ T36] audit: type=1400 audit(1782006513.899:145): avc: denied { read } for pid=411 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.550372][ T36] audit: type=1400 audit(1782006513.929:146): avc: denied { create } for pid=414 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.571009][ T36] audit: type=1400 audit(1782006513.929:147): avc: denied { ioctl } for pid=414 comm="syz.3.30" path="socket:[3826]" dev="sockfs" ino=3826 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.614555][ T45] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71 [ 28.622814][ T45] uclogic 0003:28BD:0071.0005: pen probing failed: -71 [ 28.629714][ T45] uclogic 0003:28BD:0071.0005: failed probing parameters: -71 [ 28.637239][ T45] uclogic 0003:28BD:0071.0005: probe with driver uclogic failed with error -71 [ 28.647456][ T45] usb 1-1: USB disconnect, device number 4 [ 28.909310][ T31] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 29.060877][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.070516][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 29.078272][ T31] usb 2-1: too many configurations: 183, using maximum allowed: 8 [ 29.093855][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 29.103118][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=66 [ 29.111223][ T31] usb 2-1: Product: Й [ 29.115350][ T31] usb 2-1: Manufacturer: ч [ 29.119914][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.127412][ T31] usb 2-1: SerialNumber: syz [ 29.164575][ T463] netlink: 'syz.3.43': attribute type 30 has an invalid length. [ 29.172553][ T466] netlink: 'syz.3.43': attribute type 30 has an invalid length. [ 29.190349][ T487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=487 comm=syz.3.44 [ 29.204569][ T487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.213164][ T487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.279295][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 29.285635][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.295217][ T45] usb 1-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 29.304291][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.312338][ T45] usb 1-1: Product: syz [ 29.316498][ T45] usb 1-1: Manufacturer: syz [ 29.321228][ T45] usb 1-1: SerialNumber: syz [ 29.336701][ T31] usb 2-1: invalid MIDI in EP 0 [ 29.344603][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.356262][ T31] usb 2-1: USB disconnect, device number 5 [ 29.361500][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.523458][ T490] syzkaller1: entered promiscuous mode [ 29.528953][ T490] syzkaller1: entered allmulticast mode [ 29.537561][ T45] usb 1-1: MIDIStreaming interface descriptor not found [ 29.552772][ T45] usb 1-1: USB disconnect, device number 5 [ 29.619870][ T492] rust_binder: Error while translating object. [ 29.619941][ C0] BUG: TASK stack guard page was hit at ffffc9000b6c7fd8 (stack is ffffc9000b6c8000..ffffc9000b6d0000) [ 29.619979][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 29.620003][ C0] CPU: 0 UID: 0 PID: 492 Comm: syz.4.46 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 29.620025][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 29.620034][ C0] RIP: 0010:update_stack_state+0x115/0x4b0 [ 29.620063][ C0] Code: 4b 10 4c 89 7d b0 4c 01 f8 48 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 60 ff ff ff 4c 89 f6 48 c1 ee 03 <48> 89 b5 40 ff ff ff 48 89 8d 70 ff ff ff 48 c1 e9 03 48 89 8d 48 [ 29.620071][ C0] RSP: 0018:ffffc9000b6c7fe0 EFLAGS: 00010a02 [ 29.620085][ C0] RAX: ffffc9000b6c8150 RBX: ffffc9000b6c8128 RCX: ffffc9000b6c8138 [ 29.620093][ C0] RDX: ffffc9000b6c8140 RSI: 1ffff920016d9026 RDI: ffffc9000b6c8180 [ 29.620100][ C0] RBP: ffffc9000b6c80a0 R08: ffffc9000b6c8101 R09: 0000000000000000 [ 29.620106][ C0] R10: ffffc9000b6c8128 R11: fffff520016d9031 R12: 0000000000000000 [ 29.620113][ C0] R13: dffffc0000000000 R14: ffffc9000b6c8130 R15: ffffc9000b6c8118 [ 29.620122][ C0] FS: 00007f79e4f286c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.620137][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.620150][ C0] CR2: ffffc9000b6c7fd8 CR3: 000000011aeba000 CR4: 00000000003526b0 [ 29.620165][ C0] Call Trace: [ 29.620173][ C0] [ 29.620182][ C0] ? __unwind_start+0x216/0x410 [ 29.620204][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 29.620216][ C0] ? arch_stack_walk+0xf2/0x170 [ 29.620226][ C0] ? stack_trace_save+0xaa/0x100 [ 29.620237][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 29.620247][ C0] ? __asan_memset+0x39/0x50 [ 29.620257][ C0] ? save_stack+0x125/0x240 [ 29.620274][ C0] ? free_contig_range+0x260/0x260 [ 29.620292][ C0] ? __reset_page_owner+0x450/0x450 [ 29.620314][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 29.620334][ C0] ? sched_clock_noinstr+0xd/0x30 [ 29.620348][ C0] ? __set_page_owner+0x8e/0x600 [ 29.620359][ C0] ? __kasan_check_read+0x15/0x20 [ 29.620368][ C0] ? __zone_watermark_ok+0x134/0x630 [ 29.620380][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 29.620391][ C0] ? __cfi___zone_watermark_ok+0x10/0x10 [ 29.620404][ C0] ? kasan_unpoison+0x4a/0x70 [ 29.620418][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 29.620440][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 29.620461][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 29.620478][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 29.620495][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 29.620507][ C0] ? prep_new_page+0x2d/0x190 [ 29.620519][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 29.620534][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 29.620547][ C0] ? static_key_count+0x45/0x70 [ 29.620565][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 29.620583][ C0] ? lruvec_init+0x231/0x280 [ 29.620603][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 29.620625][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 29.620641][ C0] ? unwind_get_return_address+0x51/0x90 [ 29.620652][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 29.620663][ C0] ? arch_stack_walk+0x10a/0x170 [ 29.620672][ C0] ? stack_trace_save+0xaa/0x100 [ 29.620683][ C0] ? stack_depot_save_flags+0x672/0x800 [ 29.620697][ C0] ? kasan_save_track+0x4f/0x80 [ 29.620716][ C0] ? kasan_save_track+0x3e/0x80 [ 29.620734][ C0] ? kasan_save_free_info+0x4a/0x60 [ 29.620749][ C0] ? __kasan_slab_free+0x5f/0x80 [ 29.620768][ C0] ? kfree+0x158/0x440 [ 29.620779][ C0] ? krealloc_noprof+0xfa/0x130 [ 29.620789][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECs2tVsXcF29le_11rust_binder+0x114/0x360 [ 29.620814][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 29.620826][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 29.620843][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 29.620874][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 29.620898][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 29.620920][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0xa3e/0x4380 [ 29.620931][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 29.620948][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 29.620966][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 29.620978][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 29.620994][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 29.621011][ C0] ? do_syscall_64+0x57/0xf0 [ 29.621033][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.621063][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 29.621077][ C0] ? kasan_save_free_info+0x4a/0x60 [ 29.621085][ C0] ? __kasan_slab_free+0x5f/0x80 [ 29.621096][ C0] ? kfree+0x158/0x440 [ 29.621104][ C0] ? krealloc_noprof+0xfa/0x130 [ 29.621114][ C0] ? krealloc_noprof+0xfa/0x130 [ 29.621123][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECs2tVsXcF29le_11rust_binder+0x114/0x360 [ 29.621162][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECs2tVsXcF29le_11rust_binder+0x10/0x10 [ 29.621201][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 29.621223][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 29.621242][ C0] ? __kasan_check_write+0x18/0x20 [ 29.621251][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.621262][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.621281][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 29.621308][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 29.621339][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 29.621359][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.621368][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 29.621382][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 29.621398][ C0] ? __kasan_check_write+0x18/0x20 [ 29.621407][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.621424][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.621447][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 29.621475][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.621491][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 29.621507][ C0] ? __cfi__RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 29.621522][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 29.621537][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.621545][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 29.621566][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 29.621596][ C0] ? __kasan_check_write+0x18/0x20 [ 29.621613][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.621634][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x30c/0x5dd0 [ 29.621649][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.621657][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 29.621673][ C0] ? kernel_text_address+0xa9/0xe0 [ 29.621686][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.621701][ C0] ? __cfi__RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 29.621727][ C0] ? stack_depot_save_flags+0x399/0x800 [ 29.621749][ C0] ? kasan_save_track+0x4f/0x80 [ 29.621768][ C0] ? kasan_save_track+0x4f/0x80 [ 29.621783][ C0] ? kasan_save_track+0x3e/0x80 [ 29.621792][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 29.621800][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 29.621810][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 29.621820][ C0] ? krealloc_noprof+0x8d/0x130 [ 29.621830][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 29.621846][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB5_14AllocationView22transfer_binder_object+0x224/0xc10 [ 29.621874][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x4031/0x9460 [ 29.621898][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 29.621920][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0xa3e/0x4380 [ 29.621940][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 29.621972][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 29.621996][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 29.622016][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 29.622035][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 29.622051][ C0] ? do_syscall_64+0x57/0xf0 [ 29.622067][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.622082][ C0] ? __kasan_check_write+0x18/0x20 [ 29.622090][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_7NodeRef6absorb+0x887/0xaa0 [ 29.622104][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.622116][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_7NodeRef6absorb+0x10/0x10 [ 29.622135][ C0] ? __kasan_check_write+0x18/0x20 [ 29.622152][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 29.622187][ C0] ? _raw_spin_unlock+0x45/0x60 [ 29.622206][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 29.622222][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.622231][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 29.622247][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 29.622263][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 29.622290][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 29.622318][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x17cc/0x2c70 [ 29.622343][ C0] ? desc_read+0x202/0x3e0 [ 29.622355][ C0] ? __kasan_check_write+0x18/0x20 [ 29.622364][ C0] ? desc_read+0x1ab/0x3e0 [ 29.622374][ C0] ? prb_first_seq+0x109/0x1d0 [ 29.622384][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 29.622393][ C0] ? __kasan_check_write+0x18/0x20 [ 29.622402][ C0] ? desc_read+0x1ab/0x3e0 [ 29.622414][ C0] ? __kasan_check_read+0x15/0x20 [ 29.622430][ C0] ? this_cpu_in_panic+0x56/0x90 [ 29.622450][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 29.622469][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.622487][ C0] ? prb_read_valid+0x80/0x80 [ 29.622499][ C0] ? data_alloc+0x4d0/0x7e0 [ 29.622509][ C0] ? desc_read+0x202/0x3e0 [ 29.622518][ C0] ? __kasan_check_write+0x18/0x20 [ 29.622527][ C0] ? desc_read+0x1ab/0x3e0 [ 29.622537][ C0] ? prb_first_seq+0x109/0x1d0 [ 29.622547][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 29.622559][ C0] ? __kasan_check_write+0x18/0x20 [ 29.622576][ C0] ? desc_read+0x1ab/0x3e0 [ 29.622594][ C0] ? __kasan_check_read+0x15/0x20 [ 29.622611][ C0] ? this_cpu_in_panic+0x56/0x90 [ 29.622629][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 29.622642][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 29.622655][ C0] ? prb_read_valid+0x80/0x80 [ 29.622665][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 29.622677][ C0] ? up+0x10a/0x1b0 [ 29.622687][ C0] ? __cfi_up+0x10/0x10 [ 29.622696][ C0] ? __kasan_check_write+0x18/0x20 [ 29.622711][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 29.622736][ C0] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 29.622760][ C0] ? __cfi_llist_add_batch+0x10/0x10 [ 29.622778][ C0] ? console_unlock+0x247/0x2c0 [ 29.622790][ C0] ? __cfi_console_unlock+0x10/0x10 [ 29.622801][ C0] ? krealloc_noprof+0xfa/0x130 [ 29.622811][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 29.622823][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 29.622840][ C0] ? irq_work_queue+0xc2/0x160 [ 29.622862][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 29.622893][ C0] ? vprintk_emit+0x3e3/0x650 [ 29.622914][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 29.622928][ C0] ? _RINvMNtCs2tVsXcF29le_11rust_binder10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 29.622942][ C0] ? __cfi__RINvMNtCs2tVsXcF29le_11rust_binder10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 29.622961][ C0] ? vprintk_default+0x2a/0x40 [ 29.622973][ C0] ? vprintk+0x93/0xa0 [ 29.622981][ C0] ? _printk+0xde/0x140 [ 29.622997][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 29.623034][ C0] ? __cfi__printk+0x10/0x10 [ 29.623052][ C0] ? mutex_unlock+0x90/0x240 [ 29.623067][ C0] ? _copy_from_user+0x87/0xa0 [ 29.623076][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 29.623091][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c47/0x9460 [ 29.623104][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 29.623123][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 29.623195][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 29.623215][ C0] ? kernel_text_address+0xa9/0xe0 [ 29.623228][ C0] ? __kasan_check_write+0x18/0x20 [ 29.623236][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.623249][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 29.623263][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 29.623287][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 29.623311][ C0] ? kernel_text_address+0xa9/0xe0 [ 29.623334][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.623355][ C0] ? stack_trace_save+0xaa/0x100 [ 29.623366][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 29.623378][ C0] ? stack_depot_save_flags+0x399/0x800 [ 29.623390][ C0] ? ttwu_queue_wakelist+0x324/0x500 [ 29.623401][ C0] ? native_send_call_func_single_ipi+0x12/0x20 [ 29.623412][ C0] ? kasan_save_track+0x4f/0x80 [ 29.623428][ C0] ? kasan_save_track+0x3e/0x80 [ 29.623446][ C0] ? kasan_save_free_info+0x4a/0x60 [ 29.623464][ C0] ? __kasan_slab_free+0x5f/0x80 [ 29.623482][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 29.623498][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 29.623509][ C0] ? slow_avc_audit+0x19f/0x220 [ 29.623518][ C0] ? avc_has_perm+0x1ec/0x240 [ 29.623528][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 29.623539][ C0] ? security_binder_transaction+0x54/0xf0 [ 29.623548][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x947/0x4380 [ 29.623561][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 29.623590][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 29.623614][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 29.623633][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 29.623647][ C0] ? __kasan_check_write+0x18/0x20 [ 29.623655][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.623668][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 29.623681][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 29.623694][ C0] ? __kasan_slab_free+0x6a/0x80 [ 29.623708][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 29.623725][ C0] ? __wake_up+0x169/0x190 [ 29.623742][ C0] ? audit_log_end+0x1f1/0x240 [ 29.623760][ C0] ? __cfi__RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x10/0x10 [ 29.623782][ C0] ? audit_log_end+0x1f1/0x240 [ 29.623792][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 29.623802][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 29.623812][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 29.623822][ C0] ? __cfi_common_lsm_audit+0x10/0x10 [ 29.623832][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.623845][ C0] ? call_rcu_hurry+0x30/0x30 [ 29.623862][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0 [ 29.623892][ C0] ? avc_update_node+0x2f1/0x9c0 [ 29.623911][ C0] ? slow_avc_audit+0x19f/0x220 [ 29.623928][ C0] ? __cfi_slow_avc_audit+0x10/0x10 [ 29.623938][ C0] ? avc_has_perm_noaudit+0x2bd/0x360 [ 29.623948][ C0] ? avc_has_perm+0x1ec/0x240 [ 29.623962][ C0] ? avc_has_perm+0x211/0x240 [ 29.623972][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 29.623983][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 29.624001][ C0] ? __kasan_check_write+0x18/0x20 [ 29.624018][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.624040][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 29.624060][ C0] ? bpf_lsm_binder_transaction+0xd/0x20 [ 29.624078][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0xa3e/0x4380 [ 29.624090][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0xc7a/0x2660 [ 29.624105][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x10/0x10 [ 29.624124][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.624140][ C0] ? __kasan_check_write+0x18/0x20 [ 29.624157][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 29.624200][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 29.624243][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 29.624256][ C0] ? kernel_text_address+0xa9/0xe0 [ 29.624268][ C0] ? __kernel_text_address+0x11/0x40 [ 29.624283][ C0] ? unwind_get_return_address+0x51/0x90 [ 29.624304][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 29.624324][ C0] ? arch_stack_walk+0x10a/0x170 [ 29.624343][ C0] ? stack_depot_save_flags+0x38/0x800 [ 29.624361][ C0] ? kasan_save_track+0x4f/0x80 [ 29.624371][ C0] ? kasan_save_track+0x3e/0x80 [ 29.624381][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 29.624389][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 29.624399][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 29.624409][ C0] ? krealloc_noprof+0x8d/0x130 [ 29.624418][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x920/0x1aa0 [ 29.624444][ C0] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCs2tVsXcF29le_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 29.624478][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 29.624498][ C0] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCs2tVsXcF29le_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 29.624518][ C0] ? __kasan_check_write+0x18/0x20 [ 29.624527][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x502/0xee0 [ 29.624542][ C0] ? __kasan_check_write+0x18/0x20 [ 29.624551][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.624564][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.624586][ C0] ? _raw_spin_unlock+0x45/0x60 [ 29.624608][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder7processNtB5_12ProcessInner24new_node_ref_with_thread+0x5ec/0x950 [ 29.624637][ C0] ? __cfi__RNvMs0_NtCs2tVsXcF29le_11rust_binder7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 29.624656][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 29.624672][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 29.624689][ C0] ? __kasan_check_write+0x18/0x20 [ 29.624698][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.624712][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.624734][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x11f1/0x1aa0 [ 29.624759][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.624776][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 29.624793][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x127e/0x1aa0 [ 29.624809][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x10/0x10 [ 29.624823][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 29.624842][ C0] ? __wake_up+0x169/0x190 [ 29.624854][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 29.624891][ C0] ? __kasan_check_write+0x18/0x20 [ 29.624908][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.624928][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.624942][ C0] ? _raw_spin_unlock+0x45/0x60 [ 29.624954][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 29.624970][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x1008/0x1c70 [ 29.624988][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 29.625014][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 29.625034][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.625050][ C0] ? __kasan_check_write+0x18/0x20 [ 29.625067][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 29.625087][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 29.625104][ C0] ? avc_has_perm+0x155/0x240 [ 29.625114][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 29.625125][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 29.625136][ C0] ? __kasan_check_write+0x18/0x20 [ 29.625150][ C0] ? _raw_spin_lock+0x92/0x120 [ 29.625172][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.625194][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xb14/0x1030 [ 29.625221][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.625230][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xd14/0x1030 [ 29.625246][ C0] ? __kernel_text_address+0x11/0x40 [ 29.625259][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0x10/0x10 [ 29.625275][ C0] ? stack_trace_save+0xaa/0x100 [ 29.625289][ C0] ? stack_depot_save_flags+0x38/0x800 [ 29.625311][ C0] ? __kasan_check_write+0x18/0x20 [ 29.625329][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x11db/0x5d80 [ 29.625353][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.625366][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 29.625379][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 29.625392][ C0] ? _raw_spin_unlock+0x45/0x60 [ 29.625404][ C0] ? call_rcu_nocb+0x6d7/0xc80 [ 29.625417][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 29.625435][ C0] ? swake_up_one_online_ipi+0x30/0x30 [ 29.625459][ C0] ? __cfi_mt_free_rcu+0x10/0x10 [ 29.625484][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 29.625507][ C0] ? kernel_text_address+0xa9/0xe0 [ 29.625519][ C0] ? __kernel_text_address+0x11/0x40 [ 29.625531][ C0] ? __kasan_check_write+0x18/0x20 [ 29.625540][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.625552][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 29.625565][ C0] ? stack_trace_save+0xaa/0x100 [ 29.625581][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 29.625604][ C0] ? stack_depot_save_flags+0x399/0x800 [ 29.625626][ C0] ? kasan_save_track+0x4f/0x80 [ 29.625644][ C0] ? kasan_save_track+0x3e/0x80 [ 29.625661][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 29.625676][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 29.625693][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 29.625711][ C0] ? krealloc_noprof+0x8d/0x130 [ 29.625729][ C0] ? kvrealloc_noprof+0x59/0x120 [ 29.625745][ C0] ? _RNvCs2tVsXcF29le_11rust_binder16rust_binder_mmap+0x78b/0x11f0 [ 29.625769][ C0] ? mmap_region+0x1579/0x1d60 [ 29.625785][ C0] ? do_mmap+0xb85/0x13c0 [ 29.625795][ C0] ? vm_mmap_pgoff+0x36e/0x4b0 [ 29.625805][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 29.625816][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 29.625826][ C0] ? __kernel_text_address+0x11/0x40 [ 29.625838][ C0] ? unwind_get_return_address+0x51/0x90 [ 29.625850][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 29.625869][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 29.625895][ C0] ? update_curr+0x6c1/0x9e0 [ 29.625913][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 29.625930][ C0] ? __calc_delta+0x280/0x280 [ 29.625939][ C0] ? __kasan_record_aux_stack+0xb2/0xd0 [ 29.625948][ C0] ? update_entity_lag+0x28f/0x2c0 [ 29.625962][ C0] ? dequeue_entity+0x809/0x1380 [ 29.625974][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 29.625986][ C0] ? __cfi_update_misfit_status+0x10/0x10 [ 29.626002][ C0] ? dequeue_entities+0x1d7/0x1400 [ 29.626027][ C0] ? sched_balance_newidle+0x31a/0xab0 [ 29.626051][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 29.626069][ C0] ? sched_clock_noinstr+0xd/0x30 [ 29.626081][ C0] ? __kasan_check_write+0x18/0x20 [ 29.626090][ C0] ? __switch_to+0xc4f/0x1300 [ 29.626098][ C0] ? __cfi___switch_to+0x10/0x10 [ 29.626106][ C0] ? psi_task_switch+0x4f2/0xa10 [ 29.626118][ C0] ? __kasan_check_write+0x18/0x20 [ 29.626127][ C0] ? finish_task_switch+0x1d9/0x760 [ 29.626140][ C0] ? __switch_to_asm+0x3d/0x70 [ 29.626156][ C0] ? __schedule+0x14d6/0x2100 [ 29.626172][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 29.626191][ C0] ? __asan_memcpy+0x5a/0x80 [ 29.626208][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 29.626224][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 29.626236][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 29.626247][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 29.626259][ C0] ? schedule+0xc5/0x240 [ 29.626266][ C0] ? futex_unqueue+0x136/0x160 [ 29.626280][ C0] ? ioctl_has_perm+0x39a/0x500 [ 29.626296][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 29.626312][ C0] ? futex_wait+0x2ac/0x7b0 [ 29.626329][ C0] ? __cfi_futex_wait+0x10/0x10 [ 29.626346][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 29.626362][ C0] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 29.626373][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 29.626381][ C0] ? do_futex+0x32a/0x510 [ 29.626393][ C0] ? __cfi_do_futex+0x10/0x10 [ 29.626405][ C0] ? vm_mmap_pgoff+0x153/0x4b0 [ 29.626414][ C0] ? __fget_files+0x2c5/0x340 [ 29.626427][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 29.626448][ C0] ? security_file_ioctl+0x3e/0x110 [ 29.626471][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 29.626495][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 29.626511][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 29.626521][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 29.626530][ C0] ? do_syscall_64+0x57/0xf0 [ 29.626542][ C0] ? clear_bhb_loop+0x50/0xa0 [ 29.626551][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.626566][ C0] [ 29.626570][ C0] Modules linked in: [ 29.626586][ C0] ---[ end trace 0000000000000000 ]--- [ 29.626595][ C0] RIP: 0010:update_stack_state+0x115/0x4b0 [ 29.626618][ C0] Code: 4b 10 4c 89 7d b0 4c 01 f8 48 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 60 ff ff ff 4c 89 f6 48 c1 ee 03 <48> 89 b5 40 ff ff ff 48 89 8d 70 ff ff ff 48 c1 e9 03 48 89 8d 48 [ 29.626631][ C0] RSP: 0018:ffffc9000b6c7fe0 EFLAGS: 00010a02 [ 29.626645][ C0] RAX: ffffc9000b6c8150 RBX: ffffc9000b6c8128 RCX: ffffc9000b6c8138 [ 29.626653][ C0] RDX: ffffc9000b6c8140 RSI: 1ffff920016d9026 RDI: ffffc9000b6c8180 [ 29.626660][ C0] RBP: ffffc9000b6c80a0 R08: ffffc9000b6c8101 R09: 0000000000000000 [ 29.626666][ C0] R10: ffffc9000b6c8128 R11: fffff520016d9031 R12: 0000000000000000 [ 29.626673][ C0] R13: dffffc0000000000 R14: ffffc9000b6c8130 R15: ffffc9000b6c8118 [ 29.626679][ C0] FS: 00007f79e4f286c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.626688][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.626694][ C0] CR2: ffffc9000b6c7fd8 CR3: 000000011aeba000 CR4: 00000000003526b0 [ 29.626704][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 29.626967][ C0] Kernel Offset: disabled