last executing test programs: 7.091435408s ago: executing program 1 (id=109): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x14, 0x0, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "8000"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x6, 0xff, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "0010", "8e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x2a, {0x7, 0x25, 0x1, 0x82}}}}}}}]}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r3, &(0x7f0000000100)="1e4579378489bf3666e8e7e92acdde679cb928c4b2e3c6c9e820ca0311d0463c286454e2ac5dfbc628810c025a84", 0x2e, 0x80, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x4, @private2, 0x4, 0x3}, 0x80) syz_usb_control_io$uac1(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000340)="016d9711f408b20308856f4763dd4823f87dbbe189938efea58d1ebb5920f750c8954fad0eee03fdeb42538511512b706302b7d0cfdd3a4e9b9260ac019e245126491fb4e27479f8281a694d80921e0c9c8b35b9a9e63263d5055c6fd714b32d36746478a13eaad5511e3ad45115e196b18bb37d76d465387d2e4e22be544b2b4217607e97c2b9a84f768d619e8b6fe8160732ee3d38a612a057c3a0b2e02932c770c3cd1d08934653954d839692ec21f0a8244d9a6523", 0xb7) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000060000000001, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x14}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r6, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.836894228s ago: executing program 3 (id=111): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000250001002bbd7000fcdbdf2526dd187513000000002e"], 0xa0}], 0x1, 0x0, 0x0, 0x4050}, 0x40) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) r4 = syz_io_uring_setup(0x4da2, &(0x7f0000000140)={0x0, 0x1f7f, 0x8000, 0x3, 0x1, 0x0, r3}, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x1010, r4, 0x8000000) (async) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000002440)=ANY=[@ANYBLOB="1201000039c7a5407d3588020d810000000109021200010000000109041d280008040105218d4116fb89ce80a4305c45ee87b1625424281d5b20adc289b2c50a574097eced154878e6a9a30d653d25a17961e9baff6eedac9104e8472343afba577cce10989848878a"], 0x0) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x24, &(0x7f0000000bc0)=0x6, 0x4) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) (async) close_range(r6, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r5, 0x0, 0x22, &(0x7f00000000c0)=0x200, 0x4) (async) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1a14800, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}], [], 0x6b}}) 5.779143983s ago: executing program 3 (id=113): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) 5.778836983s ago: executing program 3 (id=114): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r0, 0x0, r0, &(0x7f0000000100)=0x8800000, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582030002000000b9d7fb71cf43018c6c229f002fa6519dc281bec21f63dd35fbd950da2612506b7b7c7cc53cf580bf87f54ff0"], 0x0) 4.626364234s ago: executing program 1 (id=120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc615, 0x101, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x40, 0x1a, 0xf, {0xf, 0x21, "ccc0eb1b717f7bd30c15ad250d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x10b, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905b5af66", @ANYRESDEC], 0x0) 4.399708124s ago: executing program 0 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$vga_arbiter(r1, &(0x7f0000000100)=@other={'lock', ' ', 'mem'}, 0x9) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000080)={0x3, 0x5}) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) (async) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f00000007c0)="b95e3a5115de7bfd261b4e69ab74e27fe5eb16316b1ecacbe4c7fc349152e580debec5be97aa4c17", 0x28}], 0x2) 4.399296334s ago: executing program 0 (id=122): openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 4.388931915s ago: executing program 3 (id=123): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0), 0xffffffffffffff8c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x5c, 0x90, 0xae, 0x40, 0xb95, 0x2790, 0xa9a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb6, 0x3, 0x90, 0x2, [{{0x9, 0x4, 0x84, 0x1e, 0x0, 0xff, 0x2e, 0xc4}}]}}]}}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x101, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000003) 4.378052376s ago: executing program 0 (id=124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x4, 0x80000, 0x1}) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x0, 0xf, 0xb9, {0xb9, 0x21, "3a990adb802fd96e11bc78fad123726095b877f0fa69fc0ceb139205f7670e926543789a8163852de676e2faf7c026bde3e1d379ca04bcbc563743ffe7f8f3fdaf61e9c489aac2300a2ec175cb0afcc509acc8b6c570cabb6ae7711d120d1b676d8e7de69edfed476a155cf2b340b717b007bdaa61bb4656e7250ba6e3c403272c654fe21a92627fdd3fad3e899180b3bb58aa37d7544cb19b7c19cd9a989488a5758613d032f7888a37b0e70bfa815f9a6e546f926f3e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000640)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x5, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x8, 0x3ff}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "67d9687f0d46236ab736f93d585c4f22"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x81, 0x3, 0x18, 0x5514, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x1, 0x8, 0x7ff}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xbd, 0x60, 0x6, 0x41, "09e2a977", "1432b99a"}}, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x2, 0x7, 0xff, 0x8, 0x9, 0x1}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x0, 0x15, 0xd, "8744abec6692a58bd7d21c8394"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x60, 0x80}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x5}, 0x0, &(0x7f0000000980)={0x40, 0xb, 0x2, "abd1"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x2e}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, ' %'}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x3330}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x3}}) 3.679727477s ago: executing program 2 (id=129): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000040)={0x14, 0x0, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "8000"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x200, 0x6, 0xff, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "0010", "8e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x2a, {0x7, 0x25, 0x1, 0x82}}}}}}}]}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r3, &(0x7f0000000100)="1e4579378489bf3666e8e7e92acdde679cb928c4b2e3c6c9e820ca0311d0463c286454e2ac5dfbc628810c025a84", 0x2e, 0x80, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x4, @private2, 0x4, 0x3}, 0x80) syz_usb_control_io$uac1(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000340)="016d9711f408b20308856f4763dd4823f87dbbe189938efea58d1ebb5920f750c8954fad0eee03fdeb42538511512b706302b7d0cfdd3a4e9b9260ac019e245126491fb4e27479f8281a694d80921e0c9c8b35b9a9e63263d5055c6fd714b32d36746478a13eaad5511e3ad45115e196b18bb37d76d465387d2e4e22be544b2b4217607e97c2b9a84f768d619e8b6fe8160732ee3d38a612a057c3a0b2e02932c770c3cd1d08934653954d839692ec21f0a8244d9a6523", 0xb7) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000060000000001, 0xffffffffffffffff}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x14}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r6, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.964994159s ago: executing program 1 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x28}], 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000080000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600065a2d41be00060005"], 0xe4}}, 0x4040085) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{0x8080000, 0xeeef0000, 0xe, 0x0, 0x81, 0x8, 0xa, 0x4e, 0x0, 0x7f, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x3, 0x1}, {0x200000, 0xdddd1000, 0xe, 0x7, 0x3, 0x0, 0xa, 0xf, 0xa, 0x6, 0x2}, {0xffff1000, 0x80a0000, 0xc, 0x1, 0x1, 0x5, 0xc, 0x0, 0x1, 0x6, 0xc, 0x9}, {0x80a0000, 0xeeee8000, 0xd, 0x9, 0x80, 0xf2, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x1}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0xfe, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x43, 0x70, 0x8, 0x8, 0xe1}, {0x40000, 0x2, 0x9, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0xeeee0000, 0x4}, {0x60000, 0x5}, 0x80000031, 0x0, 0x0, 0x40, 0xf, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb601fffc) 2.857392929s ago: executing program 1 (id=131): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40d80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000500)) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x0, 0x40}}}}}]}}]}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x4, 0x2, 0x1, 0x0, 0x0, [{{r0}, 0x864}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x0, "93"}, @main=@item_4={0x3, 0x0, 0xb, "82f6845a"}]}}, 0x0}, 0x0) 1.368333889s ago: executing program 3 (id=132): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x0, 0x23, 0x8, {0x8, 0x7, "1cd0ca9bc400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2e, {0x2, 0x4e22, @empty}}) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000001b0001002dbd7000fddbdf2500008000000000000000000000000000ac1e00010000000000000000119e9c66c88d4a6a4e2300040a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000008000000000000000f8ffffffffffffffff01000000000000010000000000000009000000000000000900000000000000000000008015010002000000000000000100000000000000fd0000000000000004000000000000000700000000000000000002030000000029000000000000000c0008"], 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000001380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) landlock_restrict_self(r0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, 0x0) symlink(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') 1.3666596s ago: executing program 2 (id=133): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x2, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) recvfrom$unix(r1, &(0x7f0000000100)=""/13, 0xd, 0x2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xde9) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000001c0)=0x7, &(0x7f0000000200)=0x2) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.apparmor\x00') r3 = syz_open_dev$rtc(&(0x7f00000002c0), 0x8, 0x8000) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x6b}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]}, 0x38}}, 0x20004010) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa73}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x52}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004845}, 0x800) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/pm_print_times', 0x2, 0x98) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x1046) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) accept4(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x80c00) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x4e) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r8, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r9, 0x605, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004040}, 0xc850) r10 = openat$cgroup_int(r5, &(0x7f0000000840)='cpuset.memory_spread_page\x00', 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r10, 0xf505, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) rt_sigprocmask(0x1, &(0x7f0000000ac0)={[0x4]}, &(0x7f0000000b00), 0x8) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000b40)=0x1, 0x4) ioctl$BTRFS_IOC_SPACE_INFO(r10, 0xc0109414, &(0x7f0000000b80)={0xef2, 0xa1b3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000017380)={&(0x7f0000017240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000017340)={&(0x7f00000172c0)={0x5c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44850) 1.339966792s ago: executing program 0 (id=134): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x42) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000060000000001, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.259858879s ago: executing program 2 (id=135): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000088, &(0x7f0000000080)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3e50, 0x4) sendmmsg$inet6(r0, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1}, 0xff000000}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="83", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)='^', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d40)='(', 0x1}], 0x1}}], 0x4, 0x84) 1.259649669s ago: executing program 2 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002400010027bd70000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x8008) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2e, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x24}}, 0x400c810) 1.259288949s ago: executing program 2 (id=137): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r1}) (async) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000000)=0x1, 0x4) (async) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x7b330605, 0x6, 0x3, 0x800, 0x8}, 0x14) 1.259202299s ago: executing program 2 (id=138): syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="a43eff5269c15b932a86b695bb0049e6bd94351aeca65ff8ee9ee3edb79e51c5ca90959bc902d1c81d6239222fc2ba23d3b7fe2aa82a0921f2cc3165ab91bbb30bc75e50bb9c37c64d6a8b477e1a840b6f0b2bb0e2181ecc46d565d1c25d5b6489cdfd3813be7f587c1d6a17757482363d4216e461dddae7410a111f3f391da9d912a9dfb35c8bcf4dc7a746320f63668b9595aff93b65d77586e43e0f3e0374db156f72c75bacdb66d51ebd52b99fe906c5589bc72a57f2d4c70ba2d87fdc824c429edec9a23d866668e2", @ANYBLOB="18af01b1b3a15a2eb4ba22329aa222bcbf7c67385d84cc67a11eb08378dec342588bec766e9eb0926113e720b4461d2f6b63e239b6f484bc599f18ee35cef450976a1172050788b25225c60b2ea7d81e2a631d8425617dbd", @ANYRESHEX=0x0, @ANYRESHEX], 0xfffffffffffffffc) 787.005761ms ago: executing program 3 (id=139): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x6, 0x0, 0x0, 0x3, 0x867000c0, r1}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0), 0x10, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="07400000030000000300000000040000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r3/1000+10000, @ANYBLOB="0200008001000000010000603800000024021eda1b7a76af88536e03d881ad1ae072738dbbe8906c1e896384c5621f01ba084b4ce289422f29bc3171497b6c1fe51555a194d43cb996491b9acd7efed7"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4008004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r1, 0x0, 0x20, 0x80000001, 0x4, {{0x22, 0x4, 0x0, 0x21, 0x88, 0x67, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2, {[@timestamp={0x44, 0x14, 0x66, 0x0, 0x4, [0x8c, 0x8, 0x1, 0x5833f126]}, @cipso={0x86, 0x43, 0x2, [{0x5, 0xb, "fb3e291531e18bc0aa"}, {0x1, 0xf, "af7dab9212725e05bbedf0a777"}, {0x7, 0x7, "0700001a00"}, {0x7, 0x12, "113774353a939d08cf50149508e5e205"}, {0x6, 0xa, "20af668f6f5d87b5"}]}, @lsrr={0x83, 0xf, 0x6, [@empty, @remote, @rand_addr=0x64010101]}, @timestamp={0x44, 0xc, 0xad, 0x0, 0x4, [0x3, 0xfffff800]}]}}}}}) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201001e00000000406a05cc0000000000000109022400010000900009040000fe03000000092100000801220700090581030000060040"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0022584e6f6447af34638866a0eb6c74540a0000002b6207ee770719cc9a43"], 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000080000a00fc003a2a5e247b000000080004"], 0x24}], 0x1}, 0x0) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0x8, 0x7f, 0x7}], 0x1, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) r9 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0xc) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x40000000001) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x100fe, 0x1, 0xa000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000440)={r8, &(0x7f0000000180)='**E(\'^,\xda}\x00', 0xa400, &(0x7f0000000380)={@_ha_fsid={[0x6, 0x9]}, {0x0, 0x8, 0xfffffff0, 0x8001}}, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x5a}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs}) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x10, 0x80, 0x6, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x3, 0x8f, 0x29, 0x0, @multicast1, @loopback}}}}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000200)={[0x996, 0x9, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x4002004c4, 0x8, 0x8000000000000000, 0xc595, 0x2, 0x1, 0x2, 0x1ffffffffffffffd, 0xb3, 0x99], 0xeeee8000, 0x2010d3}) ioctl$KVM_INTERRUPT(r12, 0x4004ae86, &(0x7f0000000100)=0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 302.362323ms ago: executing program 1 (id=140): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES8=r1]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r3, r4, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x90843, 0x81) write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0) dup2(r5, r0) pwrite64(r0, &(0x7f00000003c0)='@', 0x1, 0x100001) 235.568649ms ago: executing program 1 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f000000fa80), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f000000fb80)={0x0, 0x0, &(0x7f000000fb40)={&(0x7f000000fac0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2501000000000000000741000700000018"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB='\x00', @ANYRESDEC=r2, @ANYBLOB="91a7106a8563dd9cd4c5986c"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x2, 0x10, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ce0cce"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x3fa8, 0x81}, {0x6, 0x24, 0x1a, 0x101, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x3c, 0x8, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf2, 0x86}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x4, 0xfc, 0x2, 0x10, 0xb5}, 0x2c, &(0x7f0000000200)={0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0xa, 0x5, 0x800, 0xf0f, 0x9, [0x0, 0xff30, 0xff3fc0, 0x3f00, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x1, 0x7}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x429}}]}) 15.265788ms ago: executing program 0 (id=142): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f68737200000000080003000300000018000380140003801000018004"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, &(0x7f0000000200)) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 0s ago: executing program 0 (id=143): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000240)="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", 0x279}], 0x1}}], 0x1, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x73622a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000400)=""/223, 0xdf, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 24.517403][ T36] audit: type=1400 audit(1771855303.060:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.518506][ T283] cgroup: Unknown subsys name 'net' [ 24.540840][ T36] audit: type=1400 audit(1771855303.060:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.568251][ T36] audit: type=1400 audit(1771855303.090:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.568902][ T283] cgroup: Unknown subsys name 'devices' [ 24.751155][ T283] cgroup: Unknown subsys name 'hugetlb' [ 24.756771][ T283] cgroup: Unknown subsys name 'rlimit' [ 24.850793][ T36] audit: type=1400 audit(1771855303.400:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.870633][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.874121][ T36] audit: type=1400 audit(1771855303.400:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.897971][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.907423][ T36] audit: type=1400 audit(1771855303.400:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.939976][ T36] audit: type=1400 audit(1771855303.430:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.965661][ T36] audit: type=1400 audit(1771855303.430:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.991648][ T36] audit: type=1400 audit(1771855303.440:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.017475][ T36] audit: type=1400 audit(1771855303.440:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.225201][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.232379][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.239822][ T292] bridge_slave_0: entered allmulticast mode [ 26.246108][ T292] bridge_slave_0: entered promiscuous mode [ 26.252531][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.259600][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.266780][ T292] bridge_slave_1: entered allmulticast mode [ 26.272998][ T292] bridge_slave_1: entered promiscuous mode [ 26.311389][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.318439][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.325723][ T291] bridge_slave_0: entered allmulticast mode [ 26.332330][ T291] bridge_slave_0: entered promiscuous mode [ 26.341655][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.348748][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.355807][ T291] bridge_slave_1: entered allmulticast mode [ 26.362175][ T291] bridge_slave_1: entered promiscuous mode [ 26.369553][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.376678][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.383796][ T290] bridge_slave_0: entered allmulticast mode [ 26.390018][ T290] bridge_slave_0: entered promiscuous mode [ 26.413425][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.420510][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.427572][ T290] bridge_slave_1: entered allmulticast mode [ 26.433867][ T290] bridge_slave_1: entered promiscuous mode [ 26.462175][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.469361][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.476456][ T293] bridge_slave_0: entered allmulticast mode [ 26.482951][ T293] bridge_slave_0: entered promiscuous mode [ 26.492613][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.499908][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.507086][ T293] bridge_slave_1: entered allmulticast mode [ 26.513435][ T293] bridge_slave_1: entered promiscuous mode [ 26.670241][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.677506][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.684967][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.692116][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.702517][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.709694][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.717057][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.724392][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.733447][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.740531][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.747909][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.754982][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.771222][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.778293][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.785800][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.792953][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.849289][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.857057][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.864965][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.872666][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.880080][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.887268][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.895276][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.902615][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.923874][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.930961][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.938951][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.946001][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.954055][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.961149][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.968786][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.976046][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.990463][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.997523][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.005389][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.012461][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.020275][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.027479][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.039942][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.047110][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.105121][ T292] veth0_vlan: entered promiscuous mode [ 27.119360][ T290] veth0_vlan: entered promiscuous mode [ 27.131745][ T291] veth0_vlan: entered promiscuous mode [ 27.144576][ T293] veth0_vlan: entered promiscuous mode [ 27.152694][ T292] veth1_macvtap: entered promiscuous mode [ 27.171739][ T290] veth1_macvtap: entered promiscuous mode [ 27.179571][ T291] veth1_macvtap: entered promiscuous mode [ 27.212210][ T293] veth1_macvtap: entered promiscuous mode [ 27.222916][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.294485][ T333] veth1: entered allmulticast mode [ 27.314625][ T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.429560][ T331] veth1: left allmulticast mode [ 27.554656][ T361] netlink: 'syz.3.12': attribute type 16 has an invalid length. [ 27.619314][ T229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.649019][ T355] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 27.739725][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 27.770877][ T229] usb 1-1: Using ep0 maxpacket: 32 [ 27.776476][ T229] usb 1-1: no configurations [ 27.782603][ T229] usb 1-1: can't read configurations, error -22 [ 27.829920][ T355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.840480][ T355] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 27.850043][ T355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.861837][ T355] usb 2-1: config 0 descriptor?? [ 27.889856][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 27.908777][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 27.918120][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.928773][ T229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.941643][ T9] usb 3-1: config 0 descriptor?? [ 27.946917][ T354] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 28.069706][ T349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.078425][ T349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.079145][ T229] usb 1-1: Using ep0 maxpacket: 32 [ 28.089563][ T355] usb 2-1: USB disconnect, device number 2 [ 28.094621][ T229] usb 1-1: no configurations [ 28.108599][ T229] usb 1-1: can't read configurations, error -22 [ 28.116651][ T229] usb usb1-port1: attempt power cycle [ 28.135185][ T377] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.462277][ T229] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.490112][ T229] usb 1-1: Using ep0 maxpacket: 32 [ 28.496003][ T229] usb 1-1: no configurations [ 28.501197][ T229] usb 1-1: can't read configurations, error -22 [ 28.563670][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 28.571142][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 28.580977][ T9] usb 3-1: USB disconnect, device number 2 [ 28.629011][ T229] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 28.649126][ T229] usb 1-1: Using ep0 maxpacket: 32 [ 28.654750][ T229] usb 1-1: no configurations [ 28.660005][ T229] usb 1-1: can't read configurations, error -22 [ 28.666449][ T229] usb usb1-port1: unable to enumerate USB device [ 28.718817][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.868774][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 28.875508][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.883989][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 28.895230][ T31] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 28.905376][ T31] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 28.917387][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.926941][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.935331][ T31] usb 4-1: Product: syz [ 28.940517][ T31] usb 4-1: Manufacturer: syz [ 28.945124][ T31] usb 4-1: SerialNumber: syz [ 29.153944][ T31] cdc_ncm 4-1:1.0: bind() failure [ 29.159838][ T31] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 29.166661][ T31] cdc_ncm 4-1:1.1: bind() failure [ 29.172985][ T31] usb 4-1: USB disconnect, device number 2 [ 29.338861][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.480724][ T406] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 29.489651][ T406] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 29.489879][ T9] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 29.498753][ T406] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 29.517657][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.527294][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 29.536669][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 29.545156][ T9] usb 3-1: SerialNumber: syz [ 29.753444][ T9] usb 3-1: 0:2 : does not exist [ 29.758864][ T9] usb 3-1: unit 5: unexpected type 0x09 [ 29.767281][ T9] usb 3-1: USB disconnect, device number 3 [ 29.780585][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.898773][ T355] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 30.050009][ T355] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.060342][ T355] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 30.070907][ T355] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 30.079993][ T355] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 30.088246][ T355] usb 4-1: Product: syz [ 30.092485][ T355] usb 4-1: Manufacturer: syz [ 30.097114][ T355] usb 4-1: SerialNumber: syz [ 30.102480][ T355] usb 4-1: config 0 descriptor?? [ 30.137084][ T36] kauditd_printk_skb: 759 callbacks suppressed [ 30.137104][ T36] audit: type=1400 audit(1771855308.680:833): avc: denied { read } for pid=412 comm="syz.1.28" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.166540][ T36] audit: type=1400 audit(1771855308.680:834): avc: denied { open } for pid=412 comm="syz.1.28" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.446719][ T430] ======================================================= [ 30.446719][ T430] WARNING: The mand mount option has been deprecated and [ 30.446719][ T430] and is ignored by this kernel. Remove the mand [ 30.446719][ T430] option from the mount to silence this warning. [ 30.446719][ T430] ======================================================= [ 30.446721][ T36] audit: type=1400 audit(1771855308.990:835): avc: denied { remount } for pid=427 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.503613][ T430] SELinux: security_context_str_to_sid (syste_uÝGй ‰:) failed with errno=-22 [ 30.544459][ T36] audit: type=1400 audit(1771855309.090:836): avc: denied { watch } for pid=437 comm="syz.0.36" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 30.565513][ T229] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.574742][ T36] audit: type=1400 audit(1771855309.090:837): avc: denied { connect } for pid=437 comm="syz.0.36" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.599758][ T355] usb 4-1: USB disconnect, device number 3 [ 30.600857][ T36] audit: type=1400 audit(1771855309.090:838): avc: denied { setopt } for pid=437 comm="syz.0.36" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.628124][ T36] audit: type=1400 audit(1771855309.100:839): avc: denied { write } for pid=437 comm="syz.0.36" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.649391][ T36] audit: type=1400 audit(1771855309.120:840): avc: denied { create } for pid=439 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 30.669660][ T36] audit: type=1400 audit(1771855309.120:841): avc: denied { sys_admin } for pid=439 comm="syz.0.37" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 30.691800][ T36] audit: type=1400 audit(1771855309.120:842): avc: denied { remount } for pid=439 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.728767][ T229] usb 3-1: Using ep0 maxpacket: 16 [ 30.735267][ T229] usb 3-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 30.746022][ T229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.756947][ T229] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.766854][ T229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.775170][ T229] usb 3-1: Product: syz [ 30.782437][ T229] usb 3-1: Manufacturer: syz [ 30.787359][ T229] usb 3-1: SerialNumber: syz [ 30.849881][ T453] capability: warning: `syz.0.42' uses deprecated v2 capabilities in a way that may be insecure [ 31.000074][ T229] usb 3-1: unknown interface protocol 0xe, assuming v1 [ 31.008363][ T229] usb 3-1: cannot find UAC_HEADER [ 31.016474][ T229] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 31.038373][ T229] usb 3-1: USB disconnect, device number 4 [ 31.059861][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.198967][ T355] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.249454][ T469] Zero length message leads to an empty skb [ 31.328792][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.359955][ T355] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 67, using maximum allowed: 30 [ 31.371290][ T355] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.383155][ T355] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 31.396523][ T355] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.403507][ T355] usb 2-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00 [ 31.412686][ T355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.421636][ T355] usb 2-1: config 0 descriptor?? [ 31.489899][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.500940][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.511124][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.524334][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.539108][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.553504][ T9] usb 1-1: config 0 descriptor?? [ 31.782676][ T478] syz.2.52: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 31.800710][ T478] CPU: 0 UID: 0 PID: 478 Comm: syz.2.52 Not tainted syzkaller #0 f3a946831d5e2592ee08d6703df2b13566dbc460 [ 31.800752][ T478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.800764][ T478] Call Trace: [ 31.800770][ T478] [ 31.800777][ T478] __dump_stack+0x21/0x30 [ 31.800808][ T478] dump_stack_lvl+0x140/0x1c0 [ 31.800843][ T478] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.800872][ T478] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 31.800901][ T478] dump_stack+0x19/0x20 [ 31.800936][ T478] warn_alloc+0x1e7/0x2c0 [ 31.800959][ T478] ? __kasan_slab_free+0x5f/0x80 [ 31.800987][ T478] ? __cfi_warn_alloc+0x10/0x10 [ 31.801009][ T478] ? __get_vm_area_node+0x201/0x3d0 [ 31.801032][ T478] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.801063][ T478] ? xskq_create+0xdb/0x290 [ 31.801086][ T478] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 31.801113][ T478] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 31.801136][ T478] ? kasan_save_alloc_info+0x40/0x50 [ 31.801158][ T478] ? __kasan_kmalloc+0x96/0xb0 [ 31.801184][ T478] ? __kmalloc_cache_noprof+0x23c/0x470 [ 31.801209][ T478] vmalloc_user_noprof+0x77/0x90 [ 31.801232][ T478] ? xskq_create+0xdb/0x290 [ 31.801253][ T478] xskq_create+0xdb/0x290 [ 31.801275][ T478] xsk_init_queue+0xb2/0x120 [ 31.801298][ T478] xsk_setsockopt+0x4e1/0x760 [ 31.801319][ T478] ? __cfi_xsk_setsockopt+0x10/0x10 [ 31.801340][ T478] ? do_futex+0x32a/0x510 [ 31.801364][ T478] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 31.801392][ T478] ? security_socket_setsockopt+0x3d/0x100 [ 31.801420][ T478] ? __cfi_xsk_setsockopt+0x10/0x10 [ 31.801442][ T478] do_sock_setsockopt+0x27c/0x410 [ 31.801480][ T478] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 31.801511][ T478] __x64_sys_setsockopt+0x1b7/0x250 [ 31.801541][ T478] x64_sys_call+0x2adc/0x2ee0 [ 31.801568][ T478] do_syscall_64+0x57/0xf0 [ 31.801587][ T478] ? clear_bhb_loop+0x50/0xa0 [ 31.801606][ T478] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.801635][ T478] RIP: 0033:0x7f65b739c629 [ 31.801655][ T478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.801671][ T478] RSP: 002b:00007f65b832e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 31.801695][ T478] RAX: ffffffffffffffda RBX: 00007f65b7615fa0 RCX: 00007f65b739c629 [ 31.801710][ T478] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 31.801732][ T478] RBP: 00007f65b7432b39 R08: 0000000000000004 R09: 0000000000000000 [ 31.801745][ T478] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 31.801759][ T478] R13: 00007f65b7616038 R14: 00007f65b7615fa0 R15: 00007ffea228b338 [ 31.801775][ T478] [ 31.801807][ T478] Mem-Info: [ 32.078542][ T478] active_anon:21078 inactive_anon:0 isolated_anon:0 [ 32.078542][ T478] active_file:14732 inactive_file:2280 isolated_file:0 [ 32.078542][ T478] unevictable:0 dirty:275 writeback:0 [ 32.078542][ T478] slab_reclaimable:3996 slab_unreclaimable:70842 [ 32.078542][ T478] mapped:24235 shmem:15634 pagetables:779 [ 32.078542][ T478] sec_pagetables:0 bounce:0 [ 32.078542][ T478] kernel_misc_reclaimable:0 [ 32.078542][ T478] free:1512427 free_pcp:2100 free_cma:0 [ 32.080365][ T355] wacom 0003:056A:037B.0001: unknown main item tag 0x0 [ 32.127315][ T478] Node 0 active_anon:84312kB inactive_anon:0kB active_file:58928kB inactive_file:9120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96940kB dirty:1100kB writeback:0kB shmem:62536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5036kB pagetables:3116kB sec_pagetables:0kB all_unreclaimable? no [ 32.132339][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 32.171083][ T355] wacom 0003:056A:037B.0001: unknown main item tag 0x0 [ 32.177800][ T478] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963364kB mlocked:0kB bounce:0kB free_pcp:5200kB local_pcp:4572kB free_cma:0kB [ 32.178434][ T355] wacom 0003:056A:037B.0001: unknown main item tag 0x0 [ 32.211050][ T478] lowmem_reserve[]: 0 3921 3921 [ 32.216391][ T355] wacom 0003:056A:037B.0001: unknown main item tag 0x0 [ 32.228279][ T478] Normal free:3090980kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85076kB inactive_anon:0kB active_file:58928kB inactive_file:9120kB unevictable:0kB writepending:1100kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2516kB local_pcp:320kB free_cma:0kB [ 32.228867][ T9] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 32.264496][ T478] lowmem_reserve[]: 0 0 0 [ 32.273706][ T355] wacom 0003:056A:037B.0001: unknown main item tag 0x0 [ 32.277472][ T478] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 32.293407][ T355] wacom 0003:056A:037B.0001: Unknown device_type for 'HID 056a:037b'. Assuming pen. [ 32.322366][ T478] Normal: 2*4kB (ME) 0*8kB 2*16kB (ME) 11*32kB (UE) 33*64kB (UME) 69*128kB (UM) 18*256kB (UME) 8*512kB (ME) 4*1024kB (UME) 3*2048kB (UME) 747*4096kB (M) = 3089992kB [ 32.343785][ T355] wacom 0003:056A:037B.0001: hidraw1: USB HID v0.09 Device [HID 056a:037b] on usb-dummy_hcd.1-1/input0 [ 32.359614][ T355] input: Wacom One by Wacom M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:037B.0001/input/input4 [ 32.372302][ T478] 32667 total pagecache pages [ 32.376181][ T493] tmpfs: Bad value for 'size' [ 32.377082][ T478] 0 pages in swap cache [ 32.398646][ T478] Free swap = 124448kB [ 32.405513][ T478] Total swap = 124996kB [ 32.411344][ T478] 2097051 pages RAM [ 32.415291][ T478] 0 pages HighMem/MovableOnly [ 32.421667][ T478] 352244 pages reserved [ 32.425936][ T478] 0 pages cma reserved [ 32.431841][ T478] Memory allocations: [ 32.435848][ T478] 0 B 0 init/main.c:1477 func:do_initcalls [ 32.443192][ T478] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 32.451359][ T478] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 32.459077][ T478] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 32.467178][ T478] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 32.475205][ T478] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 32.484052][ T478] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 32.492046][ T478] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 32.500358][ T478] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 32.508315][ T478] 0 B 0 init/initramfs.c:101 func:find_link [ 32.648767][ T229] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 32.799893][ T229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.810079][ T229] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 32.821168][ T229] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 32.830271][ T229] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 32.838443][ T229] usb 4-1: Product: syz [ 32.842644][ T229] usb 4-1: Manufacturer: syz [ 32.847248][ T229] usb 4-1: SerialNumber: syz [ 32.852542][ T229] usb 4-1: config 0 descriptor?? [ 33.179693][ T381] usb 4-1: USB disconnect, device number 4 [ 33.648744][ T229] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.722430][ T506] devpts: called with bogus options [ 33.777626][ T513] rust_binder: Write failure EINVAL in pid:66 [ 33.798740][ T229] usb 3-1: Using ep0 maxpacket: 16 [ 33.811611][ T229] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 33.819931][ T229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.831819][ T229] usb 3-1: config 1 has no interface number 0 [ 33.838033][ T229] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 33.851716][ T229] usb 3-1: config 1 interface 105 has no altsetting 0 [ 33.860665][ T229] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 33.870518][ T229] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 33.879002][ T229] usb 3-1: Product: syz [ 33.883226][ T229] usb 3-1: Manufacturer: syz [ 33.887934][ T229] usb 3-1: SerialNumber: syz [ 33.947284][ T521] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.947309][ T521] rust_binder: Read failure Err(EFAULT) in pid:74 [ 33.956061][ T521] rust_binder: Failed to allocate buffer. len:16560, is_oneway:false [ 33.962615][ T521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 33.964083][ T381] usb 2-1: USB disconnect, device number 3 [ 33.970852][ T521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:74 [ 34.068057][ T527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.086098][ T527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.094721][ T527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.102700][ T355] usb 1-1: USB disconnect, device number 6 [ 34.103225][ T229] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 34.117268][ T527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.288900][ T381] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.319580][ T229] usb 3-1: USB disconnect, device number 5 [ 34.418771][ T381] usb 2-1: device descriptor read/64, error -71 [ 34.458774][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 34.488768][ T355] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 34.610004][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.621826][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 34.630949][ T9] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 34.639350][ T9] usb 4-1: Product: syz [ 34.643540][ T9] usb 4-1: Manufacturer: syz [ 34.648437][ T9] usb 4-1: SerialNumber: syz [ 34.653934][ T355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.665241][ T9] usb 4-1: config 0 descriptor?? [ 34.670316][ T381] usb 2-1: device descriptor read/64, error -71 [ 34.676855][ T355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.686779][ T355] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 34.696928][ T355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.705632][ T355] usb 1-1: config 0 descriptor?? [ 34.908788][ T381] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.999017][ T229] usb 4-1: USB disconnect, device number 5 [ 35.038846][ T381] usb 2-1: device descriptor read/64, error -71 [ 35.118443][ T355] savu 0003:1E7D:2D5A.0003: unknown global tag 0xc [ 35.125138][ T355] savu 0003:1E7D:2D5A.0003: item 0 0 1 12 parsing failed [ 35.132500][ T355] savu 0003:1E7D:2D5A.0003: parse failed [ 35.138324][ T355] savu 0003:1E7D:2D5A.0003: probe with driver savu failed with error -22 [ 35.278806][ T381] usb 2-1: device descriptor read/64, error -71 [ 35.327444][ T355] usb 1-1: USB disconnect, device number 7 [ 35.340783][ T539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.72'. [ 35.388903][ T381] usb usb2-port1: attempt power cycle [ 35.681792][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 35.681812][ T36] audit: type=1400 audit(1771855314.230:879): avc: denied { mount } for pid=551 comm="syz.2.75" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 35.728790][ T381] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.779508][ T381] usb 2-1: device descriptor read/8, error -71 [ 35.786380][ T36] audit: type=1400 audit(1771855314.330:880): avc: denied { map } for pid=551 comm="syz.2.75" path="socket:[4868]" dev="sockfs" ino=4868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.816290][ T36] audit: type=1400 audit(1771855314.330:881): avc: denied { read } for pid=551 comm="syz.2.75" path="socket:[4868]" dev="sockfs" ino=4868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.839299][ T355] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.874461][ T557] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.874486][ T557] rust_binder: Read failure Err(EFAULT) in pid:56 [ 35.883316][ T557] rust_binder: Error while translating object. [ 35.890322][ T557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.896778][ T557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 35.911711][ T381] usb 2-1: device descriptor read/8, error -71 [ 35.998735][ T355] usb 4-1: Using ep0 maxpacket: 32 [ 36.005828][ T355] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.023691][ T355] usb 4-1: string descriptor 0 read error: -71 [ 36.046182][ T355] usb 4-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice=1e.40 [ 36.055744][ T36] audit: type=1400 audit(1771855314.590:882): avc: denied { execute } for pid=564 comm="syz.3.79" path="/29/blkio.bfq.group_wait_time" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.088816][ T355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.108272][ T355] usb 4-1: can't set config #1, error -71 [ 36.115100][ T355] usb 4-1: USB disconnect, device number 6 [ 36.168762][ T381] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.178719][ T418] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.189756][ T381] usb 2-1: device descriptor read/8, error -71 [ 36.330230][ T381] usb 2-1: device descriptor read/8, error -71 [ 36.330340][ T418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.347389][ T418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.357159][ T418] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.370123][ T418] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.379304][ T418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.388282][ T418] usb 1-1: config 0 descriptor?? [ 36.408777][ T355] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.438877][ T381] usb usb2-port1: unable to enumerate USB device [ 36.561505][ T355] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 36.570695][ T355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.579627][ T355] usb 4-1: Product: syz [ 36.583880][ T355] usb 4-1: Manufacturer: syz [ 36.588495][ T355] usb 4-1: SerialNumber: syz [ 36.799881][ T418] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 36.809911][ T418] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 36.926071][ T36] audit: type=1400 audit(1771855315.470:883): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 37.020958][ T36] audit: type=1400 audit(1771855315.570:884): avc: denied { connect } for pid=577 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.198760][ T418] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 37.349951][ T418] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.361794][ T418] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 37.371051][ T418] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 37.379391][ T418] usb 3-1: Product: syz [ 37.383730][ T418] usb 3-1: Manufacturer: syz [ 37.388317][ T418] usb 3-1: SerialNumber: syz [ 37.394704][ T418] usb 3-1: config 0 descriptor?? [ 37.698562][ T540] usb 3-1: USB disconnect, device number 6 [ 37.788749][ T381] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 37.941622][ T381] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 37.951016][ T381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.959079][ T381] usb 2-1: Product: syz [ 37.963460][ T381] usb 2-1: Manufacturer: syz [ 37.968173][ T381] usb 2-1: SerialNumber: syz [ 38.281906][ T355] rtl8150 4-1:1.0: couldn't reset the device [ 38.288226][ T355] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 38.527196][ T36] audit: type=1400 audit(1771855317.070:885): avc: denied { execheap } for pid=583 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.527668][ T596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.555612][ T596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.608751][ T229] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 38.759862][ T229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.770121][ T229] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 38.779293][ T229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.788399][ T229] usb 3-1: config 0 descriptor?? [ 38.794296][ T229] usb 3-1: bad CDC descriptors [ 38.934811][ T355] usb 1-1: USB disconnect, device number 8 [ 38.994501][ T595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.002977][ T594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.003097][ T595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.012871][ T594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.019842][ T595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.035609][ T595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.043714][ T594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.052289][ T594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.060656][ T381] usb 3-1: USB disconnect, device number 7 [ 39.081438][ T540] usb 4-1: USB disconnect, device number 7 [ 39.278767][ T355] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 39.418791][ T540] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 39.428857][ T355] usb 1-1: Using ep0 maxpacket: 16 [ 39.435197][ T355] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.444381][ T355] usb 1-1: config 1 has no interface number 1 [ 39.450592][ T355] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 39.461454][ T355] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 39.474427][ T355] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 39.486666][ T355] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.495794][ T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.504023][ T355] usb 1-1: Product: syz [ 39.508196][ T355] usb 1-1: Manufacturer: syz [ 39.512984][ T355] usb 1-1: SerialNumber: syz [ 39.580268][ T540] usb 4-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 39.600735][ T540] usb 4-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 39.618789][ T540] usb 4-1: config 0 interface 0 has no altsetting 0 [ 39.625635][ T540] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 39.634961][ T540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.644371][ T36] audit: type=1400 audit(1771855318.190:886): avc: denied { write } for pid=604 comm="syz.2.92" name="secretmem" dev="secretmem" ino=5125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.644971][ T540] usb 4-1: config 0 descriptor?? [ 39.674118][ T600] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 39.720269][ T36] audit: type=1400 audit(1771855318.270:887): avc: denied { write } for pid=597 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.941253][ T355] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 39.988918][ T229] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.086757][ T540] wacom 0003:056A:00D0.0005: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 40.098174][ T540] wacom 0003:056A:00D0.0005: hidraw0: USB HID v0.04 Device [HID 056a:00d0] on usb-dummy_hcd.3-1/input0 [ 40.110634][ T540] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D0.0005/input/input7 [ 40.148741][ T229] usb 3-1: Using ep0 maxpacket: 16 [ 40.156634][ T229] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 40.165896][ T229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.173981][ T229] usb 3-1: Product: syz [ 40.178179][ T229] usb 3-1: Manufacturer: syz [ 40.183261][ T229] usb 3-1: SerialNumber: syz [ 40.191014][ T229] r8152-cfgselector 3-1: Unknown version 0x0000 [ 40.197353][ T229] r8152-cfgselector 3-1: config 0 descriptor?? [ 40.295695][ T31] usb 4-1: USB disconnect, device number 8 [ 40.552291][ T540] usb 2-1: USB disconnect, device number 8 [ 40.606497][ T229] r8152-cfgselector 3-1: USB disconnect, device number 8 [ 40.866707][ T355] usb 1-1: USB disconnect, device number 9 [ 40.879327][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.895393][ T540] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 41.049843][ T540] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.061722][ T540] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 41.070837][ T381] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.078374][ T540] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 41.086714][ T540] usb 2-1: Product: syz [ 41.091044][ T540] usb 2-1: Manufacturer: syz [ 41.095718][ T540] usb 2-1: SerialNumber: syz [ 41.101099][ T540] usb 2-1: config 0 descriptor?? [ 41.136756][ T36] audit: type=1400 audit(1771855319.680:888): avc: denied { bind } for pid=618 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.248730][ T381] usb 4-1: Using ep0 maxpacket: 16 [ 41.255138][ T381] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.265756][ T381] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 41.276920][ T381] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.287108][ T381] usb 4-1: config 1 interface 2 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 46 [ 41.299448][ T381] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.308599][ T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.317032][ T381] usb 4-1: Product: syz [ 41.321443][ T381] usb 4-1: Manufacturer: syz [ 41.326231][ T381] usb 4-1: SerialNumber: syz [ 41.408476][ T355] usb 2-1: USB disconnect, device number 9 [ 41.416060][ T540] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 41.463866][ T36] audit: type=1400 audit(1771855320.010:889): avc: denied { read write } for pid=623 comm="syz.0.99" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 41.487098][ T36] audit: type=1400 audit(1771855320.010:890): avc: denied { open } for pid=623 comm="syz.0.99" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 41.532850][ T614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.95'. [ 41.545571][ T614] netlink: 'syz.3.95': attribute type 4 has an invalid length. [ 41.553693][ T36] audit: type=1400 audit(1771855320.100:891): avc: denied { read write } for pid=613 comm="syz.3.95" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 41.577695][ T36] audit: type=1400 audit(1771855320.100:892): avc: denied { open } for pid=613 comm="syz.3.95" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 41.601806][ T36] audit: type=1400 audit(1771855320.100:893): avc: denied { ioctl } for pid=613 comm="syz.3.95" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 41.609882][ T540] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.638517][ T540] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.648412][ T540] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.661647][ T540] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.670716][ T540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.679448][ T540] usb 3-1: config 0 descriptor?? [ 41.705435][ T381] usb 4-1: USB disconnect, device number 9 [ 41.717223][ T611] udevd[611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.980824][ T629] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 42.009675][ T633] GUP no longer grows the stack in syz.1.102 (633): 200000004000-200000005000 (200000001000) [ 42.021871][ T633] CPU: 0 UID: 0 PID: 633 Comm: syz.1.102 Not tainted syzkaller #0 f3a946831d5e2592ee08d6703df2b13566dbc460 [ 42.021912][ T633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.021926][ T633] Call Trace: [ 42.021934][ T633] [ 42.021942][ T633] __dump_stack+0x21/0x30 [ 42.021975][ T633] dump_stack_lvl+0x140/0x1c0 [ 42.022001][ T633] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.022027][ T633] ? find_vma+0xd3/0x120 [ 42.022054][ T633] ? dequeue_entity+0x33f/0x1380 [ 42.022078][ T633] dump_stack+0x19/0x20 [ 42.022101][ T633] __get_user_pages+0x1e18/0x22b0 [ 42.022129][ T633] ? kasan_save_track+0x4f/0x80 [ 42.022152][ T633] ? tg_unthrottle_up+0x9a0/0x9a0 [ 42.022172][ T633] ? __kasan_check_write+0x18/0x20 [ 42.022195][ T633] ? down_read_killable+0x7f/0x100 [ 42.022221][ T633] ? populate_vma_page_range+0x220/0x220 [ 42.022251][ T633] __gup_longterm_locked+0xc5a/0x1600 [ 42.022271][ T633] ? try_grab_folio_fast+0x155/0x520 [ 42.022291][ T633] ? follow_pfn_pte+0x110/0x110 [ 42.022308][ T633] ? __pte_offset_map+0x1b0/0x230 [ 42.022329][ T633] gup_fast_fallback+0x12e9/0x14e0 [ 42.022347][ T633] ? finish_task_switch+0x139/0x760 [ 42.022370][ T633] ? get_user_pages_fast_only+0xc0/0xc0 [ 42.022386][ T633] ? __futex_queue+0x19f/0x350 [ 42.022407][ T633] ? __cfi___futex_queue+0x10/0x10 [ 42.022428][ T633] get_user_pages_fast+0x73/0xb0 [ 42.022446][ T633] __iov_iter_get_pages_alloc+0x3ca/0xa30 [ 42.022472][ T633] ? mutex_lock+0x97/0x1d0 [ 42.022492][ T633] ? __cfi_mutex_lock+0x10/0x10 [ 42.022512][ T633] iov_iter_get_pages2+0x68/0xb0 [ 42.022536][ T633] __se_sys_vmsplice+0x7f4/0x1570 [ 42.022565][ T633] ? __x64_sys_vmsplice+0xc0/0xc0 [ 42.022591][ T633] ? __cfi_futex_wait+0x10/0x10 [ 42.022630][ T633] ? xfd_validate_state+0x68/0x140 [ 42.022654][ T633] ? __kasan_check_write+0x18/0x20 [ 42.022675][ T633] ? fpregs_restore_userregs+0x11c/0x260 [ 42.022695][ T633] __x64_sys_vmsplice+0x9f/0xc0 [ 42.022723][ T633] x64_sys_call+0x105d/0x2ee0 [ 42.022749][ T633] do_syscall_64+0x57/0xf0 [ 42.022765][ T633] ? clear_bhb_loop+0x50/0xa0 [ 42.022782][ T633] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.022811][ T633] RIP: 0033:0x7f768999c629 [ 42.022828][ T633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.022843][ T633] RSP: 002b:00007f768a80c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 42.022864][ T633] RAX: ffffffffffffffda RBX: 00007f7689c15fa0 RCX: 00007f768999c629 [ 42.022879][ T633] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000008 [ 42.022892][ T633] RBP: 00007f7689a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 42.022904][ T633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.022916][ T633] R13: 00007f7689c16038 R14: 00007f7689c15fa0 R15: 00007ffd8831e618 [ 42.022932][ T633] [ 42.319681][ T540] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 42.338720][ T540] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 42.376611][ T36] audit: type=1400 audit(1771855320.910:894): avc: denied { module_load } for pid=647 comm="syz.1.107" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 42.528856][ T381] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 42.588777][ T229] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 42.648754][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.678746][ T381] usb 1-1: Using ep0 maxpacket: 32 [ 42.684980][ T381] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 42.693426][ T381] usb 1-1: config 0 has no interface number 0 [ 42.699733][ T381] usb 1-1: config 0 interface 184 has no altsetting 0 [ 42.707947][ T381] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 42.717243][ T381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.725314][ T381] usb 1-1: Product: syz [ 42.729509][ T381] usb 1-1: Manufacturer: syz [ 42.734125][ T381] usb 1-1: SerialNumber: syz [ 42.739826][ T381] usb 1-1: config 0 descriptor?? [ 42.745622][ T381] smsc75xx v1.0.0 [ 42.749928][ T229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.761921][ T229] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 42.771182][ T229] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 42.779557][ T229] usb 4-1: Product: syz [ 42.783808][ T229] usb 4-1: Manufacturer: syz [ 42.788428][ T229] usb 4-1: SerialNumber: syz [ 42.794033][ T229] usb 4-1: config 0 descriptor?? [ 42.799066][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 42.806615][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 42.815735][ T31] usb 2-1: config 1 has no interface number 1 [ 42.822523][ T31] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 42.833372][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 42.846941][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.859752][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.868887][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.877002][ T31] usb 2-1: Product: syz [ 42.881859][ T31] usb 2-1: Manufacturer: syz [ 42.886716][ T31] usb 2-1: SerialNumber: syz [ 42.945895][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.954556][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.962962][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.971533][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.980031][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.988720][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.997137][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.005798][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.014459][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.023025][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.076734][ T229] usb 4-1: USB disconnect, device number 10 [ 43.235611][ T381] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 43.246686][ T381] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 43.256573][ T381] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 43.267007][ T381] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 43.295018][ T31] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 43.590982][ T36] audit: type=1400 audit(1771855322.140:895): avc: denied { nlmsg_read } for pid=657 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.600458][ T45] usb 1-1: USB disconnect, device number 10 [ 43.622557][ T36] audit: type=1326 audit(1771855322.160:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=657 comm="syz.3.110" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5ee99c629 code=0x0 [ 43.629333][ T664] netlink: 124 bytes leftover after parsing attributes in process `syz.3.111'. [ 43.665276][ T36] audit: type=1400 audit(1771855322.210:897): avc: denied { read write } for pid=666 comm="syz.0.112" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 43.694272][ T381] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 43.710521][ T381] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 43.978832][ T229] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 43.986484][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 44.138807][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 44.144075][ T229] usb 4-1: Using ep0 maxpacket: 32 [ 44.150746][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.161307][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.170826][ T229] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 44.179445][ T229] usb 4-1: config 0 has no interface number 0 [ 44.185966][ T229] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 44.188910][ T381] usb 3-1: USB disconnect, device number 9 [ 44.196330][ T229] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 44.218816][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.231014][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.241213][ T229] usb 4-1: config 0 interface 196 has no altsetting 0 [ 44.248200][ T45] usb 1-1: Product: syz [ 44.268285][ T45] usb 1-1: Manufacturer: syz [ 44.274135][ T229] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 44.290552][ T31] usb 2-1: USB disconnect, device number 10 [ 44.305499][ T229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.314086][ T45] usb 1-1: SerialNumber: syz [ 44.319525][ T229] usb 4-1: Product: syz [ 44.325061][ T683] capability: warning: `syz.2.117' uses 32-bit capabilities (legacy support in use) [ 44.331690][ T229] usb 4-1: Manufacturer: syz [ 44.342589][ T229] usb 4-1: SerialNumber: syz [ 44.344024][ T683] netlink: 92 bytes leftover after parsing attributes in process `syz.2.117'. [ 44.358779][ T229] usb 4-1: config 0 descriptor?? [ 44.365820][ T673] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 44.380970][ T686] 9pnet_fd: Insufficient options for proto=fd [ 44.529834][ T45] usb 1-1: 0:2 : does not exist [ 44.534899][ T45] usb 1-1: unit 9 not found! [ 44.542662][ T45] usb 1-1: USB disconnect, device number 11 [ 44.579572][ T229] ipheth 4-1:0.196: Unable to find endpoints [ 44.588627][ T229] usb 4-1: USB disconnect, device number 11 [ 44.698764][ T381] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 44.857051][ T381] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.869126][ T381] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 44.878285][ T381] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 44.886858][ T381] usb 3-1: Product: syz [ 44.891339][ T381] usb 3-1: Manufacturer: syz [ 44.896431][ T381] usb 3-1: SerialNumber: syz [ 44.905968][ T381] usb 3-1: config 0 descriptor?? [ 45.148828][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 45.161138][ T355] usb 3-1: USB disconnect, device number 10 [ 45.309867][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.320973][ T31] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 45.330348][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.338921][ T381] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 45.339150][ T31] usb 2-1: config 0 descriptor?? [ 45.358746][ T229] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 45.478756][ T381] usb 4-1: device descriptor read/64, error -71 [ 45.509911][ T229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.520880][ T229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.530680][ T229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.543593][ T229] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.552670][ T229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.561830][ T229] usb 1-1: config 0 descriptor?? [ 45.718737][ T381] usb 4-1: device descriptor read/64, error -71 [ 45.765812][ T31] zeroplus 0003:0C12:0005.0008: item fetching failed at offset 0/3 [ 45.775733][ T31] zeroplus 0003:0C12:0005.0008: parse failed [ 45.781861][ T31] zeroplus 0003:0C12:0005.0008: probe with driver zeroplus failed with error -22 [ 45.958793][ T381] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 45.970300][ T693] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 45.970903][ T693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.976916][ T229] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 45.979718][ T693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.007671][ T9] usb 2-1: USB disconnect, device number 11 [ 46.008087][ T229] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 46.014888][ T355] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 46.088732][ T381] usb 4-1: device descriptor read/64, error -71 [ 46.188735][ T355] usb 3-1: Using ep0 maxpacket: 16 [ 46.195241][ T355] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 46.204611][ T355] usb 3-1: config 1 has no interface number 1 [ 46.210816][ T355] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 46.221795][ T355] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 46.234809][ T355] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 46.247260][ T355] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.256457][ T355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.264483][ T355] usb 3-1: Product: syz [ 46.268639][ T355] usb 3-1: Manufacturer: syz [ 46.273249][ T355] usb 3-1: SerialNumber: syz [ 46.368718][ T381] usb 4-1: device descriptor read/64, error -71 [ 46.478897][ T381] usb usb4-port1: attempt power cycle [ 46.532059][ T718] netlink: 44 bytes leftover after parsing attributes in process `syz.1.130'. [ 46.541138][ T718] netlink: 43 bytes leftover after parsing attributes in process `syz.1.130'. [ 46.550124][ T718] netlink: 'syz.1.130': attribute type 5 has an invalid length. [ 46.558116][ T718] netlink: 43 bytes leftover after parsing attributes in process `syz.1.130'. [ 46.635887][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.686230][ T355] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 46.828776][ T381] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 46.849705][ T381] usb 4-1: device descriptor read/8, error -71 [ 46.868759][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 46.979908][ T381] usb 4-1: device descriptor read/8, error -71 [ 47.019863][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 47.030828][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.040767][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 47.053950][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 47.063009][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.071936][ T9] usb 2-1: config 0 descriptor?? [ 47.218801][ T381] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 47.239850][ T381] usb 4-1: device descriptor read/8, error -71 [ 47.369801][ T381] usb 4-1: device descriptor read/8, error -71 [ 47.478899][ T381] usb usb4-port1: unable to enumerate USB device [ 47.489492][ T9] wacom 0003:056A:00CC.000A: hidraw1: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.1-1/input0 [ 47.566127][ T355] usb 3-1: USB disconnect, device number 11 [ 47.579751][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.680356][ T9] usb 2-1: USB disconnect, device number 12 [ 48.132998][ T45] usb 1-1: USB disconnect, device number 12 [ 48.145159][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 48.145178][ T36] audit: type=1400 audit(1771855326.690:904): avc: denied { getopt } for pid=731 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.458777][ T229] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 48.488734][ T45] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 48.588729][ T229] usb 3-1: device descriptor read/64, error -71 [ 48.640080][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.651776][ T45] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 48.661009][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.661242][ T725] Bluetooth: hci0: command 0x1003 tx timeout [ 48.667137][ T45] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 48.681603][ T45] usb 1-1: Product: syz [ 48.685760][ T45] usb 1-1: Manufacturer: syz [ 48.690759][ T45] usb 1-1: SerialNumber: syz [ 48.701782][ T45] usb 1-1: config 0 descriptor?? [ 48.828742][ T229] usb 3-1: device descriptor read/64, error -71 [ 48.950895][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 48.958980][ T9] usb 1-1: USB disconnect, device number 13 [ 49.068761][ T229] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 49.088737][ T31] usb 4-1: device descriptor read/64, error -71 [ 49.188775][ T749] fuse: Bad value for 'group_id' [ 49.193762][ T749] fuse: Bad value for 'group_id' [ 49.208825][ T229] usb 3-1: device descriptor read/64, error -71 [ 49.348729][ T31] usb 4-1: device descriptor read/64, error -71 [ 49.448806][ T229] usb 3-1: device descriptor read/64, error -71 [ 49.473019][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 49.489904][ T755] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.489923][ T755] rust_binder: Read failure Err(EFAULT) in pid:90 [ 49.498433][ T36] audit: type=1400 audit(1771855328.040:905): avc: denied { transfer } for pid=754 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 49.498464][ T755] rust_binder: Error while translating object. [ 49.524171][ C1] BUG: TASK stack guard page was hit at ffffc90000e07f98 (stack is ffffc90000e08000..ffffc90000e10000) [ 49.524193][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 49.524207][ C1] CPU: 1 UID: 0 PID: 755 Comm: syz.0.143 Not tainted syzkaller #0 f3a946831d5e2592ee08d6703df2b13566dbc460 [ 49.524222][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.524229][ C1] RIP: 0010:_RNvMNtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB2_8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoE12container_ofBT_+0x27/0x380 [ 49.524258][ C1] Code: 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 48 81 ec a0 01 00 00 48 89 fb 49 be 00 00 00 00 00 fc ff df c4 de 41 fd 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 56 05 1c 87 [ 49.524267][ C1] RSP: 0018:ffffc90000e07fa0 EFLAGS: 00010286 [ 49.524279][ C1] RAX: ffffffff8445bb6d RBX: ffff88810c31ca08 RCX: 0000000000080000 [ 49.524288][ C1] RDX: ffffc90001641000 RSI: 000000000002a9ae RDI: ffff88810c31ca08 [ 49.524296][ C1] RBP: ffffc90000e08170 R08: ffff88810c31ca67 R09: 0000000000000000 [ 49.524304][ C1] R10: ffff88810c31ca58 R11: ffffed102186394d R12: 1ffff1102273894c [ 49.524312][ C1] R13: 1ffff1102186394b R14: dffffc0000000000 R15: 0000000000000000 [ 49.524320][ C1] FS: 00007f4e7b1df6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.524330][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.524338][ C1] CR2: ffffc90000e07f98 CR3: 000000010ef32000 CR4: 00000000003526b0 [ 49.524351][ C1] Call Trace: [ 49.524356][ C1] [ 49.524362][ C1] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKy2da16350fb724a10_E21remove_internal_innerBM_+0x279/0x420 [ 49.524385][ C1] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKy2da16350fb724a10_E21remove_internal_innerBM_+0x10/0x10 [ 49.524407][ C1] ? __kasan_check_write+0x18/0x20 [ 49.524420][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.524430][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.524441][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16remove_node_info+0x312/0x440 [ 49.524588][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16remove_node_info+0x10/0x10 [ 49.524608][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8a0 [ 49.524624][ C1] ? _RNvMNtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB2_8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process7ProcessE12container_ofBT_+0x2b0/0x380 [ 49.524642][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 49.524675][ C1] ? __kasan_check_write+0x18/0x20 [ 49.524687][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.524698][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1229/0x22f0 [ 49.524720][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 49.524744][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 49.524761][ C1] ? __asan_memcpy+0x5a/0x80 [ 49.524774][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 49.524790][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 49.524807][ C1] ? __kasan_check_write+0x18/0x20 [ 49.524819][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.524828][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.524838][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6cd/0xc90 [ 49.524859][ C1] ? __asan_memcpy+0x5a/0x80 [ 49.524872][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x61e/0xc90 [ 49.524893][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 49.524920][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 49.524936][ C1] ? __asan_memcpy+0x5a/0x80 [ 49.524948][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 49.524964][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 49.524975][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 49.524991][ C1] ? __kasan_check_write+0x18/0x20 [ 49.525004][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.525014][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x343/0x5680 [ 49.525033][ C1] ? __asan_memcpy+0x5a/0x80 [ 49.525045][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1744/0x5680 [ 49.525065][ C1] ? kernel_text_address+0xa9/0xe0 [ 49.525080][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.525090][ C1] ? stack_depot_save_flags+0x399/0x800 [ 49.525103][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 49.525122][ C1] ? kasan_save_track+0x4f/0x80 [ 49.525136][ C1] ? kasan_save_track+0x3e/0x80 [ 49.525149][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 49.525160][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 49.525174][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 49.525188][ C1] ? krealloc_noprof+0x8d/0x130 [ 49.525201][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 49.525222][ C1] ? __asan_memset+0x39/0x50 [ 49.525234][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 49.525244][ C1] ? _RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x3bd/0x990 [ 49.525280][ C1] ? __cfi__RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x10/0x10 [ 49.525336][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 49.525356][ C1] ? put_dec_trunc8+0x229/0x380 [ 49.525373][ C1] ? put_dec+0xd7/0xf0 [ 49.525399][ C1] ? __asan_memset+0x39/0x50 [ 49.525417][ C1] ? move_right+0x8e/0xb0 [ 49.525427][ C1] ? format_decode+0x1bb/0x1610 [ 49.525442][ C1] ? vsnprintf+0x7b4/0x1ad0 [ 49.525456][ C1] ? __asan_memcpy+0x5a/0x80 [ 49.525477][ C1] ? vsnprintf+0x19ef/0x1ad0 [ 49.525492][ C1] ? desc_read+0x202/0x3e0 [ 49.525508][ C1] ? __kasan_check_write+0x18/0x20 [ 49.525520][ C1] ? desc_read+0x1ab/0x3e0 [ 49.525537][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 49.525551][ C1] ? kernel_text_address+0xa9/0xe0 [ 49.525566][ C1] ? __kernel_text_address+0x11/0x40 [ 49.525588][ C1] ? __kasan_check_write+0x18/0x20 [ 49.525608][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 49.525627][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 49.525646][ C1] ? stack_trace_save+0xaa/0x100 [ 49.525660][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.525671][ C1] ? stack_depot_save_flags+0x399/0x800 [ 49.525684][ C1] ? kasan_save_track+0x4f/0x80 [ 49.525703][ C1] ? kasan_save_track+0x3e/0x80 [ 49.525717][ C1] ? kasan_save_free_info+0x4a/0x60 [ 49.525728][ C1] ? __kasan_slab_free+0x5f/0x80 [ 49.525742][ C1] ? kfree+0x158/0x440 [ 49.525754][ C1] ? krealloc_noprof+0xfa/0x130 [ 49.525767][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xc6/0x200 [ 49.525784][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x3a3/0x660 [ 49.525815][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x6e1a/0x8520 [ 49.525835][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 49.525852][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 49.525873][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x17dc/0xa690 [ 49.525889][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 49.525902][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 49.525922][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 49.525936][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 49.525950][ C1] ? do_syscall_64+0x57/0xf0 [ 49.525960][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.525979][ C1] ? __kasan_slab_free+0x6a/0x80 [ 49.525993][ C1] ? kfree+0x158/0x440 [ 49.526005][ C1] ? krealloc_noprof+0xfa/0x130 [ 49.526018][ C1] ? __cfi_up+0x10/0x10 [ 49.526031][ C1] ? krealloc_noprof+0xfa/0x130 [ 49.526044][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 49.526063][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xed/0x200 [ 49.526080][ C1] ? __cfi_llist_add_batch+0x10/0x10 [ 49.526096][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 49.526114][ C1] ? preempt_schedule+0xc5/0xe0 [ 49.526125][ C1] ? __cfi_preempt_schedule+0x10/0x10 [ 49.526136][ C1] ? tick_nohz_tick_stopped+0x4c/0x60 [ 49.526149][ C1] ? __irq_work_queue_local+0xc4/0x260 [ 49.526161][ C1] ? irq_work_queue+0xc2/0x160 [ 49.526173][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x3a3/0x660 [ 49.526197][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 49.526222][ C1] ? vprintk_default+0x2a/0x40 [ 49.526234][ C1] ? vprintk+0x93/0xa0 [ 49.526247][ C1] ? _printk+0xde/0x140 [ 49.526258][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kvec3VechNtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 49.526278][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.526294][ C1] ? __cfi__printk+0x10/0x10 [ 49.526306][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x26/0x1a0 [ 49.526324][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation13NewAllocationEBK_+0x5b/0x80 [ 49.526347][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x6e44/0x8520 [ 49.526372][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 49.526412][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 49.526432][ C1] ? kernel_text_address+0xa9/0xe0 [ 49.526444][ C1] ? __kernel_text_address+0x11/0x40 [ 49.526456][ C1] ? unwind_get_return_address+0x51/0x90 [ 49.526474][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 49.526485][ C1] ? arch_stack_walk+0x10a/0x170 [ 49.526501][ C1] ? stack_depot_save_flags+0x38/0x800 [ 49.526514][ C1] ? kasan_save_track+0x4f/0x80 [ 49.526527][ C1] ? kasan_save_track+0x3e/0x80 [ 49.526562][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 49.526573][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 49.526587][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 49.526602][ C1] ? krealloc_noprof+0x8d/0x130 [ 49.526615][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 49.526636][ C1] ? __asan_memset+0x39/0x50 [ 49.526648][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 49.526659][ C1] ? _RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x3bd/0x990 [ 49.526695][ C1] ? __cfi__RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x10/0x10 [ 49.526735][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 49.526746][ C1] ? __kasan_check_write+0x18/0x20 [ 49.526759][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.526769][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.526779][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0xaf1/0x1e70 [ 49.526799][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 49.526817][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x470/0x540 [ 49.526836][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionINtNtCs1ewLyjEZ7Le_6kernel6rbtree10RBTreeNodejmEEECskDQVOo9v79Q_16rust_binder_main+0xd8/0x1b0 [ 49.526860][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionINtNtCs1ewLyjEZ7Le_6kernel6rbtree10RBTreeNodejmEEECskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 49.526884][ C1] ? __kasan_check_write+0x18/0x20 [ 49.526897][ C1] ? mutex_unlock+0x90/0x240 [ 49.526909][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 49.526922][ C1] ? _RNvMso_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_14RawVacantEntrymINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE6insertB1r_+0x114/0x150 [ 49.526950][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 49.526961][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x11ed/0x1e70 [ 49.526982][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 49.527004][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0xaf1/0x1e70 [ 49.527025][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 49.527038][ C1] ? kernel_text_address+0xa9/0xe0 [ 49.527053][ C1] ? __kasan_check_write+0x18/0x20 [ 49.527066][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.527076][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.527086][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0xaf1/0x1e70 [ 49.527105][ C1] ? stack_depot_save_flags+0x38/0x800 [ 49.527117][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 49.527133][ C1] ? kasan_save_track+0x3e/0x80 [ 49.527146][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0xcb/0x650 [ 49.527176][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 49.527190][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 49.527204][ C1] ? do_syscall_64+0x57/0xf0 [ 49.527216][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.527232][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 49.527250][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 49.527261][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 49.527276][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 49.527289][ C1] ? __kasan_check_write+0x18/0x20 [ 49.527302][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 49.527322][ C1] ? krealloc_noprof+0xfa/0x130 [ 49.527335][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xcb/0x200 [ 49.527355][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 49.527375][ C1] ? mutex_unlock+0x90/0x240 [ 49.527387][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 49.527401][ C1] ? __asan_memset+0x39/0x50 [ 49.527413][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x26e/0x650 [ 49.527443][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 49.527457][ C1] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10 [ 49.527494][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 49.527509][ C1] ? avc_has_perm+0x155/0x240 [ 49.527522][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 49.527540][ C1] ? __kasan_check_write+0x18/0x20 [ 49.527552][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.527562][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.527572][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 49.527587][ C1] ? bpf_lsm_binder_transaction+0xd/0x20 [ 49.527599][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x8c4/0x1110 [ 49.527621][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 49.527646][ C1] ? __kasan_check_write+0x18/0x20 [ 49.527658][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.527668][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.527678][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1790/0xa690 [ 49.527695][ C1] ? __asan_memcpy+0x5a/0x80 [ 49.527707][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x17dc/0xa690 [ 49.527731][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 49.527774][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 49.527792][ C1] ? __asan_memcpy+0x5a/0x80 [ 49.527805][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 49.527822][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 49.527839][ C1] ? _RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0xf8/0x250 [ 49.527861][ C1] ? __cfi__RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0x10/0x10 [ 49.527875][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 49.527892][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 49.527909][ C1] ? _RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0xf8/0x250 [ 49.527923][ C1] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter11debug_tuple+0xad/0x170 [ 49.527937][ C1] ? _RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0xd1/0x210 [ 49.527955][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 49.527971][ C1] ? __cfi__RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0x10/0x10 [ 49.527988][ C1] ? __cfi__RNvYNCINvMNtNtCsb7ts3l0a5c3_4core3fmt2rtNtB8_8Argument11new_displayNtNtBc_5ascii13EscapeDefaultE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceBc_+0x10/0x10 [ 49.528020][ C1] ? _RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0xd1/0x210 [ 49.528037][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 49.528054][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 49.528070][ C1] ? __asan_memcpy+0x5a/0x80 [ 49.528083][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 49.528100][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 49.528118][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 49.528135][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 49.528152][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 49.528169][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 49.528187][ C1] ? put_dec_trunc8+0x229/0x380 [ 49.528198][ C1] ? put_dec+0xd7/0xf0 [ 49.528212][ C1] ? __asan_memset+0x39/0x50 [ 49.528225][ C1] ? move_right+0x8e/0xb0 [ 49.528235][ C1] ? format_decode+0x1bb/0x1610 [ 49.528250][ C1] ? vsnprintf+0x7b4/0x1ad0 [ 49.528264][ C1] ? __asan_memcpy+0x5a/0x80 [ 49.528276][ C1] ? vsnprintf+0x19ef/0x1ad0 [ 49.528292][ C1] ? desc_read+0x202/0x3e0 [ 49.528307][ C1] ? __kasan_check_write+0x18/0x20 [ 49.528319][ C1] ? desc_read+0x1ab/0x3e0 [ 49.528335][ C1] ? prb_first_seq+0x109/0x1d0 [ 49.528350][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 49.528365][ C1] ? __kasan_check_write+0x18/0x20 [ 49.528377][ C1] ? desc_read+0x1ab/0x3e0 [ 49.528392][ C1] ? __kasan_check_read+0x15/0x20 [ 49.528405][ C1] ? __kasan_check_write+0x18/0x20 [ 49.528417][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.528426][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 49.528437][ C1] ? _raw_spin_unlock+0x45/0x60 [ 49.528447][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 49.528458][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9e6/0x1cf0 [ 49.528481][ C1] ? __kasan_check_write+0x18/0x20 [ 49.528494][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 49.528504][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 49.528522][ C1] ? desc_read+0x202/0x3e0 [ 49.528537][ C1] ? __kasan_check_write+0x18/0x20 [ 49.528549][ C1] ? desc_read+0x1ab/0x3e0 [ 49.528564][ C1] ? prb_first_seq+0x109/0x1d0 [ 49.528579][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 49.528594][ C1] ? __kasan_check_write+0x18/0x20 [ 49.528606][ C1] ? desc_read+0x1ab/0x3e0 [ 49.528621][ C1] ? __kasan_check_read+0x15/0x20 [ 49.528633][ C1] ? this_cpu_in_panic+0x56/0x90 [ 49.528643][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 49.528666][ C1] ? prb_read_valid+0x80/0x80 [ 49.528681][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.528692][ C1] ? up+0x10a/0x1b0 [ 49.528704][ C1] ? __cfi_up+0x10/0x10 [ 49.528717][ C1] ? __kasan_check_read+0x15/0x20 [ 49.528729][ C1] ? prb_read_valid+0x41/0x80 [ 49.528744][ C1] ? console_unlock+0x247/0x2c0 [ 49.528755][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.528767][ C1] ? __cfi_console_unlock+0x10/0x10 [ 49.528778][ C1] ? __printk_safe_exit+0xd/0x20 [ 49.528792][ C1] ? console_trylock+0x17e/0x220 [ 49.528803][ C1] ? __cfi_console_trylock+0x10/0x10 [ 49.528815][ C1] ? __kasan_check_write+0x18/0x20 [ 49.528827][ C1] ? irq_work_queue+0xc9/0x160 [ 49.528839][ C1] ? vprintk_emit+0x3e3/0x650 [ 49.528850][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 49.528863][ C1] ? _printk+0xde/0x140 [ 49.528873][ C1] ? asm_exc_page_fault+0x2b/0x30 [ 49.528889][ C1] ? __kasan_check_write+0x18/0x20 [ 49.528901][ C1] ? _raw_spin_lock+0x92/0x120 [ 49.528911][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1019/0x5da0 [ 49.528925][ C1] ? __asan_memcpy+0x5a/0x80 [ 49.528937][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 49.528951][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread14get_work_local+0x10/0x10 [ 49.528969][ C1] ? kasan_save_stack+0x4d/0x60 [ 49.528983][ C1] ? kasan_save_stack+0x3e/0x60 [ 49.528996][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 49.529008][ C1] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 49.529020][ C1] ? __call_rcu_common+0xd7/0x720 [ 49.529036][ C1] ? call_rcu+0x14/0x20 [ 49.529050][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 49.529063][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 49.529081][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 49.529091][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.529108][ C1] ? _raw_spin_unlock+0x45/0x60 [ 49.529118][ C1] ? call_rcu_nocb+0x6d7/0xc80 [ 49.529131][ C1] ? swake_up_one_online_ipi+0x30/0x30 [ 49.529147][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 49.529160][ C1] ? kernel_text_address+0xa9/0xe0 [ 49.529172][ C1] ? __kernel_text_address+0x11/0x40 [ 49.529184][ C1] ? unwind_get_return_address+0x51/0x90 [ 49.529196][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 49.529206][ C1] ? arch_stack_walk+0x10a/0x170 [ 49.529222][ C1] ? stack_trace_save+0xaa/0x100 [ 49.529232][ C1] ? stack_depot_save_flags+0x38/0x800 [ 49.529245][ C1] ? kasan_save_track+0x4f/0x80 [ 49.529258][ C1] ? kasan_save_track+0x3e/0x80 [ 49.529272][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 49.529283][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 49.529297][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 49.529311][ C1] ? krealloc_noprof+0x8d/0x130 [ 49.529324][ C1] ? kvrealloc_noprof+0x59/0x120 [ 49.529337][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_mmap+0x7a1/0x1210 [ 49.529350][ C1] ? mmap_region+0x157c/0x1d60 [ 49.529362][ C1] ? do_mmap+0xb85/0x13c0 [ 49.529374][ C1] ? vm_mmap_pgoff+0x36e/0x4b0 [ 49.529386][ C1] ? ksys_mmap_pgoff+0x165/0x1e0 [ 49.529399][ C1] ? __x64_sys_mmap+0x121/0x140 [ 49.529414][ C1] ? x64_sys_call+0x13bf/0x2ee0 [ 49.529428][ C1] ? do_syscall_64+0x57/0xf0 [ 49.529438][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.529457][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 49.529478][ C1] ? kernel_text_address+0xa9/0xe0 [ 49.529491][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 49.529506][ C1] ? unwind_get_return_address+0x51/0x90 [ 49.529517][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 49.529528][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 49.529542][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 49.529557][ C1] ? sched_clock+0x44/0x60 [ 49.529570][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 49.529583][ C1] ? update_curr+0x6d4/0x9e0 [ 49.529597][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 49.529612][ C1] ? __calc_delta+0x280/0x280 [ 49.529627][ C1] ? update_entity_lag+0x28f/0x2c0 [ 49.529646][ C1] ? tg_unthrottle_up+0x9a0/0x9a0 [ 49.529660][ C1] ? __cfi_update_misfit_status+0x10/0x10 [ 49.529672][ C1] ? dequeue_entities+0x1d7/0x1400 [ 49.529693][ C1] ? sched_balance_newidle+0x31a/0xab0 [ 49.529706][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 49.529720][ C1] ? sched_clock_noinstr+0xd/0x30 [ 49.529733][ C1] ? __kasan_check_write+0x18/0x20 [ 49.529745][ C1] ? __switch_to+0xc4f/0x1300 [ 49.529759][ C1] ? __cfi___switch_to+0x10/0x10 [ 49.529772][ C1] ? psi_task_switch+0x4f2/0xa10 [ 49.529785][ C1] ? __kasan_check_write+0x18/0x20 [ 49.529797][ C1] ? finish_task_switch+0x1d9/0x760 [ 49.529809][ C1] ? __switch_to_asm+0x3d/0x70 [ 49.529823][ C1] ? __schedule+0x1357/0x1ea0 [ 49.529834][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 49.529847][ C1] ? __asan_memcpy+0x5a/0x80 [ 49.529860][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 49.529874][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 49.529884][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 49.529899][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 49.529915][ C1] ? schedule+0xc5/0x240 [ 49.529926][ C1] ? futex_unqueue+0x136/0x160 [ 49.529939][ C1] ? ioctl_has_perm+0x39a/0x500 [ 49.529950][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 49.529962][ C1] ? futex_wait+0x2ac/0x7b0 [ 49.529975][ C1] ? __cfi_futex_wait+0x10/0x10 [ 49.529989][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 49.530001][ C1] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 49.530016][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 49.530027][ C1] ? do_futex+0x32a/0x510 [ 49.530039][ C1] ? __cfi_do_futex+0x10/0x10 [ 49.530050][ C1] ? vm_mmap_pgoff+0x153/0x4b0 [ 49.530064][ C1] ? __fget_files+0x2c5/0x340 [ 49.530078][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 49.530088][ C1] ? security_file_ioctl+0x3e/0x110 [ 49.530099][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 49.530112][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 49.530127][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 49.530141][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 49.530155][ C1] ? do_syscall_64+0x57/0xf0 [ 49.530165][ C1] ? clear_bhb_loop+0x50/0xa0 [ 49.530176][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.530193][ C1] [ 49.530198][ C1] Modules linked in: [ 49.530209][ C1] ---[ end trace 0000000000000000 ]--- [ 49.530216][ C1] RIP: 0010:_RNvMNtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB2_8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoE12container_ofBT_+0x27/0x380 [ 49.530239][ C1] Code: 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 48 81 ec a0 01 00 00 48 89 fb 49 be 00 00 00 00 00 fc ff df c4 de 41 fd 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 56 05 1c 87 [ 49.530249][ C1] RSP: 0018:ffffc90000e07fa0 EFLAGS: 00010286 [ 49.530259][ C1] RAX: ffffffff8445bb6d RBX: ffff88810c31ca08 RCX: 0000000000080000 [ 49.530268][ C1] RDX: ffffc90001641000 RSI: 000000000002a9ae RDI: ffff88810c31ca08 [ 49.530276][ C1] RBP: ffffc90000e08170 R08: ffff88810c31ca67 R09: 0000000000000000 [ 49.530284][ C1] R10: ffff88810c31ca58 R11: ffffed102186394d R12: 1ffff1102273894c [ 49.530293][ C1] R13: 1ffff1102186394b R14: dffffc0000000000 R15: 0000000000000000 [ 49.530301][ C1] FS: 00007f4e7b1df6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.530311][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.530319][ C1] CR2: ffffc90000e07f98 CR3: 000000010ef32000 CR4: 00000000003526b0 [ 49.530333][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 49.530500][ C1] Kernel Offset: disabled