last executing test programs: 1m21.103357306s ago: executing program 3 (id=855): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004700)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2b4, @remote, 0x8}, 0xa, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000500)="ebce8f4a3ad6f79b42231f8a6ae6d1795c143943bf58052d91d293163a2c070ef977e96f475ea53b479d22cc60700215c356a383d8fdb6da91ef81ab4f4d9351", 0x40}, {&(0x7f0000001640)="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", 0x559}], 0x3}}], 0x1, 0x80040c4) (async) sendmmsg$inet6(r0, &(0x7f0000004700)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2b4, @remote, 0x8}, 0xa, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000500)="ebce8f4a3ad6f79b42231f8a6ae6d1795c143943bf58052d91d293163a2c070ef977e96f475ea53b479d22cc60700215c356a383d8fdb6da91ef81ab4f4d9351", 0x40}, {&(0x7f0000001640)="b42debb7bb5e0d4a9d147347af095030d170505f0c50579da4770ba44548dac35812c481acd13ae0eda0f56b02e248608fd7c6ba1815b0a169586d0c38edcac401754717a3db76925e6b440348469d96903cb7a17c3fd7d778dd8dabd8417659061eba46f8c2ef4972370c50735ac1320e277ecc1230a74b0314bfb4319495d12df0257709ada4a79b6db9dc0d4d5605f3788a84158bb484d4dc9701ed6d7f57fdd3fc1d75d1add15472a01899365793a0b6d43a8cdeb4261f844345125b24f0f6ca16270d0b2487aeaa3dd9fbc65fcdffcb39a84eae121d4f9decfa1816e32e98090ba2414aa3c1be60fc0a95a533c2e9d44f24fb28bb8ff334a4fa64293166494f15bb3be6d6b5dba7dfeb88362656178f9d8a5e5aa812ee6df95a3bf46e89fa186d6c796c1086290ca7c224f197f041ef304b65608984d1ee2f8ca6ab0bae74f88a5628efab0036e68f2aacd2575fe59a7896c81b0f26ae9809ddfc714a67f389945c4e35dd7ce91e334381dc4e4dec39137e2e672752aad296156b1cfbda2e9ca4c3ec5f46d0d2926e14868bca86b3ae216165ce892c3399604e19aa0e193c92bc90e72869238d87429ab86505d77b896c366a08fce4192e35a8329b43071f5a0c07d532c081ad8fa23b8ea31edce68cc57314cad6571afe98e6da3b4216d25c5f7a6706dbca215c99fcf0b13b0fa7d0d5528042ee12f8bb73d783d508d82c64a1854df7f9e54c01ee4c376898e66cdaf23b9c33927799ed211fd656c67190ed8739cc827a327cd53f73b74f2eb248521e9afe4cff26c05613b5bc9bdb0637a0946b93038256e542f04450fc4e8f8772ae64e8177157508479e118677f0b8dd05134f5d666ad3a22dfb9e74da21cd843e9a0ada6d281f3f5c2798c5ba0a75fb1babf4f694814f29f3e99f7b47c8bb1f556bcd99c01af29409fa7015050ccfbfac6c43ddb60e797789ca895b6419e56f43438cfbeffe2011a331bdc2ebe0cf535d064f859516f1c257fa902f4ce512e9d261f387c7ec3956d44d3cf23744ccc0c04cf21b87172c4d3dba5343041368f5de174061c8ab0a7b95e8669700939e3a3ed4a242e14438499d30c0dda69a88f009e2d64011d186a8f4600a75b598fb183010046c1ba4122d7c71de63524c53dca96d5e7de9fcacf69cf578a9a7ec6bb54f560e4a10dbd87bd61a95bef5dc4db87c490944e93768a893c556e826398de9c2dea4bbecd4cfe306f01173fbd979a2b5ab08e9de8551b347d1aae56d79c3446b0620cbd2cfc8d9ab8e76a234ce29690fc2020d8ee1903212ce4440363f1833b4b7eac859d3796b86a4c7959b0366774918fe04d020e7fa156991ae01e3428ea50826eac3ae900355eb4f72b7bab4508b3ffcc1fabfb41b23beac5fecefdedd361127f7f4d51560381ca5f9aaa27fbee6e699daae5a50b2522f450424a7dc84bedc89c70401838e95416eb6f4784c250d9575220122d72ba4206a751e289029b0873602483cba80ccad4a3c638401b76f615ca1d19d43fbabea159284cf6219c45fedcc3a8c1266865bf08c5aa259690a776a2d2b30679fa94e47f63c889287c0c12878d33df7778d673be0669cf72d1d7ca1dde36673a204f4658ddb04e852264273309cf652a5aa8346adc0820ef53e0aeae0ce4ec53a1507582452a83822bfb9023a22ed35bf4667de19292ea6431a034961dddedbb0f9983b3f8643d07b8a8866547fa3d305f5b3de6bcfcf778118bfe28412e2edfc3aeeb1097d2db5cffc8036814349d9b7f4c339f428980f2448f3baf802e7691f5ab831baf66a522c1b3ab45fd927d1ea8cdb7aa91e1a072fc84bc869c5241326b043145aa7b3cba92b5d2b1a4902f53f16344fa76a3102729bb40f0dee81838ece09af81813044c1f4518ce3c8fdda81a60f2d29a5fdc5302114b1b66734f7b", 0x559}], 0x3}}], 0x1, 0x80040c4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000) socket(0x9, 0x800, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x4a, &(0x7f0000002900)=0x659c, 0x4) (async) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x4a, &(0x7f0000002900)=0x659c, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040), 0x4) 1m21.036966597s ago: executing program 3 (id=856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000) 1m21.022577977s ago: executing program 3 (id=858): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x603, 0x8, {{0x8, 0x4, 0x2, 0x3d, 0x20, 0x67, 0x0, 0x6, 0x29, 0x0, @loopback, @empty, {[@timestamp={0x44, 0xc, 0x56, 0x0, 0x4, [0x80000001, 0x4]}]}}}}}) (async) ioctl$sock_proto_private(r1, 0x89e9, &(0x7f0000000180)="ac3ab9dc45d006e05e8cd50ee1f3281046cdc92e66e83f") ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@mcast2, 0x64, r2}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0x300000000000000, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x2000000000000000, 0x40000000000, 0x3b9ac9ff, 0x8000000000000001, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x201ff, 0x4}) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r0, 0x8, 0xf}) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 1m20.976327478s ago: executing program 3 (id=859): timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x5, 0x0, &(0x7f0000000380)=[@clear_death={0x400c630f, 0x2}, @free_buffer], 0x1e, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x200000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0x0, 0x102000}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x1000000, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.83601775s ago: executing program 3 (id=860): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002980), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000029c0)={0xf, 0x2, 0x9}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6"}) connect$can_bcm(r2, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x4}, @fd, @flat=@binder={0x73622a85, 0x1001, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000002980), 0x2, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000029c0)={0xf, 0x2, 0x9}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6"}) (async) connect$can_bcm(r2, &(0x7f0000000180), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x4}, @fd, @flat=@binder={0x73622a85, 0x1001, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) 1m20.692703423s ago: executing program 3 (id=861): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x100000000, 0x7ff, 0x1, 0x100000, 0x9, 0xed, 0x8000000, 0x5, 0xffffffffffffffff, 0x7, 0x0, 0x33, 0xfffffffffffffffd, 0x18c42c38, 0x8000000000000000], 0xffff1000, 0x42240}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc0060, 0x0) recvmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000280)=""/125, 0x7d}], 0x2, &(0x7f0000000340)=""/223, 0xdf}, 0x100) getdents64(r0, &(0x7f00000000c0)=""/44, 0x2c) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r6, 0xaea2, &(0x7f0000000040)={[{0x3, 0x81, 0x0, 0x3, 0x0, 0xc5, 0x70, 0x8, 0x7, 0xc, 0xda, 0x19, 0x800}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x81}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) getdents(r0, 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_PIT(r9, 0x4068aea3, &(0x7f0000000080)={[{0xb6, 0x200, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x11, r7, 0x99b33000) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3f, 0x2b8c46217dfebc6b}, 0x0) 1m20.668063893s ago: executing program 32 (id=861): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r1 = socket$can_raw(0x1d, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x100000000, 0x7ff, 0x1, 0x100000, 0x9, 0xed, 0x8000000, 0x5, 0xffffffffffffffff, 0x7, 0x0, 0x33, 0xfffffffffffffffd, 0x18c42c38, 0x8000000000000000], 0xffff1000, 0x42240}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc0060, 0x0) recvmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000280)=""/125, 0x7d}], 0x2, &(0x7f0000000340)=""/223, 0xdf}, 0x100) getdents64(r0, &(0x7f00000000c0)=""/44, 0x2c) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r6, 0xaea2, &(0x7f0000000040)={[{0x3, 0x81, 0x0, 0x3, 0x0, 0xc5, 0x70, 0x8, 0x7, 0xc, 0xda, 0x19, 0x800}, {0x0, 0xf3f, 0x2, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x81}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0xe, 0xffffffffffffffb5}]}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) getdents(r0, 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_PIT(r9, 0x4068aea3, &(0x7f0000000080)={[{0xb6, 0x200, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x11, r7, 0x99b33000) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3f, 0x2b8c46217dfebc6b}, 0x0) 6.74752183s ago: executing program 0 (id=2189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b1, 0x0, 0x5e}]}) close_range(r0, 0xffffffffffffffff, 0x0) 6.717630151s ago: executing program 0 (id=2190): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x8, 0x0, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x40000002) close_range(r0, 0xffffffffffffffff, 0x0) 6.556007953s ago: executing program 0 (id=2192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xffffffff, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) setpriority(0x1, 0x0, 0xe) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x64, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877661c265c83f6f3de2879e0e7dbb5c4"}) 5.758124235s ago: executing program 0 (id=2204): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8800) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8800) setns(r0, 0x2000000) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@directio}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) read(r5, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 5.738932425s ago: executing program 0 (id=2205): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_usb_connect(0x0, 0x5d, &(0x7f0000001800)=ANY=[@ANYBLOB="1201000093007a402104070051b80102030109024b00010000000009040000000202ff00052406"], 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f000044c000/0x1000)=nil, 0x1000) 4.155315759s ago: executing program 1 (id=2229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x16, 0x6, "2b3713cedbb4ec8c707716766b6e78220d15"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x68, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xb8701298241f021d}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x10c}}, 0x8a0) r3 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000300)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[], 0xff2e) ppoll(&(0x7f0000000040)=[{r3}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) getsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000700), &(0x7f0000000540)=0x4) writev(r5, &(0x7f0000000400)=[{&(0x7f0000001fc0)="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", 0xe00}, {&(0x7f0000000000)="a88ad4d39b60bf3019f6952ebd5c69a7d67f57e0a16c5a11d06913156969fb4c237893fefaf7a31834e7d19aac210520dbe0575946b07d0eb9fec87580c950607cb0b5c040292a55662c2f4c8a06ee6ef59ad3b8feebcfcc44faf41e08d16e7e5ee8ef197ba06c462ff65e7477640f5ce854a3e7d9039c919f287617a5c9b7507a50066ccce5a245dfb5778e0367c145bee2fe8f504a6f6b33fc849ff3", 0x9d}, {&(0x7f00000000c0)="f0211a28730b9b40c3cd7279bec4a1a1c470c2f33556d72adc2864fd0007f10a0463a58c317fff0a977a7739f2a20ef4ea587305a6c25e9e874137691918a529212e8dc27128909b93a187c446c12355891c", 0x52}, {&(0x7f0000000880)="ebf392c77bd6c1648643544f411cffccf70701b369a9bf25adeb0416c0c4b43d7ec3d4ead944d55eaf525730f1f33a5d597a3a96bc92412359c0b975d49f189563f7d153b76873dcd7986a8e90b3cd445a35f04cde8abcc4906be24040ceefe8ae3c748c43b36e4f99029d51ec1abe13399aa72fd68e3ba3784ac492575063e03325b7b7767c361408b83a03ac97c14eb51b8cc5d4ce5038a7d6f2980adada2a989f9e9adf12cdd2285be2c281a0e47246d726cf24d7213b2d98715195f88cf9f5242225587ec394b0353dcfe60254f3b6", 0xd1}, {&(0x7f0000000a00)="cfedbe579da717ff95ff4865c66ed4a76906dfadf691c71602a38309e2bbe8893832ec9be18510207295b9861f4aa0c3d3d9067cf3040ed69a45499c87acbc953b36d3fcf5428d108a4452543c1a987096f01076da8de1c84bd19401847226dfbac2a0cc8daa78be0118a5d7cc868efdda4c17abd48d7344d803d60af69c32d6a3a0941bc7571e13830f7712d2dfc56380c82c05e32e146c15136a50a8df566b227170cbb841d91da8cdbc2a6d4a6b1143ecf7a59fc56e3d26554a5a834b5a9f881129581928941a5a05dd72ccc4d48b8e4a4e19890852a34eca1a0454ed06cbca2b9cd4c097507d96399fd041", 0xed}, {&(0x7f0000000300)="c343dff2a9acf65a41ae732d", 0xc}], 0x6) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x10}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x9d, 0x20000000, 0x4f, @empty, @empty, 0x10, 0x700, 0x0, 0x82d}}) 3.354595691s ago: executing program 1 (id=2237): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r1, 0x0) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4) 3.304132381s ago: executing program 1 (id=2238): mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 3.303580461s ago: executing program 1 (id=2239): madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x11) munlockall() (async) munlockall() munlockall() munlockall() r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000c, 0x8010, r0, 0x8000000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000c, 0x8010, r0, 0x8000000) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x22) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x3f) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x65) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x65) getpid() ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x5, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x5, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x21, 0x100, 0x70bd26, 0x25dfdbff, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) read(r0, &(0x7f0000000200)=""/143, 0x8f) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f00000002c0)="df9f0600000046ad66bad104b064ee0fc76999430f09476e66baf80cb81211d18fef66bafc0cb001eeb9800000c00f3235008000000f30b90d020000b800000000ba000000000f300f017e54", 0x4c}], 0x1, 0x30, &(0x7f0000000380)=[@cr4={0x1, 0x24c5}, @cstype3={0x5, 0xd}], 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000400)=0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='tunl0\x00', 0x10) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000480)={0xbc, 0x0, 0x5}) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000480)={0xbc, 0x0, 0x5}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000500)={0x0, 'bond0\x00', {0x2}, 0x3ff}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000500)={0x0, 'bond0\x00', {0x2}, 0x3ff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x10201, 0x1, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) vmsplice(r2, &(0x7f0000000740)=[{&(0x7f0000000580)="8687d6fdcef2831c60", 0x9}, {&(0x7f00000005c0)="a298984e1ee4ce046eafbceeceb8af90f3bb5858d4d77a7bf8b75761de12b3805e06b48dd198f6a7f08774496eaf48ca87aceba7a4f8589f5dfb619c3675aa4107bab56fcd371d79d0770f14b516ec047cc1a815150edd1a2536ab5b7f6a975fe9644445c895c42a", 0x68}, {&(0x7f0000000640)="d5c37ce4c1e1d918361fcc4d5ad5039bc88ee6d6c5dd179f85cce3357a653e4a8f8720c2ca4c9e410545e98f158e5412bd2dced5fe173a53a84cf1ea0fa167423d0354713f865455a73ca605b797db4f7cdabb6e361f0d94a6bef44e550736e9687357156391e397f7703be8b8dba776ac4bc65fc83987cd41d4bbb7cf8818abaaba51b172fb0d152209337e2d552be2b9d41bfd964a31b59be9938701e37973de6f845154e736c7a269803a05dabe28652abf8dd410707738fe326fa8fc83e11465140de152b9773d873ec7394b80dce91a362ec7abe12c0c97642708de134ed12aa738036f813f37e91c9d335002927664edd42f3cec", 0xf7}], 0x3, 0xa) (async) vmsplice(r2, &(0x7f0000000740)=[{&(0x7f0000000580)="8687d6fdcef2831c60", 0x9}, {&(0x7f00000005c0)="a298984e1ee4ce046eafbceeceb8af90f3bb5858d4d77a7bf8b75761de12b3805e06b48dd198f6a7f08774496eaf48ca87aceba7a4f8589f5dfb619c3675aa4107bab56fcd371d79d0770f14b516ec047cc1a815150edd1a2536ab5b7f6a975fe9644445c895c42a", 0x68}, {&(0x7f0000000640)="d5c37ce4c1e1d918361fcc4d5ad5039bc88ee6d6c5dd179f85cce3357a653e4a8f8720c2ca4c9e410545e98f158e5412bd2dced5fe173a53a84cf1ea0fa167423d0354713f865455a73ca605b797db4f7cdabb6e361f0d94a6bef44e550736e9687357156391e397f7703be8b8dba776ac4bc65fc83987cd41d4bbb7cf8818abaaba51b172fb0d152209337e2d552be2b9d41bfd964a31b59be9938701e37973de6f845154e736c7a269803a05dabe28652abf8dd410707738fe326fa8fc83e11465140de152b9773d873ec7394b80dce91a362ec7abe12c0c97642708de134ed12aa738036f813f37e91c9d335002927664edd42f3cec", 0xf7}], 0x3, 0xa) munlockall() (async) munlockall() setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000780)=0x1, 0x4) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000007c0)={0x9, 0x14, 0x10, 0x2, "e622d5f778828cfd1151358a04feb80fdf5848c30f38224c00b73feda48cb842"}) socket$inet(0x2, 0x3, 0xfffffff6) (async) r3 = socket$inet(0x2, 0x3, 0xfffffff6) recvfrom$inet(r3, &(0x7f0000000800)=""/50, 0x32, 0x40000000, &(0x7f0000000840)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) (async) recvfrom$inet(r3, &(0x7f0000000800)=""/50, 0x32, 0x40000000, &(0x7f0000000840)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000900)=[{{0x0, 0xea60}, 0x11, 0x1, 0x1b}, {{}, 0x1f, 0x5, 0x8}, {{0x77359400}, 0x14, 0xb47, 0x7}, {{r4, r5/1000+10000}, 0x12, 0x9, 0x100}, {{r6, r7/1000+60000}, 0x1, 0x7ce, 0x859}, {{0x0, 0x2710}, 0x17, 0xa33c, 0x200}], 0x90) 3.302999131s ago: executing program 1 (id=2240): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540), 0x40001b6, 0x4054) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.664977241s ago: executing program 0 (id=2241): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x20, 0x8, 0x30, {0x30, 0x3, "469847a56aca51da5c70c1f3a023d2b5f7d0df24daed49afc26c26f916188b745e8d5810261af41f392f742c6e77"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}, &(0x7f0000000100)={0x0, 0xf, 0x175, {0x5, 0xf, 0x175, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x9, 0x1, 0x8}, @generic={0x84, 0x10, 0x3, "fc286efb73ccd27e604f76c239885e413c0df28d40485d73ac030e38938ea6cc4e517bc530c963f9f7cb7199f8f80a99fe4e8aecf4b7512a2da4d13388ba0b03e9289c165edc2f11489fb5bb74f1724b0a775f175538f72d874e518ca0eb706cabf9a2f26a910d345dbdf88926bea0a3f1f92c4d6acf19aac32b27874791a5baac"}, @generic={0xba, 0x10, 0x4, "12b1db105bf83f257da7cdd2a65f1c0371a7f1574c907960ae514c19e92332310ff52b05a3490cce1f8072ff11441219aafd74b18f4047e3a0a34ba41e66f996eeac4fc739e7bac3e1d3ddbd4ab48a48b283b7f50321a83d04934e656b34de998833b93c6ff783c2e0d71f16e958d6b779fe870c55cb3e87b4b13491f52da410a2da430c094fe2febf10d027efff68cca34472341d20ada55f193559b444da31e5cd14b31aaa4804b63688643cfbb62bdece0ce9fa6f27"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xea, 0x0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xe4, 0x59, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "0683c2f7c2415d480a692ca027e4ce59"}]}}, &(0x7f0000000080)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc3, 0x8, 0x3, 0x9, "eb6a1631", "f9d83128"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8, 0x8, 0x5, 0x7, 0x6, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0x16, 0xc0, "684085a9fe18b646914f5b7cd3dd0f24ee54a105b20d5f981b42de7315a097c92accdfc4d84f851467d484cf48bb232bef76691d7dddfe191965f519d11260ab7f261b75b01e1383345ac4ce12549eab11884a4e7df9be4e0af8b63e5baa7543822662f1821d9de8b06d923f7817852f6635e033055b00734df464d0c51dfd94a2962366832f7a780d27f2c726abf324f455cbea2e04cf495b6e8b7ef1bed01a11d7f55523498f982ad66f27f2501187ac205f58bb253a7a7540dda0434a1300"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x19}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x1e0, 0x2, [0xf00]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, "d1c3"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "72b1"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xfff8}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xe1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x6}}) getdents64(r1, 0x0, 0x0) 1.694612105s ago: executing program 2 (id=2245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$bt_sco(r3, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xfffffe2e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, 0x0}}], 0x1, 0x40000) r4 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, 0x0, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r4, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/24, 0x18}, 0x40}], 0x1, 0x10002, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x10800) 1.620049976s ago: executing program 2 (id=2246): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f00000000c0)=0x7ff, 0x4) timer_create(0x4, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) munlockall() 1.619270306s ago: executing program 2 (id=2247): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000080)={{}, "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x2, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x9e, 0x7, 0xb8, 0x0, 0x7, 0x7, 0x9, 0x7, 0x9, 0xd, 0x0, 0xf9, 0x0, 0x53, 0x20000, 0x0, 0x5, 0x8, 0x80, '\x00', 0x1, 0x9}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20000800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x112, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c012303010902240001010000000904690202ff"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x9d, 0x20000000, 0x4f, @empty, @empty, 0x10, 0x700, 0x0, 0x82d}}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000900)={0x6, 0x3f60b569, 0x3ff, 0x200, 0x5, "cf17bc00", 0x5}) r7 = syz_usb_connect(0x4, 0x5dd, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x9e, 0x35, 0x23, 0x8, 0x2040, 0xb124, 0xde2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5cb, 0x3, 0x84, 0x4, 0xc0, 0x6, [{{0x9, 0x4, 0x6a, 0x7, 0x9, 0xa8, 0xb2, 0xc3, 0xe, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d89e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x1ff, 0x8, 0x4}, [@acm={0x4, 0x24, 0x2, 0x1}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x7f, 0x3, 0x7}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x2, 0xe, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x28, 0x3a, 0x80, 0x3}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x9, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xd, 0x3, 0x7, [@generic={0x62, 0x8, "be62978beae2c73dc549a99288181d70d07e4d119daced178e4eea5fe6341c57c8bff2772a9e3c6fb1a89705718144f2b77944ed26ba88d843d070084e43d653b4dac765947ad5f5a1457a43bebdefc84017edce121bc841380436074f80a5f7"}]}}, {{0x9, 0x5, 0xc, 0xa, 0x3ff, 0xd9, 0x3, 0x11, [@generic={0x91, 0x3, "f516b3542bfc24e7f85e9989827854fb688d0a4b8f8c158fa676a4a4e64edfd86976867f8a0483204231e4722cc2822f907c64a7bf07d6f659774e6ea505f914317266bf3b665f19a213e0461eb038767d28cedde1c54803c951a0ca4ec49eaa18c7a7a4e0a0a30dd85d36373d8799daa3144bcfb0e8b433c0c383ca09780fad7702e90767660bb58aa0d96ad029a1"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xd, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x1, 0x9, 0x4}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x4, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x3}, @generic={0xc0, 0x23, "7d59620764802be2672e624ddb2b05a2b9898183262bc2efef1468c0dbd889079521a562d066cf194e42af7bbca298ab5a7e7372534db612ba2264751a59d7032d4fd386296e223994a71b807ce7189ffacbfe36eb614308e7e1181434421874c11ecdd4c7c04dd0722cec5f592c819742ad280446aa77b20505e4bb5e9fb0a0479cad941917c45d7f38790c7f7f5f2b35b033983704a176a0ca915f8c76d97936210043c34f48e0e0c62e505321bd2056b86f23b5af62656e46546e0442"}]}}]}}, {{0x9, 0x4, 0x66, 0x0, 0xb, 0x32, 0x1d, 0x7a, 0x9, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x81, 0x3, "d923", '0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "638c6bf1d1"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x18000, 0x0) ioctl$RTC_UIE_OFF(r4, 0x7004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x56}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x146}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x269}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r6, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x400c804) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1a80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r2, 0xd912be136f3e1cd0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x19}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x8041) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x84120060}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x12c, r8, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8}, 0x2000c800) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000004bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004b80)={&(0x7f0000000b40)={0x4010, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3fa8, 0x3, 0x0, 0x1, [{0x1278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1264, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x56, 0x1, "1642ae8341e80d78ea0af7b3a881abc9d109f299ae2d01056e17d9d47d13112a7c9cb05be4eadc45029d61880660166266d20fee3806938aa76dc36c545e0200207e15f376452ee645e990beddee82bf10cf"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x101, 0x1, "196c40676eb6607cf9d5bc324c7efa49929eb4cd0d185141e7dcc89cde5fe4384de437d7cddbcfe70d7a872d2107479bd620ab8d459db1a7d6578a70e8f292b6f9efb19f885b9fed7141ed4768d6fdc676921f57aa300e02dc24c6fdaf507521f55c129ecdd501c82f6a714982bcd3f0f098e41b0d3aaa3a3e4dbd5d5409f10e96334a75283de10dd56586327642e2d3327c8eea44b91b44738a9b63fecd1982a39c5ff92ec80ec253ee51ea5d152aae54835eb20d078e6afbc5b57238fa5a51ac7f2c4f50b3fc89104f3300cca7246082b44be4472805be6585381726548df08a6454a393a087306384774996439b80402b4628f87230b191afef9fa8"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x87, 0x1, "ba2331f52556ec4f4f4e97882046d359a63178bc218255d222b9ea401bfdeff446c4aae34c0205c26ab373f929a122fc59338c5bc0814488ce2f4192dc0210ee17bd83afb5c19a389815e1586934aefdbdd9c2cbaec9c0a14c23862bf1abb0ec6a5f4984c631cbbcf948c9b2e339991b3e50d315dd112a7f7a8e1e0f1a38a654269f26"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x14c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd6c}, @NFTA_SET_ELEM_EXPRESSIONS={0x120, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2ff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}]}}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x78, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xaaab}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x116c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xe5, 0x1, "71a8fded90fe5cc8d1c1291e036ea19ed34431ca089d6b2d30c9bb9c22e24725aa184792e2062a886a1ac7c5680542a35dbb8a9b390530a2b20af0eea8e20b480f02dd7adfed77271ac2b4f830626228f7711c514c0585b6609b60d02d271f94bdf65bf649ab6551e65a6473b789792c126e678c5599a2ee283ea691450b065f15c25854b602c18a9725151d57c87cd0697626fbc56740bbb338f147cebf35126fcdfc4f4404d6cc73505561600138adccaafa611d2d9ea89816b52c9815f094df3b00b3b9fb701c421a30f4f0fb1e89cacb3741e99afc53652cd1531aa5fe113e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_KEY={0x200, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7e, 0x1, "73babb6107d4b7e6d1e45ff57e1a20db1dafe1222b5d5191890a22903ba0cd12017476c20ea856dfedfa3aa9fa47a2b73d6e669e48dd43be9685496d3de0c05af64dcd3901a3e6e16a040dc6fb182b3d823106760647e5a1e2c1c71bfffc1116f729a088160433d1c9ad07b325dee30c98825dd512412fed67f1"}, @NFTA_DATA_VALUE={0x19, 0x1, "4c6aaaa2d0603d53f66ffeeaea97dd373e91982754"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "885ae56848c944ff78c2df430e0ccafd293a6840f96e8dce47d7a846bb33aa8e18f35068bec72f03876005c3fd48630f23a9205e8f2e99c8b322183b347d1fcd4657ee6c6e35c6f2e64c61d234dc1e00dbb94bb52bff64fb"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x92, 0x1, "b20069a82acd5ea259cda19362a5b8b8b63dc2b755e9bf6eeee5e913624b4d395cf2a2602274872abb27319db7b02787c1d8b4c69d25097f55d39335db438da6803e5e9852a96116260cb183516af147abbbe609b6a15b892427d363aed219cffe90c979e60eaf23409d8b3b99367fab3b7325e777d9c241c2ab62afb2d4893ff0500f273034b10de46811d9d150"}]}]}, {0x1688, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1248, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x96, 0x1, "19ee72c28e6fe85b5f95e24f8e8dc7aba841c5f03fcb4a8d42f7c83c1bcd76df711ac9ecd8ad911ffc335627be48225d405c15a694fbfda50a2ffce1f266373e6af3203c0a8b38666d2bb55b411756704e0f98a437fc61503161252b544fb1aa2990f8f378ebcd5f554785b275ffd7b8540d682cddc18d983e34bcd70599ace18b734763ff26b451a6732d1e36510c676e24"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xba, 0x1, "121064838ef3311b04bd3f7cc8e5cb301a8ffb482e0ea7a348b98614e1ad9e77c34f336dc320e9aafcf849e6df089693a72b46ac8bd40ed9601c066df1319c89b9571302fbd7dd98636937db6aa05b746e752db0ba6188e37133374271c78ebd33c49d49956336e1f485ec6554f7d03d2f022497497beab9c0784799b7405290264cb21f66dafe195d7e5dcb93cec85cbb68f3304500a25e98ed27a9bb59394bd2bca571639b7645538b3b0c530d7f2b813d089d221c"}, @NFTA_DATA_VALUE={0x93, 0x1, "53b1ddc86e1e2b3e0e9ed512394fe9864301a3bba14a22dda32a088b539276aa09543e2f4e72c2b3afc150234331a0214a7e94d20063822a23ae8847ce1751413eecb149865bba8b290c8dcf6d435446ca0229ffa3982ed88d1f4913ddb045e2c18bbea14ce675a4b94bf1fbec9035d89b0dab0c8182cf4d83c2c1851741a2eacfcd4f191a15d0934d9c3ff7f68c56"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x400, 0xb, 0x0, 0x1, [{0x24c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x238, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x90, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "cdebf37c147927c07357994d68b38a82cf2878dbf787c51431b95f7c5ee35b4499e0335fb3e0c57b0c1e04d159ab61ba9e5b4ef5dff890eb7bde05011f9f85a6b7181c8cd3a110a379c7f037a8265a848068ffd2b89e60d38a182a8b37eaba98cc8ccc8ae2bc4c44000dbc2299e374079184a1e8ab9c86cb38343d77660127a057dfa8aa2844ddb1bb04e658d084c3d82c22351c23dea474d5bea9b2ee7cc21caddb8964bc8544dff35ab474f984d1f2d55e8012f952e48dfa9a5794ba14ee9e93d9e5af89da9253ded720a5255e7dac7dc11a"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x124, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x114, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xb, 0x1, 'length\x00'}, @NFTA_MATCH_INFO={0xf2, 0x3, "eb0f8edd4be2c840db89282d9a04f382795b7ec52f3999625704d5b06948640e1b2c2b8392b774434f30c1bef83e1cb9ccdaae3495878e054b13c8eb81486f784f4d4c8d1d006d3df61aa4cfb4529466f6ef6e55fa4315c21f047c3609e420309351d50cf4e95af51b20ad06fc70109c1f44f1d2e9d9e4a133f1be78c62bc4b9d07d5f51ea8e8ea17e5c6392c89b44b2916523922a664270eb418fb96e6debd08b6b2b78e8a3c9eaa8e5ae9746a37d686c134ec35f79b95c25009dbc451517420b30ae1c0c101559319a86882412de988309914783de04817a6ae3f53e7868b669141af92fcde2b9a03214344a4a"}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x1a, 0x6, 0x1, 0x0, "bf58477c7f80da1a6528b911c6b088ecba64661420f2"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}, {0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x60}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_KEY={0x134, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9f, 0x1, "33d12037ddf0f84873b7f23c05f45d04f41b51e59fed4ccc7cea803d4b81bc3220322a0cdcac316cb7d195c4ae41923a1f11d71725061d49c65dbfa2e4bad9084df1201543ce859c69bdbe031176c24ec00e35fa9f7621af4b512fea237f7344e53c49434061feb496d5dfeb45ce17f78aa6a2cf58597e11734824742687c420c91e7927335f3829230d3e485e4d8915b489e6321f464c59d1054c"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x39, 0x1, "0681bd9abfe0e04453483c6f00444c30e911be23925cf2991191e61680eb1ea4c418a315e27173b356ad30b56eabc7180f1481b281"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x4010}, 0x1, 0x0, 0x0, 0x2000}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f0000004cc0)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x37}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000004e40)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004e00)={&(0x7f0000004d80)={0x54, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0x54}, 0x1, 0x0, 0x0, 0x2204c800}, 0x4811) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000004f80)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004f40)={&(0x7f0000004ec0)={0x58, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040804}, 0x40) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f00000050c0)={&(0x7f0000004fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005080)={&(0x7f0000005000)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x65) mkdir(&(0x7f0000005100)='./file0\x00', 0x120) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f00000052c0)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005280)={&(0x7f0000005180)={0xec, r0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xd3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xc0, 0xa9, @random="598d16cee15a03260900b0936d4434b1616d45d67fed2baf7550a28f8321acd22737f2e3c17c697afd915c367b8145000845269ba50eeaa9954076845c976d89dd98c87ba71bb090626381ab4b2eb8cd5151ef88570709fc18c0763fda1c2c091c27008ad7a64629a42f4f5d26ff40766ecb330669ed11848788c920529dfd93bc5a29d6524d19286a081c8ca43f9ff3ebda86fcc118f410ae9332e17cc7ca87c2edab71d587963aab53dc24209a1b3de15c9e196c2b42aa47fe56f3"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000000) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000005540)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005500)={&(0x7f0000005340)={0x1b0, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x170, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc343}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc79c}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x858}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa5ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x41bf1357}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5e310d19}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8f0}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xeeed}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xde}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xae}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5ce}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x4}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x72}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x29}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x880}, 0x40080d1) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000055c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000005680)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005640)={&(0x7f0000005600)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 1.002432925s ago: executing program 4 (id=2252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000440)={0x40, 0x21, 0xf7, {0xf7, 0x30, "e0839a559dc1c161c517bd3274503d40fcf3babe23a78b2bd9ff891728f833cc52d4a4f4b09e4efb53fae3169ff6a7f76056b1ba3777bd78e39b48ba2a21d874696379a13b000a9a2b89b831e233dab460a96af3cd72df43f809c377282f9a907cf8c4b98c39b909b81f987e219998fc522831f9ffb01f33795952f7f175fe9ca62a6714f011736abe4b53ba3a99028e1f378a6cf2387bbd83af6fe8ed6c7077402a2d024351213c3fe6ab50c330d77f11ed1a3bdaf13f03e21dbeef9911a5839e033d6cb9ee8de5bb22e931983812bb3280cc41ce0d41564f31ad02641530f88247f79471ea6f2f37b16211a711ffca209c33a6e9"}}, &(0x7f0000000540)={0x0, 0x3, 0x91, @string={0x91, 0x3, "cf2949a62eaf05fe22b60decc469dc9dd9af0e4a801ce6e90124d02e43cc46eeb55f563a4c9159bf038fe4ced7a51c8ae0738da4ae4229393951a36b9423c32c89a3d80e138f547935efed7b57e283c8fb51c788305673f9cf02aabc7cd71615f85bec33624bad7c2bfeda179b4761749761813089e85f9de8ab70a79a8be4b04a85084c4a972966a06c1c277e2638"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x20, 0x9, 0xd4, "d3bfde3b08504b6ab09dfc6f23f5325b6e93b4f2d6b9a8086c2e22c6cb029852e395f165db46596bf5c5ebf7917e5640ca463c6c5172b265c2d20a1bf4e23de400df59a7c5f411a341ee8f9898b83a922b4e76fc5ad709c9b17e985c9d49e7df842dc2acaa77a27ce30e694cdd5fefdb22022a89aafc57516c3a702b7c9188e6d6d2cea85d2d8685473d92f3b8b8d3843360d2f9068660dd97754f4088250c469dcce57d0a5d73f840ba7803d3f3c34602acb39f08ac55bd498b575a4bbb0b07b74d6a970b1bf5c2de11da0e4f6cc36c1e42eed3"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xba}, &(0x7f00000003c0)={0x20, 0x0, 0x9, {0x7, "59b5fcdcbc0491"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x1}}) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0f20e06635000002000f22e00f32ba2100ed670f01c33ef30f1eedbaf80c66b82c55d98466efbafc0c66ed0f092a3f0f205a66b9f209000066b80900000066ba008000000f30"}], 0x1, 0x4c, 0x0, 0xffffffffffffff66) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x80a0000, 0x3333d000}}, "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", "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"}) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 335.909035ms ago: executing program 4 (id=2253): r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r0, 0x501c4814, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x2, 0x1947, 0xf}) 335.245545ms ago: executing program 4 (id=2254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$bt_sco(r3, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xfffffe2e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, 0x0}}], 0x1, 0x40000) r4 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, 0x0, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r4, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/24, 0x18}, 0x40}], 0x1, 0x10002, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x20000) 319.436946ms ago: executing program 1 (id=2255): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x606200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async, rerun: 32) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6949c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c3522fff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041afc61529260e6c4046d55927c96dcce1", 0x7e}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c", 0x41}, {&(0x7f0000000f00)="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", 0x147}, {&(0x7f0000000240)="397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfebf169e77257f308b498e5b41722", 0x22}, {&(0x7f0000000440)="e78901b24f3291e9448af6bf802603c0a47d696e45734f3aadb096a0e9d428f71a7365c266b448adc5655f5b5c7574d6691fa86321c8ff9c33e6e68f073f3f5b289e9c2b6466", 0x46}, {&(0x7f00000002c0)="b6139dc68c219b157760a3cbf255087b81aaba8e246b1d98cac2af5ddb62415a0c56728b0d360ce8a1fa", 0x2a}], 0x6}}], 0x1, 0x20008000) (async, rerun: 64) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (rerun: 64) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) (async, rerun: 64) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f0000000200)) (rerun: 64) 319.000366ms ago: executing program 4 (id=2256): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000003b"]) syz_usb_connect(0x3, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e10630715108856000000010902"], 0x0) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/6, 0x6, 0x0, &(0x7f0000000180)=@in={0x2, 0x4e22, @loopback}, 0x80) syz_open_procfs$namespace(r0, &(0x7f00000003c0)='ns/mnt\x00') 90.609459ms ago: executing program 2 (id=2257): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x4a, &(0x7f0000002900)=0x659c, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x0, 0x83) read$FUSE(r4, &(0x7f0000001040)={0x2020}, 0x2020) r5 = eventfd(0x8) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x2, r5}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x8, 0xc, [0xfffffff6, 0x2, 0xa]}}) 193.98µs ago: executing program 2 (id=2258): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000160001"], 0x20}}, 0x40816) (async) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000100)=0xfffffff3, 0x4) 0s ago: executing program 2 (id=2259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0xfffffffffffffd04, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0xfffffeef}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000000)="415e4606b7635a3b05a06a0a440ccc44597e83f8715b4b93f7251e71bc05d35c", 0x20}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)}, {&(0x7f00000005c0)="088a0dc2e9c7abeb4af2bf9a7b93fc1a9ff2da468ab8bb09b4aebbcd9b491aeeabb7f8e735d3e507a16756b67d7d7620af7f1d9a968228113ed2d579ef85b504cb0dccf51eb0aa8f178911476078dda66c1050afebf54e0f7a5f606f615910f72f8dd2fa3e6d2bd208ccb3455cb7e7a9e8db46d9576472129fc55da963474acdb5f31af7a5ee86e69e6f30c6eaa0faf7dbcdd5afe225ef75308d5db4234cce7ad3", 0xa1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001080)="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", 0x277}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000100)='s', 0x1}, {&(0x7f0000000140)="1d", 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="ed", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): d_fail_ex+0x3d9/0x530 [ 80.286407][ T2562] should_failslab+0xac/0x100 [ 80.286431][ T2562] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 80.286452][ T2562] ? dup_task_struct+0xbc/0xc50 [ 80.286470][ T2562] ? kasan_save_track+0x4f/0x80 [ 80.286492][ T2562] dup_task_struct+0xbc/0xc50 [ 80.286508][ T2562] ? __kasan_check_write+0x18/0x20 [ 80.286527][ T2562] ? _raw_spin_lock_irq+0x8d/0x120 [ 80.286541][ T2562] ? copy_process+0x3220/0x3220 [ 80.286555][ T2562] ? __kasan_check_write+0x18/0x20 [ 80.286571][ T2562] copy_process+0x538/0x3220 [ 80.286589][ T2562] ? __cfi_copy_process+0x10/0x10 [ 80.286605][ T2562] ? __kasan_check_write+0x18/0x20 [ 80.286621][ T2562] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 80.286642][ T2562] vhost_task_create+0x1d6/0x350 [ 80.286662][ T2562] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 80.286684][ T2562] ? __cfi_vhost_task_create+0x10/0x10 [ 80.286703][ T2562] ? __cfi_vhost_task_fn+0x10/0x10 [ 80.286722][ T2562] ? __kasan_check_write+0x18/0x20 [ 80.286740][ T2562] ? mutex_lock+0x92/0x1c0 [ 80.286763][ T2562] ? __cfi_mutex_lock+0x10/0x10 [ 80.286779][ T2562] ? kernel_text_address+0xa9/0xe0 [ 80.286796][ T2562] kvm_mmu_post_init_vm+0x1a6/0x310 [ 80.286815][ T2562] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 80.286832][ T2562] ? _parse_integer_limit+0x195/0x1e0 [ 80.286850][ T2562] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 80.286873][ T2562] ? kstrtoull+0x13b/0x1e0 [ 80.286889][ T2562] ? kstrtouint+0x78/0xf0 [ 80.286904][ T2562] ? ioctl_has_perm+0x1aa/0x4d0 [ 80.286926][ T2562] ? __asan_memcpy+0x5a/0x80 [ 80.286944][ T2562] ? ioctl_has_perm+0x3e0/0x4d0 [ 80.286966][ T2562] ? has_cap_mac_admin+0xd0/0xd0 [ 80.286986][ T2562] ? __kasan_check_write+0x18/0x20 [ 80.287003][ T2562] ? mutex_lock_killable+0x92/0x1c0 [ 80.287020][ T2562] ? __cfi_mutex_lock_killable+0x10/0x10 [ 80.287037][ T2562] ? proc_fail_nth_write+0x17e/0x210 [ 80.287053][ T2562] kvm_vcpu_ioctl+0x96f/0xee0 [ 80.287073][ T2562] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 80.287092][ T2562] ? __cfi_vfs_write+0x10/0x10 [ 80.287110][ T2562] ? __kasan_check_write+0x18/0x20 [ 80.287127][ T2562] ? mutex_unlock+0x8b/0x240 [ 80.287144][ T2562] ? __cfi_mutex_unlock+0x10/0x10 [ 80.287161][ T2562] ? __fget_files+0x2c5/0x340 [ 80.287182][ T2562] ? __fget_files+0x2c5/0x340 [ 80.287201][ T2562] ? bpf_lsm_file_ioctl+0xd/0x20 [ 80.287217][ T2562] ? security_file_ioctl+0x34/0xd0 [ 80.287236][ T2562] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 80.287254][ T2562] __se_sys_ioctl+0x132/0x1b0 [ 80.287274][ T2562] __x64_sys_ioctl+0x7f/0xa0 [ 80.287293][ T2562] x64_sys_call+0x1878/0x2ee0 [ 80.287313][ T2562] do_syscall_64+0x58/0xf0 [ 80.287329][ T2562] ? clear_bhb_loop+0x50/0xa0 [ 80.287347][ T2562] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.287363][ T2562] RIP: 0033:0x7f578098e929 [ 80.287377][ T2562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.287389][ T2562] RSP: 002b:00007f57817cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.287407][ T2562] RAX: ffffffffffffffda RBX: 00007f5780bb5fa0 RCX: 00007f578098e929 [ 80.287419][ T2562] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 80.287430][ T2562] RBP: 00007f57817cf090 R08: 0000000000000000 R09: 0000000000000000 [ 80.287442][ T2562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.287452][ T2562] R13: 0000000000000000 R14: 00007f5780bb5fa0 R15: 00007ffe22aa6888 [ 80.287466][ T2562] [ 80.683267][ T2563] __vm_enough_memory: pid: 2563, comm: syz.3.794, bytes: 70373039144960 not enough memory for the allocation [ 80.709731][ T2563] syzkaller0: entered promiscuous mode [ 80.722398][ T2563] syzkaller0: entered allmulticast mode [ 80.745701][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 80.745717][ T36] audit: type=1400 audit(1751579279.133:407): avc: denied { bind } for pid=2565 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.751897][ T2566] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.966460][ T2581] overlayfs: failed to clone upperpath [ 80.991013][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.994925][ T2583] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 80.997411][ T36] audit: type=1400 audit(1751579279.383:408): avc: denied { accept } for pid=2584 comm="syz.2.805" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.112590][ T2599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.121798][ T2599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.172821][ T2596] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.214724][ T2603] netlink: 'syz.3.813': attribute type 30 has an invalid length. [ 81.516402][ T2610] tipc: Can't bind to reserved service type 0 [ 81.534862][ T2616] overlayfs: failed to clone upperpath [ 81.542878][ T2616] overlayfs: failed to clone upperpath [ 81.613355][ T2629] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.680566][ T2635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.731846][ T2635] rust_binder: 2635: no such ref 3 [ 82.040340][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 82.190340][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 82.196670][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 82.207626][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.217341][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.229601][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.238723][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.246753][ T10] usb 4-1: Product: syz [ 82.250928][ T10] usb 4-1: Manufacturer: syz [ 82.255507][ T10] usb 4-1: SerialNumber: syz [ 82.426591][ T36] audit: type=1400 audit(1751579281.814:409): avc: denied { ioctl } for pid=2650 comm="syz.2.831" path="socket:[24318]" dev="sockfs" ino=24318 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.486968][ T2655] cgroup: fork rejected by pids controller in /syz2 [ 82.662322][ T10] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 83.060343][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.060374][ T1010] Bluetooth: hci0: command 0x1003 tx timeout [ 83.097684][ T2801] tipc: Started in network mode [ 83.102728][ T2801] tipc: Node identity a252f74f4e34, cluster identity 4711 [ 83.108680][ T2803] netlink: 96 bytes leftover after parsing attributes in process `syz.2.840'. [ 83.110028][ T2801] tipc: Enabled bearer , priority 0 [ 83.134541][ T2798] tipc: Disabling bearer [ 83.136805][ T2807] overlayfs: failed to clone upperpath [ 83.240090][ T2093] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 83.248765][ T2093] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.678753][ T10] usb 4-1: USB disconnect, device number 20 [ 83.689977][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.192839][ T2836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.299947][ T2844] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.300176][ T2844] rust_binder: Error while translating object. [ 84.306934][ T2844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.313198][ T2844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:523 [ 84.323589][ T36] audit: type=1400 audit(1751579283.724:410): avc: denied { create } for pid=2843 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.399330][ T2849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.408174][ T2849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.476011][ T2855] rust_binder: Write failure EFAULT in pid:531 [ 84.505940][ T2855] overlay: filesystem on ./bus not supported as upperdir [ 84.639924][ T2849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.648850][ T2849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.658992][ T2849] cgroup: Unknown parameter './binderfs/binder0' [ 84.700340][ T656] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 84.823878][ T36] audit: type=1400 audit(1751579284.214:411): avc: denied { mounton } for pid=2857 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 84.850331][ T656] usb 2-1: Using ep0 maxpacket: 8 [ 84.858158][ T656] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 84.867363][ T656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.875574][ T656] usb 2-1: Product: syz [ 84.879818][ T656] usb 2-1: Manufacturer: syz [ 84.880297][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.884671][ T656] usb 2-1: SerialNumber: syz [ 84.891581][ T2857] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.903365][ T2857] bridge_slave_0: entered allmulticast mode [ 84.906676][ T656] usb 2-1: config 0 descriptor?? [ 84.909738][ T2857] bridge_slave_0: entered promiscuous mode [ 84.920718][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.927761][ T2857] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.934861][ T2857] bridge_slave_1: entered allmulticast mode [ 84.941067][ T2857] bridge_slave_1: entered promiscuous mode [ 84.980607][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.987654][ T2857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.994960][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.002014][ T2857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.023415][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.030847][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.040497][ T732] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.047567][ T732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.056488][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.063553][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.089262][ T2857] veth0_vlan: entered promiscuous mode [ 85.100949][ T2857] veth1_macvtap: entered promiscuous mode [ 85.122507][ T36] audit: type=1400 audit(1751579284.514:412): avc: denied { mounton } for pid=2857 comm="syz-executor" path="/root/syzkaller.JmTlET/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 85.164244][ T2862] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 85.164263][ T2862] rust_binder: Error while translating object. [ 85.176752][ T2862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.183388][ T2862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 85.228091][ T36] audit: type=1400 audit(1751579284.614:413): avc: denied { bind } for pid=2869 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.257324][ T2871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.266727][ T2871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.276824][ T2870] rust_binder: Write failure EFAULT in pid:563 [ 85.712141][ T2883] netlink: 96 bytes leftover after parsing attributes in process `syz.4.870'. [ 85.832387][ T2894] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.999196][ T2913] netlink: 96 bytes leftover after parsing attributes in process `syz.0.880'. [ 86.035853][ T2899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.046059][ T2899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.110337][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.119756][ T36] audit: type=1400 audit(1751579285.504:414): avc: denied { ioctl } for pid=2919 comm="syz.0.883" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.150517][ T36] audit: type=1400 audit(1751579285.544:415): avc: denied { create } for pid=2922 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 86.722957][ T36] audit: type=1400 audit(1751579286.114:416): avc: denied { wake_alarm } for pid=2953 comm="syz.2.895" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.774834][ T36] audit: type=1400 audit(1751579286.164:417): avc: denied { create } for pid=2958 comm="syz.4.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 87.190682][ T2968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.199282][ T2968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.464541][ T2974] overlayfs: failed to clone upperpath [ 87.725358][ T2978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.725387][ T2978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:621 [ 87.742726][ T2980] netlink: 1619 bytes leftover after parsing attributes in process `syz.0.905'. [ 87.892787][ T10] usb 2-1: USB disconnect, device number 23 [ 87.956799][ T3022] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.998943][ T3033] tmpfs: Unknown parameter 'quota' [ 88.251669][ T3083] overlayfs: failed to clone upperpath [ 88.257841][ T3083] overlayfs: failed to clone upperpath [ 88.500351][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 88.514231][ T36] audit: type=1400 audit(1751579287.904:418): avc: denied { shutdown } for pid=3102 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.651371][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.661546][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.671689][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.680756][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.688740][ T10] usb 2-1: Product: syz [ 88.692914][ T10] usb 2-1: Manufacturer: syz [ 88.697500][ T10] usb 2-1: SerialNumber: syz [ 88.776198][ T3109] overlayfs: failed to clone upperpath [ 88.835996][ T3117] overlayfs: failed to clone upperpath [ 88.843092][ T3117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 88.905782][ T10] usb 2-1: 0:2 : does not exist [ 88.913171][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 88.925431][ T10] usb 2-1: USB disconnect, device number 24 [ 88.935731][ T379] udevd[379]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.073379][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.073533][ T3130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 89.090814][ T292] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 89.330380][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.480365][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 89.486644][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.498313][ T31] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 89.509387][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.517552][ T31] usb 5-1: Product: syz [ 89.521978][ T31] usb 5-1: Manufacturer: syz [ 89.526644][ T31] usb 5-1: SerialNumber: syz [ 89.533542][ T31] usb 5-1: config 0 descriptor?? [ 89.539766][ T31] cdc_ether 5-1:0.0: probe with driver cdc_ether failed with error -22 [ 89.548486][ T31] usb 5-1: unsupported MDLM descriptors [ 89.636991][ T36] audit: type=1400 audit(1751579289.024:419): avc: denied { mount } for pid=3154 comm="syz.0.975" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.670669][ T3157] overlayfs: failed to clone upperpath [ 89.676779][ T3157] overlayfs: failed to clone upperpath [ 89.745454][ T3130] rust_binder: Error while translating object. [ 89.745497][ T3130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.753756][ T3130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 89.858755][ T36] audit: type=1326 audit(1751579289.244:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3191 comm="syz.2.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f945418e929 code=0x0 [ 89.890621][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 89.913313][ T3171] bridge0: port 3(syz_tun) entered blocking state [ 89.920013][ T3171] bridge0: port 3(syz_tun) entered disabled state [ 89.926577][ T3171] syz_tun: entered allmulticast mode [ 89.932241][ T3171] syz_tun: entered promiscuous mode [ 89.937494][ T3171] bridge0: port 3(syz_tun) entered blocking state [ 89.943937][ T3171] bridge0: port 3(syz_tun) entered forwarding state [ 90.042124][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.049829][ T10] usb 2-1: too many configurations: 122, using maximum allowed: 8 [ 90.058364][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.068615][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.078552][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.088698][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.098216][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.108404][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.117936][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.128064][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.137631][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.147750][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.157288][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.167394][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.177060][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.187411][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.197056][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.207220][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.217547][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=dded, bcdDevice=40.38 [ 90.226675][ T10] usb 2-1: New USB device strings: Mfr=176, Product=124, SerialNumber=190 [ 90.235631][ T10] usb 2-1: Product: syz [ 90.239781][ T10] usb 2-1: Manufacturer: syz [ 90.244382][ T10] usb 2-1: SerialNumber: syz [ 90.285470][ T31] usb 5-1: USB disconnect, device number 3 [ 90.557676][ T3205] fuseblk: Bad value for 'fd' [ 90.577190][ T10] usb 2-1: USB disconnect, device number 25 [ 90.692483][ T3224] overlayfs: failed to clone upperpath [ 90.698576][ T3224] overlayfs: failed to clone upperpath [ 90.718311][ T36] audit: type=1400 audit(1751579290.104:421): avc: denied { create } for pid=3231 comm="syz.0.1003" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.762043][ T3239] overlayfs: conflicting options: userxattr,verity=require [ 91.140376][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 91.140376][ T1010] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.160568][ T3246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1008'. [ 91.169817][ T3246] /dev/md0: Can't lookup blockdev [ 91.184705][ T3248] x_tables: duplicate underflow at hook 1 [ 91.200608][ T36] audit: type=1326 audit(1751579290.594:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3252 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe97b8e929 code=0x7ffc0000 [ 91.224215][ T36] audit: type=1326 audit(1751579290.594:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3252 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe97b8e929 code=0x7ffc0000 [ 91.247584][ T36] audit: type=1326 audit(1751579290.594:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3252 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efe97b8e929 code=0x7ffc0000 [ 91.274359][ T36] audit: type=1326 audit(1751579290.594:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3252 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe97b8e929 code=0x7ffc0000 [ 91.306157][ T36] audit: type=1326 audit(1751579290.594:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3252 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efe97b8e929 code=0x7ffc0000 [ 91.329511][ T36] audit: type=1326 audit(1751579290.594:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3252 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe97b8e929 code=0x7ffc0000 [ 91.352959][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 91.360587][ T36] audit: type=1326 audit(1751579290.594:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3252 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe97b8e929 code=0x7ffc0000 [ 91.384015][ T36] audit: type=1326 audit(1751579290.594:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3252 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe97b8e929 code=0x7ffc0000 [ 91.407991][ T36] audit: type=1326 audit(1751579290.594:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3252 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe97b8e929 code=0x7ffc0000 [ 91.431344][ T36] audit: type=1326 audit(1751579290.594:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3252 comm="syz.4.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe97b8e929 code=0x7ffc0000 [ 91.510331][ T10] usb 2-1: device descriptor read/64, error -71 [ 91.520387][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.673290][ T45] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.686391][ T45] usb 5-1: config 1 interface 0 has no altsetting 0 [ 91.695187][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.40 [ 91.704670][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.712791][ T45] usb 5-1: Product: 掑⥳篌㙒ⱺ䶳螻︆困曝쌌뾓袯⊆ベ鄅ಋꥈ靖콥頨颠㨄쌝㡺뷐귳攙ඊ㏛㴣ᜮꪉ [ 91.725442][ T45] usb 5-1: Manufacturer: 稓节薹埄ݼ࿫樠ᡄ툦訨廌爁䣊䩟⁆⋗냿砂⫤꬚ⱙ쯣႕廐⇖镰삹馽삍좯ꏱ탡眰ﰽ瘏웦치䀄㭂ꥁ쑌樄ǃ궤䊥Ӗ㘭Ͼ竄⥹覒刷轔꠴㠜놥薽疂탟㸆놿䚭㒉㑯Ỗ㌈归饿ᫀ鲒㜺萍튘䰵괆絹籝君㶼ꑛퟰ㐣 [ 91.752889][ T45] usb 5-1: SerialNumber: ࠠ [ 91.760483][ T10] usb 2-1: device descriptor read/64, error -71 [ 91.996843][ T45] usbhid 5-1:1.0: can't add hid device: -71 [ 92.003319][ T45] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 92.020659][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 92.021645][ T45] usb 5-1: USB disconnect, device number 4 [ 92.170390][ T10] usb 2-1: device descriptor read/64, error -71 [ 92.324590][ T3274] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 92.327339][ T3276] tmpfs: Bad value for 'uid' [ 92.337488][ T3276] tmpfs: Bad value for 'uid' [ 92.337634][ T3274] overlay: Unknown parameter ' l#7Oѳ.)ʸh͎\M~hb ' [ 92.342534][ T3276] tmpfs: Bad value for 'uid' [ 92.355546][ T3274] overlay: Unknown parameter ' l#7Oѳ.)ʸh͎\M~hb ' [ 92.355706][ T3276] tmpfs: Bad value for 'uid' [ 92.369120][ T3276] tmpfs: Bad value for 'uid' [ 92.369729][ T3274] overlay: Unknown parameter ' l#7Oѳ.)ʸh͎\M~hb ' [ 92.373889][ T3276] tmpfs: Bad value for 'uid' [ 92.387517][ T3274] overlay: Unknown parameter ' l#7Oѳ.)ʸh͎\M~hb ' [ 92.410345][ T10] usb 2-1: device descriptor read/64, error -71 [ 92.520411][ T10] usb usb2-port1: attempt power cycle [ 92.602974][ T3281] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 92.617245][ T3281] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 92.643966][ T3283] rust_binder: Write failure EFAULT in pid:61 [ 92.644968][ T3285] rust_binder: Write failure EFAULT in pid:61 [ 92.695679][ T3293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1024'. [ 92.860436][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 92.881548][ T10] usb 2-1: device descriptor read/8, error -71 [ 92.956163][ T3309] /dev/loop0: Can't lookup blockdev [ 93.011683][ T10] usb 2-1: device descriptor read/8, error -71 [ 93.250387][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 93.271427][ T10] usb 2-1: device descriptor read/8, error -71 [ 93.401341][ T10] usb 2-1: device descriptor read/8, error -71 [ 93.510547][ T10] usb usb2-port1: unable to enumerate USB device [ 93.538539][ T3326] netlink: 'syz.4.1036': attribute type 7 has an invalid length. [ 93.547465][ T3326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1036'. [ 93.569187][ T3329] binder: Unknown parameter 'obj_user' [ 93.820388][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.981406][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.993104][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.005604][ T45] usb 5-1: New USB device found, idVendor=89a7, idProduct=ab19, bcdDevice= 0.40 [ 94.017138][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.025633][ T45] usb 5-1: Product: syz [ 94.029809][ T45] usb 5-1: Manufacturer: syz [ 94.034445][ T45] usb 5-1: SerialNumber: syz [ 94.042101][ T45] usb 5-1: selecting invalid altsetting 1 [ 94.097836][ T3338] rust_binder: Write failure EINVAL in pid:560 [ 94.442433][ T45] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 94.455175][ T45] cdc_ncm 5-1:1.0: bind() failure [ 94.456579][ T3332] cgroup: No subsys list or none specified [ 94.525241][ T3332] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.591732][ T10] usb 5-1: USB disconnect, device number 5 [ 94.915501][ T3400] cgroup: release_agent respecified [ 94.965852][ T3405] overlayfs: failed to clone upperpath [ 95.111863][ T3420] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 95.111884][ T3420] rust_binder: Read failure Err(EFAULT) in pid:84 [ 95.234475][ T3428] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1072'. [ 95.405771][ T3433] 9pnet_fd: Insufficient options for proto=fd [ 95.663623][ T3473] overlayfs: failed to clone upperpath [ 95.681341][ T3473] overlayfs: failed to clone upperpath [ 95.701914][ T3477] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 95.710677][ T3476] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 96.245114][ T3509] mmap: syz.2.1100 (3509): VmData 17453056 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 96.408485][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 96.408500][ T36] audit: type=1400 audit(1751579295.794:466): avc: denied { read } for pid=3519 comm="syz.2.1104" path="socket:[29766]" dev="sockfs" ino=29766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.885588][ T3548] /dev/rnullb0: Can't lookup blockdev [ 96.891112][ T36] audit: type=1400 audit(96.860:467): avc: denied { mounton } for pid=3547 comm="syz.1.1113" path="/226/file0" dev="tmpfs" ino=1242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.954378][ T36] audit: type=1400 audit(96.930:468): avc: denied { getopt } for pid=3552 comm="syz.0.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.017675][ T3562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=3562 comm=syz.0.1118 [ 97.091261][ T3572] rust_binder: Write failure EINVAL in pid:97 [ 97.208871][ T36] audit: type=1400 audit(97.180:469): avc: denied { create } for pid=3595 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.480367][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 97.631510][ T10] usb 5-1: config index 0 descriptor too short (expected 9292, got 27) [ 97.639967][ T10] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 97.648310][ T10] usb 5-1: config 0 has no interface number 0 [ 97.654478][ T10] usb 5-1: config 0 interface 217 has no altsetting 0 [ 97.663298][ T10] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01cf, bcdDevice=6d.7a [ 97.672859][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.677698][ T3626] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1142'. [ 97.682384][ T10] usb 5-1: Product: syz [ 97.694512][ T10] usb 5-1: Manufacturer: syz [ 97.699360][ T10] usb 5-1: SerialNumber: syz [ 97.704507][ T36] audit: type=1400 audit(97.680:470): avc: denied { accept } for pid=3627 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.724501][ T10] usb 5-1: config 0 descriptor?? [ 97.759493][ T36] audit: type=1400 audit(97.730:471): avc: denied { create } for pid=3634 comm="syz.0.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 97.834520][ T3648] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1151'. [ 97.887685][ T3653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'. [ 97.937927][ T10] ftdi_sio 5-1:0.217: FTDI USB Serial Device converter detected [ 97.947522][ T10] ftdi_sio ttyUSB0: unknown device type: 0x6d7a [ 97.980350][ T36] audit: type=1400 audit(97.950:472): avc: denied { watch } for pid=3665 comm="syz.2.1157" path="/359/file0" dev="tmpfs" ino=1953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 97.998592][ T10] usb 5-1: USB disconnect, device number 6 [ 98.010494][ T10] ftdi_sio 5-1:0.217: device disconnected [ 98.030657][ T3675] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1161'. [ 98.624036][ T36] audit: type=1400 audit(98.600:473): avc: denied { listen } for pid=3688 comm="syz.4.1165" path=2F33372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 98.679791][ T3693] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 98.860334][ T45] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 98.924041][ T3720] batadv_slave_1: entered promiscuous mode [ 98.948582][ T36] audit: type=1326 audit(98.920:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3728 comm="syz.2.1180" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f945418e929 code=0x0 [ 99.011385][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.021624][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.031861][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.040971][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.049052][ T45] usb 5-1: Product: syz [ 99.053236][ T45] usb 5-1: Manufacturer: syz [ 99.057822][ T45] usb 5-1: SerialNumber: syz [ 99.076848][ T3722] batadv_slave_1: left promiscuous mode [ 99.265451][ T45] usb 5-1: 0:2 : does not exist [ 99.272040][ T45] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 99.282677][ T45] usb 5-1: USB disconnect, device number 7 [ 99.779404][ T3750] cgroup: Unknown subsys name 'rlimit' [ 99.779404][ T36] audit: type=1400 audit(99.750:475): avc: denied { mounton } for pid=3749 comm="syz.4.1189" path="/file0" dev="ramfs" ino=29522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 99.892860][ T3754] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 100.314107][ T3773] netlink: 'syz.1.1196': attribute type 12 has an invalid length. [ 100.724183][ T3782] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 100.724205][ T3782] rust_binder: Read failure Err(EFAULT) in pid:120 [ 100.732390][ T3783] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 100.738970][ T3783] rust_binder: Read failure Err(EFAULT) in pid:120 [ 101.010377][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 101.170363][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 101.176538][ T45] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 101.185395][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.195524][ T45] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.204508][ T45] usb 5-1: config 1 has no interface number 1 [ 101.210640][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 101.223434][ T45] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.234556][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.243638][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.251702][ T45] usb 5-1: Product: syz [ 101.255898][ T45] usb 5-1: Manufacturer: syz [ 101.260533][ T45] usb 5-1: SerialNumber: syz [ 101.380189][ T3820] overlayfs: missing 'lowerdir' [ 101.385633][ T3820] overlayfs: failed to clone upperpath [ 101.395482][ T3820] overlayfs: failed to clone upperpath [ 101.423082][ T3825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 101.518152][ T3787] rust_binder: 3787: no such ref 3 [ 101.523579][ T3787] rust_binder: Error while translating object. [ 101.523596][ T3787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.529776][ T3787] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 101.539742][ T3787] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:125 [ 101.555884][ T45] usb 5-1: USB disconnect, device number 8 [ 101.962247][ T3840] lo: entered promiscuous mode [ 101.967255][ T3840] lo: left promiscuous mode [ 102.118534][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 102.118550][ T36] audit: type=1400 audit(102.100:477): avc: denied { mounton } for pid=3841 comm="syz.4.1224" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 102.482010][ T3868] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1234'. [ 102.501215][ T3870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1235'. [ 102.502547][ T3872] batadv_slave_1: entered promiscuous mode [ 102.517297][ T3869] batadv_slave_1: left promiscuous mode [ 102.630372][ T3888] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1239'. [ 102.649784][ T36] audit: type=1400 audit(102.620:478): avc: denied { watch watch_reads } for pid=3891 comm="syz.2.1240" path="/386/file0" dev="tmpfs" ino=2103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.931994][ T36] audit: type=1400 audit(102.910:479): avc: denied { nlmsg_read } for pid=3904 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 102.982297][ T3910] binder: Bad value for 'stats' [ 102.997396][ T36] audit: type=1326 audit(102.960:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3846 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4cdb8e929 code=0x7fc00000 [ 103.112278][ T3917] rust_binder: got new transaction with bad transaction stack [ 103.112304][ T3917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 103.347894][ T36] audit: type=1400 audit(103.320:481): avc: denied { accept } for pid=3935 comm="syz.1.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.399623][ T3943] batadv_slave_1: entered promiscuous mode [ 103.406653][ T3941] batadv_slave_1: left promiscuous mode [ 103.911318][ T3972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 103.920430][ T3972] rust_binder: 3972: no such ref 2 [ 103.925567][ T3972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 104.160359][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.320350][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 104.326567][ T31] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 104.334658][ T31] usb 5-1: config 0 has no interface number 0 [ 104.340764][ T31] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.351687][ T31] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.362340][ T31] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 104.371390][ T31] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 104.379491][ T31] usb 5-1: Product: syz [ 104.383687][ T31] usb 5-1: SerialNumber: syz [ 104.388807][ T31] usb 5-1: config 0 descriptor?? [ 104.784510][ T31] usb 5-1: USB disconnect, device number 9 [ 113.090038][ T3984] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.090472][ T3984] rust_binder: Error while translating object. [ 113.097642][ T3984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 113.105711][ T3984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:146 [ 113.138289][ T4001] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1281'. [ 113.144710][ T36] audit: type=1400 audit(113.110:482): avc: denied { sqpoll } for pid=4002 comm="syz.1.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.248302][ T4025] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1289'. [ 113.257524][ T4025] 0M: renamed from gretap0 (while UP) [ 113.263995][ T4025] 0M: entered allmulticast mode [ 113.269427][ T4025] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 113.343662][ T4047] overlayfs: failed to clone upperpath [ 113.349968][ T4047] overlayfs: failed to clone upperpath [ 113.600357][ T1033] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 113.751515][ T1033] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.763193][ T1033] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.774641][ T1033] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.786109][ T1033] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 113.795319][ T1033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.811795][ T4051] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 113.820136][ T4099] 9pnet_fd: Insufficient options for proto=fd [ 114.502043][ T4169] netlink: 'syz.0.1340': attribute type 4 has an invalid length. [ 114.532522][ T4177] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=43 sclass=netlink_xfrm_socket pid=4177 comm=syz.1.1344 [ 114.547404][ T4177] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1344'. [ 114.557303][ T4177] fuse: Bad value for 'fd' [ 114.564375][ T36] audit: type=1400 audit(114.550:483): avc: denied { create } for pid=4176 comm="syz.1.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.605940][ T4181] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1346'. [ 114.614934][ T4181] 0{X: renamed from gretap0 [ 114.620964][ T4181] 0{X: entered allmulticast mode [ 114.626376][ T4181] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 114.772849][ T4204] batadv_slave_1: entered promiscuous mode [ 114.779186][ T1033] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 114.780996][ T4204] batadv_slave_1: left promiscuous mode [ 114.787530][ T1033] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input34 [ 114.812645][ T36] audit: type=1400 audit(114.790:484): avc: denied { checkpoint_restore } for pid=4207 comm="syz.1.1355" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.835999][ T1033] usb 5-1: USB disconnect, device number 10 [ 114.852360][ T4211] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1356'. [ 114.954602][ T4235] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1365'. [ 114.972049][ T4237] tipc: Enabling of bearer rejected, failed to enable media [ 115.027119][ T4246] netlink: 5640 bytes leftover after parsing attributes in process `syz.2.1369'. [ 115.045846][ T36] audit: type=1400 audit(115.020:485): avc: denied { map } for pid=4248 comm="syz.2.1370" path="socket:[32135]" dev="sockfs" ino=32135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 115.099943][ T4259] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1374'. [ 115.619271][ T4291] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1388'. [ 115.620976][ T2093] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 115.801664][ T2093] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 115.811209][ T2093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.819755][ T2093] usb 5-1: config 0 descriptor?? [ 116.227817][ T2093] appleir 0003:05AC:8241.000C: item fetching failed at offset 2/5 [ 116.236048][ T2093] appleir 0003:05AC:8241.000C: parse failed [ 116.242167][ T2093] appleir 0003:05AC:8241.000C: probe with driver appleir failed with error -22 [ 116.433181][ T4266] batadv_slave_1: entered promiscuous mode [ 116.439392][ T4266] batadv_slave_1: left promiscuous mode [ 116.447602][ T2093] usb 5-1: USB disconnect, device number 11 [ 116.672814][ T4341] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1407'. [ 116.682281][ T4341] 0M: entered promiscuous mode [ 116.687497][ T4341] 0M: left allmulticast mode [ 116.694384][ T4341] 0{X: renamed from 30M [ 116.696863][ T36] audit: type=1326 audit(116.680:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.1.1408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f578098e929 code=0x0 [ 116.723236][ T4341] 0{X: left promiscuous mode [ 116.728290][ T4341] 0{X: entered allmulticast mode [ 116.734757][ T4341] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 116.752318][ T4348] batadv_slave_1: entered promiscuous mode [ 116.759527][ T4347] batadv_slave_1: left promiscuous mode [ 116.970971][ T4370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.036822][ T4372] raw_sendmsg: syz.2.1418 forgot to set AF_INET. Fix it! [ 117.378068][ T36] audit: type=1400 audit(117.350:487): avc: denied { create } for pid=4414 comm="syz.1.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 117.416031][ T4425] overlayfs: failed to clone upperpath [ 117.423837][ T4425] overlayfs: failed to clone upperpath [ 117.453936][ T4430] fuse: Bad value for 'fd' [ 117.581921][ T4441] overlayfs: failed to clone upperpath [ 117.588075][ T4441] overlayfs: failed to clone upperpath [ 117.975226][ T4460] can0: slcan on ptm0. [ 117.980635][ T4462] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 117.994862][ T4462] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 118.042214][ T4459] can0 (unregistered): slcan off ptm0. [ 118.123680][ T4491] overlayfs: failed to clone upperpath [ 118.402214][ T4515] __nla_validate_parse: 1 callbacks suppressed [ 118.402234][ T4515] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1460'. [ 118.530918][ T4537] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1469'. [ 118.750384][ T2093] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 118.769788][ T4549] overlayfs: failed to clone upperpath [ 118.823027][ T4565] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1478'. [ 118.861232][ T4576] overlayfs: failed to clone lowerpath [ 118.880954][ T36] audit: type=1400 audit(118.860:488): avc: denied { name_bind } for pid=4578 comm="syz.0.1483" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 118.902874][ T2093] usb 5-1: device descriptor read/64, error -71 [ 118.922162][ T36] audit: type=1400 audit(118.900:489): avc: denied { nlmsg_write } for pid=4582 comm="syz.1.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 119.010840][ T36] audit: type=1400 audit(118.990:490): avc: denied { ioctl } for pid=4531 comm="syz.4.1467" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.140363][ T2093] usb 5-1: device descriptor read/64, error -71 [ 119.380357][ T2093] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 119.405972][ T4591] tipc: Enabling of bearer rejected, failed to enable media [ 119.496507][ T4613] fuse: Unknown parameter 'fd' [ 119.510997][ T2093] usb 5-1: device descriptor read/64, error -71 [ 119.522288][ T36] audit: type=1400 audit(119.500:491): avc: denied { execute_no_trans } for pid=4616 comm="syz.1.1499" path="/355/file1" dev="tmpfs" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.750431][ T2093] usb 5-1: device descriptor read/64, error -71 [ 119.860484][ T2093] usb usb5-port1: attempt power cycle [ 120.089659][ T4645] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=43 sclass=netlink_xfrm_socket pid=4645 comm=syz.1.1509 [ 120.210330][ T2093] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 120.231292][ T2093] usb 5-1: device descriptor read/8, error -71 [ 120.362022][ T2093] usb 5-1: device descriptor read/8, error -71 [ 120.600324][ T2093] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 120.621341][ T2093] usb 5-1: device descriptor read/8, error -71 [ 120.751327][ T2093] usb 5-1: device descriptor read/8, error -71 [ 120.860525][ T2093] usb usb5-port1: unable to enumerate USB device [ 120.880871][ T36] audit: type=1400 audit(120.860:492): avc: denied { lock } for pid=4691 comm="syz.1.1525" path="socket:[33267]" dev="sockfs" ino=33267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 120.933635][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 121.328829][ T4698] TCP: TCP_TX_DELAY enabled [ 121.367081][ T4709] netlink: 'syz.2.1531': attribute type 13 has an invalid length. [ 121.566924][ T4759] netlink: 'syz.2.1548': attribute type 27 has an invalid length. [ 121.568165][ T4761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.598017][ T36] audit: type=1400 audit(121.570:493): avc: denied { read write } for pid=4768 comm="syz.4.1553" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.631236][ T36] audit: type=1400 audit(121.570:494): avc: denied { open } for pid=4768 comm="syz.4.1553" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.659500][ T36] audit: type=1400 audit(121.640:495): avc: denied { map } for pid=4768 comm="syz.4.1553" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.748223][ T36] audit: type=1400 audit(121.720:496): avc: denied { ioctl } for pid=4780 comm="syz.4.1557" path="socket:[33881]" dev="sockfs" ino=33881 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.773794][ T4778] 9pnet_fd: p9_fd_create_unix (4778): problem connecting socket: ./file0: -111 [ 121.811498][ T4784] netlink: 'syz.4.1558': attribute type 5 has an invalid length. [ 121.853787][ T4791] overlayfs: failed to resolve './file0/file0': -2 [ 121.879631][ T36] audit: type=1400 audit(121.850:497): avc: denied { map } for pid=4792 comm="syz.4.1561" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 121.879839][ T4793] 9pnet_fd: Insufficient options for proto=fd [ 122.187691][ T4804] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1566'. [ 122.210341][ T365] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 122.361315][ T365] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.371493][ T365] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.381030][ T365] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.390066][ T365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.398281][ T365] usb 5-1: SerialNumber: syz [ 122.607521][ T365] usb 5-1: 0:2 : does not exist [ 122.613237][ T365] usb 5-1: unit 5: unexpected type 0x0e [ 122.625374][ T365] usb 5-1: USB disconnect, device number 16 [ 122.636336][ T4017] udevd[4017]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 123.364866][ T4831] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1576'. [ 123.895157][ T36] audit: type=1400 audit(123.870:498): avc: denied { map } for pid=4841 comm="syz.1.1581" path="socket:[33614]" dev="sockfs" ino=33614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 123.930393][ T4844] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1582'. [ 123.955160][ T4850] overlayfs: failed to clone upperpath [ 123.960721][ T4851] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1585'. [ 123.970771][ T4850] overlayfs: failed to clone upperpath [ 124.069993][ T36] audit: type=1400 audit(124.040:499): avc: denied { bpf } for pid=4863 comm="syz.1.1591" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 124.151213][ T4873] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1595'. [ 124.600369][ T365] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 124.730345][ T365] usb 5-1: device descriptor read/64, error -71 [ 124.788779][ T4900] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1604'. [ 124.970354][ T365] usb 5-1: device descriptor read/64, error -71 [ 125.210358][ T365] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 125.340334][ T365] usb 5-1: device descriptor read/64, error -71 [ 125.580376][ T365] usb 5-1: device descriptor read/64, error -71 [ 125.690511][ T365] usb usb5-port1: attempt power cycle [ 125.957425][ T4928] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1614'. [ 126.030331][ T365] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 126.061331][ T365] usb 5-1: device descriptor read/8, error -71 [ 126.073308][ T36] audit: type=1400 audit(126.050:500): avc: denied { read } for pid=4943 comm="syz.1.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.211320][ T365] usb 5-1: device descriptor read/8, error -71 [ 126.237673][ T4955] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1624'. [ 126.281408][ T4963] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1627'. [ 126.375710][ T4985] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1635'. [ 126.450341][ T365] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 126.471308][ T365] usb 5-1: device descriptor read/8, error -71 [ 126.601322][ T365] usb 5-1: device descriptor read/8, error -71 [ 126.710453][ T365] usb usb5-port1: unable to enumerate USB device [ 126.797703][ T36] audit: type=1400 audit(126.770:501): avc: denied { create } for pid=4989 comm="syz.1.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 126.848159][ T36] audit: type=1326 audit(126.820:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4994 comm="syz.2.1639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f945418e929 code=0x0 [ 127.331876][ T4998] overlay: ./bus is not a directory [ 127.386386][ T36] audit: type=1400 audit(127.360:503): avc: denied { map } for pid=5005 comm="syz.4.1642" path="socket:[34905]" dev="sockfs" ino=34905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.410225][ T36] audit: type=1400 audit(127.360:504): avc: denied { read } for pid=5005 comm="syz.4.1642" path="socket:[34905]" dev="sockfs" ino=34905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.026229][ T5031] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.033996][ T5031] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 128.040534][ T5031] rust_binder: Read failure Err(EFAULT) in pid:248 [ 128.052307][ T5031] tun0: tun_chr_ioctl cmd 1074025675 [ 128.064284][ T5031] tun0: persist enabled [ 128.068943][ T5031] tun0: tun_chr_ioctl cmd 1074025675 [ 128.074294][ T5031] tun0: persist enabled [ 128.078647][ T5031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 128.527946][ T5037] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1653'. [ 129.406665][ T5060] overlayfs: failed to clone upperpath [ 129.407692][ T5062] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1662'. [ 129.550120][ T5094] fuseblk: Unknown parameter 'reode' [ 129.555904][ T5093] /dev/loop0: Can't lookup blockdev [ 129.887107][ T5145] sit0: entered promiscuous mode [ 129.892927][ T5145] netlink: 'syz.4.1690': attribute type 1 has an invalid length. [ 129.900739][ T5145] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1690'. [ 129.931571][ T5149] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1692'. [ 129.956182][ T5152] 9pnet_fd: Insufficient options for proto=fd [ 129.960446][ T5153] 9pnet_fd: Insufficient options for proto=fd [ 129.979713][ T5157] can0: slcan on ptm0. [ 130.012588][ T5157] can0 (unregistered): slcan off ptm0. [ 130.236984][ T5191] fuse: Bad value for 'max_read' [ 130.266702][ T5199] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1701'. [ 130.320618][ T5213] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 130.489072][ T5222] fuse: Unknown parameter '' [ 130.494971][ T36] audit: type=1326 audit(130.470:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.2.1709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f945418e929 code=0x0 [ 130.540351][ T31] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 130.691329][ T31] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 130.699459][ T31] usb 5-1: config 0 has no interface number 0 [ 130.705734][ T31] usb 5-1: config 0 interface 41 has no altsetting 0 [ 130.713818][ T31] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 130.722896][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.730925][ T31] usb 5-1: Product: syz [ 130.735080][ T31] usb 5-1: Manufacturer: syz [ 130.739654][ T31] usb 5-1: SerialNumber: syz [ 130.745254][ T31] usb 5-1: config 0 descriptor?? [ 130.863824][ T5231] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1712'. [ 131.342215][ T5241] overlayfs: failed to clone lowerpath [ 131.367573][ T5248] overlayfs: failed to clone upperpath [ 131.373526][ T5248] overlayfs: failed to clone upperpath [ 131.390367][ T36] audit: type=1400 audit(131.370:506): avc: denied { create } for pid=5249 comm="syz.2.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 131.480549][ T5267] 9pnet_fd: Insufficient options for proto=fd [ 131.552418][ T31] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 131.929434][ T5312] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1741'. [ 131.958237][ T5316] fuse: Bad value for 'user_id' [ 131.963290][ T5316] fuse: Bad value for 'user_id' [ 132.570520][ T31] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 132.581217][ T31] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 132.590954][ T31] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 132.600249][ T31] usb 5-1: USB disconnect, device number 21 [ 132.784417][ T5347] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.793447][ T5347] rust_binder: Error while translating object. [ 132.799959][ T5347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 132.806191][ T5347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:278 [ 132.841854][ T5350] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1757'. [ 133.100360][ T63] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 133.122503][ T5354] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1759'. [ 133.250317][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 133.258622][ T63] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.267840][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.275953][ T63] usb 5-1: Product: 劄櫌ᾙ兟⳺콀㬟蜽궜ᚒ癔㘫轵袹刧ⷋ⸛뙱⧿偩蠉զ殇쳎ꡨ뿽庻괋抰၁᷻ⱁ绌藻؏溒ꇻ乍ꪠ뷢瓑鎽馤洜诣⿮칡鑹ѫὕᅔ혮⾭嘧姏足⭣阹⮉㛞䆑嫢 [ 133.299759][ T63] usb 5-1: SerialNumber: 镇ᇴ溠橳鈙佯⫅Ỏ黿䎗㲥鍸椁⮫龄湒ઘ䔔㹥鷆孒䊟튵ꍚ鸓ᏹ힞᪁☖镠ᦢꦦ佟콿֐쐹净稬춵恜쇾孂ᔗ刔祧㋰装暟㟥㻆碹岟ढ냔끒힜౻젽렶᯲㤜ﶄ䨷ᓽ䣯 [ 133.369728][ T5372] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1766'. [ 133.388920][ T5375] overlayfs: failed to clone upperpath [ 133.396285][ T5375] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1767'. [ 133.531847][ T5352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.540848][ T5352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.549225][ T5352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.557711][ T5352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.572598][ T63] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 133.597260][ T63] usb 5-1: USB disconnect, device number 22 [ 134.080138][ T5414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 134.080162][ T5414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 134.382499][ T5441] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.392339][ T5441] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 134.398774][ T5441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 134.407181][ T5443] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 134.416601][ T5441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:298 [ 134.424846][ T5443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 134.434125][ T5443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:298 [ 134.551546][ T5445] /dev/loop0: Can't lookup blockdev [ 134.637121][ T36] audit: type=1400 audit(134.610:507): avc: denied { shutdown } for pid=5446 comm="syz.1.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.113511][ T5501] overlayfs: failed to clone upperpath [ 135.329104][ T5525] __nla_validate_parse: 1 callbacks suppressed [ 135.329118][ T5525] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1818'. [ 135.510353][ T63] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 135.660323][ T63] usb 5-1: Using ep0 maxpacket: 16 [ 135.669284][ T63] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 135.677913][ T63] usb 5-1: config 1 has no interface number 0 [ 135.684329][ T63] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 135.694352][ T63] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 135.705656][ T63] usb 5-1: config 1 interface 105 has no altsetting 0 [ 135.714485][ T63] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 135.723648][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.731711][ T63] usb 5-1: Product: syz [ 135.736326][ T63] usb 5-1: Manufacturer: syz [ 135.740947][ T63] usb 5-1: SerialNumber: syz [ 135.750146][ T5519] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 135.757449][ T5519] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 135.970602][ T5552] overlay: Unknown parameter 'permit_directio' [ 135.981845][ T63] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 136.007899][ T63] usb 5-1: USB disconnect, device number 23 [ 136.018050][ T5555] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1827'. [ 136.148096][ T5566] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1830'. [ 136.221838][ T36] audit: type=1326 audit(136.200:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.2.1834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f945418e929 code=0x0 [ 136.260770][ T5574] tipc: Enabling of bearer rejected, failed to enable media [ 136.523472][ T5586] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1838'. [ 137.075425][ T5610] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1847'. [ 137.143849][ T13] bridge_slave_1: left allmulticast mode [ 137.149612][ T13] bridge_slave_1: left promiscuous mode [ 137.160366][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.168087][ T13] bridge_slave_0: left allmulticast mode [ 137.173986][ T5614] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.174253][ T13] bridge_slave_0: left promiscuous mode [ 137.176699][ T5614] overlay: ./file0 is not a directory [ 137.182075][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.220320][ T36] audit: type=1400 audit(137.190:509): avc: denied { module_load } for pid=5613 comm="syz.4.1849" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 137.254913][ T5614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:331 [ 137.255075][ T5614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331 [ 137.313377][ T13] veth1_macvtap: left promiscuous mode [ 137.339868][ T13] veth0_vlan: left promiscuous mode [ 137.423119][ T5631] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1856'. [ 137.573587][ T5642] 9pnet_fd: Insufficient options for proto=fd [ 137.696915][ T31] kernel write not supported for file [eventfd] (pid: 31 comm: kworker/1:0) [ 137.781962][ T5659] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1865'. [ 137.840682][ T5665] can: request_module (can-proto-7) failed. [ 138.226032][ T36] audit: type=1326 audit(138.200:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5625 comm="syz.4.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efe97b8e929 code=0x7fc00000 [ 138.372695][ T5671] overlayfs: failed to clone upperpath [ 138.440081][ T5675] overlayfs: failed to clone upperpath [ 138.695214][ T5684] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1876'. [ 138.734494][ T5693] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1879'. [ 138.875119][ T5697] rust_binder: Write failure EINVAL in pid:341 [ 138.925909][ T5697] rust_binder: Read failure Err(EAGAIN) in pid:341 [ 138.958690][ T5699] binder: Bad value for 'defcontext' [ 139.011014][ T5711] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1886'. [ 139.234115][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 139.720358][ T1033] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 139.835220][ T36] audit: type=1400 audit(139.810:511): avc: denied { setopt } for pid=5755 comm="syz.1.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.870338][ T1033] usb 5-1: Using ep0 maxpacket: 16 [ 139.876674][ T1033] usb 5-1: config 0 has no interfaces? [ 139.882220][ T1033] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 139.891356][ T1033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.899881][ T1033] usb 5-1: config 0 descriptor?? [ 140.106998][ T1033] usb 5-1: USB disconnect, device number 24 [ 140.135456][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.143747][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.150867][ T5772] bridge_slave_0: entered allmulticast mode [ 140.157352][ T5772] bridge_slave_0: entered promiscuous mode [ 140.164095][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.171209][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.178388][ T5772] bridge_slave_1: entered allmulticast mode [ 140.184562][ T5772] bridge_slave_1: entered promiscuous mode [ 140.230201][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.237254][ T5772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.244536][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.251576][ T5772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.260960][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.268273][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.288072][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.295141][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.303936][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.310999][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.332523][ T5772] veth0_vlan: entered promiscuous mode [ 140.342985][ T5772] veth1_macvtap: entered promiscuous mode [ 140.376814][ T5796] __nla_validate_parse: 4 callbacks suppressed [ 140.376833][ T5796] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1916'. [ 140.447828][ T5804] netlink: 'syz.1.1920': attribute type 11 has an invalid length. [ 140.460347][ T36] audit: type=1400 audit(140.430:512): avc: denied { map } for pid=5803 comm="syz.1.1920" path="socket:[36842]" dev="sockfs" ino=36842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 140.500070][ T5812] rust_binder: got new transaction with bad transaction stack [ 140.500092][ T5812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 140.528076][ T5818] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 140.632737][ T5822] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1926'. [ 140.645887][ T5819] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 140.781339][ T36] audit: type=1400 audit(140.760:513): avc: denied { getopt } for pid=5836 comm="syz.2.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 140.800760][ T36] audit: type=1400 audit(140.760:514): avc: denied { write } for pid=5836 comm="syz.2.1932" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 140.970433][ T63] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 141.030976][ T5846] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1935'. [ 141.047208][ T5848] fuse: Unknown parameter 'permit_directio' [ 141.070546][ T365] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 141.100386][ T63] usb 5-1: device descriptor read/64, error -71 [ 141.148346][ T5870] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1944'. [ 141.210370][ T365] usb 3-1: device descriptor read/64, error -71 [ 141.300388][ T1010] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.301858][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 141.360367][ T63] usb 5-1: device descriptor read/64, error -71 [ 141.450373][ T365] usb 3-1: device descriptor read/64, error -71 [ 141.600372][ T63] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 141.690490][ T365] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 141.730354][ T63] usb 5-1: device descriptor read/64, error -71 [ 141.830371][ T365] usb 3-1: device descriptor read/64, error -71 [ 141.970355][ T63] usb 5-1: device descriptor read/64, error -71 [ 142.042871][ T36] audit: type=1400 audit(142.020:515): avc: denied { create } for pid=5931 comm="syz.0.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 142.070422][ T365] usb 3-1: device descriptor read/64, error -71 [ 142.080870][ T63] usb usb5-port1: attempt power cycle [ 142.180407][ T365] usb usb3-port1: attempt power cycle [ 142.239810][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'. [ 142.273365][ T292] bridge_slave_1: left allmulticast mode [ 142.279043][ T292] bridge_slave_1: left promiscuous mode [ 142.284695][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.292557][ T292] bridge_slave_0: left allmulticast mode [ 142.298207][ T292] bridge_slave_0: left promiscuous mode [ 142.303948][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.430602][ T63] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 142.439095][ T292] tipc: Left network mode [ 142.444331][ T292] veth1_macvtap: left promiscuous mode [ 142.449817][ T292] veth0_vlan: left promiscuous mode [ 142.464560][ T63] usb 5-1: device descriptor read/8, error -71 [ 142.520391][ T365] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 142.541788][ T365] usb 3-1: device descriptor read/8, error -71 [ 142.601301][ T63] usb 5-1: device descriptor read/8, error -71 [ 142.671389][ T365] usb 3-1: device descriptor read/8, error -71 [ 142.840389][ T63] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 142.861320][ T63] usb 5-1: device descriptor read/8, error -71 [ 142.912442][ T365] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 142.941802][ T365] usb 3-1: device descriptor read/8, error -71 [ 142.991439][ T63] usb 5-1: device descriptor read/8, error -71 [ 143.071295][ T365] usb 3-1: device descriptor read/8, error -71 [ 143.101542][ T63] usb usb5-port1: unable to enumerate USB device [ 143.105253][ T5967] tipc: Enabling of bearer rejected, failed to enable media [ 143.180419][ T365] usb usb3-port1: unable to enumerate USB device [ 143.625728][ T5971] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1983'. [ 143.803241][ T5994] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1993'. [ 143.911154][ T6002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:409 [ 143.933540][ T6004] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 143.964729][ T6004] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1999'. [ 143.980629][ T6018] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2003'. [ 144.210330][ T365] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 144.250337][ T63] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 144.360329][ T365] usb 3-1: Using ep0 maxpacket: 16 [ 144.366459][ T365] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.377626][ T365] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.387612][ T365] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 144.400749][ T365] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.407325][ T365] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 144.416351][ T365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.424378][ T63] usb 5-1: Using ep0 maxpacket: 16 [ 144.430062][ T365] usb 3-1: config 0 descriptor?? [ 144.436176][ T63] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.446136][ T63] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.459271][ T63] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.465973][ T63] usb 5-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 144.475037][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.483506][ T63] usb 5-1: config 0 descriptor?? [ 144.651013][ T6049] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2015'. [ 144.739148][ T36] audit: type=1326 audit(144.710:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.2019" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578098e929 code=0x0 [ 144.762366][ T36] audit: type=1326 audit(144.750:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.1.2019" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578098e929 code=0x0 [ 144.839397][ T365] hid (null): unknown global tag 0xe [ 144.844763][ T365] hid (null): unknown global tag 0xe [ 144.850139][ T365] hid (null): unknown global tag 0xe [ 144.890388][ T63] uclogic 0003:2179:0077.000E: interface is invalid, ignoring [ 144.956192][ T6092] 9pnet_fd: Insufficient options for proto=fd [ 145.041476][ T6016] futex_wake_op: syz.2.1997 tries to shift op by 144; fix this program [ 145.093124][ T6024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.094663][ T31] usb 5-1: USB disconnect, device number 29 [ 145.119512][ T6132] xt_NFQUEUE: number of total queues is 0 [ 145.158765][ T6134] fuse: Bad value for 'rootmode' [ 145.164343][ T6134] binder: Unknown parameter '' [ 145.637120][ T6136] cgroup: No subsys list or none specified [ 145.667329][ T6142] tmpfs: Bad value for 'size' [ 145.679362][ T6144] __nla_validate_parse: 3 callbacks suppressed [ 145.679376][ T6144] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2048'. [ 145.708690][ T6148] tipc: Enabling of bearer rejected, failed to enable media [ 145.871899][ T6158] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2054'. [ 146.209646][ T6169] binder: Bad value for 'max' [ 146.235700][ T6173] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2059'. [ 146.986590][ T398] usb 3-1: USB disconnect, device number 28 [ 147.080357][ T365] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 147.230338][ T365] usb 5-1: Using ep0 maxpacket: 32 [ 147.239287][ T6194] futex_wake_op: syz.0.2067 tries to shift op by -1; fix this program [ 147.265638][ T365] usb 5-1: unable to get BOS descriptor or descriptor too short [ 147.273874][ T365] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 147.281469][ T365] usb 5-1: can't read configurations, error -71 [ 147.360331][ T398] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 147.510320][ T398] usb 3-1: Using ep0 maxpacket: 32 [ 147.516458][ T398] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 147.524651][ T398] usb 3-1: config 0 has no interface number 0 [ 147.530757][ T398] usb 3-1: config 0 interface 184 has no altsetting 0 [ 147.538824][ T398] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 147.547984][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.555981][ T398] usb 3-1: Product: syz [ 147.560118][ T398] usb 3-1: Manufacturer: syz [ 147.564705][ T398] usb 3-1: SerialNumber: syz [ 147.569765][ T398] usb 3-1: config 0 descriptor?? [ 147.575449][ T398] smsc75xx v1.0.0 [ 147.778735][ T6197] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2068'. [ 147.890624][ T6200] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2069'. [ 148.190352][ T398] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 148.201265][ T398] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 148.510340][ T365] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 148.592000][ T6232] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2079'. [ 148.610720][ T6234] overlayfs: failed to clone upperpath [ 148.643815][ T63] usb 1-1: USB disconnect, device number 10 [ 148.669728][ T365] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 148.685893][ T365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.706183][ T365] usb 5-1: config 0 descriptor?? [ 148.759949][ T3748] bridge0: port 3(syz_tun) entered disabled state [ 148.767075][ T3748] syz_tun (unregistering): left allmulticast mode [ 148.773610][ T3748] syz_tun (unregistering): left promiscuous mode [ 148.779990][ T3748] bridge0: port 3(syz_tun) entered disabled state [ 148.793567][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.800677][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.807830][ T6236] bridge_slave_0: entered allmulticast mode [ 148.814258][ T6236] bridge_slave_0: entered promiscuous mode [ 148.820848][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.828072][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.835201][ T6236] bridge_slave_1: entered allmulticast mode [ 148.841476][ T6236] bridge_slave_1: entered promiscuous mode [ 148.851254][ T13] bridge_slave_1: left allmulticast mode [ 148.856907][ T13] bridge_slave_1: left promiscuous mode [ 148.862565][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.870005][ T13] bridge_slave_0: left allmulticast mode [ 148.875668][ T13] bridge_slave_0: left promiscuous mode [ 148.881409][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.975221][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.982286][ T6236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.989521][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.996550][ T6236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.007075][ T13] veth1_macvtap: left promiscuous mode [ 149.012634][ T13] veth0_vlan: left promiscuous mode [ 149.058967][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.066496][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.076287][ T732] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.083350][ T732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.092209][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.099247][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.125749][ T398] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 149.144707][ T6236] veth0_vlan: entered promiscuous mode [ 149.153799][ T398] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 149.158901][ T6236] veth1_macvtap: entered promiscuous mode [ 149.169476][ T398] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 149.183740][ T398] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 149.196390][ T398] usb 3-1: USB disconnect, device number 29 [ 149.590354][ T398] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 149.630415][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 149.740387][ T398] usb 3-1: device descriptor read/64, error -71 [ 149.746726][ T365] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 149.756827][ T365] asix 5-1:0.0: probe with driver asix failed with error -71 [ 149.765073][ T365] usb 5-1: USB disconnect, device number 32 [ 149.790531][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 149.796636][ T31] usb 1-1: config 0 has no interfaces? [ 149.802306][ T31] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 149.811382][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.820011][ T31] usb 1-1: config 0 descriptor?? [ 149.990366][ T398] usb 3-1: device descriptor read/64, error -71 [ 150.027211][ T31] usb 1-1: USB disconnect, device number 11 [ 150.230355][ T398] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 150.360426][ T398] usb 3-1: device descriptor read/64, error -71 [ 150.500627][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 150.600327][ T398] usb 3-1: device descriptor read/64, error -71 [ 150.614640][ T6272] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2092'. [ 150.630713][ T6275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 150.651375][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 150.668579][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.680217][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.696104][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.707291][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.720318][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.729352][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.737483][ T398] usb usb3-port1: attempt power cycle [ 150.744116][ T9] usb 5-1: config 0 descriptor?? [ 150.749335][ T6265] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 151.000362][ T31] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 151.080317][ T398] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 151.101215][ T398] usb 3-1: device descriptor read/8, error -71 [ 151.151449][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 151.162515][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 151.163601][ T9] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 151.171756][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.182008][ T9] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 151.190441][ T31] usb 1-1: config 0 descriptor?? [ 151.199384][ T9] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 151.212287][ T6280] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 151.231348][ T398] usb 3-1: device descriptor read/8, error -71 [ 151.421238][ T36] audit: type=1400 audit(151.400:518): avc: denied { execute } for pid=6264 comm="syz.4.2089" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 151.421600][ T9] usb 5-1: USB disconnect, device number 33 [ 151.470410][ T398] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 151.491473][ T398] usb 3-1: device descriptor read/8, error -71 [ 151.621487][ T398] usb 3-1: device descriptor read/8, error -71 [ 151.647592][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 151.653674][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 151.662921][ T31] usb 1-1: USB disconnect, device number 12 [ 151.730482][ T398] usb usb3-port1: unable to enumerate USB device [ 152.170923][ T6293] rust_binder: got new transaction with bad transaction stack [ 152.170944][ T6293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 152.250400][ T398] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 152.285037][ T6298] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2102'. [ 152.410378][ T398] usb 5-1: Using ep0 maxpacket: 16 [ 152.416548][ T398] usb 5-1: config 0 has no interfaces? [ 152.422045][ T398] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 152.431120][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.439831][ T398] usb 5-1: config 0 descriptor?? [ 152.647351][ T398] usb 5-1: USB disconnect, device number 34 [ 152.999856][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2110'. [ 153.010408][ T656] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 153.077795][ T6322] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2112'. [ 153.161399][ T656] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.167103][ T6332] random: crng reseeded on system resumption [ 153.181491][ T656] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 153.191962][ T656] usb 1-1: config 1 has no interface number 1 [ 153.199040][ T656] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 153.217163][ T656] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.229515][ T656] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.238666][ T656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.246808][ T656] usb 1-1: Product: syz [ 153.251245][ T656] usb 1-1: Manufacturer: syz [ 153.257001][ T656] usb 1-1: SerialNumber: syz [ 153.266873][ T6305] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.271166][ T6346] overlay: ./file1 is not a directory [ 153.356323][ T6350] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 153.370631][ T6350] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 153.395672][ T6352] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2121'. [ 153.450357][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 153.480112][ T656] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 153.488082][ T656] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 153.500955][ T656] usb 1-1: USB disconnect, device number 13 [ 153.510861][ T4205] udevd[4205]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.601348][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.611166][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 153.624112][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 153.633334][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.644501][ T31] usb 5-1: config 0 descriptor?? [ 153.711088][ T6381] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2131'. [ 153.729128][ T36] audit: type=1400 audit(153.700:519): avc: denied { create } for pid=6382 comm="syz.0.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 154.000343][ T656] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 154.051199][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.059726][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.150320][ T656] usb 1-1: Using ep0 maxpacket: 16 [ 154.156487][ T656] usb 1-1: config 0 has no interfaces? [ 154.162039][ T656] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 154.171109][ T656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.179595][ T656] usb 1-1: config 0 descriptor?? [ 154.385483][ T6391] FAULT_INJECTION: forcing a failure. [ 154.385483][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 154.386253][ T6399] FAULT_INJECTION: forcing a failure. [ 154.386253][ T6399] name failslab, interval 1, probability 0, space 0, times 0 [ 154.398384][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.0.2134 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 154.398416][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.398427][ T6391] Call Trace: [ 154.398434][ T6391] [ 154.398441][ T6391] __dump_stack+0x21/0x30 [ 154.398470][ T6391] dump_stack_lvl+0x10c/0x190 [ 154.398490][ T6391] ? __cfi_dump_stack_lvl+0x10/0x10 [ 154.398511][ T6391] dump_stack+0x19/0x20 [ 154.398529][ T6391] should_fail_ex+0x3d9/0x530 [ 154.398550][ T6391] should_failslab+0xac/0x100 [ 154.398573][ T6391] kmem_cache_alloc_noprof+0x42/0x3a0 [ 154.398593][ T6391] ? alloc_empty_file+0xbf/0x280 [ 154.398610][ T6391] alloc_empty_file+0xbf/0x280 [ 154.398625][ T6391] path_openat+0xf8/0x34b0 [ 154.398642][ T6391] ? _parse_integer+0x2e/0x40 [ 154.398660][ T6391] ? kasan_save_track+0x4f/0x80 [ 154.398681][ T6391] ? kasan_save_alloc_info+0x40/0x50 [ 154.398699][ T6391] ? __kasan_slab_alloc+0x73/0x90 [ 154.398721][ T6391] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 154.398740][ T6391] ? getname_flags+0xc6/0x710 [ 154.398761][ T6391] ? do_sys_openat2+0xcb/0x1c0 [ 154.398786][ T6391] ? __x64_sys_openat+0x13a/0x170 [ 154.398803][ T6391] ? x64_sys_call+0xe69/0x2ee0 [ 154.398823][ T6391] ? do_syscall_64+0x58/0xf0 [ 154.398841][ T6391] ? do_filp_open+0x3e0/0x3e0 [ 154.398858][ T6391] do_filp_open+0x1c6/0x3e0 [ 154.398873][ T6391] ? __cfi_do_filp_open+0x10/0x10 [ 154.398892][ T6391] ? alloc_fd+0x4e7/0x5a0 [ 154.398915][ T6391] do_sys_openat2+0x12c/0x1c0 [ 154.398931][ T6391] ? fput+0x1a5/0x240 [ 154.398946][ T6391] ? do_sys_open+0x100/0x100 [ 154.398963][ T6391] ? ksys_write+0x1ef/0x250 [ 154.398983][ T6391] ? __cfi_ksys_write+0x10/0x10 [ 154.399003][ T6391] __x64_sys_openat+0x13a/0x170 [ 154.399021][ T6391] x64_sys_call+0xe69/0x2ee0 [ 154.399042][ T6391] do_syscall_64+0x58/0xf0 [ 154.399057][ T6391] ? clear_bhb_loop+0x50/0xa0 [ 154.399078][ T6391] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 154.399097][ T6391] RIP: 0033:0x7fdd9e18d290 [ 154.399113][ T6391] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 154.399128][ T6391] RSP: 002b:00007fdd9ef7df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 154.399149][ T6391] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdd9e18d290 [ 154.399162][ T6391] RDX: 0000000000000002 RSI: 00007fdd9ef7dfa0 RDI: 00000000ffffff9c [ 154.399175][ T6391] RBP: 00007fdd9ef7dfa0 R08: 0000000000000000 R09: 00007fdd9ef7dcd6 [ 154.399187][ T6391] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 154.399197][ T6391] R13: 0000000000000000 R14: 00007fdd9e3b5fa0 R15: 00007ffc28b3bfd8 [ 154.399213][ T6391] [ 154.401392][ T306] usb 1-1: USB disconnect, device number 14 [ 154.413118][ T6399] CPU: 0 UID: 0 PID: 6399 Comm: syz.2.2136 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 154.413146][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.413157][ T6399] Call Trace: [ 154.413163][ T6399] [ 154.413170][ T6399] __dump_stack+0x21/0x30 [ 154.413194][ T6399] dump_stack_lvl+0x10c/0x190 [ 154.413213][ T6399] ? __cfi_dump_stack_lvl+0x10/0x10 [ 154.413233][ T6399] ? avc_has_perm+0x144/0x220 [ 154.413252][ T6399] ? __cfi_avc_has_perm+0x10/0x10 [ 154.413269][ T6399] dump_stack+0x19/0x20 [ 154.413287][ T6399] should_fail_ex+0x3d9/0x530 [ 154.413307][ T6399] should_failslab+0xac/0x100 [ 154.413330][ T6399] __kmalloc_cache_noprof+0x41/0x3c0 [ 154.413352][ T6399] ? vhost_task_create+0x101/0x350 [ 154.413374][ T6399] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 154.413399][ T6399] vhost_task_create+0x101/0x350 [ 154.413421][ T6399] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 154.413446][ T6399] ? __cfi_vhost_task_create+0x10/0x10 [ 154.413479][ T6399] ? __cfi_vhost_task_fn+0x10/0x10 [ 154.413501][ T6399] ? __kasan_check_write+0x18/0x20 [ 154.413520][ T6399] ? mutex_lock+0x92/0x1c0 [ 154.413539][ T6399] ? __cfi_mutex_lock+0x10/0x10 [ 154.413558][ T6399] ? kernel_text_address+0xa9/0xe0 [ 154.413577][ T6399] kvm_mmu_post_init_vm+0x1a6/0x310 [ 154.413596][ T6399] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 154.413615][ T6399] ? _parse_integer_limit+0x195/0x1e0 [ 154.413636][ T6399] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 154.413654][ T6399] ? kstrtoull+0x13b/0x1e0 [ 154.413672][ T6399] ? kstrtouint+0x78/0xf0 [ 154.413689][ T6399] ? ioctl_has_perm+0x1aa/0x4d0 [ 154.413712][ T6399] ? __asan_memcpy+0x5a/0x80 [ 154.413731][ T6399] ? ioctl_has_perm+0x3e0/0x4d0 [ 154.413754][ T6399] ? has_cap_mac_admin+0xd0/0xd0 [ 154.413777][ T6399] ? __kasan_check_write+0x18/0x20 [ 154.413796][ T6399] ? mutex_lock_killable+0x92/0x1c0 [ 154.413816][ T6399] ? __cfi_mutex_lock_killable+0x10/0x10 [ 154.413835][ T6399] ? proc_fail_nth_write+0x17e/0x210 [ 154.413854][ T6399] kvm_vcpu_ioctl+0x96f/0xee0 [ 154.413876][ T6399] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 154.413898][ T6399] ? __cfi_vfs_write+0x10/0x10 [ 154.413919][ T6399] ? __kasan_check_write+0x18/0x20 [ 154.413938][ T6399] ? mutex_unlock+0x8b/0x240 [ 154.413956][ T6399] ? __cfi_mutex_unlock+0x10/0x10 [ 154.413986][ T6399] ? __fget_files+0x2c5/0x340 [ 154.414009][ T6399] ? __fget_files+0x2c5/0x340 [ 154.414032][ T6399] ? bpf_lsm_file_ioctl+0xd/0x20 [ 154.414051][ T6399] ? security_file_ioctl+0x34/0xd0 [ 154.414073][ T6399] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 154.414094][ T6399] __se_sys_ioctl+0x132/0x1b0 [ 154.414117][ T6399] __x64_sys_ioctl+0x7f/0xa0 [ 154.414139][ T6399] x64_sys_call+0x1878/0x2ee0 [ 154.414159][ T6399] do_syscall_64+0x58/0xf0 [ 154.414175][ T6399] ? clear_bhb_loop+0x50/0xa0 [ 154.414196][ T6399] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 154.414214][ T6399] RIP: 0033:0x7f397818e929 [ 154.414230][ T6399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.414245][ T6399] RSP: 002b:00007f3978f73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.414264][ T6399] RAX: ffffffffffffffda RBX: 00007f39783b5fa0 RCX: 00007f397818e929 [ 154.414278][ T6399] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 154.414289][ T6399] RBP: 00007f3978f73090 R08: 0000000000000000 R09: 0000000000000000 [ 154.414301][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.414312][ T6399] R13: 0000000000000000 R14: 00007f39783b5fa0 R15: 00007ffd1c51b748 [ 154.414326][ T6399] [ 155.121994][ T6409] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2141'. [ 155.165613][ T6413] /dev/rnullb0: Can't open blockdev [ 155.583117][ T6436] FAULT_INJECTION: forcing a failure. [ 155.583117][ T6436] name failslab, interval 1, probability 0, space 0, times 0 [ 155.595797][ T6436] CPU: 0 UID: 0 PID: 6436 Comm: syz.2.2150 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 155.595831][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.595842][ T6436] Call Trace: [ 155.595849][ T6436] [ 155.595857][ T6436] __dump_stack+0x21/0x30 [ 155.595882][ T6436] dump_stack_lvl+0x10c/0x190 [ 155.595902][ T6436] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.595924][ T6436] dump_stack+0x19/0x20 [ 155.595942][ T6436] should_fail_ex+0x3d9/0x530 [ 155.595956][ T6436] should_failslab+0xac/0x100 [ 155.595969][ T6436] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 155.595981][ T6436] ? dup_task_struct+0xbc/0xc50 [ 155.595991][ T6436] ? kasan_save_track+0x4f/0x80 [ 155.596003][ T6436] dup_task_struct+0xbc/0xc50 [ 155.596023][ T6436] ? __kasan_check_write+0x18/0x20 [ 155.596043][ T6436] ? _raw_spin_lock_irq+0x8d/0x120 [ 155.596061][ T6436] ? copy_process+0x3220/0x3220 [ 155.596078][ T6436] ? __kasan_check_write+0x18/0x20 [ 155.596095][ T6436] copy_process+0x538/0x3220 [ 155.596105][ T6436] ? __cfi_copy_process+0x10/0x10 [ 155.596115][ T6436] ? __kasan_check_write+0x18/0x20 [ 155.596125][ T6436] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 155.596140][ T6436] vhost_task_create+0x1d6/0x350 [ 155.596156][ T6436] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 155.596182][ T6436] ? __cfi_vhost_task_create+0x10/0x10 [ 155.596206][ T6436] ? __cfi_vhost_task_fn+0x10/0x10 [ 155.596228][ T6436] ? __kasan_check_write+0x18/0x20 [ 155.596242][ T6436] ? mutex_lock+0x92/0x1c0 [ 155.596253][ T6436] ? __cfi_mutex_lock+0x10/0x10 [ 155.596264][ T6436] ? kernel_text_address+0xa9/0xe0 [ 155.596275][ T6436] kvm_mmu_post_init_vm+0x1a6/0x310 [ 155.596287][ T6436] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 155.596301][ T6436] ? _parse_integer_limit+0x195/0x1e0 [ 155.596322][ T6436] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 155.596348][ T6436] ? kstrtoull+0x13b/0x1e0 [ 155.596366][ T6436] ? kstrtouint+0x78/0xf0 [ 155.596382][ T6436] ? ioctl_has_perm+0x1aa/0x4d0 [ 155.596396][ T6436] ? __asan_memcpy+0x5a/0x80 [ 155.596407][ T6436] ? ioctl_has_perm+0x3e0/0x4d0 [ 155.596420][ T6436] ? has_cap_mac_admin+0xd0/0xd0 [ 155.596433][ T6436] ? __kasan_check_write+0x18/0x20 [ 155.596447][ T6436] ? mutex_lock_killable+0x92/0x1c0 [ 155.596468][ T6436] ? __cfi_mutex_lock_killable+0x10/0x10 [ 155.596490][ T6436] ? proc_fail_nth_write+0x17e/0x210 [ 155.596510][ T6436] kvm_vcpu_ioctl+0x96f/0xee0 [ 155.596530][ T6436] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 155.596542][ T6436] ? __cfi_vfs_write+0x10/0x10 [ 155.596554][ T6436] ? __kasan_check_write+0x18/0x20 [ 155.596565][ T6436] ? mutex_unlock+0x8b/0x240 [ 155.596577][ T6436] ? __cfi_mutex_unlock+0x10/0x10 [ 155.596589][ T6436] ? __fget_files+0x2c5/0x340 [ 155.596613][ T6436] ? __fget_files+0x2c5/0x340 [ 155.596636][ T6436] ? bpf_lsm_file_ioctl+0xd/0x20 [ 155.596656][ T6436] ? security_file_ioctl+0x34/0xd0 [ 155.596676][ T6436] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 155.596688][ T6436] __se_sys_ioctl+0x132/0x1b0 [ 155.596701][ T6436] __x64_sys_ioctl+0x7f/0xa0 [ 155.596713][ T6436] x64_sys_call+0x1878/0x2ee0 [ 155.596725][ T6436] do_syscall_64+0x58/0xf0 [ 155.596737][ T6436] ? clear_bhb_loop+0x50/0xa0 [ 155.596765][ T6436] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.596784][ T6436] RIP: 0033:0x7f397818e929 [ 155.596800][ T6436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.596814][ T6436] RSP: 002b:00007f3978f73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.596827][ T6436] RAX: ffffffffffffffda RBX: 00007f39783b5fa0 RCX: 00007f397818e929 [ 155.596835][ T6436] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 155.596847][ T6436] RBP: 00007f3978f73090 R08: 0000000000000000 R09: 0000000000000000 [ 155.596858][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.596869][ T6436] R13: 0000000000000000 R14: 00007f39783b5fa0 R15: 00007ffd1c51b748 [ 155.596883][ T6436] [ 155.680340][ T306] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 156.160332][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 156.166790][ T306] usb 1-1: config 0 has no interfaces? [ 156.172361][ T306] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 156.181773][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.190897][ T306] usb 1-1: config 0 descriptor?? [ 156.397553][ T6425] FAULT_INJECTION: forcing a failure. [ 156.397553][ T6425] name failslab, interval 1, probability 0, space 0, times 0 [ 156.410314][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: syz.0.2146 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 156.410345][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.410355][ T6425] Call Trace: [ 156.410361][ T6425] [ 156.410366][ T6425] __dump_stack+0x21/0x30 [ 156.410383][ T6425] dump_stack_lvl+0x10c/0x190 [ 156.410394][ T6425] ? __cfi_dump_stack_lvl+0x10/0x10 [ 156.410406][ T6425] dump_stack+0x19/0x20 [ 156.410416][ T6425] should_fail_ex+0x3d9/0x530 [ 156.410432][ T6425] should_failslab+0xac/0x100 [ 156.410446][ T6425] kmem_cache_alloc_noprof+0x42/0x3a0 [ 156.410458][ T6425] ? alloc_empty_file+0xbf/0x280 [ 156.410468][ T6425] alloc_empty_file+0xbf/0x280 [ 156.410477][ T6425] path_openat+0xf8/0x34b0 [ 156.410487][ T6425] ? kasan_save_track+0x4f/0x80 [ 156.410505][ T6425] ? kasan_save_alloc_info+0x40/0x50 [ 156.410516][ T6425] ? __kasan_slab_alloc+0x73/0x90 [ 156.410528][ T6425] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 156.410539][ T6425] ? getname_flags+0xc6/0x710 [ 156.410551][ T6425] ? do_sys_openat2+0xcb/0x1c0 [ 156.410561][ T6425] ? __x64_sys_openat+0x13a/0x170 [ 156.410571][ T6425] ? x64_sys_call+0xe69/0x2ee0 [ 156.410583][ T6425] ? do_syscall_64+0x58/0xf0 [ 156.410593][ T6425] ? do_filp_open+0x3e0/0x3e0 [ 156.410603][ T6425] do_filp_open+0x1c6/0x3e0 [ 156.410612][ T6425] ? __cfi_do_filp_open+0x10/0x10 [ 156.410622][ T6425] ? alloc_fd+0x4e7/0x5a0 [ 156.410635][ T6425] do_sys_openat2+0x12c/0x1c0 [ 156.410645][ T6425] ? fput+0x1a5/0x240 [ 156.410654][ T6425] ? do_sys_open+0x100/0x100 [ 156.410663][ T6425] ? ksys_write+0x1ef/0x250 [ 156.410675][ T6425] ? __cfi_ksys_write+0x10/0x10 [ 156.410687][ T6425] __x64_sys_openat+0x13a/0x170 [ 156.410697][ T6425] x64_sys_call+0xe69/0x2ee0 [ 156.410709][ T6425] do_syscall_64+0x58/0xf0 [ 156.410718][ T6425] ? clear_bhb_loop+0x50/0xa0 [ 156.410730][ T6425] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.410741][ T6425] RIP: 0033:0x7fdd9e18d290 [ 156.410750][ T6425] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 156.410760][ T6425] RSP: 002b:00007fdd9ef7df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 156.410772][ T6425] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdd9e18d290 [ 156.410780][ T6425] RDX: 0000000000000002 RSI: 00007fdd9ef7dfa0 RDI: 00000000ffffff9c [ 156.410787][ T6425] RBP: 00007fdd9ef7dfa0 R08: 0000000000000000 R09: 00007fdd9ef7dcd6 [ 156.410795][ T6425] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 156.410802][ T6425] R13: 0000000000000000 R14: 00007fdd9e3b5fa0 R15: 00007ffc28b3bfd8 [ 156.410810][ T6425] [ 156.411239][ T9] usb 1-1: USB disconnect, device number 15 [ 156.715586][ T6443] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2153'. [ 156.739129][ T306] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 156.750377][ T306] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.803345][ T6447] bridge0: port 3(veth1_macvtap) entered blocking state [ 156.810495][ T6447] bridge0: port 3(veth1_macvtap) entered disabled state [ 156.817495][ T6447] veth1_macvtap: entered allmulticast mode [ 156.823859][ T6447] veth1_macvtap: left allmulticast mode [ 156.985396][ T6473] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2162'. [ 157.166145][ T6477] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 157.166164][ T6477] rust_binder: Error while translating object. [ 157.176736][ T6477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.182939][ T6477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 157.270342][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 157.430338][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 157.436832][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 157.445733][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 157.454596][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1025, setting to 1024 [ 157.467092][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.476247][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.484276][ T9] usb 1-1: Product: ఄ [ 157.488507][ T9] usb 1-1: Manufacturer: я [ 157.493068][ T9] usb 1-1: SerialNumber: 䐊빮뽥ꎱ刾㝛ὖඦ䂆怀즄๷瀦怒놸믠ꕜ莌쉯䖀傛뿸絖颅뢊臘鎠藏㜈⋱춻ᑙ㖎胢潅༹簱ᑑ訲輮࠮䫤灉飵↶o◅ޱ繱祆댷T퀊⌴鷆耓僠ḉ௯㧭雰ꋝࣾ鸶Kߋ㥽浶ﱿ泬ߛ挞။쾠꺎訌⫼㣪偣￿狺忻ㅚ㙱洟⬫粴᧗̳琘䐘뗹꧶ⰼ䟑㯡萩⹤ꔶ뮮竉再 [ 157.530349][ T306] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 157.680350][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 157.686823][ T306] usb 3-1: config 0 has no interfaces? [ 157.692364][ T306] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 157.701431][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.710057][ T306] usb 3-1: config 0 descriptor?? [ 157.732226][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 157.743888][ T9] usb 1-1: USB disconnect, device number 16 [ 157.756710][ T4017] udevd[4017]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.802724][ T6501] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2172'. [ 157.916144][ T6492] FAULT_INJECTION: forcing a failure. [ 157.916144][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 157.928849][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: syz.2.2168 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 157.928878][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.928889][ T6492] Call Trace: [ 157.928897][ T6492] [ 157.928904][ T6492] __dump_stack+0x21/0x30 [ 157.928921][ T6492] dump_stack_lvl+0x10c/0x190 [ 157.928932][ T6492] ? __cfi_dump_stack_lvl+0x10/0x10 [ 157.928944][ T6492] ? stack_depot_save_flags+0x38/0x800 [ 157.928957][ T6492] dump_stack+0x19/0x20 [ 157.928970][ T6492] should_fail_ex+0x3d9/0x530 [ 157.928983][ T6492] should_failslab+0xac/0x100 [ 157.928996][ T6492] __kmalloc_cache_noprof+0x41/0x3c0 [ 157.929009][ T6492] ? proc_self_get_link+0x11a/0x290 [ 157.929019][ T6492] proc_self_get_link+0x11a/0x290 [ 157.929028][ T6492] ? security_inode_follow_link+0x74/0x140 [ 157.929042][ T6492] ? __cfi_proc_self_get_link+0x10/0x10 [ 157.929052][ T6492] pick_link+0x6d8/0xe80 [ 157.929064][ T6492] step_into+0xc58/0xf50 [ 157.929075][ T6492] ? __kasan_check_read+0x15/0x20 [ 157.929086][ T6492] ? read_word_at_a_time+0x1a/0x40 [ 157.929099][ T6492] ? set_root+0x420/0x420 [ 157.929110][ T6492] ? lookup_fast+0x167/0x530 [ 157.929121][ T6492] ? inode_permission+0xf3/0x4c0 [ 157.929134][ T6492] link_path_walk+0x753/0xec0 [ 157.929146][ T6492] path_openat+0x281/0x34b0 [ 157.929156][ T6492] ? kasan_save_alloc_info+0x40/0x50 [ 157.929167][ T6492] ? getname_flags+0xc6/0x710 [ 157.929179][ T6492] ? do_sys_openat2+0xcb/0x1c0 [ 157.929189][ T6492] ? __x64_sys_openat+0x13a/0x170 [ 157.929200][ T6492] ? do_filp_open+0x3e0/0x3e0 [ 157.929210][ T6492] do_filp_open+0x1c6/0x3e0 [ 157.929219][ T6492] ? __cfi_do_filp_open+0x10/0x10 [ 157.929230][ T6492] ? alloc_fd+0x4e7/0x5a0 [ 157.929242][ T6492] do_sys_openat2+0x12c/0x1c0 [ 157.929252][ T6492] ? fput+0x1a5/0x240 [ 157.929261][ T6492] ? do_sys_open+0x100/0x100 [ 157.929270][ T6492] ? ksys_write+0x1ef/0x250 [ 157.929281][ T6492] ? __cfi_ksys_write+0x10/0x10 [ 157.929293][ T6492] __x64_sys_openat+0x13a/0x170 [ 157.929303][ T6492] x64_sys_call+0xe69/0x2ee0 [ 157.929315][ T6492] do_syscall_64+0x58/0xf0 [ 157.929325][ T6492] ? clear_bhb_loop+0x50/0xa0 [ 157.929336][ T6492] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 157.929347][ T6492] RIP: 0033:0x7f397818d290 [ 157.929357][ T6492] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 157.929367][ T6492] RSP: 002b:00007f3978f72f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 157.929392][ T6492] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f397818d290 [ 157.929400][ T6492] RDX: 0000000000000002 RSI: 00007f3978f72fa0 RDI: 00000000ffffff9c [ 157.929407][ T6492] RBP: 00007f3978f72fa0 R08: 0000000000000000 R09: 00007f3978f72cd5 [ 157.929414][ T6492] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 157.929421][ T6492] R13: 0000000000000000 R14: 00007f39783b5fa0 R15: 00007ffd1c51b748 [ 157.929429][ T6492] [ 157.929861][ T9] usb 3-1: USB disconnect, device number 34 [ 158.494643][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2182'. [ 158.518588][ T6528] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.519033][ T6528] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 158.525548][ T6528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 158.533596][ T6528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:104 [ 158.868857][ T36] audit: type=1400 audit(158.840:520): avc: denied { write } for pid=6555 comm="syz.1.2193" name="/" dev="configfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.899503][ T36] audit: type=1400 audit(158.840:521): avc: denied { add_name } for pid=6555 comm="syz.1.2193" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.920604][ T36] audit: type=1400 audit(158.840:522): avc: denied { create } for pid=6555 comm="syz.1.2193" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 159.060581][ T31] usbhid 5-1:0.0: can't add hid device: -32 [ 159.066577][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 159.079544][ T9] usb 5-1: USB disconnect, device number 35 [ 159.180323][ T398] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 159.331470][ T398] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 159.339639][ T398] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.351298][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.362211][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.373350][ T398] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.386267][ T398] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.395473][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.406544][ T398] usb 3-1: config 0 descriptor?? [ 159.411820][ T6566] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.690327][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 159.827614][ T398] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 159.837130][ T398] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 159.846596][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 159.853993][ T398] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 159.870119][ T9] usb 5-1: config 0 has no interfaces? [ 159.879819][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 159.889181][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.897677][ T9] usb 5-1: config 0 descriptor?? [ 159.978391][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2206'. [ 159.980347][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 159.987488][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2206'. [ 160.091965][ T9] usb 3-1: USB disconnect, device number 35 [ 160.105735][ T656] usb 5-1: USB disconnect, device number 36 [ 160.120954][ T31] usb 1-1: device descriptor read/64, error -71 [ 160.360387][ T31] usb 1-1: device descriptor read/64, error -71 [ 160.600665][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 160.663732][ T6630] rust_binder: Write failure EFAULT in pid:521 [ 160.740416][ T31] usb 1-1: device descriptor read/64, error -71 [ 160.920378][ T656] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 160.990448][ T31] usb 1-1: device descriptor read/64, error -71 [ 161.070342][ T656] usb 5-1: Using ep0 maxpacket: 32 [ 161.076523][ T656] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 161.084743][ T656] usb 5-1: config 0 has no interface number 0 [ 161.090850][ T656] usb 5-1: config 0 interface 184 has no altsetting 0 [ 161.098984][ T656] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 161.100334][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 161.108164][ T656] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.123642][ T31] usb usb1-port1: attempt power cycle [ 161.129225][ T656] usb 5-1: Product: syz [ 161.133408][ T656] usb 5-1: Manufacturer: syz [ 161.137990][ T656] usb 5-1: SerialNumber: syz [ 161.143282][ T656] usb 5-1: config 0 descriptor?? [ 161.148879][ T656] smsc75xx v1.0.0 [ 161.260338][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 161.266551][ T9] usb 3-1: config 0 has no interfaces? [ 161.272092][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 161.281385][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.290311][ T9] usb 3-1: config 0 descriptor?? [ 161.354597][ T656] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 161.365645][ T656] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 161.380884][ T656] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 161.392380][ T656] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 161.406136][ T656] usb 5-1: USB disconnect, device number 37 [ 161.460780][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 161.481389][ T31] usb 1-1: device descriptor read/8, error -71 [ 161.499958][ T398] usb 3-1: USB disconnect, device number 36 [ 161.611342][ T31] usb 1-1: device descriptor read/8, error -71 [ 161.850374][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 161.871396][ T31] usb 1-1: device descriptor read/8, error -71 [ 162.002143][ T31] usb 1-1: device descriptor read/8, error -71 [ 162.070329][ T306] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 162.110813][ T31] usb usb1-port1: unable to enumerate USB device [ 162.221486][ T306] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.234374][ T306] usb 5-1: config 1 interface 0 has no altsetting 0 [ 162.242472][ T306] usb 5-1: New USB device found, idVendor=045e, idProduct=00b4, bcdDevice= 0.40 [ 162.251556][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.259523][ T306] usb 5-1: Product: ю [ 162.263595][ T306] usb 5-1: Manufacturer: ൓䘓ཽ테憥㍣ỼᢤȨ坲킹ⴷ놞鸲愋㻽搙碇恗팰虋튄딿㳑뭥3╝蛀쵣악埑徘ၗ蔅ߓ橐톼烈퀚眿悡⍙頩깍㘎퍹꾑麔蠘ཱི㴤筍⹌끍ꔶ閿벳 [ 162.285595][ T306] usb 5-1: SerialNumber: ﮫ✳캢丷顿騵潾뀪⏡瘂엲褕싨㴀ꢊ쟂엡撇欰笾饃堞ዣ뼗࣑㡜㓋ṗ옌㽆癁삏ᎁ᧛ꝋ䅊⽤苳꽓캰䠸稚弍痳慏輯筠╝䉈첛ߙ郲甫ꐆ잟὎廙惘ⵂ鬲ꤐ﷢샹䨳꨷㨇겭팣瘵愈▵䰧䫕ⷙ [ 162.313060][ T656] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 162.471312][ T656] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 162.479470][ T656] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.490968][ T656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.501851][ T656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 162.512975][ T656] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.525862][ T656] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.534948][ T656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.543679][ T656] usb 3-1: config 0 descriptor?? [ 162.548947][ T6680] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 162.550690][ T306] usbhid 5-1:1.0: can't add hid device: -71 [ 162.562048][ T306] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 162.571947][ T306] usb 5-1: USB disconnect, device number 38 [ 162.964304][ T656] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 162.972529][ T656] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 162.981546][ T656] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 163.045839][ T6694] fuse: Unknown parameter '0x000000000000000a' [ 163.054490][ T6694] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 163.107892][ T6696] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3290916003 (26327328024 ns) > initial count (15247863992 ns). Using initial count to start timer. [ 163.170856][ T306] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 163.230845][ T656] usb 3-1: USB disconnect, device number 37 [ 163.300333][ T306] usb 1-1: device descriptor read/64, error -71 [ 163.410370][ T398] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 163.540380][ T306] usb 1-1: device descriptor read/64, error -71 [ 163.560325][ T398] usb 5-1: Using ep0 maxpacket: 16 [ 163.566509][ T398] usb 5-1: config 0 has no interfaces? [ 163.572061][ T398] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 163.581115][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.589653][ T398] usb 5-1: config 0 descriptor?? [ 163.778057][ T6704] rust_binder: Write failure EINVAL in pid:173 [ 163.778180][ T6704] rust_binder: Read failure Err(EAGAIN) in pid:173 [ 163.780347][ T306] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 163.800503][ T31] usb 5-1: USB disconnect, device number 39 [ 163.817443][ T6706] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3978872358 (63661957728 ns) > initial count (4510557792 ns). Using initial count to start timer. [ 163.920398][ T306] usb 1-1: device descriptor read/64, error -71 [ 164.070359][ T398] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 164.160381][ T306] usb 1-1: device descriptor read/64, error -71 [ 164.220342][ T398] usb 3-1: Using ep0 maxpacket: 16 [ 164.226593][ T398] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 164.234879][ T398] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.245011][ T398] usb 3-1: config 1 has no interface number 0 [ 164.251097][ T398] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.264142][ T398] usb 3-1: config 1 interface 105 has no altsetting 0 [ 164.272290][ T398] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 164.280433][ T306] usb usb1-port1: attempt power cycle [ 164.281352][ T398] usb 3-1: New USB device strings: Mfr=1, Product=35, SerialNumber=3 [ 164.294739][ T398] usb 3-1: Product: syz [ 164.298886][ T398] usb 3-1: Manufacturer: syz [ 164.303483][ T398] usb 3-1: SerialNumber: syz [ 164.323797][ T6708] rust_binder: Error while translating object. [ 164.323823][ T6708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 164.330017][ T6708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:551 [ 164.380217][ T6712] rust_binder: Error in use_page_slow: ESRCH [ 164.389349][ T6712] rust_binder: use_range failure ESRCH [ 164.395379][ T6712] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 164.400918][ T6712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 164.408650][ T6712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:555 [ 164.441616][ T6716] can0: slcan on ptm0. [ 164.514919][ T398] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 164.545257][ T6716] can0 (unregistered): slcan off ptm0. [ 164.620347][ T306] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 164.641340][ T306] usb 1-1: device descriptor read/8, error -71 [ 164.771338][ T306] usb 1-1: device descriptor read/8, error -71 [ 164.771860][ T398] usb 3-1: USB disconnect, device number 38 [ 165.010347][ T306] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 165.031332][ T306] usb 1-1: device descriptor read/8, error -71 [ 165.161325][ T306] usb 1-1: device descriptor read/8, error -71 [ 165.270429][ T306] usb usb1-port1: unable to enumerate USB device [ 165.370359][ T398] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 165.405988][ T6762] TCP: out of memory -- consider tuning tcp_mem [ 165.412564][ T6762] ------------[ cut here ]------------ [ 165.418037][ T6762] WARNING: CPU: 1 PID: 6762 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790 [ 165.427543][ T6762] Modules linked in: [ 165.431480][ T6762] CPU: 1 UID: 0 PID: 6762 Comm: syz.2.2259 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 165.444957][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.455045][ T6762] RIP: 0010:inet_sock_destruct+0x681/0x790 [ 165.460908][ T6762] Code: a3 e8 d3 e6 c8 fc 0f 0b e9 53 fe ff ff e8 c7 e6 c8 fc 0f 0b e9 92 fe ff ff e8 bb e6 c8 fc 0f 0b e9 c4 fe ff ff e8 af e6 c8 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff [ 165.480543][ T6762] RSP: 0018:ffffc9000df7fbe8 EFLAGS: 00010287 [ 165.486611][ T6762] RAX: ffffffff84bcbc81 RBX: 0000000080000000 RCX: 0000000000080000 [ 165.494624][ T6762] RDX: ffffc90005e93000 RSI: 0000000000002acb RDI: 0000000000002acc [ 165.502627][ T6762] RBP: ffffc9000df7fc30 R08: ffff88811ec5817f R09: 1ffff11023d8b02f [ 165.510622][ T6762] R10: dffffc0000000000 R11: ffffed1023d8b030 R12: ffff88811ec58000 [ 165.518597][ T6762] R13: ffff88811ec58000 R14: ffff88811ec58164 R15: 1ffff11023d8b002 [ 165.526591][ T6762] FS: 00007f3978f736c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 165.535557][ T6762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.540310][ T398] usb 5-1: Using ep0 maxpacket: 16 [ 165.542188][ T6762] CR2: 00002000000014c0 CR3: 00000001374de000 CR4: 00000000003526b0 [ 165.548666][ T398] usb 5-1: config 0 has no interfaces? [ 165.555224][ T6762] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.555242][ T6762] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.555255][ T6762] Call Trace: [ 165.555263][ T6762] [ 165.555271][ T6762] ? __cfi_inet_sock_destruct+0x10/0x10 [ 165.561850][ T398] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 165.568699][ T6762] __sk_destruct+0x68/0x6a0 [ 165.568728][ T6762] ? __sk_free+0x304/0x410 [ 165.577074][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.580062][ T6762] __sk_free+0x313/0x410 [ 165.580087][ T6762] sk_free+0x58/0xb0 [ 165.583965][ T398] usb 5-1: config 0 descriptor?? [ 165.588555][ T6762] tcp_close+0xc4/0x120 [ 165.588582][ T6762] inet_release+0x1b4/0x2c0 [ 165.588605][ T6762] sock_close+0xda/0x280 [ 165.640412][ T6762] ? __cfi_sock_close+0x10/0x10 [ 165.645264][ T6762] __fput+0x1fe/0xa00 [ 165.649237][ T6762] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 165.654811][ T6762] ____fput+0x20/0x30 [ 165.658794][ T6762] task_work_run+0x1e3/0x250 [ 165.663388][ T6762] ? __cfi_task_work_run+0x10/0x10 [ 165.668497][ T6762] ? __kasan_check_write+0x18/0x20 [ 165.673615][ T6762] resume_user_mode_work+0x36/0x50 [ 165.678730][ T6762] syscall_exit_to_user_mode+0x64/0xb0 [ 165.684229][ T6762] do_syscall_64+0x64/0xf0 [ 165.688654][ T6762] ? clear_bhb_loop+0x50/0xa0 [ 165.693345][ T6762] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 165.699270][ T6762] RIP: 0033:0x7f397818e929 [ 165.703710][ T6762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.723352][ T6762] RSP: 002b:00007f3978f73038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 165.731897][ T6762] RAX: 0000000000000000 RBX: 00007f39783b5fa0 RCX: 00007f397818e929 [ 165.739930][ T6762] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 165.747923][ T6762] RBP: 00007f3978210b39 R08: 0000000000000000 R09: 0000000000000000 [ 165.755921][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.763922][ T6762] R13: 0000000000000000 R14: 00007f39783b5fa0 R15: 00007ffd1c51b748 [ 165.771917][ T6762] [ 165.774925][ T6762] ---[ end trace 0000000000000000 ]--- [ 165.804412][ T45] usb 5-1: USB disconnect, device number 40