last executing test programs: 1m18.165003046s ago: executing program 2 (id=203): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r1 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x9) fchdir(r2) chroot(&(0x7f0000000300)='.\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/warn_count', 0x100, 0x24) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000340)={r0, 0x1, 0x1000000, 0x4000}) (async) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000340)={r0, 0x1, 0x1000000, 0x4000}) ppoll(&(0x7f0000000140)=[{r3, 0x8}], 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2]}, 0x8) (async) ppoll(&(0x7f0000000140)=[{r3, 0x8}], 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2]}, 0x8) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "89f9a4a9de38c9400773783a1293e13ce18a4768a22a1bb4af12996e287ca04e26318d63d495b1e7a7864b522ba8ba1375ff8c4262f9aaf3d6be29e2546de7d6", 0x29}, 0x48, 0xfffffffffffffffd) 1m17.316167022s ago: executing program 2 (id=209): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) unshare(0x64000400) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000500)="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", 0xfc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r4, &(0x7f0000000200)={@val={0xa, 0x88e5}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x38, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, "3be0e6", 0xd, 0x3a, 0x0, @mcast1, @mcast2, [], "55d525215833bd91"}}}}}}}}, 0x72) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x8, 0x3) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c040) 1m17.256145724s ago: executing program 2 (id=210): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000200), 0xfffffffffffffd9f, 0x101182) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10d282, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x1022a3) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000280)={r3, 0x0, {0x0, 0x0, 0x0, 0x2, 0xb699, 0x0, 0x0, 0x11, 0x1, "faf98117e5a1149989fc8dbe43ea24992334a2503dc325f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f3500", "32d8cc26f7061a74df97d3bed409ff2176ff7bfe55cd0b2f7b6aa54cc50a1fcaed1e831fa79a00", "675213e80000f7ae2cfc20d81a8ca561a139c038023e460b902e43acff83ad02", [0x7, 0x1000]}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000001500)={0x0, 0x0}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4058082, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x81044804, &(0x7f0000000400)={0x1, 0x2, 0xffffffff}) syz_usb_control_io(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup(r7) shutdown(r8, 0x1) 1m14.48894316s ago: executing program 2 (id=220): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xcc59, 0x1, 0x1}, 0x30, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) write$cgroup_pid(r2, &(0x7f0000000200), 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) read$FUSE(r2, &(0x7f0000004340)={0x2020}, 0xb375) landlock_restrict_self(r0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000040)) bind$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="22f6d91d415300e9f89080e8eedb3a", 0xf}], 0x1}, 0x4000c010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'wg2\x00', 0x0}) connect$unix(r4, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0xc) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m14.387381302s ago: executing program 2 (id=222): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, &(0x7f0000000180)="953d3226eb1d32430475c0ac6d70a0bb0f6dbf91cbc32595d5b61138c8f7070ea8e61da0919df7ecb0ead962c73af1b7d1b737d9686bfbc06703f4bf349567d11e666babf7ec2a8a1569fb2e7b4e46c18600de763430da0a6c4b47971bacd772d134e0e029033e6953e49372af025b44ffc86bf492cb85d03d9bb2f577494ec4e07d6123", 0x84, 0x40000, &(0x7f0000000240)={0x11, 0x1c, 0x0, 0x1, 0xe5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000243000/0x2000)=nil, 0x2000}, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000140)={'veth0_to_bond\x00', 0x4e171e2e}) 1m14.387035392s ago: executing program 2 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000880)={0x7d8, 0x0, 0x22, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x7c2, 0x45, "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"}]}, 0x7d8}}, 0x20000000) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x90, 0xc, 0x1e, 0x20, 0x1a0a, 0x103, 0xe9a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x13, 0x10, 0x80, "", [{{0x9, 0x4, 0x7a, 0x8, 0x0, 0xdc, 0x7e, 0xa, 0x3}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1m14.384651802s ago: executing program 32 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000880)={0x7d8, 0x0, 0x22, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x7c2, 0x45, "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"}]}, 0x7d8}}, 0x20000000) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x90, 0xc, 0x1e, 0x20, 0x1a0a, 0x103, 0xe9a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x13, 0x10, 0x80, "", [{{0x9, 0x4, 0x7a, 0x8, 0x0, 0xdc, 0x7e, 0xa, 0x3}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 53.717501948s ago: executing program 4 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x316001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wake_lock', 0x149a82, 0x0) syz_clone(0x18040, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x10000, 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406100005240000000d2402", @ANYRES32], 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x8863}, @void, @eth={@multicast, @random="00000000c700", @val={@void, {0x8902}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x38, 0x1c, 0x68, 0x0, 0x7, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote}, {0x17, 0xff, 0x0, @broadcast}}}}}}, 0x32) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync_file_range(r0, 0x8, 0x783, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc, 0x81}, 0x2404c840) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x316001, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wake_lock', 0x149a82, 0x0) (async) syz_clone(0x18040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000000)=0x10000, 0x12) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406100005240000000d2402", @ANYRES32], 0x0) (async) dup(r3) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) (async) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x8863}, @void, @eth={@multicast, @random="00000000c700", @val={@void, {0x8902}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x38, 0x1c, 0x68, 0x0, 0x7, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote}, {0x17, 0xff, 0x0, @broadcast}}}}}}, 0x32) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) sync_file_range(r0, 0x8, 0x783, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc, 0x81}, 0x2404c840) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) 52.307198951s ago: executing program 4 (id=336): syz_clone3(&(0x7f00000003c0)={0x8380080, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x8}, &(0x7f0000000100)=""/219, 0xdb, &(0x7f0000000200)=""/207, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) splice(r0, &(0x7f0000000440)=0xffff, 0xffffffffffffffff, &(0x7f0000000480)=0x4, 0x100000000, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x21, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c01060301090212000100000000090400000010", @ANYRES16=r2], 0x0) syz_clone3(&(0x7f00000003c0)={0x8380080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x8}, &(0x7f0000000100)=""/219, 0xdb, &(0x7f0000000200)=""/207, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) (async) splice(r0, &(0x7f0000000440)=0xffff, 0xffffffffffffffff, &(0x7f0000000480)=0x4, 0x100000000, 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0x21, 0x3, 0x3a) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c01060301090212000100000000090400000010", @ANYRES16=r2], 0x0) (async) 51.496194666s ago: executing program 4 (id=341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f00000006c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff923d587505a66033816d9d554d83669efc751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfda67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb6383655", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0x4000}], 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) 51.427695878s ago: executing program 4 (id=342): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1, 0x0, @remote}, 0xffffffffffffff93) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x82482, 0x0) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40106726, &(0x7f00000000c0)) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00000000000000000000000000000000ffff"], 0x54}}, 0x20000080) getsockopt$bt_hci(r1, 0x11a, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/8, 0x8) write$uinput_user_dev(r3, &(0x7f0000000480)={'syz0\x00', {0x7, 0x3, 0x4, 0xf507}, 0x1c, [0x0, 0x80000001, 0x2, 0x3, 0xfffffa50, 0x5c3, 0xffffa008, 0x0, 0x400, 0x6, 0xdde, 0x9, 0x5, 0xffffffff, 0x1, 0x42b4, 0x7755, 0xfc8, 0x5, 0x0, 0x9, 0x1000, 0x2, 0x9d, 0x5, 0x8, 0x809, 0x8, 0x0, 0x4, 0x7, 0xe73, 0xe00, 0x10000, 0x3, 0x7, 0x6, 0x0, 0x5b7, 0x5, 0x6, 0xed, 0x5, 0x1192, 0xd3, 0x7, 0x1000, 0x8, 0x2, 0xbf3a, 0x55f, 0x3f, 0x6, 0x2, 0x1, 0x6, 0x4, 0x0, 0x1000, 0x5, 0x6, 0x3, 0x10000, 0xde], [0xf, 0x80, 0x4, 0x1, 0x2, 0x76, 0x1, 0x8, 0x8, 0x9, 0x9e4, 0x6dd, 0x800, 0x78, 0x4, 0x5, 0x7ff, 0xf, 0x4, 0x9, 0x8, 0x2, 0x3, 0xffff92c9, 0xff, 0x5, 0x670, 0x6, 0x8, 0x3ff, 0xbf26, 0x8, 0x3, 0x6, 0x7, 0x9, 0x8000, 0x117c, 0x5, 0x7f, 0x8, 0x2, 0x3, 0x8, 0x10, 0x1ff, 0x8, 0x5, 0x61, 0xa579, 0x3, 0x2, 0x5, 0x4ff4, 0x4e490a71, 0x8310, 0x20c4, 0xe, 0x400, 0x6, 0x2, 0x4, 0x1, 0x6cc1], [0x401, 0x0, 0x0, 0x1, 0x5f347e12, 0x0, 0x4, 0x9, 0x10001, 0x5, 0x9c, 0x8001, 0x8, 0x2, 0x40, 0xb2f, 0x7, 0x53f773af, 0x7, 0x1, 0x9, 0x5, 0x5586d484, 0x4, 0x7ff, 0x9, 0x3, 0x0, 0x8001, 0x0, 0x84, 0x7, 0x6, 0x3, 0x7, 0x80000000, 0x7, 0x6, 0xde9e, 0x4, 0x8dd, 0x80000000, 0x4, 0x7ff, 0x64, 0x3, 0x7fffffff, 0x4, 0xd48a, 0x6, 0x6, 0x3d17, 0x9bb, 0x4, 0x7, 0x2, 0x6, 0x3, 0x3, 0xf, 0x3, 0x1, 0x8, 0x3], [0x6, 0x8, 0x99, 0x9, 0x9, 0x4, 0xfffff2f2, 0x0, 0x6, 0x6, 0x7, 0x7, 0x6e5, 0x0, 0x95, 0x7, 0x3, 0x9, 0x5, 0xe6, 0x2, 0x80, 0x7fffffff, 0x6, 0x0, 0xe, 0x6, 0x64d, 0x9, 0x9, 0x2000000, 0x3, 0x809e, 0x8, 0x4, 0x7, 0x8, 0x3, 0x5, 0xf645, 0x7, 0xfff, 0x2, 0xff, 0x1785, 0x8, 0x14, 0x3, 0x90d, 0x6bd, 0x10000, 0x3194, 0xdaaa, 0x100, 0x2, 0x4, 0x4, 0x1, 0x9, 0x10, 0x0, 0x7, 0x0, 0x1]}, 0x45c) 51.405993369s ago: executing program 4 (id=343): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200) syz_usb_disconnect(r0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x3a, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0xaf, 0x9}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f00000000c0)=0x3ff) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x2, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x4004, 0x1b8, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x2, 0x5, 0x3ff, 0x200}, [{0x2, 0x400, 0xb0, 0x7f, 0x4, 0x6, 0x3, 0x7ff}, {0x6474e551, 0x5, 0x65, 0x4000003, 0x3, 0x1, 0x1009, 0x100}]}, 0x78) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 51.228225494s ago: executing program 4 (id=344): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYBLOB="ee470d673fe1dc26045f9308787f58acdc73d764cc9f1e5220fe9c35081874cb5ba1a051dbae0142aa5e898f12cf69c70d738d7375686e0df2a91613eeef995edf8c6f4bdd8ea9e9aff0ee618c5e8cef559550eed2159923f690b97c1d0931850612156d002dc3042ee8504e6d14b3d22adea0c807db6e9c3fd0a9c0bb5c01954f1a47cc8b2a3d6171bc89e476f44a71b049aa61a0558ddb89ebdba1c57191e681d45f4c2c7de7de704669bd62c08bd2413e71ca7966d6b347714bf4b56440b26125956bc162a1394539508568"], 0x0) (async) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x3, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x5, 0x4a, 0x1, {0x22, 0x984}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xf5, 0x8, 0x8}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x7, 0xc5, 0x8, 0x20, 0xe}, 0x34, &(0x7f00000000c0)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x7ff, 0xf, 0x9, [0x0, 0xc000, 0xf, 0xff0000]}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x3, 0x1908f, 0x0, [0xff3ff0]}, @ptm_cap={0x3}]}, 0x1, [{0xb5, &(0x7f0000000300)=@string={0xb5, 0x3, "16ec0b8f4bb21dc1493a93c7bc6e2d21884cdde681cba68153b24541ce6cd772c8acf162c76ea5416cbf58798ae138065263fe7fe6eee8938d07686d75100622f3e0618eed74dbf8b29f4a5ed80ec56fa8bca6000a72aecf8ce0aa305eafc05400a061be84f010e5ded416eb4952b324993dfa9a6c2b327c8553c0369c475237e85399c581affa7a137df12500a2461e00457fb4b5fffa7d30ebae081c6d7fe359cf25e02c020683c72f85a51495ead46368fa"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000001c0)={0x0, 0x31, 0x30, {0x30, 0x8, "83efb930f01842562348d1805a2adf827ff0d8712603b2d5dec24a456474bc478fa22a61a54607b705000000359c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 51.167380397s ago: executing program 33 (id=344): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYBLOB="ee470d673fe1dc26045f9308787f58acdc73d764cc9f1e5220fe9c35081874cb5ba1a051dbae0142aa5e898f12cf69c70d738d7375686e0df2a91613eeef995edf8c6f4bdd8ea9e9aff0ee618c5e8cef559550eed2159923f690b97c1d0931850612156d002dc3042ee8504e6d14b3d22adea0c807db6e9c3fd0a9c0bb5c01954f1a47cc8b2a3d6171bc89e476f44a71b049aa61a0558ddb89ebdba1c57191e681d45f4c2c7de7de704669bd62c08bd2413e71ca7966d6b347714bf4b56440b26125956bc162a1394539508568"], 0x0) (async) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x60, 0x3, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x5, 0x4a, 0x1, {0x22, 0x984}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xf5, 0x8, 0x8}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x7, 0xc5, 0x8, 0x20, 0xe}, 0x34, &(0x7f00000000c0)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x7ff, 0xf, 0x9, [0x0, 0xc000, 0xf, 0xff0000]}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x3, 0x1908f, 0x0, [0xff3ff0]}, @ptm_cap={0x3}]}, 0x1, [{0xb5, &(0x7f0000000300)=@string={0xb5, 0x3, "16ec0b8f4bb21dc1493a93c7bc6e2d21884cdde681cba68153b24541ce6cd772c8acf162c76ea5416cbf58798ae138065263fe7fe6eee8938d07686d75100622f3e0618eed74dbf8b29f4a5ed80ec56fa8bca6000a72aecf8ce0aa305eafc05400a061be84f010e5ded416eb4952b324993dfa9a6c2b327c8553c0369c475237e85399c581affa7a137df12500a2461e00457fb4b5fffa7d30ebae081c6d7fe359cf25e02c020683c72f85a51495ead46368fa"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000001c0)={0x0, 0x31, 0x30, {0x30, 0x8, "83efb930f01842562348d1805a2adf827ff0d8712603b2d5dec24a456474bc478fa22a61a54607b705000000359c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 6.852141829s ago: executing program 3 (id=588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) fsmount(r2, 0x0, 0x79) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, 0x0, 0x0, 0xc040) connect$tipc(r1, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040811, 0x0, 0x0) r4 = dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) getsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, &(0x7f0000000040)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0000000100013070000000000000000fe880000000000000000000000000101640101020000000000000000000000004e210000000000000a000000a9166151", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000000004d43300000020010000000000000000000000000002000000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000a00"/168], 0xf0}}, 0x9000) r7 = syz_ublk_setup_io_uring(0x17c5, &(0x7f0000000040)={0x0, 0xcfe9, 0x2, 0x4000000}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000180)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, r11, 0x0, 0x100}}}, &(0x7f0000000280)) syz_open_procfs(r11, &(0x7f00000000c0)='net/igmp\x00') ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'gretap0\x00', 0x8c}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x109001, 0x0) ioctl$TUNDETACHFILTER(r12, 0x401054d6, 0x0) r13 = userfaultfd(0x80000) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc028660f, &(0x7f0000000000)={0x0, r4, 0x5, 0x100000001, 0xa, 0x2}) 6.851407139s ago: executing program 3 (id=589): sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xda6212c789e83d47}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x248, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x5a, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x7}}, @link_id={0x65, 0x12, {@random="f3980442edf9", @device_b, @broadcast}}, @preq={0x82, 0x20, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x7, 0x7, @broadcast, 0x8, @value, 0x7, 0xfe1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x3, 0x61}}, @mesh_chsw={0x76, 0x6, {0x4, 0x4, 0x28, 0xfc00}}, @ibss={0x6, 0x2, 0x14e4}, @chsw_timing={0x68, 0x4, {0x5c15, 0x1851}}]}, @NL80211_ATTR_IE={0x1d6, 0x2a, [@random={0x2, 0xb1, "ad295043643304f25450b470101f85da536b255ed083845c5d649da4da7c233897653e167b1d87672fce5f2a4bc58da323087f1608bacc9f6d53c2db2a6117f2d70dfee75d82d7d9053aa1f13aa817632e370a4a27d5d71ba0c729b9e9b16cbbaadd60a3d6ebb69a63f18110c443c6e628d7f40dfdec765da43a28842f85014a7a8962dbeab56a89c26a68ffb99f410e1a8013128b085d135620dc8e94467a8d55a46b1059ca2608c7e29a71b131815ab4"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xa, 0x75c90de80a58657e}}, @measure_req={0x26, 0x24, {0x70, 0x2, 0x7, "3683791ed8cbae4c0e7cabef1a4e9ec6e4a8234c4edabb573c40471bfb53a0a32c"}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x8}}, @rann={0x7e, 0x15, {{0x1, 0x40}, 0xc7, 0x2, @device_a, 0x7f, 0x28000, 0x2}}, @random={0xd6, 0xc1, "d9aaec0c9a5d650e177b7e52b760f243bcab0fa9177096997ba63123fee04625617a3381c184a9e2b3ceddde57b8e256f19b4b59404d446b9b1f4d2c510e5ffb59513d8b94f02e49dd8d07abd1ff19c7e1e99afc8ed34788016a884182bed8b5f7ef0d55a513fd62a2f9575bab965ad2bc0ff4f0702d24dc0d0890655389fa0e6c49d6cbfba42d8a3f009cb1e204dd7a8bcbdfa6c9e457c9a4ac02545d97030f99908361f8fa25649edb3bc4a53b485b1b1bbe7025cbc209841f93bfa50f126d87"}, @tim={0x5, 0xb, {0x80, 0xa0, 0x3, "89e513a7b1b4aa3b"}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xda6212c789e83d47}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x248, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x5a, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x7}}, @link_id={0x65, 0x12, {@random="f3980442edf9", @device_b, @broadcast}}, @preq={0x82, 0x20, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x7, 0x7, @broadcast, 0x8, @value, 0x7, 0xfe1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x3, 0x61}}, @mesh_chsw={0x76, 0x6, {0x4, 0x4, 0x28, 0xfc00}}, @ibss={0x6, 0x2, 0x14e4}, @chsw_timing={0x68, 0x4, {0x5c15, 0x1851}}]}, @NL80211_ATTR_IE={0x1d6, 0x2a, [@random={0x2, 0xb1, "ad295043643304f25450b470101f85da536b255ed083845c5d649da4da7c233897653e167b1d87672fce5f2a4bc58da323087f1608bacc9f6d53c2db2a6117f2d70dfee75d82d7d9053aa1f13aa817632e370a4a27d5d71ba0c729b9e9b16cbbaadd60a3d6ebb69a63f18110c443c6e628d7f40dfdec765da43a28842f85014a7a8962dbeab56a89c26a68ffb99f410e1a8013128b085d135620dc8e94467a8d55a46b1059ca2608c7e29a71b131815ab4"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xa, 0x75c90de80a58657e}}, @measure_req={0x26, 0x24, {0x70, 0x2, 0x7, "3683791ed8cbae4c0e7cabef1a4e9ec6e4a8234c4edabb573c40471bfb53a0a32c"}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x8}}, @rann={0x7e, 0x15, {{0x1, 0x40}, 0xc7, 0x2, @device_a, 0x7f, 0x28000, 0x2}}, @random={0xd6, 0xc1, "d9aaec0c9a5d650e177b7e52b760f243bcab0fa9177096997ba63123fee04625617a3381c184a9e2b3ceddde57b8e256f19b4b59404d446b9b1f4d2c510e5ffb59513d8b94f02e49dd8d07abd1ff19c7e1e99afc8ed34788016a884182bed8b5f7ef0d55a513fd62a2f9575bab965ad2bc0ff4f0702d24dc0d0890655389fa0e6c49d6cbfba42d8a3f009cb1e204dd7a8bcbdfa6c9e457c9a4ac02545d97030f99908361f8fa25649edb3bc4a53b485b1b1bbe7025cbc209841f93bfa50f126d87"}, @tim={0x5, 0xb, {0x80, 0xa0, 0x3, "89e513a7b1b4aa3b"}}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x4) keyctl$get_security(0x11, r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48140}, 0x20008000) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2040) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/80, 0x50}], 0x1}, 0x7fffffff}], 0x1, 0x40000103, 0x0) shutdown(r2, 0x2) (async) shutdown(r2, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000180)={0x2, {{0x2, 0x14, @multicast2}}}, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev(r3, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179", 0x9f}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) (async) pwritev(r3, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179", 0x9f}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000240)={0x0, 0x1, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5587dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae07969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bf192c9d06ea6ed0496be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000240)={0x0, 0x1, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5587dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae07969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bf192c9d06ea6ed0496be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x0, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x400, 0xfffffff8, 0x47, 0xff, 0x6}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.733675453s ago: executing program 3 (id=591): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400ca0e500001706e9a8573c8c34ca99d798bc66711f000000ec"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.896182949s ago: executing program 0 (id=595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000480)={0x7fffffff, 0xb32, &(0x7f00000002c0)="073985aab1ed70872285a95fa34c0469a4d9d304cdd6739056b4b32a546624e1d21926b0bbea208ffac30138ed71fb6057767574e0e01e659da463a407c0b3e730c279b8d4b8ef2700153a79c79c245d58f9f21cc952a19a0f9ab09e3217d4736b313f661bc9cb82a0c99f4b0f6f23f544f91a98013647afa79b2627272b407bf5018ff1cb6009c14e408869b068ca38cfe481313b926e5d894bb94f50aad8ed0c7d5cbb1298986ed4256025c4928198c1f7d1de0b2acfc8b17d30da1a21d460e7ea3b7a5cdfaed28c92777a8e", &(0x7f00000003c0)="692a5d840d4120a4f7c8bc79c067fd55f04e77378f68f13444cb170a6a82b306891f65cd82c91dfe163bfce261b0c3e79ea60eab2c711fc8b11df423f9c8d207a38282ce864fe7fc04575329da3126a14b9dc69da7f3b1fbffe7e415fc65405f10c61944672bbf89b86d2d111866827c7e013cb6ef68b59cb802fe3698973f13559b3bdfab64425ee1bfab721143d5b2280d4eefad0361", 0xcd, 0x97}) r3 = socket(0x10, 0x803, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) write(r4, &(0x7f00000001c0)="7e169de144594162a3eacc4c8ee22830911f88d3202c5aef7e1467494e5eb1b87813ac0f07f37d9a191b42925a4dd128b8af8be28339442618d5", 0x3a) fadvise64(r4, 0x0, 0x680000000000001, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x78, 0x5, 0x3, 0x21, @empty, @empty, 0x8000, 0x10, 0x100, 0x12}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.84375017s ago: executing program 0 (id=596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x7, 0x6, 0x3, 0x0, 0x0, {0xe, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x2000018) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="b99b0200000f3266baf80cb8c4e57c84ef66bafc0cec3e0f07c4a25d2d4f00660faeb604000000b8ca030000ba000000000f300f0131f3360f30455f48b867f83158db8044010f23d80f21f835c00000500f23f8660607010f00d8", 0x5b}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r4, r5, 0x0, 0xfffc80) syz_usb_connect(0x2, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x33, 0x84, 0x45, 0x20, 0x499, 0x103c, 0x22a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x4, 0x20, 0x1, "", [{{0x9, 0x4, 0x36, 0x4, 0x1, 0xac, 0x4f, 0xa8, 0x3, [], [{{0x9, 0x5, 0xd, 0x2, 0x8, 0xfd, 0x80, 0x2a}}]}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) 4.627889668s ago: executing program 0 (id=606): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') (async) chmod(&(0x7f0000000180)='./file0\x00', 0x234) (async) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x10000, 0x3, 0x5, 0x88}}}}, 0x30}, 0x1, 0x0, 0x0, 0x2404c8c0}, 0x2000d015) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x41a380, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8120000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x8) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/uevent_helper', 0x20202, 0x0) sendfile(r6, r6, 0x0, 0xc3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x5, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x5f, &(0x7f0000000240)=@string={0x5f, 0x3, "87473b20ba22147fe87e6e1c5a5e9f099b4e27c476584cab8887119a1d93197e6d868c6fe1a701966adfc9883e10b25158648df68c77881c406007d70d8bbe98da006599c40673551466ca604a5bd2f7f117977a13673a028895d84d05"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x860}}, {0x78, &(0x7f0000000300)=@string={0x78, 0x3, "3e297578938f02c888f476af79742d921f3db2f650aaa56b1470b043fbaed63ade2a6deb54f8e22cf104edc6ce83a1735604225417eec1bebce0bbb33452a802bf63cf47190d9869a43973f46388e2bd36042682177670c71aa0727133e21012f5ae73f3acc2d11c66691bc79dbf3827b975567b1041"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x140a}}]}) 4.613732808s ago: executing program 0 (id=607): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000140)={0x40, 0x15, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "da9483aa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x1, 0x1, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}}}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000100)={0x40, 0x33, 0x34, "0000000008fdffffffc3b0712a106086f92cc77b48361ea4233a13d0aff20e58d85ee902535f07c8cad8cb7f1ecde33253bb79b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xc) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000003c0)={0x1}) syz_usb_control_io$uac2(r0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x4) syz_usb_connect$uac3(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000201e04df30400001020301090292000301fa8001080b0002010130400904000000010130000a2401062e00080000001324030304040301080104000008000010050011240a010200000000000000000100000009040100000101", @ANYRESHEX], 0x0) 3.2438001s ago: executing program 3 (id=619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x1d, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x20002, 0x20003, 0x84, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1001, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x0, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x400006, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x5, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x7, 0x1, 0x3, 0x9, 0x425, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0x2, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x2, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x8c, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x1, 0x1ff, 0x3, 0x7, 0xfd, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x800, 0x8, 0x5, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x45c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xd) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f00000002c0)=0x2fb, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r6, &(0x7f00000102c0)=ANY=[@ANYBLOB="7f454c4607100709040000000000000003003e00f9ffffffd80100000000000040000000000000008b0000040000000008000000060038"], 0x78) close(r6) openat$cgroup_ro(r6, &(0x7f0000000300)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x584, 0x0, 0x3ff}]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/4104, 0x1008, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 3.184978182s ago: executing program 3 (id=620): r0 = timerfd_create(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mremap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f000000b000/0x2000)=nil) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read(r0, &(0x7f00000001c0)=""/169, 0xa9) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') 2.747849385s ago: executing program 1 (id=623): mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e25, @loopback}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x80000000000, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x100000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = add_key$fscrypt_v1(&(0x7f00000020c0), &(0x7f0000002100)={'fscrypt:', @desc1}, &(0x7f0000002140)={0x0, "9a075c94554e9fbfb8c4b9f49d397a58e25f893447611eb9d551bac19c36c26138ee8a3cf6c921a6ce3ed1ee548201c1e635bd9c472c13aff9187ff8ddd52823", 0x2d}, 0x48, 0xffffffffffffffff) keyctl$clear(0x7, r8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x2, 0x2004004, 0x5, 0x37, 0xf000000000000000, 0x0, 0x0, 0x0, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.297630509s ago: executing program 3 (id=629): syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) gettid() r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000140)={0x2, 0xffffffff, 0x6}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000240001002dbd7000fddbdf25070000000600040000dc"], 0x24}}, 0x4000) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000395000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x4000, 0x0, 0x2}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000100)={0x0, 0x0}) waitid(0x1, r6, &(0x7f0000000380), 0x1, &(0x7f0000000400)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x217) recvmmsg(r5, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001400)=""/224, 0xe0}, 0xfffffffb}, {{&(0x7f0000001500)=@can, 0x80, &(0x7f0000002840)=[{&(0x7f0000001580)=""/226, 0xe2}, {&(0x7f0000001680)=""/74, 0x4a}, {&(0x7f0000001700)=""/64, 0x40}, {&(0x7f0000001740)=""/206, 0xce}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x5, &(0x7f00000002c0)=""/150, 0x96}, 0x7}, {{&(0x7f0000002980)=@tipc=@id, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002a00)=""/8, 0x8}, {&(0x7f0000002a40)=""/240, 0xf0}, {&(0x7f0000002b40)=""/206, 0xce}, {&(0x7f0000002c40)=""/237, 0xed}], 0x4, &(0x7f0000002d80)=""/197, 0xc5}, 0x6}, {{&(0x7f0000002e80)=@pppol2tpv3in6, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002f00)=""/156, 0x9c}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/201, 0xc9}, {&(0x7f0000003100)=""/17, 0x11}, {&(0x7f0000003140)=""/154, 0x9a}, {&(0x7f0000003200)=""/85, 0x55}, {&(0x7f0000003280)=""/36, 0x24}], 0x7, &(0x7f0000003340)=""/133, 0x85}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/4096, 0x1000}], 0x2}, 0x8}, {{&(0x7f0000005440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000005540)=[{&(0x7f00000054c0)=""/67, 0x43}], 0x1, &(0x7f0000005580)=""/234, 0xea}, 0x4}, {{&(0x7f0000005680)=@pppol2tpv3in6, 0x80, &(0x7f0000005980)=[{&(0x7f0000005700)=""/115, 0x73}, {&(0x7f0000005780)=""/34, 0x22}, {&(0x7f00000057c0)=""/137, 0x89}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000005900)=""/101, 0x65}], 0x5}, 0xacce}], 0x7, 0x163, 0x0) timer_create(0x1, &(0x7f0000000180)={0x0, 0x33, 0x1, @tid=r2}, &(0x7f0000000040)) 2.295825409s ago: executing program 0 (id=630): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 2.223518131s ago: executing program 0 (id=631): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$lock(r4, 0x24, &(0x7f0000000640)={0x1, 0x4, 0xa5, 0x2}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x7, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000040), 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38cad7ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf450bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983777352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be00", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x10, 0x0, 0x7}, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) getdents64(r5, 0x0, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000280)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000, &(0x7f0000000180)='/lev0ne\xed\x04t\x02\xf87\x1b.\x96\xe8\x9f*\x9d\xa3\xfe\xcc\x8dE\xcb\x12A\x99\x06e\x19\xb3\xdd&\x87^\x8d\xdeR\x86y\xc7wz\xbeI\xaa\xe0\x97\\\xf6\x17\xcaV\b\x81\x17D\xfaJ[\x15\xb8\xc4\xf0\xaa\xe7\x1c\b\xa5\xbd\x04\x92\xfbQ\a\x84x\x15\xe9\x9eH\x86\xb7D\xfck\x86\xb0\t\xaf?(\xf8O\xa4\'/\xc9\xd4f\xbdbK\x80q\xbdS\x00\x7fE/\xc4%\x1d\xc7\xa0\x90\x8b\xc7sm\x91Z\x0ew\xaay\x97\xf8O\xe4pD\x81\x9b\x92\xaa\b\xf3\x01\t\xaec\xc19\x05\x9a\x13\x02\x8bs*\xff\xf9\xe4D+j\xcc\xe5k\xd8\xee\xad\xb0T\x89\xa4\xe2\xa2\xb25\xe8D\xc2\xb2K') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x98, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0xf, 0x10, 0xfa, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x22, 0x1b}, [@processing_unit={0x5, 0x24, 0x9, 0x1, 0x1}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x300, 0x2, 0x1, 0x5, 0x2, 0x3, 0x7fff, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x80, 0x1, {0xa, 0x25, 0x25, 0x2, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x4, 0x9, {0xa, 0x25, 0x25, 0x2, 0x3, 0x4}}}}}}}}]}}, 0x0) 1.510628523s ago: executing program 1 (id=633): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x127c01, 0x4c) r1 = syz_io_uring_setup(0x753c, &(0x7f0000000180)={0x0, 0x8252, 0x8, 0x2, 0x147}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) mmap$IORING_OFF_PBUF_RING(0x0, 0x2, 0xb, 0x10, r1, 0x806b9b36) lseek(r0, 0xbfffffffffff7fff, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, 0x0, 0x40800) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') lseek(r3, 0x4, 0x4) unshare(0x2040600) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x56, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x127c01, 0x4c) (async) syz_io_uring_setup(0x753c, &(0x7f0000000180)={0x0, 0x8252, 0x8, 0x2, 0x147}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) (async) mmap$IORING_OFF_PBUF_RING(0x0, 0x2, 0xb, 0x10, r1, 0x806b9b36) (async) lseek(r0, 0xbfffffffffff7fff, 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$inet6(r2, 0x0, 0x40800) (async) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') (async) lseek(r3, 0x4, 0x4) (async) unshare(0x2040600) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x56, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000140)) (async) 1.491531234s ago: executing program 1 (id=634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x111c80, 0x0) ioctl$BLKGETDISKSEQ(r4, 0x80081280, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mount$9p_unix(&(0x7f00000014c0)='./cgroup/file0\x00', &(0x7f0000001500)='./cgroup\x00', &(0x7f0000001540), 0x4000, &(0x7f00000015c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) faccessat(r2, &(0x7f0000000180)='./cgroup/file0\x00', 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001000)='9p\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="ff8426bdcccaffdbdf251b0000000700210069bd"], 0x1c}}, 0x20000800) sendmsg$NL80211_CMD_GET_COALESCE(r5, 0xfffffffffffffffd, 0x8000) 1.416100676s ago: executing program 1 (id=635): write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x28) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x88a8}, @void, @eth={@multicast, @random="0500", @val={@void}, {@ipv4={0x800, @generic={{0x35, 0x4, 0x3, 0xa, 0x1c5, 0x67, 0x0, 0x9, 0xc, 0x0, @loopback, @local, {[@ra={0x94, 0x4}, @generic={0x44, 0x12, "44b62f716edc7f102d072555e396d282"}, @timestamp={0x44, 0xc, 0x5b, 0x0, 0x5, [0x2, 0x3]}, @lsrr={0x83, 0x1f, 0x3d, [@remote, @rand_addr=0x64010102, @local, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @ssrr={0x89, 0x23, 0xc8, [@multicast2, @multicast2, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @local, @multicast1, @local]}, @timestamp_prespec={0x44, 0x3c, 0xe1, 0x3, 0xc, [{@rand_addr=0x64010101, 0x1ff}, {@empty, 0x8}, {@local, 0xc9}, {@multicast2, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@loopback, 0x6}, {@loopback, 0xff}]}, @generic={0x83, 0x9, "9f15cd6f85f127"}, @ssrr={0x89, 0x17, 0x75, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @private=0xa010101, @loopback]}]}}, "5805b6ba40f44a33bf8da19459894b492447de7cb95764f417ef193fd1f309ef3720f31087b2deac061699a4bb491017650a04b032c45cd32ff1eab60d780f3931b84d35692be8bf7b21244c36434bfd0580068549e475637b034564e13b88bfe7486fe992d73a655d1efaca2e06525cf92016fd6abb6291b701965bf36e7d0eed2a4a18c29a5459404f610e757a66b10103b76a4b379bea2004d3cff0c1b473ac47b215f7c502608d26401d38c2912c6ddc2e6c17a88eb03d9fc727ef2a8ea6205f49babd9aa1c63977c32a2bf573eba8f41c2bd61214feaae73b9e996ec2814119654140d253918d1d1f0e4056fc9973"}}}}}, 0x1db) (async) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000300)=0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x168002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) unshare(0x60000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0xa3c, 0x4}}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x200000, 0x8000000, 0x4, 0xd, 0xfd, 0xb, 0x40, 0x1, 0x0, 0x2b, 0x16}, {0xd535c1c88a4e070, 0x2000, 0x3, 0x0, 0x40, 0x34, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0x3, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0x4, 0x4, 0x4}, {0x80a0000, 0x80a0000, 0x9, 0x9, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0x8}, {0x30000, 0x50000, 0xb, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x200000, 0x4, 0xc, 0x7, 0xff, 0x8, 0x21, 0x81, 0x80, 0x0, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x81c2000, 0x1000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xe000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0xa801, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) (async) r10 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000140)=@req3={0x800, 0x40, 0x7, 0x5, 0x7, 0x9, 0x1}, 0x1c) (async) syz_kvm_setup_cpu$x86(r6, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="66b9aa09000066b8988f000066b90308000066b8355d000066ba000000000f300f30baf80c66b85db2e18b66efbafc0cb000ee660f3882abe68fbaf80c66b828608f8066efbafc0cb80100efd9f00fb78d00080f01c50f005f0cbaf80c66b884bbfb8d66efbafc0ced0f001c", 0x6c}], 0x1, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_usb_connect$uac2(0x0, 0xa5, &(0x7f0000001380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x6, 0x90, 0x2, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x9, 0x1a, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x307, 0xc4, 0x6, 0x4, 0xa54, 0xd}, @selector_unit={0x5, 0x24, 0xb, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x800, 0xa9}, @as_header={0x10, 0x24, 0x1, 0x5, 0xf, 0x2, 0x1, 0x9, 0x5, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x2, 0x9, {0x8, 0x25, 0x1, 0x100, 0x30, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x5, 0x74, {0x8, 0x25, 0x1, 0x83, 0x33, 0x3, 0x1ff}}}}}}}}]}}, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x8, 0xffffffffffffffff, 0x1}) 1.28421563s ago: executing program 5 (id=639): connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 1.283954331s ago: executing program 5 (id=640): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x218002, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x40, 0x13, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x24, 0x125, 0x0, 0x1, [@nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8000}]}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x40}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x6) 1.273591821s ago: executing program 5 (id=641): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000400)='illinois\x00', 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x8000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r3, 0x20008, 0x0, r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={r3, 0x2, 0x3}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRES8], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r5, 0x501c4814, &(0x7f0000000000)={0x2, 0x3, 0x0, 0xfffff800}) 751.121287ms ago: executing program 5 (id=642): r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x20, 0xd, 0x6, "17000400c7d4"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 196.279964ms ago: executing program 5 (id=643): syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4a002, 0x40) 195.485084ms ago: executing program 5 (id=644): r0 = syz_usb_connect$cdc_ecm(0x2, 0x74, &(0x7f0000002100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x8, 0x40, 0x74, "", [{{0x9, 0x4, 0x0, 0x2d, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0xe, 0x82}, [@mdlm_detail={0x4, 0x24, 0x13, 0xbf}, @mdlm_detail={0x23, 0x24, 0x13, 0xb, "9d0896682aa6c72e89cb99d5e61bae55f4a6de89dfe9f70f80549036db0cb6"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x82, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x9, 0xfd}}}}}]}}]}}, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000023c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002880)={0x1c, &(0x7f00000027c0)={0x20, 0x11, 0x22, "5251c2920fe12cd9ad01a4482071c169975123e776146b2c6fd43fc63c82cea76091"}, &(0x7f0000002800)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002840)={0x0, 0x8, 0x1, 0x80}}) 77.492237ms ago: executing program 1 (id=645): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x30000010}) gettid() kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000040)={r3, r2, 0x2}) r4 = open$dir(&(0x7f0000000000)='./file1\x00', 0x200000, 0x191) mknodat$loop(r4, &(0x7f0000000100)='./file0/file1\x00', 0x200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in=@private, @in6=@private1}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000580)={[{@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@smackfstransmute}, {@dont_appraise}, {@flag='dirsync'}, {@subj_user={'subj_user', 0x3d, 'redirect_dir=follow'}}, {@obj_type={'obj_type', 0x3d, 'redirect_dir=follow'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@context={'context', 0x3d, 'root'}}]}) linkat(r0, &(0x7f00000001c0)='./file0/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1400) r6 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r6, 0x1, 0x14, 0x0, &(0x7f0000000180)) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004000) sendto(r9, &(0x7f0000000340)="2e490e653a7a0564e3323ec1b3f201ae18aa64e60ece24674fe5705d0fc18f6a389dd2fef425a3930ac20a67ebaec6a38206d613f52edd4a08a44529c9ba94cd900cbac37e9008751d05678fdcd42740dadb4be5db627b5489d1a7cc5b46ff875a6b2dffffffffffffff7f6eae35a1f64d000000000000", 0x77, 0x0, 0x0, 0x0) recvfrom(r8, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) getsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x4) creat(&(0x7f00000000c0)='./file0/file2\x00', 0x145) 0s ago: executing program 1 (id=646): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000140001000400000000000000020000000400000014000100ff010000000000000000000000000001140002"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) 0s ago: executing program 1 (id=647): ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000080)={[{0x5, 0x1, 0xa, 0xd, 0x3, 0x7, 0xc, 0x2d, 0x7f, 0x5, 0x8, 0xf5, 0x9}, {0xf, 0x9, 0xa, 0xa, 0x8, 0xe, 0xc, 0x1, 0x8, 0x0, 0x46, 0xe8, 0x6}, {0x0, 0x7, 0xe8, 0x7f, 0x2, 0x7, 0x0, 0x4, 0x6, 0x8, 0x4, 0x4, 0x2}], 0xf}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) kernel console output (not intermixed with test programs): .246332][ T10] usb 1-1: config 0 descriptor?? [ 99.251675][ T1493] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 99.264622][ T1493] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 99.444378][ T1514] netlink: 'syz.1.321': attribute type 4 has an invalid length. [ 99.452126][ T1514] netlink: 'syz.1.321': attribute type 6 has an invalid length. [ 99.460035][ T1514] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.321'. [ 99.469968][ T36] audit: type=1400 audit(1782174437.930:344): avc: denied { mount } for pid=1513 comm="syz.1.321" name="/" dev="pstore" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 99.480628][ T511] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 99.496056][ T1493] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 99.507187][ T1493] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 99.532582][ T36] audit: type=1400 audit(1782174438.000:345): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 99.660532][ T511] usb 4-1: Using ep0 maxpacket: 16 [ 99.667546][ T511] usb 4-1: config 8 has an invalid interface number: 230 but max is 2 [ 99.675800][ T511] usb 4-1: config 8 has an invalid interface number: 170 but max is 2 [ 99.684029][ T511] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 99.692750][ T511] usb 4-1: config 8 has an invalid interface number: 121 but max is 2 [ 99.700998][ T511] usb 4-1: config 8 has no interface number 0 [ 99.707330][ T511] usb 4-1: config 8 has no interface number 1 [ 99.713475][ T511] usb 4-1: config 8 has no interface number 2 [ 99.719634][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 99.729346][ T511] usb 4-1: config 8 interface 230 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 99.740341][ T511] usb 4-1: config 8 interface 170 altsetting 13 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 99.751379][ T511] usb 4-1: config 8 interface 170 altsetting 13 has a duplicate endpoint with address 0xA, skipping [ 99.762372][ T511] usb 4-1: config 8 interface 170 altsetting 13 has a duplicate endpoint with address 0xA, skipping [ 99.773283][ T511] usb 4-1: config 8 interface 170 altsetting 13 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 99.784333][ T511] usb 4-1: config 8 interface 170 altsetting 13 endpoint 0x7 has invalid maxpacket 1967, setting to 64 [ 99.795443][ T511] usb 4-1: config 8 interface 170 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 99.806303][ T511] usb 4-1: config 8 interface 170 altsetting 13 endpoint 0xC has invalid maxpacket 1015, setting to 64 [ 99.817415][ T511] usb 4-1: config 8 interface 170 altsetting 13 bulk endpoint 0x6 has invalid maxpacket 8 [ 99.827413][ T511] usb 4-1: config 8 interface 170 altsetting 13 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 99.838521][ T511] usb 4-1: config 8 interface 170 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 99.839619][ T31] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 99.849891][ T511] usb 4-1: config 8 interface 121 altsetting 89 has a duplicate endpoint with address 0x4, skipping [ 99.863769][ T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 99.879584][ T511] usb 4-1: config 8 interface 121 altsetting 89 has a duplicate endpoint with address 0xA, skipping [ 99.880559][ T354] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 99.890610][ T511] usb 4-1: config 8 interface 121 altsetting 89 has a duplicate endpoint with address 0x6, skipping [ 99.909244][ T31] usb 5-1: USB disconnect, device number 10 [ 99.920065][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 99.934887][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 99.945612][ T511] usb 4-1: config 8 interface 121 altsetting 89 bulk endpoint 0x1 has invalid maxpacket 16 [ 99.956091][ T10] asix 1-1:0.34: probe with driver asix failed with error -61 [ 99.963584][ T511] usb 4-1: config 8 interface 121 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 99.976991][ T511] usb 4-1: config 8 interface 121 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 99.987996][ T511] usb 4-1: config 8 interface 121 altsetting 89 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 99.999060][ T511] usb 4-1: config 8 interface 230 has no altsetting 0 [ 100.005878][ T511] usb 4-1: config 8 interface 170 has no altsetting 0 [ 100.012681][ T511] usb 4-1: config 8 interface 121 has no altsetting 0 [ 100.020946][ T511] usb 4-1: New USB device found, idVendor=19d2, idProduct=1481, bcdDevice=a3.0d [ 100.030001][ T511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.038020][ T511] usb 4-1: Product: à°ƒ [ 100.042206][ T511] usb 4-1: Manufacturer: И [ 100.046702][ T511] usb 4-1: SerialNumber: äŠ [ 100.050662][ T354] usb 2-1: device descriptor read/64, error -71 [ 100.240520][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 100.270921][ T511] usb 4-1: USB disconnect, device number 36 [ 100.290549][ T354] usb 2-1: device descriptor read/64, error -71 [ 100.391723][ T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 100.402632][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.413752][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.423544][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 100.437363][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 100.446461][ T31] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 100.454566][ T31] usb 5-1: Manufacturer: syz [ 100.459763][ T31] usb 5-1: config 0 descriptor?? [ 100.472955][ T1520] lo: entered promiscuous mode [ 100.478489][ T1520] lo: left promiscuous mode [ 100.540520][ T354] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 100.670577][ T354] usb 2-1: device descriptor read/64, error -71 [ 100.783471][ T1522] fuse: Unknown parameter '0x0000000000000006' [ 100.866773][ T31] appleir 0003:05AC:8243.001C: unknown main item tag 0x0 [ 100.874073][ T31] appleir 0003:05AC:8243.001C: No inputs registered, leaving [ 100.882643][ T31] appleir 0003:05AC:8243.001C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 100.910528][ T354] usb 2-1: device descriptor read/64, error -71 [ 101.020605][ T354] usb usb2-port1: attempt power cycle [ 101.030512][ T1298] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 101.180556][ T1298] usb 4-1: Using ep0 maxpacket: 32 [ 101.188492][ T1298] usb 4-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 101.197712][ T1298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.205778][ T1298] usb 4-1: Product: syz [ 101.209968][ T1298] usb 4-1: Manufacturer: syz [ 101.214632][ T1298] usb 4-1: SerialNumber: syz [ 101.370550][ T354] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 101.391564][ T354] usb 2-1: device descriptor read/8, error -71 [ 101.423451][ T1298] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.430375][ T1298] usb 4-1: unit 5 not found! [ 101.439738][ T1298] usb 4-1: USB disconnect, device number 37 [ 101.541563][ T354] usb 2-1: device descriptor read/8, error -71 [ 101.761274][ T10] usb 1-1: USB disconnect, device number 49 [ 101.790560][ T354] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 101.831514][ T354] usb 2-1: device descriptor read/8, error -71 [ 101.961570][ T354] usb 2-1: device descriptor read/8, error -71 [ 102.070600][ T354] usb usb2-port1: unable to enumerate USB device [ 102.700815][ T36] audit: type=1400 audit(1782174441.160:346): avc: denied { create } for pid=1542 comm="syz.0.329" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.741291][ T1547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 102.750359][ T1547] bridge_slave_1: left allmulticast mode [ 102.760493][ T1547] bridge_slave_1: left promiscuous mode [ 102.766179][ T1547] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.790969][ T1547] bridge_slave_0: left allmulticast mode [ 102.797131][ T1547] bridge_slave_0: left promiscuous mode [ 102.805766][ T1547] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.853518][ T1550] netlink: 9 bytes leftover after parsing attributes in process `syz.1.331'. [ 102.862869][ T1550] z00ªX¹¦: renamed from gretap0 (while UP) [ 102.869488][ T1550] z00ªX¹¦: entered allmulticast mode [ 102.922329][ T1553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.333'. [ 103.030526][ T1298] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 103.180522][ T1298] usb 4-1: Using ep0 maxpacket: 8 [ 103.186669][ T1298] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 103.195157][ T1298] usb 4-1: config 179 has no interface number 0 [ 103.201503][ T352] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 103.209113][ T1298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 103.220299][ T1298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 103.220629][ T10] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 103.232009][ T1298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.250503][ T1298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 103.260592][ T396] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 103.262143][ T1298] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 103.282649][ T1298] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 103.291716][ T1298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.300581][ T1549] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 103.380497][ T352] usb 1-1: Using ep0 maxpacket: 8 [ 103.386611][ T352] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.396424][ T352] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 103.406339][ T352] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.411061][ T10] usb 5-1: device firmware changed [ 103.416169][ T352] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 103.421886][ T396] usb 2-1: Using ep0 maxpacket: 8 [ 103.435883][ T352] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 103.437863][ T396] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 103.445287][ T354] usb 5-1: USB disconnect, device number 11 [ 103.457526][ T396] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 103.460724][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.470349][ T396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.486417][ T396] usb 2-1: Product: syz [ 103.491298][ T396] usb 2-1: Manufacturer: syz [ 103.495750][ T352] usb 1-1: Product: syz [ 103.500174][ T352] usb 1-1: Manufacturer: syz [ 103.504916][ T352] usb 1-1: SerialNumber: syz [ 103.505217][ T396] usb 2-1: SerialNumber: syz [ 103.514599][ T352] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 103.523157][ T352] usb-storage 1-1:1.0: USB Mass Storage device detected [ 103.531403][ T1298] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 103.535461][ T1560] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 103.554623][ T352] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 103.620521][ T354] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 103.728483][ T10] usb 1-1: USB disconnect, device number 50 [ 103.755508][ T396] usb 2-1: MIDIStreaming interface descriptor not found [ 103.766112][ T396] usb 2-1: USB disconnect, device number 41 [ 103.781617][ T354] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.791913][ T354] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 103.801238][ T354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.803444][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.825635][ T354] usb 5-1: config 0 descriptor?? [ 103.834540][ T354] usb 5-1: bad CDC descriptors [ 103.941629][ T1549] netlink: 'syz.3.332': attribute type 3 has an invalid length. [ 103.950380][ T354] usb 4-1: USB disconnect, device number 38 [ 103.956394][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 103.956427][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 103.973455][ T354] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 104.032562][ T1546] syzkaller1: entered promiscuous mode [ 104.038102][ T1546] syzkaller1: entered allmulticast mode [ 104.045442][ T1298] usb 5-1: USB disconnect, device number 12 [ 104.420525][ T1298] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 104.570509][ T1298] usb 5-1: Using ep0 maxpacket: 16 [ 104.571125][ T396] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 104.579269][ T1298] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 104.592458][ T354] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 104.600067][ T1298] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 104.608158][ T1298] usb 5-1: Product: syz [ 104.612583][ T1298] usb 5-1: Manufacturer: syz [ 104.617175][ T1298] usb 5-1: SerialNumber: syz [ 104.622732][ T1298] usb 5-1: config 0 descriptor?? [ 104.628590][ T1298] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 104.700585][ T511] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 104.710545][ T396] usb 2-1: device descriptor read/64, error -71 [ 104.760521][ T354] usb 1-1: Using ep0 maxpacket: 16 [ 104.767007][ T354] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.778131][ T354] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.787930][ T354] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.794571][ T354] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 104.803634][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.812266][ T354] usb 1-1: config 0 descriptor?? [ 104.844535][ T10] usb 5-1: USB disconnect, device number 13 [ 104.850530][ T511] usb 4-1: Using ep0 maxpacket: 16 [ 104.861190][ T511] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 104.873368][ T511] usb 4-1: config 0 has no interface number 0 [ 104.879595][ T511] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 104.890064][ T511] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 104.902154][ T511] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 104.911293][ T511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.919329][ T511] usb 4-1: Product: syz [ 104.923788][ T511] usb 4-1: Manufacturer: syz [ 104.928443][ T511] usb 4-1: SerialNumber: syz [ 104.934311][ T511] usb 4-1: config 0 descriptor?? [ 104.939564][ T1587] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 104.947831][ T1587] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 104.960537][ T396] usb 2-1: device descriptor read/64, error -71 [ 104.997084][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 104.997102][ T36] audit: type=1400 audit(1782174443.460:350): avc: denied { write } for pid=1219 comm="syz-executor" name="/" dev="incremental-fs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.026748][ T36] audit: type=1400 audit(1782174443.460:351): avc: denied { remove_name } for pid=1219 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.051213][ T36] audit: type=1400 audit(1782174443.460:352): avc: denied { unlink } for pid=1219 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.120085][ T935] bridge_slave_1: left allmulticast mode [ 105.126221][ T935] bridge_slave_1: left promiscuous mode [ 105.132076][ T935] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.139923][ T935] bridge_slave_0: left allmulticast mode [ 105.145700][ T935] bridge_slave_0: left promiscuous mode [ 105.151686][ T935] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.160364][ T1587] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 105.181144][ T1587] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 105.200565][ T396] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 105.263370][ T935] veth1_macvtap: left promiscuous mode [ 105.268982][ T935] veth0_vlan: left promiscuous mode [ 105.350555][ T396] usb 2-1: device descriptor read/64, error -71 [ 105.393243][ T1600] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.400352][ T1600] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.407478][ T511] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 105.408275][ T1600] bridge_slave_0: entered allmulticast mode [ 105.424142][ T354] usbhid 1-1:0.0: can't add hid device: -71 [ 105.430113][ T354] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 105.430349][ T1600] bridge_slave_0: entered promiscuous mode [ 105.440046][ T354] usb 1-1: USB disconnect, device number 51 [ 105.450920][ T1600] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.457975][ T1600] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.465247][ T1600] bridge_slave_1: entered allmulticast mode [ 105.471852][ T1600] bridge_slave_1: entered promiscuous mode [ 105.523803][ T1600] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.530902][ T1600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.538233][ T1600] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.545299][ T1600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.570395][ T954] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.578210][ T954] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.588353][ T954] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.595446][ T954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.607472][ T945] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.610701][ T396] usb 2-1: device descriptor read/64, error -71 [ 105.614560][ T945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.644971][ T1600] veth0_vlan: entered promiscuous mode [ 105.656606][ T1600] veth1_macvtap: entered promiscuous mode [ 105.730951][ T396] usb usb2-port1: attempt power cycle [ 105.822427][ T511] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 105.832594][ T511] asix 4-1:0.34: probe with driver asix failed with error -32 [ 105.930567][ T1298] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 106.070545][ T396] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 106.081680][ T1298] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 106.091861][ T396] usb 2-1: device descriptor read/8, error -71 [ 106.093213][ T1298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.109669][ T1298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.119633][ T1298] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 106.133527][ T1298] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 106.142592][ T1298] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 106.150936][ T1298] usb 6-1: Manufacturer: syz [ 106.156296][ T1298] usb 6-1: config 0 descriptor?? [ 106.190515][ T511] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 106.221542][ T396] usb 2-1: device descriptor read/8, error -71 [ 106.340511][ T511] usb 1-1: Using ep0 maxpacket: 8 [ 106.346828][ T511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 106.358081][ T511] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 106.367276][ T511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.376041][ T511] usb 1-1: config 0 descriptor?? [ 106.470821][ T396] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 106.491451][ T396] usb 2-1: device descriptor read/8, error -71 [ 106.569578][ T1298] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 106.577064][ T1298] appleir 0003:05AC:8243.001D: No inputs registered, leaving [ 106.587499][ T1298] appleir 0003:05AC:8243.001D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 106.621966][ T396] usb 2-1: device descriptor read/8, error -71 [ 106.740065][ T1607] Invalid logical block size (1) [ 106.740931][ T396] usb usb2-port1: unable to enumerate USB device [ 106.952769][ T1607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.961437][ T1607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.970266][ T511] usbhid 1-1:0.0: can't add hid device: -71 [ 106.977438][ T511] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.987534][ T511] usb 1-1: USB disconnect, device number 52 [ 107.547320][ T10] usb 4-1: USB disconnect, device number 39 [ 107.700576][ T511] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 107.830512][ T511] usb 2-1: device descriptor read/64, error -71 [ 107.910522][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 108.060541][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 108.066940][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 108.075193][ T511] usb 2-1: device descriptor read/64, error -71 [ 108.081490][ T10] usb 4-1: config 0 has no interface number 0 [ 108.087572][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 108.095859][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 108.104941][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.112957][ T10] usb 4-1: Product: syz [ 108.117125][ T10] usb 4-1: Manufacturer: syz [ 108.121761][ T10] usb 4-1: SerialNumber: syz [ 108.126985][ T10] usb 4-1: config 0 descriptor?? [ 108.132698][ T10] smsc75xx v1.0.0 [ 108.240514][ T354] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 108.340516][ T511] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 108.390517][ T354] usb 1-1: Using ep0 maxpacket: 32 [ 108.396883][ T354] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 108.410848][ T354] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 108.419555][ T354] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 108.428910][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.438833][ T354] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.453498][ T354] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.467870][ T354] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 108.470645][ T511] usb 2-1: device descriptor read/64, error -71 [ 108.477502][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.496793][ T354] usb 1-1: config 0 descriptor?? [ 108.660989][ T352] usb 6-1: USB disconnect, device number 2 [ 108.706035][ T354] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 108.721947][ T354] usb 1-1: USB disconnect, device number 53 [ 108.728853][ T354] usblp0: removed [ 108.760525][ T511] usb 2-1: device descriptor read/64, error -71 [ 108.880593][ T511] usb usb2-port1: attempt power cycle [ 109.000522][ T352] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 109.140526][ T354] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 109.150504][ T352] usb 6-1: Using ep0 maxpacket: 16 [ 109.156809][ T352] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 109.164973][ T352] usb 6-1: config 0 has no interface number 0 [ 109.171118][ T352] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 109.181134][ T352] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 109.192552][ T352] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 109.201622][ T352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.209619][ T352] usb 6-1: Product: syz [ 109.213899][ T352] usb 6-1: Manufacturer: syz [ 109.218499][ T352] usb 6-1: SerialNumber: syz [ 109.223976][ T352] usb 6-1: config 0 descriptor?? [ 109.229255][ T1642] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 109.236547][ T511] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 109.240709][ T1642] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 109.261802][ T511] usb 2-1: device descriptor read/8, error -71 [ 109.300499][ T354] usb 1-1: Using ep0 maxpacket: 32 [ 109.306899][ T354] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.315388][ T354] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.324034][ T354] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.333024][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.338946][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 109.342693][ T354] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.342721][ T354] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.342753][ T354] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.342774][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.344943][ T354] usb 1-1: config 0 descriptor?? [ 109.366534][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 109.407710][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 109.418608][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 109.428647][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 109.439062][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 109.448610][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 109.457293][ T511] usb 2-1: device descriptor read/8, error -71 [ 109.464657][ T1642] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 109.465455][ T10] usb 4-1: USB disconnect, device number 40 [ 109.478481][ T1642] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 109.578926][ T354] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 109.687460][ T352] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 109.697569][ T352] asix 6-1:0.34: probe with driver asix failed with error -61 [ 109.710524][ T511] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 109.731641][ T511] usb 2-1: device descriptor read/8, error -71 [ 109.821644][ T352] usb 1-1: USB disconnect, device number 54 [ 109.828425][ T352] usblp0: removed [ 109.858164][ T36] audit: type=1400 audit(1782174448.320:353): avc: denied { write } for pid=1643 comm="syz.3.360" path="socket:[13198]" dev="sockfs" ino=13198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.882383][ T511] usb 2-1: device descriptor read/8, error -71 [ 109.990691][ T511] usb usb2-port1: unable to enumerate USB device [ 110.346914][ T1653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.363'. [ 110.516545][ T1660] syzkaller1: entered promiscuous mode [ 110.522113][ T1660] syzkaller1: entered allmulticast mode [ 110.680492][ T354] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 110.710499][ T511] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 110.841571][ T354] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.852184][ T354] usb 1-1: config 0 has no interface number 0 [ 110.860038][ T354] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.872916][ T354] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.884366][ T354] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 110.884423][ T511] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.893634][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.915494][ T354] usb 1-1: config 0 descriptor?? [ 110.920637][ T511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.933246][ T511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.943470][ T511] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.960897][ T511] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 110.969988][ T511] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 110.978113][ T511] usb 2-1: Manufacturer: syz [ 110.988766][ T511] usb 2-1: config 0 descriptor?? [ 111.396002][ T511] appleir 0003:05AC:8243.001E: unknown main item tag 0x0 [ 111.403362][ T511] appleir 0003:05AC:8243.001E: No inputs registered, leaving [ 111.420975][ T511] appleir 0003:05AC:8243.001E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 111.548491][ T36] audit: type=1400 audit(1782174450.010:354): avc: denied { write } for pid=1677 comm="syz.3.369" path="socket:[13596]" dev="sockfs" ino=13596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.721953][ T1694] netlink: 'syz.3.373': attribute type 40 has an invalid length. [ 112.080508][ T511] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 112.231609][ T511] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.241943][ T511] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.250867][ T511] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.265307][ T511] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.274423][ T511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.282435][ T511] usb 4-1: Product: syz [ 112.286621][ T511] usb 4-1: Manufacturer: syz [ 112.291244][ T511] usb 4-1: SerialNumber: syz [ 112.298758][ T511] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 112.305700][ T511] cdc_mbim 4-1:1.0: bind() failure [ 112.329974][ T511] usb 6-1: USB disconnect, device number 3 [ 112.528387][ T1708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.378'. [ 112.643665][ T36] audit: type=1400 audit(1782174451.110:355): avc: denied { ioctl } for pid=1720 comm="syz.5.380" path="socket:[14599]" dev="sockfs" ino=14599 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.707280][ T1725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.382'. [ 112.716392][ T1725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.382'. [ 112.790235][ T943] tipc: Subscription rejected, illegal request [ 112.796545][ T1727] usb usb9: usbfs: process 1727 (syz.5.383) did not claim interface 1 before use [ 113.080506][ T511] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 113.230497][ T511] usb 6-1: Using ep0 maxpacket: 16 [ 113.240627][ T511] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 113.248877][ T36] audit: type=1400 audit(1782174451.710:356): avc: denied { mount } for pid=1734 comm="syz.1.387" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 113.271312][ T511] usb 6-1: config 0 has no interface number 0 [ 113.277423][ T511] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 113.287482][ T511] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 113.297454][ T36] audit: type=1326 audit(1782174451.710:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1734 comm="syz.1.387" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab2a19ce59 code=0x0 [ 113.328982][ T511] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 113.340491][ T511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.357053][ T511] usb 6-1: Product: syz [ 113.361343][ T511] usb 6-1: Manufacturer: syz [ 113.365960][ T511] usb 6-1: SerialNumber: syz [ 113.372372][ T511] usb 6-1: config 0 descriptor?? [ 113.377644][ T1731] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 113.384908][ T1731] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 113.499521][ T354] usbhid 1-1:0.1: can't add hid device: -71 [ 113.505684][ T354] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 113.514459][ T354] usb 1-1: USB disconnect, device number 55 [ 113.593996][ T1731] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 113.601649][ T1731] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 113.623446][ T1740] kvm: kvm [1739]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x187) = 0x9fa0000 [ 113.632479][ T1740] kvm: kvm [1739]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x186) = 0x9fa0000 [ 113.643894][ T1740] kvm: kvm [1739]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0x11e) = 0x9fa0000 [ 113.654877][ T1740] kvm: kvm [1739]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc2) = 0x9fa0000 [ 113.663833][ T1740] kvm: kvm [1739]: vcpu1, guest rIP: 0x9113 Unhandled WRMSR(0xc1) = 0x9fa0000 [ 113.750524][ T364] usb 2-1: reset high-speed USB device number 50 using dummy_hcd [ 113.758461][ T36] audit: type=1400 audit(1782174452.220:358): avc: denied { audit_read } for pid=1744 comm="syz.0.391" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.779864][ T364] usb 2-1: device reset changed ep0 maxpacket size! [ 113.786925][ T352] usb 2-1: USB disconnect, device number 50 [ 113.809396][ T511] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 113.819545][ T511] asix 6-1:0.34: probe with driver asix failed with error -61 [ 113.920557][ T352] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 114.070517][ T352] usb 2-1: Using ep0 maxpacket: 8 [ 114.076795][ T352] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.089728][ T352] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.096391][ T352] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 114.105536][ T352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.114423][ T352] usb 2-1: config 0 descriptor?? [ 114.140669][ T511] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 114.291645][ T511] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 114.302617][ T511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.313627][ T511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.323395][ T511] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 114.340507][ T511] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 114.349609][ T511] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 114.357778][ T511] usb 1-1: Manufacturer: syz [ 114.366472][ T511] usb 1-1: config 0 descriptor?? [ 114.596320][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.603280][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.610077][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.616930][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.623765][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.630596][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.637406][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.644225][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.651050][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.657848][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.664679][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.671497][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.678297][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.685092][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.691923][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.698733][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.705550][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.712384][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.719181][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.725998][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.732802][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.739586][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.746416][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.753232][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.760031][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.766857][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.773697][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.780700][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.781621][ T511] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 114.787511][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.801601][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.808422][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.815338][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.822257][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.829080][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.829598][ T511] appleir 0003:05AC:8243.0020: No inputs registered, leaving [ 114.836469][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.850255][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.856303][ T511] appleir 0003:05AC:8243.0020: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 114.862671][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.882469][ T511] usb 4-1: USB disconnect, device number 41 [ 114.888364][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.901225][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.908543][ T352] kone 0003:1E7D:2CED.001F: unknown main item tag 0x0 [ 114.920096][ T352] kone 0003:1E7D:2CED.001F: hidraw1: USB HID v0.03 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 114.942636][ T352] usb 2-1: USB disconnect, device number 51 [ 115.230522][ T511] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 115.380490][ T511] usb 4-1: Using ep0 maxpacket: 32 [ 115.386943][ T511] usb 4-1: config 0 has no interfaces? [ 115.393900][ T511] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 115.409798][ T511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.420687][ T511] usb 4-1: Product: syz [ 115.424916][ T511] usb 4-1: Manufacturer: syz [ 115.429546][ T511] usb 4-1: SerialNumber: syz [ 115.434987][ T511] usb 4-1: config 0 descriptor?? [ 115.672229][ T352] usb 4-1: USB disconnect, device number 42 [ 115.691539][ T1779] netlink: 'syz.3.399': attribute type 27 has an invalid length. [ 115.810498][ T511] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 115.960497][ T511] usb 2-1: Using ep0 maxpacket: 16 [ 115.966932][ T511] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 115.977016][ T511] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 115.986141][ T511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.994377][ T511] usb 2-1: Product: syz [ 115.998551][ T511] usb 2-1: Manufacturer: syz [ 116.003171][ T511] usb 2-1: SerialNumber: syz [ 116.010493][ T352] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 116.010868][ T511] r8152-cfgselector 2-1: Unknown version 0x0000 [ 116.024400][ T511] r8152-cfgselector 2-1: config 0 descriptor?? [ 116.161540][ T352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.172538][ T352] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.181622][ T352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.190429][ T352] usb 4-1: config 0 descriptor?? [ 116.398312][ T352] usbhid 4-1:0.0: can't add hid device: -71 [ 116.404486][ T352] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 116.413096][ T352] usb 4-1: USB disconnect, device number 43 [ 116.432773][ T354] r8152-cfgselector 2-1: USB disconnect, device number 52 [ 116.443936][ T511] usb 6-1: USB disconnect, device number 4 [ 116.780512][ T511] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 116.840525][ T352] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 116.931551][ T511] usb 6-1: config 0 has no interfaces? [ 116.937135][ T511] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 116.946245][ T511] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.954809][ T511] usb 6-1: config 0 descriptor?? [ 116.992330][ T352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.003540][ T352] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 117.012638][ T352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.021539][ T352] usb 4-1: config 0 descriptor?? [ 117.110507][ T10] usb 1-1: reset high-speed USB device number 56 using dummy_hcd [ 117.250507][ T354] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 117.260967][ T10] usb 1-1: device firmware changed [ 117.266273][ T396] usb 1-1: USB disconnect, device number 56 [ 117.400496][ T354] usb 2-1: Using ep0 maxpacket: 16 [ 117.400501][ T396] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 117.414431][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.425605][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.435401][ T354] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.448224][ T354] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.457318][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.466139][ T354] usb 2-1: config 0 descriptor?? [ 117.561742][ T396] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 117.572744][ T396] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 117.585392][ T396] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 117.594506][ T396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.602525][ T396] usb 1-1: Product: syz [ 117.606701][ T396] usb 1-1: Manufacturer: syz [ 117.611327][ T396] usb 1-1: SerialNumber: syz [ 117.711688][ T1298] usb 6-1: USB disconnect, device number 5 [ 117.820367][ T396] usb 1-1: Can't get UAC3 power state for id 10 [ 117.827832][ T396] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 117.839195][ T396] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 117.846871][ T396] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 117.862066][ T396] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 117.873395][ T396] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 117.884718][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 117.893728][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 117.896206][ T396] usb 1-1: USB disconnect, device number 57 [ 117.901455][ T352] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 117.914096][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 117.924488][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 117.933863][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 117.950284][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 117.957666][ T352] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 117.966847][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 117.975051][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 117.992988][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 118.000329][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 118.009932][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 118.017324][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 118.024797][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 118.032364][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 118.039859][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 118.047163][ T354] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 118.064466][ T354] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0021/input/input16 [ 118.079038][ T354] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 118.129625][ T354] usb 2-1: USB disconnect, device number 53 [ 118.356473][ T352] usb 4-1: USB disconnect, device number 44 [ 118.362437][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 118.440753][ T354] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 118.500526][ T353] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 118.570557][ T364] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 118.591630][ T354] usb 2-1: config 1 interface 0 has no altsetting 0 [ 118.599810][ T354] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 118.608949][ T354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.616984][ T354] usb 2-1: Product: ï“¿ [ 118.621283][ T354] usb 2-1: Manufacturer: Ð [ 118.625822][ T354] usb 2-1: SerialNumber: 缕庿쀞â¾ç‹…ì·§êž­ã”Ï绤ເ㸢਒螠䕓蓰鲸ᅬ®￟졻᮶뗖⎪਽䖶푅혿蕰踺苄缙é¯å½…䲈ុ쟼枒뭜䊡绂硢㼮宖曛îšà½©é¢‰ã¾‹ææ¶¿ãºä¤£ìŒîŠì¡£î¥¡è©í‚©ì•–ᖊ蠱뛖ᇰ鉌㑞תسꇚ뱂쯯ç¸î—´ä¢žé«—ࠨﴹ⇼麞鯗퉌ᅿ등熑毠煮ᔔ὾힗奒懫貌­ê¯à¢†ì²´ê–ƒê›‹æˆ¢å½™éš“諚è§ç½®ä•—à¡´î°á¢“ [ 118.652041][ T353] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.669793][ T353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.680755][ T353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.690562][ T353] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 118.704531][ T353] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 118.713639][ T353] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 118.721797][ T353] usb 6-1: Manufacturer: syz [ 118.727112][ T353] usb 6-1: config 0 descriptor?? [ 118.740482][ T364] usb 1-1: Using ep0 maxpacket: 16 [ 118.746834][ T364] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 118.754960][ T364] usb 1-1: config 0 has no interface number 0 [ 118.761121][ T364] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 118.771161][ T364] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 118.782586][ T364] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 118.791683][ T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.799704][ T364] usb 1-1: Product: syz [ 118.803916][ T364] usb 1-1: Manufacturer: syz [ 118.808568][ T364] usb 1-1: SerialNumber: syz [ 118.814037][ T364] usb 1-1: config 0 descriptor?? [ 118.819324][ T1809] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 118.826583][ T1809] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 119.035519][ T1809] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 119.042870][ T1809] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 119.136887][ T353] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 119.144581][ T353] appleir 0003:05AC:8243.0022: No inputs registered, leaving [ 119.153557][ T353] appleir 0003:05AC:8243.0022: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 119.180710][ T396] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 119.251240][ T364] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 119.261554][ T364] asix 1-1:0.34: probe with driver asix failed with error -61 [ 119.330505][ T396] usb 4-1: device descriptor read/64, error -71 [ 119.401768][ T354] usb 2-1: USB disconnect, device number 54 [ 119.580541][ T396] usb 4-1: device descriptor read/64, error -71 [ 119.750516][ T354] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 119.820514][ T396] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 119.900494][ T354] usb 2-1: Using ep0 maxpacket: 8 [ 119.907099][ T354] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.915505][ T354] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.925655][ T354] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 119.939970][ T354] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 119.949066][ T354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.957096][ T354] usb 2-1: Product: syz [ 119.960575][ T396] usb 4-1: device descriptor read/64, error -71 [ 119.961293][ T354] usb 2-1: Manufacturer: syz [ 119.972161][ T354] usb 2-1: SerialNumber: syz [ 119.977580][ T354] usb 2-1: config 0 descriptor?? [ 119.986927][ T354] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 120.002877][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.186302][ T354] usb 2-1: USB disconnect, device number 55 [ 120.210513][ T396] usb 4-1: device descriptor read/64, error -71 [ 120.320653][ T396] usb usb4-port1: attempt power cycle [ 120.660515][ T396] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 120.681569][ T396] usb 4-1: device descriptor read/8, error -71 [ 120.811553][ T396] usb 4-1: device descriptor read/8, error -71 [ 120.972870][ T36] audit: type=1400 audit(1782174459.440:359): avc: denied { accept } for pid=1833 comm="syz.5.416" path="socket:[14129]" dev="sockfs" ino=14129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.050540][ T396] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 121.072689][ T1837] process 'syz.5.417' launched './file0' with NULL argv: empty string added [ 121.082566][ T396] usb 4-1: device descriptor read/8, error -71 [ 121.100513][ T511] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 121.211528][ T396] usb 4-1: device descriptor read/8, error -71 [ 121.250521][ T511] usb 2-1: Using ep0 maxpacket: 32 [ 121.256908][ T511] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.269974][ T511] usb 2-1: New USB device found, idVendor=1784, idProduct=0004, bcdDevice= 0.00 [ 121.279052][ T511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.287765][ T511] usb 2-1: config 0 descriptor?? [ 121.320638][ T396] usb usb4-port1: unable to enumerate USB device [ 121.480509][ T354] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 121.488623][ T354] usb 6-1: device reset changed ep0 maxpacket size! [ 121.495634][ T10] usb 6-1: USB disconnect, device number 6 [ 121.630506][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 121.780497][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 121.786822][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.798523][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.809520][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.819290][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.828601][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.837475][ T10] usb 6-1: config 0 descriptor?? [ 121.843621][ T10] hub 6-1:0.0: USB hub found [ 121.876898][ T396] usb 1-1: USB disconnect, device number 58 [ 121.898218][ T511] usbhid 2-1:0.0: can't add hid device: -71 [ 121.904495][ T511] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 121.915333][ T511] usb 2-1: USB disconnect, device number 56 [ 122.043749][ T10] hub 6-1:0.0: 1 port detected [ 122.414619][ T36] audit: type=1400 audit(1782174460.880:360): avc: denied { bind } for pid=1846 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.435851][ T36] audit: type=1400 audit(1782174460.900:361): avc: denied { name_bind } for pid=1846 comm="syz.1.420" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 122.461569][ T36] audit: type=1400 audit(1782174460.900:362): avc: denied { node_bind } for pid=1846 comm="syz.1.420" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 122.520536][ T1853] af_packet: tpacket_rcv: packet too big, clamped from 75 to 4294967272. macoff=96 [ 122.592361][ T1861] kvm: MWAIT instruction emulated as NOP! [ 122.765381][ T1869] cgroup2: Unknown parameter 'memor~xrÐ÷[—' [ 122.774511][ T10] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 122.774729][ T354] usb 6-1: USB disconnect, device number 7 [ 122.808980][ T36] audit: type=1400 audit(1782174461.270:363): avc: denied { read } for pid=1870 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.878042][ T36] audit: type=1400 audit(1782174461.340:364): avc: denied { create } for pid=1873 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 122.980528][ T364] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 123.131623][ T364] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 123.140573][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 123.142656][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.160566][ T353] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 123.161016][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.178171][ T364] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 123.192489][ T364] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 123.201602][ T364] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.209682][ T364] usb 4-1: Manufacturer: syz [ 123.214889][ T364] usb 4-1: config 0 descriptor?? [ 123.310492][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 123.318687][ T353] usb 2-1: Using ep0 maxpacket: 32 [ 123.325096][ T353] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.335278][ T10] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 123.344416][ T353] usb 2-1: config 0 has no interfaces? [ 123.349923][ T353] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.359148][ T10] usb 1-1: config 0 has no interface number 0 [ 123.365288][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 123.375354][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.383396][ T10] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 123.394175][ T353] usb 2-1: config 0 descriptor?? [ 123.400265][ T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 123.411545][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.421114][ T10] usb 1-1: Product: syz [ 123.425882][ T10] usb 1-1: Manufacturer: syz [ 123.430526][ T10] usb 1-1: SerialNumber: syz [ 123.436505][ T10] usb 1-1: config 0 descriptor?? [ 123.442171][ T1879] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.449443][ T1879] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.600768][ T353] usb 2-1: USB disconnect, device number 57 [ 123.623342][ T364] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 123.630689][ T364] appleir 0003:05AC:8243.0023: No inputs registered, leaving [ 123.640055][ T364] appleir 0003:05AC:8243.0023: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 123.651273][ T352] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 123.659621][ T1879] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.667140][ T1879] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.801632][ T352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.812656][ T352] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.821736][ T352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.830616][ T352] usb 6-1: config 0 descriptor?? [ 123.877652][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 124.039847][ T352] usbhid 6-1:0.0: can't add hid device: -71 [ 124.046194][ T352] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 124.054851][ T352] usb 6-1: USB disconnect, device number 8 [ 124.163908][ T1890] overlay: ./file0 is not a directory [ 124.221167][ T1891] overlay: ./file0 is not a directory [ 124.226701][ T36] audit: type=1400 audit(1782174462.690:365): avc: denied { mounton } for pid=1889 comm="syz.1.432" path="/102/file0" dev="tmpfs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 124.265937][ T1893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.433'. [ 124.275625][ T36] audit: type=1400 audit(1782174462.740:366): avc: denied { create } for pid=1892 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 124.460504][ T352] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 124.620505][ T352] usb 6-1: Using ep0 maxpacket: 16 [ 124.626888][ T352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.638115][ T352] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 124.647392][ T352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.660768][ T352] usb 6-1: config 0 descriptor?? [ 124.970508][ T353] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 125.110521][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 125.120773][ T10] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 125.131795][ T353] usb 4-1: device descriptor read/64, error -32 [ 125.138170][ T10] asix 1-1:0.34: probe with driver asix failed with error -71 [ 125.148582][ T10] usb 1-1: USB disconnect, device number 59 [ 125.274679][ T352] usbhid 6-1:0.0: can't add hid device: -71 [ 125.280744][ T352] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 125.289389][ T352] usb 6-1: USB disconnect, device number 9 [ 125.380513][ T353] usb 4-1: device descriptor read/64, error -32 [ 125.540536][ T364] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 125.620519][ T353] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 125.693061][ T364] usb 2-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 125.702217][ T364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.710217][ T364] usb 2-1: Product: syz [ 125.714443][ T364] usb 2-1: Manufacturer: syz [ 125.719039][ T364] usb 2-1: SerialNumber: syz [ 125.750496][ T353] usb 4-1: device descriptor read/64, error -32 [ 125.912198][ T1916] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 125.920633][ T352] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 125.921168][ T1916] overlayfs: missing 'lowerdir' [ 126.003954][ T1919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1919 comm=syz.5.443 [ 126.030980][ T36] audit: type=1400 audit(1782174464.500:367): avc: denied { create } for pid=1922 comm="syz.5.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 126.051098][ T36] audit: type=1400 audit(1782174464.520:368): avc: denied { sys_admin } for pid=1922 comm="syz.5.445" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 126.075929][ T1910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.085094][ T1910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.094886][ T352] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 126.102513][ T352] usb 1-1: can't read configurations, error -71 [ 126.137896][ T364] usb 2-1: MIDIStreaming interface descriptor not found [ 126.165948][ T364] usb 2-1: USB disconnect, device number 58 [ 126.290517][ T353] usb 4-1: device descriptor read/64, error -71 [ 126.460616][ T1210] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 126.540506][ T353] usb 4-1: reset high-speed USB device number 49 using dummy_hcd [ 126.561180][ T353] usb 4-1: device firmware changed [ 126.566666][ T396] usb 4-1: USB disconnect, device number 49 [ 126.609300][ T1929] netlink: 72 bytes leftover after parsing attributes in process `syz.0.447'. [ 126.610553][ T1210] usb 6-1: Using ep0 maxpacket: 16 [ 126.624593][ T1210] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 126.632880][ T1210] usb 6-1: config 0 has no interface number 0 [ 126.639023][ T1210] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 126.655497][ T1210] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 126.671820][ T1210] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 126.681027][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.689118][ T1210] usb 6-1: Product: syz [ 126.694111][ T1210] usb 6-1: Manufacturer: syz [ 126.698805][ T1210] usb 6-1: SerialNumber: syz [ 126.705938][ T1210] usb 6-1: config 0 descriptor?? [ 126.711350][ T1927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 126.718529][ T1927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 126.720556][ T396] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 126.881624][ T396] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 126.889797][ T396] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 126.900020][ T396] usb 4-1: config 0 has no interface number 0 [ 126.907498][ T396] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 126.916583][ T396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.924619][ T353] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 126.931070][ T1927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 126.932268][ T396] usb 4-1: Product: syz [ 126.940016][ T1927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 126.950509][ T396] usb 4-1: Manufacturer: syz [ 126.960481][ T396] usb 4-1: SerialNumber: syz [ 126.970692][ T396] usb 4-1: config 0 descriptor?? [ 127.100514][ T353] usb 2-1: Using ep0 maxpacket: 8 [ 127.106780][ T353] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 127.115099][ T353] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 127.123221][ T353] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 127.132121][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 127.143016][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 127.150542][ T352] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 127.156900][ T353] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 127.160728][ T1210] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 127.169541][ T353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.179952][ T1210] asix 6-1:0.34: probe with driver asix failed with error -61 [ 127.189388][ T353] usb 2-1: Product: syz [ 127.200629][ T353] usb 2-1: Manufacturer: syz [ 127.205274][ T353] usb 2-1: SerialNumber: syz [ 127.210529][ T353] usb 2-1: config 0 descriptor?? [ 127.216254][ T353] hub 2-1:0.0: bad descriptor, ignoring hub [ 127.222221][ T353] hub 2-1:0.0: probe with driver hub failed with error -5 [ 127.230064][ T353] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 127.341587][ T352] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 127.352672][ T352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.363633][ T352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.373412][ T352] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.387196][ T352] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.389784][ T396] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 127.396281][ T352] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.403330][ T396] usb 4-1: No valid video chain found. [ 127.410989][ T352] usb 1-1: Manufacturer: syz [ 127.426121][ T352] usb 1-1: config 0 descriptor?? [ 127.429483][ T396] usb 2-1: USB disconnect, device number 59 [ 127.630517][ T396] usb 4-1: USB disconnect, device number 50 [ 127.840489][ T352] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 127.847816][ T352] appleir 0003:05AC:8243.0024: No inputs registered, leaving [ 127.856331][ T352] appleir 0003:05AC:8243.0024: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 128.835584][ T1958] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 128.844410][ T1958] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 129.088150][ T1971] can0: slcan on ttyS3. [ 129.141134][ T1970] can0 (unregistered): slcan off ttyS3. [ 129.180793][ T352] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 129.189193][ T36] audit: type=1400 audit(1782174467.650:369): avc: denied { create } for pid=1983 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 129.350509][ T352] usb 4-1: Using ep0 maxpacket: 8 [ 129.356723][ T352] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.367401][ T352] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6 [ 129.378880][ T352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 255, changing to 11 [ 129.390011][ T352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 59391, setting to 1024 [ 129.402443][ T352] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 129.411534][ T352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.419557][ T352] usb 4-1: Product: syz [ 129.424402][ T352] usb 4-1: Manufacturer: syz [ 129.428995][ T352] usb 4-1: SerialNumber: syz [ 129.434275][ T352] usb 4-1: config 0 descriptor?? [ 129.439561][ T1966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.460519][ T396] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 129.610509][ T396] usb 2-1: Using ep0 maxpacket: 8 [ 129.616659][ T396] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 129.626984][ T396] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 129.639965][ T396] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 129.649168][ T396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.668649][ T396] usb 2-1: config 0 descriptor?? [ 129.800216][ T511] usb 6-1: USB disconnect, device number 10 [ 129.880860][ T36] audit: type=1400 audit(1782174468.350:370): avc: denied { setopt } for pid=1989 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.901300][ T396] usb 2-1: string descriptor 0 read error: -71 [ 129.907864][ T396] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 129.916115][ T396] usb 2-1: USB disconnect, device number 60 [ 129.970516][ T353] usb 1-1: reset high-speed USB device number 61 using dummy_hcd [ 130.100518][ T511] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 130.108258][ T353] usb 1-1: device descriptor read/64, error -71 [ 130.260506][ T511] usb 6-1: Using ep0 maxpacket: 32 [ 130.266855][ T511] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 130.275059][ T511] usb 6-1: config 0 has no interface number 0 [ 130.282554][ T511] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 130.291655][ T511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.299655][ T511] usb 6-1: Product: syz [ 130.303938][ T511] usb 6-1: Manufacturer: syz [ 130.308540][ T511] usb 6-1: SerialNumber: syz [ 130.313991][ T511] usb 6-1: config 0 descriptor?? [ 130.319759][ T511] smsc95xx v2.0.0 [ 130.370499][ T353] usb 1-1: device descriptor read/64, error -71 [ 130.610506][ T353] usb 1-1: reset high-speed USB device number 61 using dummy_hcd [ 130.700509][ T396] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 130.740511][ T353] usb 1-1: device descriptor read/64, error -71 [ 130.830500][ T396] usb 2-1: device descriptor read/64, error -71 [ 130.980509][ T353] usb 1-1: device descriptor read/64, error -71 [ 131.070500][ T396] usb 2-1: device descriptor read/64, error -71 [ 131.220503][ T353] usb 1-1: reset high-speed USB device number 61 using dummy_hcd [ 131.241549][ T353] usb 1-1: device descriptor read/8, error -71 [ 131.310513][ T396] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 131.322359][ T2009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.331027][ T2009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.339471][ T511] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 131.371476][ T353] usb 1-1: device descriptor read/8, error -71 [ 131.440545][ T396] usb 2-1: device descriptor read/64, error -71 [ 131.540058][ T511] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 131.551228][ T511] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 131.560790][ T511] usb 6-1: USB disconnect, device number 11 [ 131.610504][ T353] usb 1-1: reset high-speed USB device number 61 using dummy_hcd [ 131.631571][ T353] usb 1-1: device descriptor read/8, error -71 [ 131.680539][ T396] usb 2-1: device descriptor read/64, error -71 [ 131.761571][ T353] usb 1-1: device descriptor read/8, error -71 [ 131.790574][ T396] usb usb2-port1: attempt power cycle [ 131.802721][ T511] usb 4-1: USB disconnect, device number 51 [ 131.870698][ T1210] usb 1-1: USB disconnect, device number 61 [ 132.010499][ T1210] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 132.130505][ T396] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 132.140516][ T511] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 132.150500][ T1210] usb 1-1: device descriptor read/64, error -71 [ 132.151703][ T396] usb 2-1: device descriptor read/8, error -71 [ 132.270524][ T511] usb 4-1: device descriptor read/64, error -71 [ 132.291461][ T396] usb 2-1: device descriptor read/8, error -71 [ 132.300505][ T354] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 132.390500][ T1210] usb 1-1: device descriptor read/64, error -71 [ 132.430502][ T354] usb 6-1: device descriptor read/64, error -71 [ 132.510500][ T511] usb 4-1: device descriptor read/64, error -71 [ 132.530499][ T396] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 132.551399][ T396] usb 2-1: device descriptor read/8, error -71 [ 132.630499][ T1210] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 132.670500][ T354] usb 6-1: device descriptor read/64, error -71 [ 132.681693][ T396] usb 2-1: device descriptor read/8, error -71 [ 132.750518][ T511] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 132.790573][ T396] usb usb2-port1: unable to enumerate USB device [ 132.880508][ T511] usb 4-1: device descriptor read/64, error -71 [ 132.920508][ T354] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 132.980604][ T1210] usb usb1-port1: attempt power cycle [ 133.050518][ T354] usb 6-1: device descriptor read/64, error -71 [ 133.120512][ T511] usb 4-1: device descriptor read/64, error -71 [ 133.230610][ T511] usb usb4-port1: attempt power cycle [ 133.290500][ T354] usb 6-1: device descriptor read/64, error -71 [ 133.320497][ T1210] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 133.341810][ T1210] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 133.352828][ T1210] usb 1-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 133.366797][ T1210] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.375859][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.383888][ T1210] usb 1-1: SerialNumber: syz [ 133.400579][ T354] usb usb6-port1: attempt power cycle [ 133.570493][ T511] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 133.591288][ T1210] rndis_host 1-1:253.0: skipping garbage [ 133.592460][ T511] usb 4-1: device descriptor read/8, error -71 [ 133.603760][ T1210] usb 1-1: USB disconnect, device number 64 [ 133.731535][ T511] usb 4-1: device descriptor read/8, error -71 [ 133.740512][ T354] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 133.761465][ T354] usb 6-1: device descriptor read/8, error -71 [ 133.860510][ T1298] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 133.891564][ T354] usb 6-1: device descriptor read/8, error -71 [ 133.970536][ T511] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 133.991561][ T511] usb 4-1: device descriptor read/8, error -71 [ 134.011632][ T1298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.022595][ T1298] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 134.031665][ T1298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.040248][ T1298] usb 2-1: config 0 descriptor?? [ 134.121594][ T511] usb 4-1: device descriptor read/8, error -71 [ 134.130532][ T354] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 134.151576][ T354] usb 6-1: device descriptor read/8, error -71 [ 134.230552][ T511] usb usb4-port1: unable to enumerate USB device [ 134.247549][ T1298] usbhid 2-1:0.0: can't add hid device: -71 [ 134.253628][ T1298] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 134.262290][ T1298] usb 2-1: USB disconnect, device number 65 [ 134.281582][ T354] usb 6-1: device descriptor read/8, error -71 [ 134.350542][ T396] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 134.390580][ T354] usb usb6-port1: unable to enumerate USB device [ 134.501503][ T396] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 134.512367][ T396] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.523266][ T396] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.533045][ T396] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 134.546735][ T396] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 134.556013][ T396] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 134.564124][ T396] usb 1-1: Manufacturer: syz [ 134.569580][ T396] usb 1-1: config 0 descriptor?? [ 134.680509][ T511] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 134.834228][ T511] usb 2-1: Using ep0 maxpacket: 16 [ 134.841511][ T511] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.855056][ T511] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 134.864304][ T511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.876312][ T511] usb 2-1: config 0 descriptor?? [ 134.976677][ T396] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 134.983933][ T396] appleir 0003:05AC:8243.0025: No inputs registered, leaving [ 134.992965][ T396] appleir 0003:05AC:8243.0025: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 135.288792][ T511] kye 0003:0458:5016.0026: control desc unexpectedly large [ 135.296214][ T511] kye 0003:0458:5016.0026: control desc unexpectedly large [ 135.304755][ T511] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0026/input/input18 [ 135.319217][ T511] kye 0003:0458:5016.0026: input,hiddev97,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 135.334192][ T353] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 135.470502][ T396] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 135.491482][ T353] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 135.502829][ T353] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.515719][ T353] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.522344][ T353] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 135.531396][ T353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.540035][ T353] usb 4-1: config 0 descriptor?? [ 135.545371][ T2031] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.620479][ T396] usb 6-1: Using ep0 maxpacket: 16 [ 135.626980][ T396] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 135.635145][ T396] usb 6-1: config 0 has no interface number 0 [ 135.641339][ T396] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 135.651427][ T396] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 135.663339][ T396] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 135.672456][ T396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.680498][ T396] usb 6-1: Product: syz [ 135.684677][ T396] usb 6-1: Manufacturer: syz [ 135.689277][ T396] usb 6-1: SerialNumber: syz [ 135.694682][ T396] usb 6-1: config 0 descriptor?? [ 135.699933][ T2029] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 135.707246][ T2029] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 135.915593][ T2029] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 135.923017][ T2029] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 136.130752][ T396] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 136.141201][ T396] asix 6-1:0.34: probe with driver asix failed with error -61 [ 136.181646][ T396] usb 2-1: USB disconnect, device number 66 [ 136.223577][ T353] usb 4-1: string descriptor 0 read error: -71 [ 136.230337][ T353] uclogic 0003:5543:3031.0027: failed retrieving string descriptor #200: -71 [ 136.239313][ T353] uclogic 0003:5543:3031.0027: failed retrieving pen parameters: -71 [ 136.247416][ T353] uclogic 0003:5543:3031.0027: failed probing pen v2 parameters: -71 [ 136.255593][ T353] uclogic 0003:5543:3031.0027: failed probing parameters: -71 [ 136.263142][ T353] uclogic 0003:5543:3031.0027: probe with driver uclogic failed with error -71 [ 136.273320][ T353] usb 4-1: USB disconnect, device number 56 [ 136.748325][ T36] audit: type=1400 audit(1782174475.210:371): avc: denied { map } for pid=2051 comm="syz.3.477" path="socket:[16864]" dev="sockfs" ino=16864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.772188][ T36] audit: type=1400 audit(1782174475.210:372): avc: denied { read } for pid=2051 comm="syz.3.477" path="socket:[16864]" dev="sockfs" ino=16864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 136.802660][ T36] audit: type=1400 audit(1782174475.270:373): avc: denied { cmd } for pid=2054 comm="syz.3.478" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 137.010512][ T1298] usb 1-1: reset high-speed USB device number 65 using dummy_hcd [ 137.160906][ T1298] usb 1-1: device firmware changed [ 137.166317][ T352] usb 1-1: USB disconnect, device number 65 [ 137.200526][ T353] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 137.300610][ T352] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 137.352572][ T353] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 137.363451][ T353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.374394][ T353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.384187][ T353] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 137.399502][ T353] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 137.408596][ T353] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 137.416692][ T353] usb 4-1: Manufacturer: syz [ 137.424313][ T353] usb 4-1: config 0 descriptor?? [ 137.461579][ T352] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.468304][ T352] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 137.477437][ T352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.486241][ T352] usb 1-1: config 0 descriptor?? [ 137.730499][ T396] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 137.831326][ T353] appleir 0003:05AC:8243.0028: unknown main item tag 0x0 [ 137.839220][ T353] appleir 0003:05AC:8243.0028: No inputs registered, leaving [ 137.848700][ T353] appleir 0003:05AC:8243.0028: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 137.880493][ T396] usb 2-1: Using ep0 maxpacket: 8 [ 137.888180][ T396] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 137.897427][ T396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.905644][ T396] usb 2-1: Product: syz [ 137.909843][ T396] usb 2-1: Manufacturer: syz [ 137.914602][ T396] usb 2-1: SerialNumber: syz [ 137.922268][ T2045] mmap: syz.0.475 (2045): VmData 29073408 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 137.940672][ T352] wacom 0003:056A:00D0.0029: unknown main item tag 0x2 [ 137.947656][ T352] wacom 0003:056A:00D0.0029: unknown main item tag 0x6 [ 137.954617][ T352] wacom 0003:056A:00D0.0029: ignoring exceeding usage max [ 137.963727][ T352] wacom 0003:056A:00D0.0029: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 137.974070][ T352] wacom 0003:056A:00D0.0029: hidraw1: USB HID v0.81 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 137.985911][ T352] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.0029/input/input19 [ 138.123532][ T396] usb 2-1: Invalid firmware size=18. [ 138.131538][ T396] usb 2-1: USB disconnect, device number 67 [ 138.144296][ T353] usb 1-1: USB disconnect, device number 66 [ 138.770686][ T10] usb 6-1: USB disconnect, device number 16 [ 138.789452][ T2088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.486'. [ 138.840534][ T36] audit: type=1400 audit(1782174477.300:374): avc: denied { mount } for pid=2096 comm="syz.5.490" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 138.920488][ T353] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 139.050487][ T353] usb 1-1: device descriptor read/64, error -71 [ 139.270514][ T1298] usb 4-1: reset high-speed USB device number 57 using dummy_hcd [ 139.290627][ T353] usb 1-1: device descriptor read/64, error -71 [ 139.400503][ T1298] usb 4-1: device descriptor read/64, error -32 [ 139.530520][ T353] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 139.640502][ T1298] usb 4-1: device descriptor read/64, error -32 [ 139.660495][ T353] usb 1-1: device descriptor read/64, error -71 [ 139.880500][ T1298] usb 4-1: reset high-speed USB device number 57 using dummy_hcd [ 139.880514][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 139.900500][ T353] usb 1-1: device descriptor read/64, error -71 [ 139.914235][ T36] audit: type=1400 audit(1782174478.380:375): avc: denied { ioctl } for pid=2123 comm="syz.5.499" path="socket:[17277]" dev="sockfs" ino=17277 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.020518][ T1298] usb 4-1: device descriptor read/64, error -32 [ 140.020685][ T353] usb usb1-port1: attempt power cycle [ 140.032254][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 140.038526][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.050050][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.061032][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 140.070822][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.079858][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.088556][ T10] usb 2-1: config 0 descriptor?? [ 140.095339][ T10] hub 2-1:0.0: USB hub found [ 140.165887][ T2126] netlink: 'syz.3.500': attribute type 13 has an invalid length. [ 140.332552][ T10] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 140.342821][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 140.348796][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 140.370826][ T353] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 140.378555][ T10] usb 2-1: USB disconnect, device number 68 [ 140.411578][ T353] usb 1-1: device descriptor read/8, error -71 [ 140.534380][ T36] audit: type=1400 audit(1782174479.000:376): avc: denied { create } for pid=2134 comm="syz.5.502" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.556292][ T36] audit: type=1400 audit(1782174479.030:377): avc: denied { write } for pid=2134 comm="syz.5.502" name="file2" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.578793][ T36] audit: type=1400 audit(1782174479.030:378): avc: denied { open } for pid=2134 comm="syz.5.502" path="/46/file2" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.601471][ T36] audit: type=1400 audit(1782174479.030:379): avc: denied { ioctl } for pid=2134 comm="syz.5.502" path="/46/file2" dev="tmpfs" ino=281 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.625655][ T353] usb 1-1: device descriptor read/8, error -71 [ 140.848554][ T2138] IPv4: Oversized IP packet from 127.202.26.0 [ 140.870505][ T353] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 140.892730][ T2138] kvm: pic: non byte read [ 140.897180][ T2138] kvm: pic: non byte read [ 140.902301][ T353] usb 1-1: device descriptor read/8, error -71 [ 140.910013][ T2138] kvm: pic: non byte read [ 140.912164][ T352] usb 4-1: USB disconnect, device number 57 [ 141.043542][ T353] usb 1-1: device descriptor read/8, error -71 [ 141.061126][ T36] audit: type=1400 audit(1782174479.530:380): avc: denied { unlink } for pid=1600 comm="syz-executor" name="file2" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.150554][ T353] usb usb1-port1: unable to enumerate USB device [ 141.250500][ T1298] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 141.350506][ T352] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 141.400491][ T1298] usb 2-1: Using ep0 maxpacket: 32 [ 141.406765][ T1298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.417717][ T1298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.427614][ T1298] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.436800][ T1298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.445479][ T1298] usb 2-1: config 0 descriptor?? [ 141.451394][ T1298] hub 2-1:0.0: USB hub found [ 141.490499][ T352] usb 4-1: device descriptor read/64, error -71 [ 141.657598][ T1298] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 141.693417][ T2154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 141.740535][ T352] usb 4-1: device descriptor read/64, error -71 [ 141.980720][ T352] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 142.062538][ T1298] hid-generic 0003:046D:C31C.002A: unknown main item tag 0x0 [ 142.071537][ T1298] hid-generic 0003:046D:C31C.002A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 142.090501][ T353] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 142.110517][ T352] usb 4-1: device descriptor read/64, error -71 [ 142.147583][ T2161] overlay: ./file0 is not a directory [ 142.241497][ T353] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 142.252464][ T353] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.265404][ T353] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.272028][ T353] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 142.281104][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.289650][ T353] usb 1-1: config 0 descriptor?? [ 142.294927][ T2156] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.360506][ T352] usb 4-1: device descriptor read/64, error -71 [ 142.470698][ T352] usb usb4-port1: attempt power cycle [ 142.504031][ T2156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.512603][ T2156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.724289][ T353] usbhid 1-1:0.0: can't add hid device: -71 [ 142.730334][ T353] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 142.739031][ T353] usb 1-1: USB disconnect, device number 71 [ 142.810606][ T352] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 142.831589][ T352] usb 4-1: device descriptor read/8, error -71 [ 142.961467][ T1210] usb 2-1: USB disconnect, device number 69 [ 142.968000][ T352] usb 4-1: device descriptor read/8, error -71 [ 143.100524][ T1210] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 143.210517][ T352] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 143.230557][ T1210] usb 2-1: device descriptor read/64, error -71 [ 143.241011][ T352] usb 4-1: device descriptor read/8, error -71 [ 143.371605][ T352] usb 4-1: device descriptor read/8, error -71 [ 143.470518][ T1210] usb 2-1: device descriptor read/64, error -71 [ 143.480508][ T353] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 143.481053][ T352] usb usb4-port1: unable to enumerate USB device [ 143.631536][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.642481][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.652318][ T353] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 143.661430][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.670334][ T353] usb 1-1: config 0 descriptor?? [ 143.710492][ T1210] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 143.840489][ T1210] usb 2-1: device descriptor read/64, error -71 [ 144.052741][ T36] audit: type=1400 audit(1782174482.520:381): avc: denied { write } for pid=2193 comm="syz.1.524" name="cgroup.subtree_control" dev="cgroup2" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.077673][ T2194] overlay: Unknown parameter 'aaaaaaaaaaaaaaaaaaa./file0' [ 144.085777][ T36] audit: type=1400 audit(1782174482.550:382): avc: denied { setattr } for pid=2193 comm="syz.1.524" name="cgroup.subtree_control" dev="cgroup2" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.197399][ T945] tipc: Subscription rejected, illegal request [ 144.203651][ T2208] usb usb9: usbfs: process 2208 (syz.3.528) did not claim interface 1 before use [ 144.228878][ T2210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.529'. [ 144.277662][ T36] audit: type=1400 audit(1782174482.740:383): avc: denied { mount } for pid=2175 comm="syz.0.518" name="/" dev="ramfs" ino=16177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 144.301290][ T353] usb 1-1: string descriptor 0 read error: -71 [ 144.308559][ T353] uclogic 0003:256C:006D.002B: failed retrieving string descriptor #200: -71 [ 144.317551][ T2210] team_slave_1: entered promiscuous mode [ 144.326591][ T353] uclogic 0003:256C:006D.002B: failed retrieving pen parameters: -71 [ 144.333642][ T2210] team_slave_1: entered allmulticast mode [ 144.341840][ T353] uclogic 0003:256C:006D.002B: failed probing pen v2 parameters: -71 [ 144.350026][ T353] uclogic 0003:256C:006D.002B: failed probing parameters: -71 [ 144.360208][ T353] uclogic 0003:256C:006D.002B: probe with driver uclogic failed with error -71 [ 144.381726][ T353] usb 1-1: USB disconnect, device number 72 [ 144.567119][ T945] tipc: Subscription rejected, illegal request [ 144.680578][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 144.690519][ T353] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 144.830484][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 144.836558][ T10] usb 4-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 144.846830][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 160, changing to 7 [ 144.858946][ T353] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.870186][ T353] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.880402][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 144.889544][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.897648][ T10] usb 4-1: Product: syz [ 144.901861][ T10] usb 4-1: Manufacturer: syz [ 144.906529][ T353] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 144.915601][ T10] usb 4-1: SerialNumber: syz [ 144.920557][ T353] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 144.929602][ T353] usb 1-1: Product: syz [ 144.933852][ T353] usb 1-1: Manufacturer: syz [ 144.940907][ T353] hub 1-1:4.0: USB hub found [ 145.010582][ T1210] usb usb2-port1: attempt power cycle [ 145.140798][ T2218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.142174][ T10] usb 4-1: unit 4 not found! [ 145.150197][ T2218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.163360][ T2218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.171863][ T2218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.179277][ T10] usb 4-1: USB disconnect, device number 62 [ 145.180933][ T2218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.194820][ T2218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.203583][ T2218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.212524][ T2218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.222755][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.243128][ T353] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 145.270782][ T353] usb 1-1: USB disconnect, device number 73 [ 145.350502][ T1210] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 145.370823][ T1210] usb 2-1: Using ep0 maxpacket: 8 [ 145.377224][ T1210] usb 2-1: unable to get BOS descriptor or descriptor too short [ 145.385598][ T1210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.395733][ T1210] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 145.409915][ T1210] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 145.418973][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.426999][ T1210] usb 2-1: Product: syz [ 145.431197][ T1210] usb 2-1: Manufacturer: syz [ 145.435783][ T1210] usb 2-1: SerialNumber: syz [ 145.441202][ T1210] usb 2-1: config 0 descriptor?? [ 145.449585][ T1210] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 145.464473][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.990495][ T353] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 146.141550][ T353] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 146.154145][ T353] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.164335][ T353] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.177303][ T353] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 146.186575][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.198816][ T353] usb 1-1: config 0 descriptor?? [ 146.208358][ T353] usb-storage 1-1:0.0: USB Mass Storage device detected [ 146.222688][ T353] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 146.249619][ T945] tipc: Subscription rejected, illegal request [ 146.389221][ T2286] netlink: 'syz.3.548': attribute type 9 has an invalid length. [ 146.396954][ T2286] netlink: 'syz.3.548': attribute type 2 has an invalid length. [ 146.409123][ T2287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.417714][ T2287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.427012][ T1210] usb 1-1: USB disconnect, device number 74 [ 146.490624][ T2291] ±ÿ]×0¢ÊÞª: renamed from lo (while UP) [ 146.508499][ T36] audit: type=1400 audit(1782174484.970:384): avc: denied { bind } for pid=2293 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.529408][ T2294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.551'. [ 146.540679][ T2294] bridge0: entered allmulticast mode [ 146.618817][ T946] tipc: Subscription rejected, illegal request [ 146.754389][ T2325] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 146.980392][ T2333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 147.011259][ T2331] usb usb9: usbfs: process 2331 (syz.0.564) did not claim interface 1 before use [ 147.101399][ T36] audit: type=1400 audit(1782174485.570:385): avc: denied { shutdown } for pid=2337 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.121773][ T36] audit: type=1400 audit(1782174485.590:386): avc: denied { setopt } for pid=2337 comm="syz.0.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.145416][ T36] audit: type=1400 audit(1782174485.610:387): avc: denied { read } for pid=2337 comm="syz.0.566" path="socket:[16378]" dev="sockfs" ino=16378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.290491][ T1210] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 147.450484][ T1210] usb 4-1: Using ep0 maxpacket: 8 [ 147.456883][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 147.470296][ T1210] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 147.479459][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.488500][ T1210] usb 4-1: config 0 descriptor?? [ 147.510503][ T36] audit: type=1400 audit(1782174485.970:388): avc: denied { mounton } for pid=2346 comm="syz.0.569" path="/file0" dev="ramfs" ino=17662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 147.515087][ T2347] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 147.640694][ T511] usb 2-1: USB disconnect, device number 72 [ 147.705796][ T2339] tipc: Enabling of bearer rejected, failed to enable media [ 147.788493][ T36] audit: type=1400 audit(1782174486.250:389): avc: denied { write } for pid=2355 comm="syz.1.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.800723][ T353] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 147.808373][ T36] audit: type=1400 audit(1782174486.250:390): avc: denied { map } for pid=2355 comm="syz.1.573" path="socket:[18438]" dev="sockfs" ino=18438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.936165][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 147.945356][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0xd [ 147.952895][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 147.960278][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 147.960544][ T353] usb 1-1: Using ep0 maxpacket: 16 [ 147.968236][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 147.977627][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.980043][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 147.998090][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.003910][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.005574][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.022596][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.027374][ T353] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.029827][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.049945][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.059214][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.061285][ T353] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 148.069067][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.076273][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.083579][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.097583][ T353] usb 1-1: config 0 descriptor?? [ 148.105316][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.112626][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.119854][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.127122][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.134367][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.149984][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.157327][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.164591][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.171900][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.179125][ T1210] greenasia 0003:0E8F:0012.002C: unknown main item tag 0x0 [ 148.187270][ T1210] greenasia 0003:0E8F:0012.002C: hidraw0: USB HID v0.09 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 148.198744][ T1210] greenasia 0003:0E8F:0012.002C: no inputs found [ 148.214085][ T1210] usb 4-1: USB disconnect, device number 63 [ 148.228469][ T2389] fido_id[2389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 148.509904][ T353] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002D/input/input24 [ 148.522980][ T353] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 148.541042][ T1210] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 148.581747][ T2395] usb usb9: usbfs: process 2395 (syz.1.583) did not claim interface 1 before use [ 148.701838][ T1210] usb 4-1: unable to get BOS descriptor or descriptor too short [ 148.710290][ T1210] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 148.717476][ T10] usb 1-1: USB disconnect, device number 75 [ 148.723805][ T1210] usb 4-1: string descriptor 0 read error: -22 [ 148.733450][ T1210] usb 4-1: New USB device found, idVendor=0499, idProduct=5003, bcdDevice= 0.40 [ 148.742531][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.752045][ T2391] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.762999][ T1210] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 148.769686][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.840517][ T353] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 148.960135][ T2391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.968693][ T2391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.976788][ T10] usb 4-1: USB disconnect, device number 64 [ 148.990605][ T353] usb 2-1: Using ep0 maxpacket: 16 [ 148.996838][ T353] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.007784][ T353] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.017596][ T353] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.024360][ T353] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 149.033444][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.042222][ T353] usb 2-1: config 0 descriptor?? [ 149.252749][ T2397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.262684][ T2397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.479792][ T353] hid (null): bogus close delimiter [ 149.485180][ T353] hid (null): global environment stack underflow [ 149.491701][ T353] hid (null): invalid report_count -2110710 [ 149.498090][ T353] hid (null): unknown global tag 0xe [ 149.510490][ T1210] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 149.534059][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 149.534076][ T36] audit: type=1400 audit(1782174488.000:395): avc: denied { read } for pid=2408 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.673778][ T1210] usb 1-1: config 1 has an invalid interface number: 225 but max is 2 [ 149.682077][ T1210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.686835][ T353] usb 2-1: USB disconnect, device number 73 [ 149.692896][ T1210] usb 1-1: config 1 has no interface number 2 [ 149.704485][ T1210] usb 1-1: config 1 interface 1 has no altsetting 0 [ 149.713374][ T1210] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 149.722605][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.730698][ T1210] usb 1-1: Product: syz [ 149.734863][ T1210] usb 1-1: Manufacturer: syz [ 149.739439][ T1210] usb 1-1: SerialNumber: syz [ 149.900489][ T10] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 149.948962][ T1210] usb 1-1: selecting invalid altsetting 0 [ 149.957519][ T1210] usb 1-1: USB disconnect, device number 76 [ 149.967967][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.061493][ T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 150.069711][ T10] usb 4-1: config 0 has no interface number 0 [ 150.075860][ T10] usb 4-1: config 0 interface 41 has no altsetting 0 [ 150.083995][ T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 150.093074][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.101213][ T10] usb 4-1: Product: syz [ 150.105390][ T10] usb 4-1: Manufacturer: syz [ 150.109982][ T10] usb 4-1: SerialNumber: syz [ 150.115313][ T10] usb 4-1: config 0 descriptor?? [ 150.213268][ T2419] usb usb9: usbfs: process 2419 (syz.1.593) did not claim interface 0 before use [ 150.470489][ T1298] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 150.621981][ T1298] usb 2-1: unable to get BOS descriptor or descriptor too short [ 150.630601][ T1298] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 150.641978][ T1298] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 150.651058][ T1298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.659061][ T1298] usb 2-1: Product: syz [ 150.663262][ T1298] usb 2-1: Manufacturer: syz [ 150.667871][ T1298] usb 2-1: SerialNumber: syz [ 150.673517][ T2421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.712378][ T2431] netlink: 20 bytes leftover after parsing attributes in process `syz.5.598'. [ 150.722664][ T10] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 150.810494][ T511] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 150.894402][ T36] audit: type=1400 audit(1782174489.360:396): avc: denied { wake_alarm } for pid=2420 comm="syz.1.594" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.894771][ T2432] fuse: Unknown parameter '' [ 150.915517][ T36] audit: type=1400 audit(1782174489.360:397): avc: denied { mounton } for pid=2420 comm="syz.1.594" path="/142/file0" dev="tmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.922012][ T2436] fuse: Unknown parameter '' [ 150.961315][ T511] usb 1-1: not running at top speed; connect to a high speed hub [ 150.969931][ T511] usb 1-1: config 3 has an invalid interface number: 54 but max is 0 [ 150.978075][ T511] usb 1-1: config 3 has no interface number 0 [ 150.984253][ T511] usb 1-1: config 3 interface 54 has no altsetting 0 [ 150.992507][ T511] usb 1-1: New USB device found, idVendor=0499, idProduct=103c, bcdDevice=22.a3 [ 151.001640][ T511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.009651][ T511] usb 1-1: Product: syz [ 151.013856][ T511] usb 1-1: Manufacturer: syz [ 151.018468][ T511] usb 1-1: SerialNumber: syz [ 151.116156][ T1298] usb 2-1: MIDIStreaming interface descriptor not found [ 151.126138][ T1298] usb 2-1: USB disconnect, device number 74 [ 151.140365][ T344] udevd[344]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.230009][ T511] snd-usb-audio 1-1:3.54: probe with driver snd-usb-audio failed with error -2 [ 151.239960][ T511] usb 1-1: USB disconnect, device number 77 [ 151.252783][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.54/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.282823][ T2439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.599'. [ 151.312817][ T36] audit: type=1400 audit(1782174489.780:398): avc: denied { execute } for pid=2442 comm="syz.5.600" name="file0" dev="tmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.334988][ T36] audit: type=1400 audit(1782174489.780:399): avc: denied { execute_no_trans } for pid=2442 comm="syz.5.600" path="/98/file0" dev="tmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.479463][ T2454] usb usb9: usbfs: process 2454 (syz.1.603) did not claim interface 0 before use [ 151.499562][ T2456] Invalid argument reading file caps for ./file0 [ 151.750536][ T352] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 151.900490][ T352] usb 2-1: Using ep0 maxpacket: 32 [ 151.906826][ T352] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.917240][ T352] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.931744][ T352] usb 2-1: New USB device found, idVendor=04b1, idProduct=3042, bcdDevice= 0.40 [ 151.940884][ T352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.948919][ T352] usb 2-1: Product: syz [ 151.953277][ T352] usb 2-1: Manufacturer: syz [ 151.957890][ T352] usb 2-1: SerialNumber: syz [ 152.020493][ T1298] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 152.170750][ T1298] usb 1-1: Using ep0 maxpacket: 32 [ 152.176622][ T352] usb 2-1: MIDIStreaming interface descriptor not found [ 152.184024][ T1298] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 152.192561][ T1298] usb 1-1: config 0 has no interface number 0 [ 152.199100][ T1298] usb 1-1: config 0 interface 184 has no altsetting 0 [ 152.207151][ T352] usb 2-1: USB disconnect, device number 75 [ 152.215226][ T1298] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 152.222060][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.226036][ T1298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.248784][ T1298] usb 1-1: Product: syz [ 152.252998][ T1298] usb 1-1: Manufacturer: syz [ 152.257613][ T1298] usb 1-1: SerialNumber: syz [ 152.262862][ T1298] usb 1-1: config 0 descriptor?? [ 152.268630][ T1298] smsc75xx v1.0.0 [ 152.920531][ T352] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 153.071565][ T352] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 153.081762][ T352] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 153.086917][ T10] usb 4-1: USB disconnect, device number 65 [ 153.091997][ T352] usb 2-1: config 1 interface 0 has no altsetting 0 [ 153.106749][ T352] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 153.123019][ T352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.131265][ T352] usb 2-1: Product: syz [ 153.135508][ T352] usb 2-1: Manufacturer: syz [ 153.140133][ T352] usb 2-1: SerialNumber: syz [ 153.146231][ T2492] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.153712][ T2492] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.482801][ T2468] syz.0.607 uses obsolete (PF_INET,SOCK_PACKET) [ 153.483085][ T1298] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -32 [ 153.491110][ T2468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.500880][ T1298] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 153.512942][ T2468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.528017][ T1298] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 153.538910][ T1298] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 153.548584][ T1298] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 153.558877][ T1298] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 153.568513][ T1298] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 153.578732][ T1298] usb 1-1: USB disconnect, device number 78 [ 153.605927][ T2507] overlayfs: conflicting options: userxattr,redirect_dir=on [ 153.611258][ T2503] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.634634][ T352] rtl8150 2-1:1.0: couldn't reset the device [ 153.640810][ T352] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 153.651709][ T352] usb 2-1: USB disconnect, device number 76 [ 153.668742][ T36] audit: type=1400 audit(1782174492.130:400): avc: denied { create } for pid=2513 comm="syz.5.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 153.694206][ T2518] fuse: Bad value for 'fd' [ 153.724652][ T36] audit: type=1400 audit(1782174492.180:401): avc: denied { accept } for pid=2519 comm="syz.5.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 154.121855][ T2534] usb usb9: usbfs: process 2534 (syz.0.630) did not claim interface 1 before use [ 154.322755][ T36] audit: type=1400 audit(1782174492.790:402): avc: denied { setopt } for pid=2537 comm="syz.0.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.396153][ T36] audit: type=1400 audit(1782174492.860:403): avc: denied { bind } for pid=2541 comm="syz.5.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.400641][ T352] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 154.874940][ T1298] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 154.882596][ T352] usb 4-1: device descriptor read/64, error -71 [ 154.912289][ T2549] 9pnet_fd: p9_fd_create_unix (2549): problem connecting socket: ./cgroup/file0: -2 [ 154.962960][ T2555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2555 comm=syz.5.636 [ 155.030607][ T1298] usb 1-1: Using ep0 maxpacket: 32 [ 155.043346][ T1298] usb 1-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 155.060711][ T1298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.078904][ T1298] usb 1-1: Product: syz [ 155.078915][ T2564] netlink: 'syz.5.640': attribute type 46 has an invalid length. [ 155.078931][ T2564] netlink: 'syz.5.640': attribute type 28 has an invalid length. [ 155.083743][ T1298] usb 1-1: Manufacturer: syz [ 155.092367][ T2564] fuse: Bad value for 'fd' [ 155.108475][ T1298] usb 1-1: SerialNumber: syz [ 155.120733][ T352] usb 4-1: device descriptor read/64, error -71 [ 155.280499][ T31] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 155.370485][ T352] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 155.430508][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 155.438080][ T31] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 155.447302][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.455449][ T31] usb 2-1: Product: syz [ 155.459624][ T31] usb 2-1: Manufacturer: syz [ 155.464254][ T31] usb 2-1: SerialNumber: syz [ 155.510496][ T352] usb 4-1: device descriptor read/64, error -71 [ 155.750487][ T352] usb 4-1: device descriptor read/64, error -71 [ 155.860579][ T352] usb usb4-port1: attempt power cycle [ 156.200573][ T352] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 156.219304][ T31] usb 2-1: 1:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 156.227875][ T31] usb 2-1: found format II with max.bitrate = 1, frame size=2048 [ 156.236221][ T31] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 156.245920][ T31] usb 2-1: 1:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 156.254413][ T31] usb 2-1: found format II with max.bitrate = 1, frame size=2048 [ 156.262366][ T352] usb 4-1: device descriptor read/8, error -71 [ 156.268594][ T31] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 156.279013][ T31] usb 2-1: unit 6 not found! [ 156.287684][ T31] usb 2-1: USB disconnect, device number 77 [ 156.315237][ T669] udevd[669]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.346253][ T2579] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 156.357287][ T36] audit: type=1400 audit(1782174494.830:404): avc: denied { getopt } for pid=2578 comm="syz.1.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.391613][ T352] usb 4-1: device descriptor read/8, error -71 [ 156.410414][ T2585] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 156.418539][ T2585] netlink: 'syz.1.646': attribute type 2 has an invalid length. [ 156.443765][ T36] audit: type=1400 audit(1782174494.910:405): avc: denied { transfer } for pid=2590 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 156.445131][ C0] BUG: TASK stack guard page was hit at ffffc9000eaf7ff8 (stack is ffffc9000eaf8000..ffffc9000eb00000) [ 156.445236][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 156.445294][ C0] CPU: 0 UID: 0 PID: 2591 Comm: syz.1.647 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 156.445384][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.445417][ C0] RIP: 0010:kasan_check_range+0xf/0x2b0 [ 156.445492][ C0] Code: ff c3 cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 b0 01 48 85 f6 0f 84 c0 01 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 [ 156.445529][ C0] RSP: 0018:ffffc9000eaf8000 EFLAGS: 00010206 [ 156.445587][ C0] RAX: ffff88811dc68001 RBX: 0000000000000060 RCX: ffffffff8144d478 [ 156.445622][ C0] RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc9000eaf80a8 [ 156.445651][ C0] RBP: ffffc9000eaf8020 R08: 0000000000001300 R09: 0000000000000000 [ 156.445685][ C0] R10: ffffc9000eaf81f0 R11: ffffed1023bf98a7 R12: 0000000000000000 [ 156.445718][ C0] R13: ffff88811dfcc520 R14: 0000000000000000 R15: ffffc9000eaf80a8 [ 156.445742][ C0] FS: 00007fab2af7d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 156.445793][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.445821][ C0] CR2: ffffc9000eaf7ff8 CR3: 000000011e1ce000 CR4: 00000000003526b0 [ 156.445870][ C0] Call Trace: [ 156.445887][ C0] [ 156.445905][ C0] ? __asan_memset+0x27/0x50 [ 156.445951][ C0] __unwind_start+0x38/0x410 [ 156.446014][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 156.446068][ C0] arch_stack_walk+0xf2/0x170 [ 156.446120][ C0] stack_trace_save+0xaa/0x100 [ 156.446171][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 156.446231][ C0] kasan_save_stack+0x3e/0x60 [ 156.446301][ C0] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 156.446363][ C0] __kasan_record_aux_stack+0xb2/0xd0 [ 156.446406][ C0] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 156.446467][ C0] kasan_record_aux_stack_noalloc+0xf/0x20 [ 156.446511][ C0] __call_rcu_common+0xd7/0x720 [ 156.446564][ C0] ? sched_clock_noinstr+0xd/0x30 [ 156.446616][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 156.446684][ C0] ? remove_entity_load_avg+0x16f/0x200 [ 156.446771][ C0] ? call_rcu_hurry+0x30/0x30 [ 156.446828][ C0] ? task_dead_fair+0x120/0x1a0 [ 156.446873][ C0] ? __cfi_task_dead_fair+0x10/0x10 [ 156.446919][ C0] call_rcu+0x14/0x20 [ 156.446968][ C0] put_task_struct_rcu_user+0x66/0xb0 [ 156.447028][ C0] finish_task_switch+0x325/0x760 [ 156.447086][ C0] ? __switch_to_asm+0x3d/0x70 [ 156.447130][ C0] __schedule+0x14d6/0x2100 [ 156.447183][ C0] ? __sched_text_start+0x10/0x10 [ 156.447255][ C0] preempt_schedule_irq+0xab/0x110 [ 156.447289][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 156.447343][ C0] raw_irqentry_exit_cond_resched+0x32/0x40 [ 156.447397][ C0] irqentry_exit+0x4a/0x60 [ 156.447451][ C0] sysvec_apic_timer_interrupt+0x50/0x90 [ 156.447510][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 156.447564][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x5/0x90 [ 156.447627][ C0] Code: 10 48 89 74 11 18 48 89 44 11 20 5d c3 cc cc cc cc cc 0f 1f 00 b8 78 22 e1 b4 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d dc 24 7d 7e 65 8b 15 dd 24 7d 7e [ 156.447666][ C0] RSP: 0018:ffffc9000eaf8968 EFLAGS: 00000217 [ 156.447711][ C0] RAX: ffffffff81e6b470 RBX: ffff88811dc68850 RCX: ffff88811dc68000 [ 156.447743][ C0] RDX: 0000000000000002 RSI: 0000000000000009 RDI: 0000000000000010 [ 156.447773][ C0] RBP: ffffc9000eaf89d8 R08: ffff8881070d3ccf R09: 1ffff11020e1a799 [ 156.447816][ C0] R10: dffffc0000000000 R11: ffffed1020e1a79a R12: 0000000000000009 [ 156.447847][ C0] R13: ffff8881070d3d18 R14: 0000000000000002 R15: 0000000000000002 [ 156.447884][ C0] ? __update_page_owner_handle+0x1c0/0x370 [ 156.447955][ C0] ? __update_page_owner_handle+0x1d7/0x370 [ 156.448019][ C0] __set_page_owner+0x128/0x600 [ 156.448095][ C0] ? __kasan_check_read+0x15/0x20 [ 156.448160][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 156.448239][ C0] ? __cfi___zone_watermark_ok+0x10/0x10 [ 156.448310][ C0] ? kasan_unpoison+0x4a/0x70 [ 156.448356][ C0] post_alloc_hook+0x37d/0x3b0 [ 156.448439][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 156.448499][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 156.448544][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 156.448603][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 156.448653][ C0] prep_new_page+0x2d/0x190 [ 156.448715][ C0] get_page_from_freelist+0x496e/0x4a20 [ 156.448794][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 156.448860][ C0] ? static_key_count+0x45/0x70 [ 156.448915][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 156.448955][ C0] ? lruvec_init+0x231/0x280 [ 156.449016][ C0] __alloc_pages_noprof+0x35f/0x7e0 [ 156.449082][ C0] ? unwind_next_frame+0x3c1/0x750 [ 156.449138][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 156.449199][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 156.449291][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 156.449345][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 156.449429][ C0] stack_depot_save_flags+0x672/0x800 [ 156.449516][ C0] stack_depot_save+0x12/0x20 [ 156.449580][ C0] save_stack+0x133/0x240 [ 156.449640][ C0] ? free_contig_range+0x260/0x260 [ 156.449684][ C0] ? __reset_page_owner+0x450/0x450 [ 156.449733][ C0] ? zone_page_state_add+0x43/0x90 [ 156.449778][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 156.449845][ C0] ? prep_new_page+0x2d/0x190 [ 156.449899][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 156.449967][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 156.450035][ C0] ? stack_depot_save_flags+0x672/0x800 [ 156.450095][ C0] ? kasan_save_track+0x4f/0x80 [ 156.450174][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 156.450225][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 156.450277][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 156.450328][ C0] ? krealloc_noprof+0x8d/0x130 [ 156.450372][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 156.450441][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB5_14AllocationView22transfer_binder_object+0x224/0xc10 [ 156.450518][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x4031/0x9460 [ 156.450580][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 156.450646][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x18f8/0x4380 [ 156.450702][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 156.450779][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 156.450826][ C0] ? sched_clock_noinstr+0xd/0x30 [ 156.450891][ C0] __set_page_owner+0x8e/0x600 [ 156.450965][ C0] ? __zone_watermark_ok+0x134/0x630 [ 156.451034][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 156.451088][ C0] ? kasan_unpoison+0x4a/0x70 [ 156.451133][ C0] post_alloc_hook+0x37d/0x3b0 [ 156.451194][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 156.451263][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 156.451306][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 156.451367][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 156.451424][ C0] prep_new_page+0x2d/0x190 [ 156.451483][ C0] get_page_from_freelist+0x496e/0x4a20 [ 156.451552][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 156.451628][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 156.451689][ C0] ? static_key_count+0x45/0x70 [ 156.451743][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 156.451789][ C0] ? lruvec_init+0x231/0x280 [ 156.451840][ C0] __alloc_pages_noprof+0x35f/0x7e0 [ 156.451902][ C0] ? kernel_text_address+0xa9/0xe0 [ 156.451968][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 156.452031][ C0] ? unwind_get_return_address+0x51/0x90 [ 156.452091][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 156.452152][ C0] stack_depot_save_flags+0x672/0x800 [ 156.452220][ C0] ? kasan_save_track+0x4f/0x80 [ 156.452288][ C0] kasan_save_track+0x4f/0x80 [ 156.452353][ C0] ? kasan_save_track+0x3e/0x80 [ 156.452403][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 156.452440][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 156.452498][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 156.452544][ C0] ? krealloc_noprof+0x8d/0x130 [ 156.452594][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 156.452664][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB5_14AllocationView22transfer_binder_object+0x224/0xc10 [ 156.452736][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x4031/0x9460 [ 156.452804][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 156.452874][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x18f8/0x4380 [ 156.452934][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 156.453014][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 156.453082][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 156.453135][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 156.453188][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 156.453245][ C0] ? do_syscall_64+0x57/0xf0 [ 156.453305][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.453374][ C0] kasan_save_alloc_info+0x40/0x50 [ 156.453406][ C0] __kasan_kmalloc+0x96/0xb0 [ 156.453458][ C0] __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 156.453510][ C0] ? __kasan_check_write+0x18/0x20 [ 156.453548][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 156.453627][ C0] krealloc_noprof+0x8d/0x130 [ 156.453702][ C0] _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 156.453786][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 156.453851][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 156.453919][ C0] ? kernel_text_address+0xa9/0xe0 [ 156.453980][ C0] ? __kernel_text_address+0x11/0x40 [ 156.454041][ C0] ? __kasan_check_write+0x18/0x20 [ 156.454091][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 156.454151][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 156.454227][ C0] ? stack_trace_save+0xaa/0x100 [ 156.454278][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 156.454339][ C0] ? stack_depot_save_flags+0x399/0x800 [ 156.454400][ C0] ? kasan_save_track+0x4f/0x80 [ 156.454451][ C0] ? kasan_save_track+0x3e/0x80 [ 156.454496][ C0] ? kasan_save_free_info+0x4a/0x60 [ 156.454537][ C0] ? __kasan_slab_free+0x5f/0x80 [ 156.454589][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 156.454640][ C0] ? audit_log_end+0x1f1/0x240 [ 156.454684][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 156.454726][ C0] ? slow_avc_audit+0x19f/0x220 [ 156.454777][ C0] ? avc_has_perm+0x1ec/0x240 [ 156.454827][ C0] ? selinux_binder_transfer_binder+0xa9/0xf0 [ 156.454880][ C0] ? security_binder_transfer_binder+0x54/0xf0 [ 156.454931][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x3fe9/0x9460 [ 156.454993][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 156.455083][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x18f8/0x4380 [ 156.455153][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 156.455233][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 156.455300][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 156.455347][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 156.455397][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 156.455440][ C0] ? do_syscall_64+0x57/0xf0 [ 156.455484][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.455557][ C0] ? __kasan_slab_free+0x6a/0x80 [ 156.455608][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 156.455652][ C0] ? __wake_up+0x169/0x190 [ 156.455702][ C0] ? audit_log_end+0x1f1/0x240 [ 156.455749][ C0] ? audit_log_end+0x1f1/0x240 [ 156.455781][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 156.455833][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 156.455885][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 156.455936][ C0] ? __cfi_common_lsm_audit+0x10/0x10 [ 156.455987][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 156.456054][ C0] ? call_rcu_hurry+0x30/0x30 [ 156.456100][ C0] ? avc_update_node+0x2f1/0x9c0 [ 156.456152][ C0] ? slow_avc_audit+0x19f/0x220 [ 156.456202][ C0] ? __cfi_slow_avc_audit+0x10/0x10 [ 156.456269][ C0] _RNvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB5_14AllocationView22transfer_binder_object+0x224/0xc10 [ 156.456341][ C0] ? avc_has_perm+0x1ec/0x240 [ 156.456399][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB5_14AllocationView22transfer_binder_object+0x10/0x10 [ 156.456495][ C0] ? selinux_binder_transfer_binder+0xa9/0xf0 [ 156.456548][ C0] ? bpf_lsm_binder_transfer_binder+0xd/0x20 [ 156.456619][ C0] _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x4031/0x9460 [ 156.456725][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 156.456957][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 156.457025][ C0] ? kernel_text_address+0xa9/0xe0 [ 156.457085][ C0] ? __kernel_text_address+0x11/0x40 [ 156.457145][ C0] ? unwind_get_return_address+0x51/0x90 [ 156.457205][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 156.457273][ C0] ? arch_stack_walk+0x10a/0x170 [ 156.457326][ C0] ? stack_depot_save_flags+0x38/0x800 [ 156.457391][ C0] ? kasan_save_track+0x4f/0x80 [ 156.457445][ C0] ? kasan_save_track+0x3e/0x80 [ 156.457493][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 156.457538][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 156.457592][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 156.457647][ C0] ? krealloc_noprof+0x8d/0x130 [ 156.457702][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 156.457772][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x7c0/0x2660 [ 156.457868][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1a91/0xa690 [ 156.457971][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 156.458045][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 156.458100][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 156.458162][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 156.458202][ C0] ? do_syscall_64+0x57/0xf0 [ 156.458281][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.458375][ C0] ? __kasan_check_write+0x18/0x20 [ 156.458419][ C0] ? _raw_spin_lock+0x92/0x120 [ 156.458475][ C0] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 156.458542][ C0] ? _raw_spin_unlock+0x45/0x60 [ 156.458597][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 156.458698][ C0] ? __kasan_check_write+0x18/0x20 [ 156.458737][ C0] ? mutex_unlock+0x90/0x240 [ 156.458781][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 156.458825][ C0] ? __kernel_text_address+0x11/0x40 [ 156.458886][ C0] ? unwind_get_return_address+0x51/0x90 [ 156.458945][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 156.458997][ C0] ? arch_stack_walk+0x10a/0x170 [ 156.459049][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 156.459118][ C0] ? kernel_text_address+0xa9/0xe0 [ 156.459202][ C0] ? __kasan_check_write+0x18/0x20 [ 156.459270][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 156.459345][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 156.459406][ C0] ? __kernel_text_address+0x11/0x40 [ 156.459455][ C0] ? unwind_get_return_address+0x51/0x90 [ 156.459503][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 156.459562][ C0] ? arch_stack_walk+0x10a/0x170 [ 156.459606][ C0] ? stack_depot_save_flags+0x399/0x800 [ 156.459666][ C0] _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 156.459740][ C0] ? __cfi__RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x10/0x10 [ 156.459815][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 156.459852][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 156.459904][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 156.459962][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x10e/0x720 [ 156.460069][ C0] ? __asan_memset+0x39/0x50 [ 156.460118][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x2c5/0x720 [ 156.460230][ C0] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x10/0x10 [ 156.460330][ C0] ? avc_has_perm_noaudit+0x28a/0x360 [ 156.460383][ C0] ? avc_has_perm+0x155/0x240 [ 156.460433][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 156.460489][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 156.460549][ C0] ? __kasan_check_write+0x18/0x20 [ 156.460609][ C0] ? _raw_spin_lock+0x92/0x120 [ 156.460686][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 156.460748][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 156.460808][ C0] _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x18f8/0x4380 [ 156.460869][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0xc7a/0x2660 [ 156.460945][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x10/0x10 [ 156.461048][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 156.461110][ C0] ? __kasan_check_write+0x18/0x20 [ 156.461153][ C0] _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 156.461259][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 156.461443][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 156.461506][ C0] ? kernel_text_address+0xa9/0xe0 [ 156.461570][ C0] ? __kernel_text_address+0x11/0x40 [ 156.461622][ C0] ? unwind_get_return_address+0x51/0x90 [ 156.461682][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 156.461736][ C0] ? arch_stack_walk+0x10a/0x170 [ 156.461783][ C0] ? stack_depot_save_flags+0x38/0x800 [ 156.461844][ C0] ? kasan_save_track+0x4f/0x80 [ 156.461884][ C0] ? kasan_save_track+0x3e/0x80 [ 156.461935][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 156.461972][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 156.462050][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 156.462111][ C0] ? krealloc_noprof+0x8d/0x130 [ 156.462158][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x920/0x1aa0 [ 156.462234][ C0] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCs2tVsXcF29le_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 156.462344][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 156.462399][ C0] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCs2tVsXcF29le_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 156.462507][ C0] ? __kasan_check_write+0x18/0x20 [ 156.462554][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x502/0xee0 [ 156.462644][ C0] ? __kasan_check_write+0x18/0x20 [ 156.462691][ C0] ? _raw_spin_lock+0x92/0x120 [ 156.462756][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 156.462826][ C0] ? _raw_spin_unlock+0x45/0x60 [ 156.462851][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder7processNtB5_12ProcessInner24new_node_ref_with_thread+0x5ec/0x950 [ 156.462895][ C0] ? __cfi__RNvMs0_NtCs2tVsXcF29le_11rust_binder7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 156.462928][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 156.463039][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 156.463136][ C0] ? __kasan_check_write+0x18/0x20 [ 156.463179][ C0] ? _raw_spin_lock+0x92/0x120 [ 156.463241][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 156.463302][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x11f1/0x1aa0 [ 156.463366][ C0] ? __asan_memcpy+0x5a/0x80 [ 156.463409][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 156.463470][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x127e/0x1aa0 [ 156.463544][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x10/0x10 [ 156.463613][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 156.463721][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 156.463828][ C0] ? __kasan_check_write+0x18/0x20 [ 156.463872][ C0] ? _raw_spin_lock+0x92/0x120 [ 156.463933][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 156.463999][ C0] ? _raw_spin_unlock+0x45/0x60 [ 156.464061][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 156.464122][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x1008/0x1c70 [ 156.464234][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 156.464361][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 156.464444][ C0] ? __asan_memcpy+0x5a/0x80 [ 156.464517][ C0] ? __kasan_check_write+0x18/0x20 [ 156.464566][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 156.464652][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 156.464728][ C0] ? avc_has_perm+0x155/0x240 [ 156.464780][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 156.464835][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 156.464890][ C0] ? __kasan_check_write+0x18/0x20 [ 156.464934][ C0] ? _raw_spin_lock+0x92/0x120 [ 156.464988][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 156.465062][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xb14/0x1030 [ 156.465148][ C0] ? __asan_memcpy+0x5a/0x80 [ 156.465196][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xd14/0x1030 [ 156.465289][ C0] ? __kernel_text_address+0x11/0x40 [ 156.465361][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0x10/0x10 [ 156.465445][ C0] ? stack_trace_save+0xaa/0x100 [ 156.465501][ C0] ? __kasan_check_write+0x18/0x20 [ 156.465560][ C0] ? _raw_spin_lock+0x92/0x120 [ 156.465623][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 156.465688][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x11db/0x5d80 [ 156.465757][ C0] ? __asan_memcpy+0x5a/0x80 [ 156.465828][ C0] _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 156.465921][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 156.465988][ C0] ? _raw_spin_unlock+0x45/0x60 [ 156.466058][ C0] ? call_rcu_nocb+0x6d7/0xc80 [ 156.466125][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 156.466202][ C0] ? swake_up_one_online_ipi+0x30/0x30 [ 156.466294][ C0] ? __cfi_mt_free_rcu+0x10/0x10 [ 156.466353][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 156.466424][ C0] ? kernel_text_address+0xa9/0xe0 [ 156.466473][ C0] ? __kernel_text_address+0x11/0x40 [ 156.466528][ C0] ? unwind_get_return_address+0x51/0x90 [ 156.466587][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 156.466640][ C0] ? arch_stack_walk+0x10a/0x170 [ 156.466690][ C0] ? stack_trace_save+0xaa/0x100 [ 156.466738][ C0] ? stack_depot_save_flags+0x38/0x800 [ 156.466799][ C0] ? kasan_save_track+0x4f/0x80 [ 156.466850][ C0] ? kasan_save_track+0x3e/0x80 [ 156.466896][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 156.466938][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 156.466990][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 156.467043][ C0] ? krealloc_noprof+0x8d/0x130 [ 156.467089][ C0] ? kvrealloc_noprof+0x59/0x120 [ 156.467133][ C0] ? _RNvCs2tVsXcF29le_11rust_binder16rust_binder_mmap+0x78b/0x11f0 [ 156.467238][ C0] ? mmap_region+0x1579/0x1d60 [ 156.467310][ C0] ? do_mmap+0xb85/0x13c0 [ 156.467359][ C0] ? vm_mmap_pgoff+0x36e/0x4b0 [ 156.467420][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 156.467479][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 156.467552][ C0] ? __kernel_text_address+0x11/0x40 [ 156.467616][ C0] ? unwind_get_return_address+0x51/0x90 [ 156.467681][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 156.467739][ C0] ? __cgroup_account_cputime+0xa5/0xd0 [ 156.467795][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 156.467860][ C0] ? update_curr+0x50c/0x9e0 [ 156.467914][ C0] ? update_load_avg+0x506/0x1990 [ 156.467978][ C0] ? __calc_delta+0x280/0x280 [ 156.468025][ C0] ? __kasan_record_aux_stack+0xb2/0xd0 [ 156.468078][ C0] ? dequeue_entity+0x33f/0x1380 [ 156.468142][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 156.468219][ C0] ? __kasan_check_read+0x15/0x20 [ 156.468266][ C0] ? update_cfs_group+0x127/0x250 [ 156.468321][ C0] ? update_curr+0xf8/0x9e0 [ 156.468367][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 156.468450][ C0] ? update_curr+0xf8/0x9e0 [ 156.468493][ C0] ? xfd_validate_state+0x68/0x140 [ 156.468567][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 156.468642][ C0] ? __kasan_check_write+0x18/0x20 [ 156.468686][ C0] ? __switch_to+0xc4f/0x1300 [ 156.468730][ C0] ? __cfi___switch_to+0x10/0x10 [ 156.468771][ C0] ? psi_task_switch+0x59e/0xa10 [ 156.468822][ C0] ? _raw_spin_unlock+0x45/0x60 [ 156.468881][ C0] ? timerqueue_add+0x212/0x240 [ 156.468935][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 156.468987][ C0] ? __asan_memcpy+0x5a/0x80 [ 156.469019][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 156.469067][ C0] ? __kasan_check_write+0x18/0x20 [ 156.469117][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 156.469180][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 156.469241][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 156.469301][ C0] ? futex_unqueue+0x136/0x160 [ 156.469370][ C0] ? ioctl_has_perm+0x39a/0x500 [ 156.469415][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 156.469460][ C0] ? __kasan_check_write+0x18/0x20 [ 156.469503][ C0] ? _raw_spin_lock_irq+0x93/0x120 [ 156.469563][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 156.469623][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 156.469667][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 156.469699][ C0] ? __hrtimer_run_queues+0x87f/0x8e0 [ 156.469757][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 156.469809][ C0] ? sched_clock_noinstr+0xd/0x30 [ 156.469854][ C0] ? sched_clock+0x44/0x60 [ 156.469915][ C0] ? sched_clock_cpu+0x75/0x400 [ 156.470006][ C0] ? tick_program_event+0x9b/0x120 [ 156.470078][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 156.470138][ C0] ? hrtimer_reprogram+0x341/0x3e0 [ 156.470199][ C0] ? __fget_files+0x2c5/0x340 [ 156.470277][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 156.470327][ C0] ? security_file_ioctl+0x3e/0x110 [ 156.470406][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 156.470478][ C0] __se_sys_ioctl+0x132/0x1b0 [ 156.470541][ C0] __x64_sys_ioctl+0x7f/0xa0 [ 156.470597][ C0] x64_sys_call+0x1878/0x2ee0 [ 156.470644][ C0] do_syscall_64+0x57/0xf0 [ 156.470703][ C0] ? clear_bhb_loop+0x50/0xa0 [ 156.470752][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.470826][ C0] RIP: 0033:0x7fab2a19ce59 [ 156.470895][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.470934][ C0] RSP: 002b:00007fab2af7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.470987][ C0] RAX: ffffffffffffffda RBX: 00007fab2a415fa0 RCX: 00007fab2a19ce59 [ 156.471025][ C0] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 156.471062][ C0] RBP: 00007fab2a232e6f R08: 0000000000000000 R09: 0000000000000000 [ 156.471091][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.471120][ C0] R13: 00007fab2a416038 R14: 00007fab2a415fa0 R15: 00007ffd328587b8 [ 156.471165][ C0] [ 156.471183][ C0] Modules linked in: [ 156.471226][ C0] ---[ end trace 0000000000000000 ]--- [ 156.471247][ C0] RIP: 0010:kasan_check_range+0xf/0x2b0 [ 156.471319][ C0] Code: ff c3 cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 b0 01 48 85 f6 0f 84 c0 01 00 00 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 [ 156.471374][ C0] RSP: 0018:ffffc9000eaf8000 EFLAGS: 00010206 [ 156.471431][ C0] RAX: ffff88811dc68001 RBX: 0000000000000060 RCX: ffffffff8144d478 [ 156.471483][ C0] RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc9000eaf80a8 [ 156.471511][ C0] RBP: ffffc9000eaf8020 R08: 0000000000001300 R09: 0000000000000000 [ 156.471544][ C0] R10: ffffc9000eaf81f0 R11: ffffed1023bf98a7 R12: 0000000000000000 [ 156.471578][ C0] R13: ffff88811dfcc520 R14: 0000000000000000 R15: ffffc9000eaf80a8 [ 156.471606][ C0] FS: 00007fab2af7d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 156.471648][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.471682][ C0] CR2: ffffc9000eaf7ff8 CR3: 000000011e1ce000 CR4: 00000000003526b0 [ 156.471722][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 156.474490][ C0] Kernel Offset: disabled