last executing test programs: 1m23.71129496s ago: executing program 1 (id=132): unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = eventfd2(0x0, 0x80800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) mknodat(r1, &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x9) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000002000)={0x5}) 1m23.652976272s ago: executing program 1 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setresgid(0x0, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r4, r4, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000340)=0x1) 1m23.579915154s ago: executing program 1 (id=134): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="340000000000000000000000070000000711", @ANYRES64=r1], 0x38}, 0x2000}], 0x1, 0x46000) 1m23.565944605s ago: executing program 1 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100"], 0x1c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x1}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000100)=""/69, 0x45}], 0x1, 0x8, 0x81) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@nl=@proc, 0x80, &(0x7f0000001700)=[{&(0x7f0000001d00)=""/125, 0x7d}, {&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000001780)=""/97, 0x61}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x8, &(0x7f0000001880)=""/99, 0x63}, 0x80000001}, {{&(0x7f0000001800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000019c0)=""/109, 0x6d}, {&(0x7f0000001900)=""/145, 0x91}, {&(0x7f0000001c80)=""/98, 0x62}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000001a40)=""/141, 0x8d}], 0x5, &(0x7f0000001b80)=""/68, 0x44}, 0x20}], 0x2, 0x40000002, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000001740)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1a41, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) 1m22.717393714s ago: executing program 1 (id=141): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) dup3(r1, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x8000, 0x8041, 0x7, 0xdd, {{0xc, 0x4, 0x0, 0x17, 0x30, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x25, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@private=0xa010101, 0x1}, {@broadcast, 0x8001}]}]}}}}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000140)="8e7c29a4e2") setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000280), 0x31) 1m22.593067489s ago: executing program 1 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setresgid(0x0, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r4, r4, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000340)=0x1) 1m22.592907829s ago: executing program 32 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setresgid(0x0, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r4, r4, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000340)=0x1) 1m3.948953687s ago: executing program 3 (id=281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "ba287455a8d1a0d7", "b9628b3aba5f13b642fcd224cf4ddbcd", "b5a8b9bd", "5f403955b4b56725"}, 0x28) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) syz_usb_connect$uac1(0x5, 0x82, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x944, 0x200, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x0, 0x90, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x37, 0x7, {0x7, 0x25, 0x1, 0x0, 0x1, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0xb, 0x7}, @as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0xfd, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x5bbe}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x51a9497) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000101010200000000000000000a000005300002802c00018006000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0019800800020002"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000020000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000001000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x97, 0x20044856, &(0x7f0000000300)={0xa, 0x4e1d, 0x84, @mcast2}, 0x70) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x81, 0x0, 0x0, 0x400}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0xfffffff7, 0x4) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xffffffff) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000002480)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd3\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x06\x83\xe3\xf8\x80\xca42\x9c\x1a\xd1\xedx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4\xe9\xd6\xc8\x15\xb5\xdd\xf8 \xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\"\b\x00\x00wF\x99\x05\x00T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5\x03\x00!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99fjFI\x8d7\xf5\xea1.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00x\xfb\x92\xc3T\xca\x88\x10z\xee/p\xb5\x1b\xfb\x0e\x9a\x032\x8a\x89\xd7I\tE\xf1\x98\x96x\x8c\x9f9\x892\xa3b\x15\x01E\xd2\xdc\xae\xc8<\xc8J8\x9d^\xeb\xb5\xd2[y|\xf9k{Lo1\xca\x84w\xd2\x81\x91\xf9\x95\x14\xce\x1a&\xd7>\xe9\\A\x12\xb5\xcbR7\x1d\xf61Q\xfa\xe9\xdc\xeb\x9b\xac\x97\xc4\xd1M\xa8K8\x89MU\xf1\x88r\x13\xe5\xe0\x19\xc7\xa9\xc7\x12\xcd\x98b\xc5\xaf\x9c1\x84\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3WM\x10iT\x1b\x82@\x12\x9d\a\x8e-[\x05]\xe7U:\xcbu\xd5\xaa\v>\xc4\x8f\r\x1d\xf5\xeef@\x02/\xbd\xd5\xfa\xaasL\x94F\xcf\x9e\xa9\xab\xbb\xcd\xc7\xd12\xc5I\xd1\xb7\xdb\x84\xcb\x99w\xe0\xf7\xfe\x9f7\xb7\x03\x94MQH\xc3(\xc6\x11\xf2T\x138/\xcb\x964\xe0\xe5\x89\x87\x90\xde_L\xc5\xa3vE\xe7\xcd\x93\xd4\x96\xa5G\xce\xba\x13\xb3G\x19_\xac}${\x87\x19\xec#S\xddQS\x06\xbf\x1e\xb1\xd0\xf6\x8bn\x95\x82\xd8Z\xb7\t\xf3\xbe\x93\tD\n\xdc\x02\xe2\xf4\xf0\xe6\x8a=\xc9\xb2spJJ\x87GHZd\xf4`\xd5\x9e~\n\x8c\x96m\xbc\x0f\xa9%\x90tW\xb7]\x19\x94f\\\xb7\xd9\xdd#\xa24\x17v\x86\xf1a\xd3\xdbs\x04\xd1;_r\x94\xf6\xf9\xb74\xe2\xd9\x8e\x1c\x93\xdb\xe9U\xfc\x7f]\xb4\xea\xac\xa4A\xd9\x13e\x81R-yc\xa2\xc7\x00\xa3\x05\x8a\xf5+\xd9\xa8\x01%y\x16}\x81\r\xedi\xe8^\x8c\xaa\xf8c\x16\xf7\xdb\xb7\xfan\xa9\xe9\x9a\x84h_X\xc8`?R\xe4\x85\xe6ZH_/\xd5\xfe\x86\xc8\xbcS6\x81\xca\x9d9\xc7\xb3\xc6\x91\xb1\xc6\xfe\x11\x04\xe8\x9bL\x06\xd0j\x1e8\x9c\xe4<<\xf0MrF\xb7\x7f\xb9Y\xc0\xe0\xee&\xb36\xaepBE\xc9\xba\xab\x04\x0f\xd8[\xaa7\x1e\xf0\xfb\x88\xa3\xbbS\'') close(0x3) syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100300000008e4087f0140000102030109028d00030101900e080b0101010b200009040000000101200009240106000a1500500c2403030703390208090080090401000001022000090401010101022000082402010303010210240103c101040000000801000080b7090501090800067801"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 1m3.464794323s ago: executing program 3 (id=286): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x8) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x80) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000240)={{0x1000000002, 0x0, 0x55a, 0x1, 0x8}, [{0x7ff, 0x10001, 0xe5, 0x6}, {0x9, 0x6, 0xf8}, {0xbd7a, 0x0, 0x5}, {0x1ff, 0xfe0, 0x8, 0xc}, {0x7fffffffffffffff, 0x7, 0x9, 0x3}, {0x5, 0x3, 0x67, 0x4}, {0x7fffffff, 0x13, 0xfe, 0x5}]}) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r4, r4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000180)={@desc={0x1, 0x0, @desc4}, 0x10, r4, '\x00', @d}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000380)) socket$pptp(0x18, 0x1, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4, 0x2}}}}, 0x30}}, 0x2c040090) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)={0x0, 0x31, 0x6, "ff089f013949"}, 0x0, 0x0, 0x0, 0x0}) 1m2.865040225s ago: executing program 3 (id=291): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="340000000000000000000000070000000711", @ANYRES64=r1], 0x38}, 0x1000000}], 0x1, 0x46000) 1m2.864529955s ago: executing program 3 (id=292): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) sched_setaffinity(r3, 0x8, &(0x7f0000001640)=0x9) getrlimit(0xc, &(0x7f0000000140)) getrlimit(0xe, &(0x7f0000001680)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000016}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f3d, 0x4000, 0x4001, 0x2bb}, 0x0, 0x0, &(0x7f0000000000)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x31}, 0x18) epoll_pwait(r2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, 0xfffffffe, &(0x7f0000000000)={[0x3c]}, 0x8) close(r0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000001540)={&(0x7f00000014c0)=[{&(0x7f00000000c0)="d208c28b9dbf3d3b5791bc2fc39bd61380085b8cbfd484b7e234f2e606ff50ace6ec", 0x22}, {&(0x7f0000000180)="51c81574f8dd20715797905132c66d3c3e21e0901f94027d2f6fdbc6c658840070154a44f22f670e234e7a1010b945c8d16a2673963c511207d22eba8f83a5d5e60aefce2eba9aec925c4feb70ccb91582777d6a42f1f41fc889e6c17f477c75b51ea24fec35bff5ccd2ac407a2de1c9ba32c4d80d28883cdd7af5e9e69df366b5c20bfb59a6", 0x86}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="45e0e0ed1ede650356972b96635350d6bd6c353d7c7f8d4259d01706e44ed96d3761eeda2dc1bda83800b9c6eaf1a7475023b72540be26aca07e96d32807c88bc3f4a5ce4eefe7d9bd0849e98c65bf37c6865aa2a458f0da95d3efeef38faf15ae872cabaf0723e2dd33c83f01a1a7e2104495fba4d7fc02f6673d9fb247379b8879a7255cf94a537fbd0dc10f7867f1595ea64d7904c1d777f7f00cd124db969484a51f8886ec2a4bb0a5caedb090641d84429dc96e18e65ed0f9dd8cf5382446f379a2c90f9d61a2a4cc8ca2c471a60c49de131e", 0xd5}, {&(0x7f0000001340)="95dd159ba9333c1fa784acfe9841ec990e6f74264a33f70908d259a7a71347b05414149cfd2b5bd8a89c32403f3ca9d07b995f69e1e4af8c4b5a2a79cf8f26228a9667a6b9158f52ab6cab299c484b5fb4742dc872425775bd4440cea946bf7a0cec2ea4952b9e9516ebe9631c5593c572bace53d61440244607b3a69e7a9281c6380ae35bc12734cab0e41e141cd5dfc4ede2e4720f8ac4ac95d48a7af8015cd799d8ce3fc7a76f9243100bc0d219c56c17214e3453efb852ccfe1a52dd01597ae31967cb7d3d1fe92c574a", 0xcc}, {&(0x7f0000001440)="ce6e886eb86f4f85c271e28c4f06d2974767246b77c3ee79092c90f2f5b27dfa1c03c8f6172752243d7b45d983e1743e38ca6c4ef9730f0f32cc2013cfb75a9e38e30daa6661f9f44bf2dd70f8fcd8273caa4188f772f7cf24cd8e681bad8ae36aa495a16b061562ff2d0c6a1254", 0x6e}], 0x6, 0x9aa0, 0x0, 0x10000, 0x7f, 0x5e6, 0x6, 0x3}) 1m2.770582608s ago: executing program 3 (id=293): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xe8, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xa7b, @rand_addr=' \x01\x00', 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x192d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7b}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x44}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3468520c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c5) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1m2.632695762s ago: executing program 3 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x110}, 0x80080) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="280000002100010000000000000000000a00000000000001016200000900178002"], 0x28}], 0x1}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000000, 0x5ae03501bf461724) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000502, 0xee01, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r6, &(0x7f00000004c0)="a0", 0x1, 0x200080d1, 0x0, 0x0) recvfrom$unix(r7, 0x0, 0xffffffffffffff89, 0x12001, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) r8 = accept4$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0xe, 0x80000) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000240)=0x4, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d810009050b03000000050009058a03416492acf98c4295dbdcebb7e1cb389d6edb42df85e4c922066377536a556cee955041b55236cf53312080d725cde2b950783554d4e74ceefb7410a2dc8c677437c4466ce1813b414796ba90c6713467b1577a3faf89c897704669c431e7514108eb37f7615dc59f0545e72e198259dc5d22b9adf11f87de878f7126a7fdf0a615aa92151149aa53b5916471ba09b89e54cb71483114549f31b5e79b9a70959df97bc297863322074d52cda4c3ae422d5cc45570f8c0a79074b558a6d000c26b57e0"], 0x0) listen(r3, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000bfe000/0x400000)=nil) r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f0000000440)={0x0, 0x0}) ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f0000000480)=0x2) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r13, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 1m2.566374655s ago: executing program 33 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x110}, 0x80080) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)=ANY=[@ANYBLOB="280000002100010000000000000000000a00000000000001016200000900178002"], 0x28}], 0x1}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000000, 0x5ae03501bf461724) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000502, 0xee01, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r6, &(0x7f00000004c0)="a0", 0x1, 0x200080d1, 0x0, 0x0) recvfrom$unix(r7, 0x0, 0xffffffffffffff89, 0x12001, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) r8 = accept4$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0xe, 0x80000) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000240)=0x4, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d810009050b03000000050009058a03416492acf98c4295dbdcebb7e1cb389d6edb42df85e4c922066377536a556cee955041b55236cf53312080d725cde2b950783554d4e74ceefb7410a2dc8c677437c4466ce1813b414796ba90c6713467b1577a3faf89c897704669c431e7514108eb37f7615dc59f0545e72e198259dc5d22b9adf11f87de878f7126a7fdf0a615aa92151149aa53b5916471ba09b89e54cb71483114549f31b5e79b9a70959df97bc297863322074d52cda4c3ae422d5cc45570f8c0a79074b558a6d000c26b57e0"], 0x0) listen(r3, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000bfe000/0x400000)=nil) r12 = syz_kvm_add_vcpu$x86(r11, &(0x7f0000000440)={0x0, 0x0}) ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f0000000480)=0x2) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r13, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 5.018276486s ago: executing program 5 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 4.996878806s ago: executing program 5 (id=703): mount$9p_unix(&(0x7f00000014c0)='./cgroup/file0\x00', &(0x7f0000001500)='./cgroup\x00', &(0x7f0000001540), 0x4000, &(0x7f00000015c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x513d, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0000000b060108000000000000000002000002050001000700000044000780"], 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2000000076001f03000000000800000008000100ffffffff08000a"], 0x20}], 0x1}, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x0, 0x10) read$char_usb(r4, &(0x7f0000000100)=""/177, 0x39) dup3(r2, r1, 0x0) 4.866616821s ago: executing program 5 (id=706): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x14, 0x0, 0x0, 0x0, 0x361, &(0x7f0000000140)='wg2\x00', 0x0, 0x4, 0x6}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x44, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="e80100001600010009000000fedbdf2500000000000000000000000000000001e00000010000000000000000000000004e2400044e2100000200a0a032000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="64010100000000000000000000000000000004d4320000b75500000000000000000000000000000100000000000000000180000000000000080000000000000004000000000000000010000000000000110f000000000000000000000000000000000100000000009d0e000000000000ff030000000000000300000000000000090000000000000001000080060000000100000025bd700003350000020000000c0000000000000005"], 0x1e8}, 0x1, 0x0, 0x0, 0x20041081}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8060}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r4, @ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x200000c0}, 0x810) 4.827666122s ago: executing program 5 (id=707): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3f7, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000002580)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x90, 0x6f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x75, 0x5, 0x1, {0x7, 0x25, 0x1, 0xc, 0xc, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe2, 0x76, 0x81, {0x7, 0x25, 0x1, 0x0, 0xf7, 0x5}}}}}}}}]}}, &(0x7f0000000040)={0x29, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc07}}]}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000000c0)=0x28) 3.876772585s ago: executing program 4 (id=712): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000003, 0x20010, 0xffffffffffffffff, 0x98ca5000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x24) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 3.804949427s ago: executing program 4 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) unshare(0x6020400) unshare(0x44040200) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) sendto$unix(r0, &(0x7f0000000000)="fc6bc894fa17fd29dceaf504f0806e979a32c2998522915049da1d3d238bc34809139ef6ed2caea8d1196a1ec150424fa444c47aa5825e91387c9a5946327d8c82d464a24f2ef4831a0f395cc69e748e19c085bbde0ae2fe3e4f7cba061c86d03ea75597c057e1b9af1d4e219ec415f34d6576a8cb901e2a2d71d14cc3b9138f516ea68d5430db6d57529e7ae889b9e6091bfdd7dbaf4229aa390a112e80bc44a39d62f79f61d001d19796f58699da22e085aca9f3f19c81f460e8582adf9280720ca27ba330", 0xc6, 0x11, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 3.795080158s ago: executing program 4 (id=714): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) (async) close(0x3) (async) r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x2}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x1000000001e) (rerun: 32) 3.401226422s ago: executing program 5 (id=715): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x102, 0x200) syz_usb_connect$midi(0x0, 0x32, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x2, 0x90, 0xe6, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, [], [{{0x9, 0x5, 0x86, 0x3, 0x0, 0x2, 0x7, 0x8e, {0x5, 0x25, 0x1, 0x1, "9f"}}}]}}}}}]}}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x23f00, 0x87) 3.264852517s ago: executing program 0 (id=718): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x1e}) (async, rerun: 32) setrlimit(0x2, &(0x7f00000000c0)={0x5, 0x2400000}) (async, rerun: 32) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) 3.191687269s ago: executing program 0 (id=719): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setresuid(0xee01, 0x0, 0x0) (async) setreuid(0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000002600)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x2, 0x8d, 0x4, 0x2, 0x6, 0x4, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x1, 0x5, 0x3ff, 0x200}, [{0x6474e551, 0x9, 0x1, 0x80200000, 0x7, 0x40, 0x0, 0x101}]}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)={0xffffffffffffff20, 0x1a, 0x1, 0xfffffffd, 0x25dfdbfd}, 0x10}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b0d, &(0x7f0000000000)={'bridge_slave_1\x00'}) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x4, 0x3, 0x8, 0x0, 0x0, [{{r1}, 0x7}, {{r2}, 0x9}, {{r2}, 0x652}, {{r3}, 0x6}, {{r2}, 0x2}, {{r2}, 0x6}, {{r2}, 0x1}, {{r4}, 0x6ceee8b9}]}) fcntl$setsig(r2, 0xa, 0x15) 3.189659909s ago: executing program 0 (id=720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10b643, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="66b9200001c00f324f3066b9800000c00f326635008000000f300f01d72e363e0f01ca0fbb9d0e0066b9820000c00f32440f20c066350d000000440f22c03e3e0f01c4c1ef00", 0x46}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 3.188440729s ago: executing program 4 (id=721): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x49, 0x800}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0xfe}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000006c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0xfffffffffffffffd, {0xc, 0x10, 0x0, {0x3, 0x6, 0x4030cf7f, 0x8000000000000001, 0x6a2, 0x5, 0x80000000, 0x9, 0xe29, 0x8000, 0xfffffffe, 0x0, 0x0, 0x7fdfffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r3, 0x0, 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x6c, &(0x7f00000000c0)={[{0x65, 0x4e00, "b79f6a6a86f3f09987e3ced5d4320c644ad1d469bb17c77462e18b741f1580b8ec6f50fd8b1b0dd579a5f28ff7d0e01231684fc45b600b8a5fe0915598862296aa7b4cfc29faa1596c246afc1af00145a0b65cdd371da880065c073873edb6b1309e8b6e3c"}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="201406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x7, 0x43, {0x43, 0x1, "159d2345b966a33d438b910a06624f794a273fee8e651cf132e51d679eeb9e39bb80e613fdfd949f276dfc691d401d442e4afd723589df8e04565f52dbca026d0f"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x20, 0x9, 0xf3, "1be19f4d516f7eba94703324948f8b1495d19752ff230f277efd277bab02584a551ba16c040918d373ece5e8e1040bfebfc7567566f1a04688057214d1632b2ea69a353e668f2eb05db539249b3cb98fc4f14d303fbd1bfe997268e0157513b6b2a73a2ebcfab9dedfc9e6231e9e352aee781c554f4103b4671dd60969cdd29b9a36d135d854d2e3b8adb214bac411518bfd9140cad2d610d6dae673531bc6cd051ffcff401dbf7587aecb4acba8d9939a0939d8a167b8cb21fd07c44eb4d31ab157c21f0ab70ad18a90b562dc568d61fba93198ca0a102fd6f03eddad404a82945e32dec6ce99d0299d7cea841154a80ba0db"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xd}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x81) 3.15620629s ago: executing program 2 (id=722): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1f0}}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x6f) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x8c) r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x137) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x40106726, &(0x7f00000000c0)) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000040)={0x4}) fsconfig$FSCONFIG_SET_STRING(r2, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) read(r2, &(0x7f0000000200)=""/248, 0xf8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 3.118437201s ago: executing program 2 (id=723): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000062) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000980)={0x478, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_IES={0x45c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xfbfe, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x92, 0x5b2, 0x2, 0x6]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1c1, 0x7f, [@random={0x53, 0x54, "0ba3a773fcb2715882ebacf05a360ee4fe25229a078f279f19d3c7b27664b70d7f0ca8ae5eacc00e647bacc1933d6e6f36ed6b734c575b5af259cae33fc4102ca43b6739e83980613a1a1eccd3ea10d41f9fc8cd"}, @ibss={0x6, 0x2, 0x40}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x5, 0x5}}, @channel_switch={0x25, 0x3, {0x1, 0xb9, 0x2}}, @perr={0x84, 0x12f, {0x1, 0x13, [{{}, @device_b, 0xa1cb, @void, 0x27}, {{}, @device_a, 0x9, @void, 0x35}, {{0x0, 0x1}, @device_b, 0xbd0, @value=@device_b, 0x5}, {{}, @broadcast, 0x0, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x5, @value=@device_b, 0x18}, {{}, @broadcast, 0x9, @void, 0x20}, {{}, @device_b, 0x7ff, @void, 0x3c}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x2b}, {{0x0, 0x1}, @broadcast, 0xed9, @value=@device_b, 0x3a}, {{}, @device_b, 0xebf3, @void, 0x3c}, {{}, @device_a, 0x8, @void, 0x35}, {{}, @device_b, 0x8, @void, 0x22}, {{0x0, 0x1}, @device_a, 0xeb6, @value=@device_b, 0x17}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x24}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x26}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x2}, {{}, @device_a, 0x6, @void, 0x34}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x1}, {{}, @device_b, 0x1, @void, 0x26}]}}, @chsw_timing={0x68, 0x4, {0x3, 0x6}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x51}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0xd4, 0x81, 0x5, 0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x2b, 0x80, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0xa8, @device_a, 0x9, @value=@device_b, 0x7fffffff, 0x2, @device_b, 0x7f}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x23, 0x80, [@erp={0x2a, 0x1}, @ht={0x2d, 0x1a, {0x20, 0x3, 0x5, 0x0, {0x10001, 0x9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2}, 0x8, 0x4, 0xd5}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x217, 0x7f, [@mic={0x8c, 0x10, {0x8f, "ba745787eda3", @short="d29d955a20ed0ffc"}}, @ibss={0x6, 0x2, 0x8}, @random={0x4, 0x8e, "99cd4ba35adef34172ce5625e2d60140e65759083547cdb22c3349d55039a627e8492ef177e70f5afcf31626d0391982d269f1fafed48e0132ef391605159bc27f2fed75245eb86b9cd9ef1421734a5269f71664e3190e188622b935fb687918bf9c5901fab7fd53aad63104ad06b159e682b436e74f6830704570a6dda338a4f7ec283ccae680b3379df93307f2"}, @random_vendor={0xdd, 0x6b, "891998c44b770049f34917be577c0d9619e616db3a8224a6e7aa7e7ad4367b6aa451ff6bb088fa27060ba31c380649ba6f5e5019b4c8580c71158482eaa92d1802807e4beeba876754895c1dc9e3b1a8040705d5d60df78fef7513c49b9cc80d6f3367706e77570c6ab173"}, @erp={0x2a, 0x1}, @cf={0x4, 0x6, {0x0, 0x0, 0x0, 0xfffb}}, @measure_req={0x26, 0xe9, {0x3, 0x4, 0x8, "08dbf81da21bc8a185a0cce0710fd6836cec48e8cf854e48f6ee1ce2c6714a1bdb6e608fa2bedfc7f599fe2ed6823cdc48532021837d13e1cdf0bfd7ec67a75fe1f761557d867eb49a0e1f45117f743742f4083b885d3ca907f0932a48cd0089a46b988c74b9fed754b9ede511bcdb38c2c392952d0c352475198793b00d7d7bfc3ef4c0704eac63f4c2bab9a47abce636bc16506bb73c6508f32a8214593c6221d887ac4e3efc1e5300ad037c2499ccf71179413c3fb474619a17269ae1ccdc360038dfbdd2dce5066c6c8d22b95a99a71fc904cb1b3852aeb4f17a9034f8b88fe47b5bb7ac"}}, @supported_rates={0x1, 0x2, [{0x24}, {0x1b}]}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xb2, 0x9a}}]}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x3, 0x7, 0x401, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x0, 0xc4f9]}]}]}, 0x478}, 0x1, 0x0, 0x0, 0x2400c890}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000480902120001000000000904000000ef01"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x90, 0xfc, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x2, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x218, 0x10, 0x5, 0x33}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x93}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x8, 0xa9, 0xe, 0x10, 0x7}, 0xd7, &(0x7f0000000200)={0x5, 0xf, 0xd7, 0x4, [@generic={0x90, 0x10, 0x0, "f4799034223c949c0cffaff142893396ee03937e1753d87a05e5df8d266b1de39592c8a27dff82b60be4327172f59fb8e3cd4fc63ebc9050c364fc6258ad672466fc11ae157e73ae22cac9cd6451e65db74ece32147a13e96acc2b0cb5f7732ebfd4350f458fc1e4e38d3739c9b8217b341c14aa024885620c74ebc5529da924979556dd2fa0144e31738af7e3"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x81, 0x10, 0x200}, @ptm_cap={0x3}, @generic={0x35, 0x10, 0xa, "ff72bf8d3fd57395f1872ede0247412ba5c56b4a56a4b0dfc1999ed69b1d23af2973c2f69ceeaf206ffd3c012af07ad12f3b"}]}, 0x8, [{0xf4, &(0x7f0000000300)=@string={0xf4, 0x3, "d254c0e1eef094bac040ec8d94b486a91bebe4176db4219bbe44d29bbe82cbd3e303d09de6bf86f9c2c89e56f5d27fcf4611eb3ed2a084b2dd8bb3ed774d3571a806120f88c821e4753d82592e8d28333a64cd9b83b6c752317d68bc8697fddb0347e0bbb156ee340a46817ee2c98559d7be0239fc2d7344949331dc90442c7ffcc9b6021aa317dfad0c9f172d563e047a47366fdffcf4dbc9b324ff2a5af9ef8eb7d9b3c5be9f8b1438ad7df08a2f480fd7448a473dfaf3d41e9af4d0c5ecab946d982f202879f00b41dfaca0681e8a2f05871c41f216e99583ee5fa2a9c944262fe7e4a8fd4b75f0ca7acd598696467045"}}, {0xa0, &(0x7f0000000480)=@string={0xa0, 0x3, "28f77426cb8f78da5860630393260133b1a1f9458ea6458537d3a493b82fac0cfad0380d4ae21e88411c9cf162a9a3cec5b5e6afe438a2d820e5c568b71e9ed5f4fef1cb1891676a0acbcd17eba2551e69d9460c004c9e4b4142493df332eb9922f09db7088a3f1e8aa539af1430aedad0a3de87c80145e1264b33f47125a6cf7f682c83151befc8354b194735d0eb3106c3abe70a57952a0b0c2334d3e5"}}, {0x10, &(0x7f0000000540)=@string={0x10, 0x3, "0b22ce383a7175ec3cd628c3c943"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1409}}, {0xf1, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1007}}, {0x9d, &(0x7f0000000740)=@string={0x9d, 0x3, "c08cef16fbc10ac4f64c4dc9c23c31a21697c660c5f7baa89aeab26d2db618ad25595b43205c57c529f20aba8fe16e4c80af74bfaabb9f68fef7d089709dfb689da68b51d7deb997f6cfbb9fac6ce32c914fa8cca7da009d5b1a4bd309f982defdba3fc86637b8a683a5a64c4b74d12baefdcc934bf96131b36578da4799c72061880d97b7905bf069f6e999daa9b02f23f2f560bf3e05ee8a8c1f"}}]}) 2.849091841s ago: executing program 0 (id=724): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x3, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) dup2(0xffffffffffffffff, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x86) umount2(&(0x7f0000000040)='.\x00', 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x8008af26, &(0x7f0000000040)=0x1) 1.998823751s ago: executing program 0 (id=725): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) timer_create(0xfffffffc, 0x0, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) fchmodat(r3, &(0x7f00000000c0)='./bus\x00', 0xffffffd1) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x68) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mprotect(&(0x7f00003e4000/0x2000)=nil, 0x2000, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000100)={0xf2, 0x80}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44800}, 0x80) close(r6) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, 0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4001af83, &(0x7f0000000040)={0x2}) 1.934439233s ago: executing program 2 (id=726): mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x810010, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x33255e78, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f0000000080)={0x6, 0x20, 0x2, 0x200, 0xffffff97}) 1.868991945s ago: executing program 2 (id=727): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, 0x0, &(0x7f0000000080)=0x3e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4s\xac3\x06\x00\x00\x00\x00a\x9b\x9a\n\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17}\xdc\x8a\r8\x06D-\xf4nN8\x0f\xba\xc4\x19\x9f\xd9?!\xd3\x8b\xd2\xe4\x88\x9f\xfdH\x11\x19\xf4aX\x17NEwC\xc4\xfb\x00'/111, 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000000c0)={r3, 0x0, 0x2000, 0x1000}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) time(&(0x7f0000000100)) r5 = socket$tipc(0x1e, 0x5, 0x0) fsync(0xffffffffffffffff) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000007580)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1, &(0x7f0000004a80)=""/63, 0x3f}, 0x7fffffff}], 0x1, 0x0, 0x0) r7 = socket(0x1e, 0x1, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @window={0x3, 0x8}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 1.868530735s ago: executing program 2 (id=728): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000002c0)={0x52, 0x1, 0xeca, {0x7, 0x65}, {0x5, 0x800}, @rumble={0x0, 0x1}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x32, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc, 0x4004011}, 0x2404c840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000810000000800451e005e00684000070190780000001cac1415aa050390787f0000014010000600650001082800077f0000017f000001442cc391e0000002000000027f00000100000007e00000010000a721e00000010000000fac1414bb000000032f54"], 0x70) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xce, 0x0, 0xfffffffffffffffe}]}) write$cgroup_pid(r5, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100)) r10 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1) pread64(r10, &(0x7f0000000300)=""/37, 0x25, 0x9) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchdir(r11) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="080000000000000009000000000000000400000000000000", @ANYRES32=r9, @ANYBLOB="d7000f000000000400000000000000b7000000000000000000007a823533d4449e24eb7381a66eea610000", @ANYRESDEC=r10, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000400"/28, @ANYRES32=r5, @ANYBLOB="00000000d30800"/28]) 1.465285759s ago: executing program 0 (id=729): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a08538b3c83e25038a39942bb09ea54983ce9abc16b261c97ed77325eb5033809be6894d94bbc208a95f3b92f8e1676751d5aa8d6e9d71b1410c32fe330ca903d5d2572aed7a138f97dd0b5d2f3867"], 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1a9800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002fc0), r4) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000003000)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000804) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'ipvlan0\x00', &(0x7f0000000080)=@ethtool_test={0x1a, 0x1, 0x2, 0x2, [0x0, 0x2]}}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x113e00, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000380)) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000100)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000085000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGFEATURE(r9, 0xc0404807, &(0x7f0000000440)={0x80, "99b0f587ab891d4092ef24dcb9337f0a67af99fccd6a9e5ade883d0c3391775d4ad24cb974ebd6ea244be4ecfe61be00d3224e60057300adc5d2566a6c892345"}) close(0x4) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x76, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r10 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r10) r11 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r11) 945.015007ms ago: executing program 2 (id=730): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xffffff72, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0x804, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000480)={r3}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') getsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f00000000c0)={@dev, @broadcast}, &(0x7f0000000380)=0x8) pread64(r6, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) ioctl$TIOCGISO7816(r1, 0x80285442, 0x0) syz_usb_connect$uac2(0x1, 0x98, &(0x7f0000000100)=ANY=[@ANYBLOB="120110ac6356cfcda1d2fc405b760300000048861a2d75400001020301090286000301003003080b00030109200609040000000101200009240102000626000411240803020000000000000200020000000c240304f67d01030d070080090401000001022000090401010101022000090501092000050500082501010604040009040200000102200009040201010102200009058209ff03"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x459}}, {0x52, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1809}}, {0x6f, &(0x7f0000000280)=@string={0x6f, 0x3, "5eea862ed752d694487eec5490201f66e7555300ba65754f3bcf5ba1c5164d07c03a6d2d526d7ae87a55b9ad6ace46498804735783d04d9e9727315217b0de980426a0abc5b35edcab9d686fe30faa93cca71bdb58992c41730f46312401fa9a084fed5e6e2ff4124c15c3ed98"}}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000001080)) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$BLKGETZONESZ(r9, 0x80041284, &(0x7f0000000040)=0x8) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1002011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) 336.178208ms ago: executing program 5 (id=731): ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=@newsa={0x1ac, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x40000040, 0x32}, @in=@private=0xa010101, {0x4, 0x7, 0x0, 0x40000000000004, 0x10001, 0xffffffffffffffff, 0x7f, 0xdb11}, {0x10000, 0x8, 0xcc}, {0xf6, 0x0, 0xa2}, 0x0, 0x0, 0x2, 0x2, 0xfe}, [@algo_auth_trunc={0x4c, 0x14, {{'blake2s-224-arm\x00'}, 0x0, 0xa0}}, @algo_aead={0x4c, 0x12, {{'echainiv(generic-gcm-aesni)\x00'}, 0x0, 0x60}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xc}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd2d, 0x70bd27, 0x70bd2a, 0x401}}]}, 0x1ac}}, 0x24040804) syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x5c, 0xea, 0x88, 0x20, 0x19d2, 0x1015, 0xec1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x8, 0x0, 0x90, 0x1, "", [{{0x9, 0x4, 0x4a, 0x1, 0x0, 0x2, 0x6, 0x0, 0x9, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xa8, 0x7fff, 0x4}, [@acm={0x4}]}]}}]}}]}}, 0x0) 92.514157ms ago: executing program 4 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000000c0)={0x4, &(0x7f0000000480)=[{0x5, 0xc, &(0x7f0000000200)="607fd3ef6a89e07237408cbc"}, {0x10, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x1, 0xb3b7d38bb6b0bffd}, {0xffff8d64, 0x0, 0x0, 0x1}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="a7", 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r2, 0x6) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=733): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x288ea000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$nbd(r2, &(0x7f0000000500)={0x67446698, 0x0, 0x1, 0x2, 0x4, "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"}, 0x10a) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x2}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x2a}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @exit_looper], 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="120150020000004082050c0040000102030109028e00030107600b08c0888f143032b413a52df1840b010101ff20050904000000010120000924010600031500070c24030501035d02008700200904010000010220000904010101010220000925020103918102ff102401050603010000000309000000cd090501090800000c0d0825018333020200090402200009"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x288ea000) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) write$nbd(r2, &(0x7f0000000500)={0x67446698, 0x0, 0x1, 0x2, 0x4, "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"}, 0x10a) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x2}, 0x10) (async) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x50, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x9, 0x0, 0x2a}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @exit_looper], 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="120150020000004082050c0040000102030109028e00030107600b08c0888f143032b413a52df1840b010101ff20050904000000010120000924010600031500070c24030501035d02008700200904010000010220000904010101010220000925020103918102ff102401050603010000000309000000cd090501090800000c0d0825018333020200090402200009"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) (async) kernel console output (not intermixed with test programs): {֐ȵ4FLQk݊) failed (rc=-5) [ 76.896935][ T308] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.919029][ T892] usb usb6-port1: unable to enumerate USB device [ 76.927275][ T308] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.935838][ T45] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 76.946404][ T45] usb 3-1: USB disconnect, device number 35 [ 76.961622][ T308] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.963871][ T1404] udevd[1404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.969837][ T308] Buffer I/O error on dev loop9, logical block 0, async page read [ 76.993799][ T308] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.012760][ T1515] process 'syz.2.369' launched './file1' with NULL argv: empty string added [ 77.116124][ T1519] overlayfs: disabling nfs_export due to verity=require [ 77.195769][ T378] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 77.347670][ T378] usb 1-1: not running at top speed; connect to a high speed hub [ 77.356673][ T378] usb 1-1: config 13 has an invalid interface number: 142 but max is 0 [ 77.365140][ T378] usb 1-1: config 13 has no interface number 0 [ 77.372995][ T378] usb 1-1: New USB device found, idVendor=0489, idProduct=e145, bcdDevice=3e.2b [ 77.382305][ T378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.385735][ T45] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 77.390363][ T378] usb 1-1: Product: syz [ 77.402128][ T378] usb 1-1: Manufacturer: syz [ 77.406804][ T378] usb 1-1: SerialNumber: syz [ 77.505712][ T31] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 77.531958][ T1523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.373'. [ 77.599638][ T36] audit: type=1400 audit(1775037110.056:329): avc: denied { connect } for pid=1522 comm="syz.5.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.655689][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 77.669404][ T31] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 77.681382][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.691579][ T31] usb 5-1: config 0 has no interface number 0 [ 77.699369][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 77.708725][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.716813][ T31] usb 5-1: Product: syz [ 77.721023][ T31] usb 5-1: Manufacturer: syz [ 77.725720][ T31] usb 5-1: SerialNumber: syz [ 77.731422][ T31] usb 5-1: config 0 descriptor?? [ 77.738360][ T31] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 77.745131][ T31] usb 5-1: No valid video chain found. [ 77.822434][ T378] usb 1-1: USB disconnect, device number 35 [ 77.939246][ T31] usb 5-1: USB disconnect, device number 24 [ 78.460629][ T1531] netlink: 64 bytes leftover after parsing attributes in process `syz.4.376'. [ 78.483580][ T36] audit: type=1400 audit(1775037110.936:330): avc: denied { getopt } for pid=1533 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.575694][ T310] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 78.645815][ T340] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 78.705730][ T310] usb 1-1: device descriptor read/64, error -71 [ 78.785737][ T340] usb 6-1: device descriptor read/64, error -71 [ 78.945718][ T310] usb 1-1: device descriptor read/64, error -71 [ 79.026286][ T340] usb 6-1: device descriptor read/64, error -71 [ 79.065787][ T378] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 79.185733][ T310] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 79.215760][ T378] usb 5-1: Using ep0 maxpacket: 16 [ 79.222240][ T378] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 79.231399][ T378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.240430][ T378] usb 5-1: config 0 descriptor?? [ 79.246621][ T378] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 79.265744][ T340] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 79.315694][ T310] usb 1-1: device descriptor read/64, error -71 [ 79.405758][ T340] usb 6-1: device descriptor read/64, error -71 [ 79.446976][ T1551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.455798][ T1551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.474440][ T378] usb 5-1: Detected FT232A [ 79.483912][ T378] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 79.493635][ T1556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 79.503942][ T378] usb 5-1: USB disconnect, device number 25 [ 79.515764][ T378] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 79.527782][ T36] audit: type=1400 audit(1775037111.976:331): avc: denied { load_policy } for pid=1555 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.530769][ T1556] SELinux: failed to load policy [ 79.551179][ T378] ftdi_sio 5-1:0.0: device disconnected [ 79.565670][ T310] usb 1-1: device descriptor read/64, error -71 [ 79.665888][ T340] usb 6-1: device descriptor read/64, error -71 [ 79.685919][ T310] usb usb1-port1: attempt power cycle [ 79.775797][ T340] usb usb6-port1: attempt power cycle [ 80.025759][ T310] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 80.040915][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 80.046883][ T310] usb 1-1: device descriptor read/8, error -71 [ 80.049646][ T45] usb 3-1: can't read configurations, error -71 [ 80.115809][ T340] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 80.146693][ T340] usb 6-1: device descriptor read/8, error -71 [ 80.176758][ T310] usb 1-1: device descriptor read/8, error -71 [ 80.276860][ T340] usb 6-1: device descriptor read/8, error -71 [ 80.382484][ T1566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=1566 comm=syz.4.387 [ 80.395158][ T1566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=1566 comm=syz.4.387 [ 80.425769][ T310] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 80.446855][ T310] usb 1-1: device descriptor read/8, error -71 [ 80.465851][ T45] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 80.525748][ T340] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 80.546975][ T340] usb 6-1: device descriptor read/8, error -71 [ 80.586780][ T310] usb 1-1: device descriptor read/8, error -71 [ 80.616042][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 80.623166][ T45] usb 3-1: config 8 has an invalid interface number: 3 but max is 0 [ 80.631416][ T45] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 80.640292][ T45] usb 3-1: config 8 has no interface number 0 [ 80.646537][ T45] usb 3-1: config 8 interface 3 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 80.657402][ T45] usb 3-1: config 8 interface 3 altsetting 6 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 80.668239][ T45] usb 3-1: config 8 interface 3 altsetting 6 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 80.680068][ T45] usb 3-1: config 8 interface 3 altsetting 6 endpoint 0x82 has invalid maxpacket 8215, setting to 1024 [ 80.691546][ T45] usb 3-1: config 8 interface 3 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1024 [ 80.702167][ T45] usb 3-1: config 8 interface 3 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 80.706160][ T310] usb usb1-port1: unable to enumerate USB device [ 80.713319][ T45] usb 3-1: config 8 interface 3 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 80.730698][ T45] usb 3-1: config 8 interface 3 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 80.741717][ T45] usb 3-1: config 8 interface 3 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 80.752623][ T45] usb 3-1: config 8 interface 3 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 80.763924][ T340] usb 6-1: device descriptor read/8, error -71 [ 80.770191][ T45] usb 3-1: config 8 interface 3 altsetting 6 bulk endpoint 0x5 has invalid maxpacket 64 [ 80.780113][ T45] usb 3-1: config 8 interface 3 altsetting 6 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 80.793441][ T45] usb 3-1: config 8 interface 3 has no altsetting 0 [ 80.801781][ T45] usb 3-1: New USB device found, idVendor=05c6, idProduct=9047, bcdDevice=ae.ac [ 80.811285][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.819419][ T45] usb 3-1: Product: 鰠瑋蕣倴㡈✞ᙚ鋁ꁱ侷蔝㽡쎮Ã쫽赂ᑹ꨿₿䩐ꍓ㐐⏽ṡ껙ᾧ蛩開䅞傠堈ﷱ﹥近欋섴ퟑ꾳⿹皈⿬큅鮈ࡀꟶ [ 80.836374][ T45] usb 3-1: Manufacturer: ␁ [ 80.841165][ T45] usb 3-1: SerialNumber: 佛觓昗޷ब⥥腿籖䋒๝蟲糒钄鱯僣蹯翰쬺啧霺ī刮殱ͤ㋆ᄈ畩踝썁ӌ皱鷎쁾兡ᮃ吵澥嵸ⳗ [ 80.858449][ T1563] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 80.866064][ T1563] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 80.876035][ T340] usb usb6-port1: unable to enumerate USB device [ 81.080062][ T45] usb 3-1: USB disconnect, device number 37 [ 81.260584][ T36] audit: type=1400 audit(1775037113.716:332): avc: denied { connect } for pid=1567 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.351604][ T1580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=1580 comm=syz.0.393 [ 81.565836][ T45] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 81.707526][ T1587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 81.716459][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 81.722962][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.737511][ T1590] bridge0: port 3(vlan0) entered blocking state [ 81.738230][ T340] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 81.744320][ T1590] bridge0: port 3(vlan0) entered disabled state [ 81.744385][ T1590] vlan0: entered allmulticast mode [ 81.744403][ T1590] veth0_vlan: entered allmulticast mode [ 81.744856][ T1590] vlan0: entered promiscuous mode [ 81.755932][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.760489][ T1590] bridge0: port 3(vlan0) entered blocking state [ 81.764852][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 81.770568][ T1590] bridge0: port 3(vlan0) entered forwarding state [ 81.805716][ T378] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 81.808422][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.824379][ T45] usb 5-1: config 0 descriptor?? [ 81.830370][ T45] hub 5-1:0.0: USB hub found [ 81.894020][ T36] audit: type=1400 audit(1775037114.346:333): avc: denied { transfer } for pid=1591 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 81.967223][ T340] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.967243][ T378] usb 6-1: unable to get BOS descriptor or descriptor too short [ 81.968053][ T378] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.976225][ T340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.983187][ T378] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 81.993782][ T340] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.003780][ T378] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 82.014838][ T340] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 82.023541][ T378] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 82.033197][ T340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.042392][ T378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.066923][ T340] usb 1-1: Product: syz [ 82.068569][ T378] usb 6-1: Product: syz [ 82.073657][ T340] usb 1-1: Manufacturer: syz [ 82.077103][ T378] usb 6-1: Manufacturer: syz [ 82.081572][ T340] usb 1-1: SerialNumber: syz [ 82.086512][ T378] usb 6-1: SerialNumber: syz [ 82.267595][ T45] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 82.302140][ T340] usb 1-1: 0:1 : does not exist [ 82.308482][ T340] usb 1-1: BAAD GENERIC IO: no channels? [ 82.316121][ T340] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 82.317474][ T378] usb 6-1: Can't get UAC3 power state for id 10 [ 82.328070][ T340] usb 1-1: USB disconnect, device number 40 [ 82.335186][ T378] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 82.344069][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.347740][ T378] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 82.383209][ T378] usb 6-1: USB disconnect, device number 14 [ 82.394009][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.880668][ T36] audit: type=1400 audit(1775037115.336:334): avc: denied { mounton } for pid=1613 comm="syz.0.404" path="/proc/tty/drivers" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 82.905369][ T36] audit: type=1400 audit(1775037115.356:335): avc: denied { remount } for pid=1613 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 82.985821][ T65] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 83.016813][ T1619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.026715][ T1619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.156874][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.167604][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.177940][ T65] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.185674][ T310] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 83.187738][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.203875][ T65] usb 3-1: SerialNumber: syz [ 83.357150][ T310] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 83.365724][ T310] usb 1-1: config 0 has no interface number 0 [ 83.371874][ T310] usb 1-1: config 0 interface 41 has no altsetting 0 [ 83.380401][ T310] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 83.389618][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.397804][ T310] usb 1-1: Product: syz [ 83.401999][ T310] usb 1-1: Manufacturer: syz [ 83.406903][ T310] usb 1-1: SerialNumber: syz [ 83.411798][ T1600] bpf: Bad value for 'mode' [ 83.417300][ T310] usb 1-1: config 0 descriptor?? [ 83.425586][ T65] usb 3-1: 0:2 : does not exist [ 83.430795][ T65] usb 3-1: unit 5: unexpected type 0x03 [ 83.439682][ T65] usb 3-1: USB disconnect, device number 38 [ 83.454418][ T1404] udevd[1404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.949021][ T1629] overlay: Unknown parameter 'dont_hash' [ 83.965677][ T1190] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 84.025783][ T1617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.034752][ T1617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.047399][ T310] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 84.115687][ T1190] usb 6-1: Using ep0 maxpacket: 32 [ 84.123433][ T1190] usb 6-1: unable to get BOS descriptor or descriptor too short [ 84.132263][ T1190] usb 6-1: config 9 has an invalid interface number: 165 but max is 0 [ 84.140969][ T1190] usb 6-1: config 9 has no interface number 0 [ 84.147319][ T1190] usb 6-1: config 9 interface 165 has no altsetting 0 [ 84.156289][ T1190] usb 6-1: New USB device found, idVendor=148f, idProduct=9020, bcdDevice=3c.42 [ 84.165584][ T1190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.174176][ T1190] usb 6-1: Product: ֓숡찈뱄ࣷᄾ扇⬥픱᪎ቸ鏅喿퓡蝣ꩽᏽႎⓈ页띗艋㎐鲕ⅎ븒洑끫ᠫ荲澾쫉쏿՘쌺쎈姭찶쉾듪씫ẩ企뛼閦砶ꫤᗠ勗诙㢛퍷狧達谳ዅ쭲Ꚑⵒ [ 84.195562][ T1190] usb 6-1: Manufacturer: ்獖ꝓ칬㸠ᎆ愍;锃윧뤭Ԑ꺁ˊ뻠㮨ɫ⊲䢬鱙捣꓂䐘唳ꥣ⮌ﺪ넮ꚜ츼荺㺶折ӏ沀嚦겺㺷䒯츒ቡƋர膁쥀ҩ瘀᳹芥邗誨ར틹䚤堂໳锢菹青鿆퇵紽鐉蕧ﴭ珔୘ᦱ [ 84.219790][ T1190] usb 6-1: SerialNumber: ꜵ⃯필▿暑䯡葢뮛ᖲꎹࠏ섭ၾꆤ刄Šᖴ쒏͙Ⱑ洕야兛䞻蠤滫媋訶磭в寘 [ 84.225641][ T65] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 84.388326][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 84.395123][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.403843][ T65] usb 3-1: config 5 has an invalid interface number: 221 but max is 0 [ 84.413104][ T65] usb 3-1: config 5 has no interface number 0 [ 84.419730][ T65] usb 3-1: config 5 interface 221 has no altsetting 0 [ 84.428506][ T65] usb 3-1: New USB device found, idVendor=1c0c, idProduct=0102, bcdDevice=63.d2 [ 84.438447][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.447016][ T65] usb 3-1: Product: syz [ 84.449342][ T1190] usb 6-1: USB disconnect, device number 15 [ 84.453595][ T65] usb 3-1: Manufacturer: syz [ 84.463001][ T65] usb 3-1: SerialNumber: syz [ 84.504384][ T36] audit: type=1400 audit(1775037116.956:336): avc: denied { setopt } for pid=1632 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.505759][ T1633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.534597][ T1633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.671658][ T1631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.680619][ T1631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.694834][ T65] usb 3-1: USB disconnect, device number 39 [ 84.968393][ T1635] netlink: 'syz.5.413': attribute type 1 has an invalid length. [ 84.991849][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.122374][ T1644] netlink: 140 bytes leftover after parsing attributes in process `syz.4.416'. [ 85.162006][ T1651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.170755][ T1651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.249186][ T1656] SELinux: Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped). [ 85.259072][ T36] audit: type=1400 audit(1775037117.716:337): avc: denied { relabelto } for pid=1655 comm="syz.2.420" name=E91F7189591E9233614B dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:sshd_key_t:s0" [ 85.291201][ T36] audit: type=1400 audit(1775037117.716:338): avc: denied { associate } for pid=1655 comm="syz.2.420" name=E91F7189591E9233614B dev="tmpfs" ino=713 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sshd_key_t:s0" [ 85.321717][ T36] audit: type=1400 audit(1775037117.736:339): avc: denied { unlink } for pid=293 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:sshd_key_t:s0" [ 85.525670][ T1190] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 85.677262][ T1190] usb 3-1: unable to get BOS descriptor or descriptor too short [ 85.685705][ T1190] usb 3-1: not running at top speed; connect to a high speed hub [ 85.694585][ T1190] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.705353][ T1190] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 85.717199][ T1190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 288, setting to 64 [ 85.730071][ T1190] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 85.739824][ T1190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.747972][ T1190] usb 3-1: Product: syz [ 85.752523][ T1190] usb 3-1: Manufacturer: syz [ 85.757208][ T1190] usb 3-1: SerialNumber: syz [ 85.765373][ T1659] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 85.952609][ T65] usb 1-1: USB disconnect, device number 41 [ 85.970386][ T1663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 85.980323][ T1662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 85.995848][ T1190] usb 3-1: USB disconnect, device number 40 [ 86.009519][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.035971][ T36] audit: type=1400 audit(1775037118.496:340): avc: denied { name_bind } for pid=1661 comm="syz.0.422" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 86.735988][ T310] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 86.803079][ T1664] 9pnet_fd: p9_fd_create_tcp (1664): problem connecting socket to 127.0.0.1 [ 86.887102][ T310] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.899212][ T310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.906001][ T310] usb 3-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 86.915661][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.924976][ T310] usb 3-1: config 0 descriptor?? [ 87.015823][ T695] Bluetooth: hci0: command 0x1003 tx timeout [ 87.015852][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.076310][ T1676] overlayfs: failed to resolve './file1': -2 [ 87.085691][ T1190] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 87.136458][ T36] audit: type=1400 audit(1775037119.596:341): avc: denied { mounton } for pid=1685 comm="syz.5.430" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.245662][ T1190] usb 1-1: Using ep0 maxpacket: 32 [ 87.254849][ T1190] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 87.266482][ T1190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.274705][ T1190] usb 1-1: Product: syz [ 87.279090][ T1190] usb 1-1: Manufacturer: syz [ 87.283854][ T1190] usb 1-1: SerialNumber: syz [ 87.334360][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.342688][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.349919][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.357522][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.365026][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.372447][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.379783][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.386942][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.393965][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.400995][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.408011][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x2 [ 87.415171][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.422288][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.429259][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.436560][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.444123][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.451540][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.458597][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.465804][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.473073][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.480041][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.487491][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.495502][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.495652][ T65] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 87.503726][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.516131][ T45] usbhid 5-1:0.0: can't add hid device: -32 [ 87.520130][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.525134][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 87.532485][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.548263][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.556285][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.563396][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.570746][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.577901][ T1190] usb 1-1: MIDIStreaming interface descriptor not found [ 87.585777][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.593054][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.601332][ T1190] usb 1-1: USB disconnect, device number 42 [ 87.607723][ T310] wacom 0003:056A:00E3.000F: unknown main item tag 0x0 [ 87.619377][ T310] wacom 0003:056A:00E3.000F: hidraw0: USB HID v10.09 Device [HID 056a:00e3] on usb-dummy_hcd.2-1/input0 [ 87.623343][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.632911][ T310] usb 3-1: USB disconnect, device number 41 [ 87.674283][ T1689] fido_id[1689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 87.688642][ T65] usb 6-1: device descriptor read/64, error -71 [ 87.925792][ T65] usb 6-1: device descriptor read/64, error -71 [ 88.022575][ T1692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.431'. [ 88.088675][ T36] audit: type=1400 audit(1775037120.546:342): avc: denied { ioctl } for pid=1697 comm="syz.2.433" path="socket:[14185]" dev="sockfs" ino=14185 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.120658][ T36] audit: type=1400 audit(1775037120.576:343): avc: denied { listen } for pid=1697 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.165671][ T65] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 88.305714][ T65] usb 6-1: device descriptor read/64, error -71 [ 88.308259][ T1719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.321304][ T1719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.425660][ T45] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 88.455659][ T310] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 88.545734][ T65] usb 6-1: device descriptor read/64, error -71 [ 88.555758][ T45] usb 1-1: device descriptor read/64, error -71 [ 88.607430][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 88.617045][ T310] usb 3-1: not running at top speed; connect to a high speed hub [ 88.625895][ T310] usb 3-1: config 5 has an invalid interface number: 45 but max is 0 [ 88.634625][ T310] usb 3-1: config 5 has no interface number 0 [ 88.640863][ T310] usb 3-1: config 5 interface 45 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 88.651860][ T310] usb 3-1: config 5 interface 45 has no altsetting 0 [ 88.660127][ T310] usb 3-1: New USB device found, idVendor=162e, idProduct=cba2, bcdDevice=bd.d6 [ 88.665858][ T65] usb usb6-port1: attempt power cycle [ 88.669319][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.682959][ T310] usb 3-1: Product: syz [ 88.687342][ T310] usb 3-1: Manufacturer: syz [ 88.692064][ T310] usb 3-1: SerialNumber: syz [ 88.805729][ T45] usb 1-1: device descriptor read/64, error -71 [ 88.850372][ T36] audit: type=1400 audit(1775037121.306:344): avc: denied { write } for pid=1720 comm="syz.4.442" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.850577][ T1721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=1721 comm=syz.4.442 [ 88.890238][ T1721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.899356][ T1721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.902039][ T310] usb 3-1: USB disconnect, device number 42 [ 89.005788][ T65] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 89.026905][ T65] usb 6-1: device descriptor read/8, error -71 [ 89.045767][ T45] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 89.157104][ T65] usb 6-1: device descriptor read/8, error -71 [ 89.175784][ T45] usb 1-1: device descriptor read/64, error -71 [ 89.395800][ T65] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 89.421820][ T45] usb 1-1: device descriptor read/64, error -71 [ 89.429270][ T65] usb 6-1: device descriptor read/8, error -71 [ 89.453939][ T36] audit: type=1400 audit(1775037121.906:345): avc: denied { getopt } for pid=1727 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.489081][ T1733] overlayfs: conflicting lowerdir path [ 89.497205][ T1733] tipc: Can't bind to reserved service type 2 [ 89.539267][ T45] usb usb1-port1: attempt power cycle [ 89.551699][ T1735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.561100][ T1735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.570296][ T65] usb 6-1: device descriptor read/8, error -71 [ 89.628030][ T36] audit: type=1400 audit(1775037122.086:346): avc: denied { connect } for pid=1740 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.628465][ T12] tipc: Subscription rejected, illegal request [ 89.685994][ T65] usb usb6-port1: unable to enumerate USB device [ 89.885756][ T45] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 89.905700][ T107] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 89.906952][ T45] usb 1-1: device descriptor read/8, error -71 [ 90.046930][ T45] usb 1-1: device descriptor read/8, error -71 [ 90.067277][ T107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.075885][ T107] usb 3-1: not running at top speed; connect to a high speed hub [ 90.084762][ T107] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 90.096091][ T107] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 236, changing to 4 [ 90.109837][ T107] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 90.119468][ T107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.127586][ T107] usb 3-1: Product: syz [ 90.132052][ T107] usb 3-1: Manufacturer: syz [ 90.137049][ T107] usb 3-1: SerialNumber: syz [ 90.285721][ T45] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 90.306968][ T45] usb 1-1: device descriptor read/8, error -71 [ 90.353000][ T1743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.362343][ T1743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.400351][ T36] audit: type=1400 audit(1775037122.856:347): avc: denied { ioctl } for pid=1754 comm="syz.4.456" path="socket:[14563]" dev="sockfs" ino=14563 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.403232][ T107] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 90.435104][ T107] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 90.447952][ T45] usb 1-1: device descriptor read/8, error -71 [ 90.449148][ T107] usb 3-1: USB disconnect, device number 43 [ 90.471999][ T1404] udevd[1404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 90.541049][ T1759] sit0: entered promiscuous mode [ 90.546995][ T1759] netlink: 'syz.4.457': attribute type 1 has an invalid length. [ 90.554779][ T1759] netlink: 1 bytes leftover after parsing attributes in process `syz.4.457'. [ 90.555749][ T310] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 90.564375][ T45] usb usb1-port1: unable to enumerate USB device [ 90.589535][ T1761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.598394][ T1761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.715806][ T310] usb 6-1: Using ep0 maxpacket: 16 [ 90.722595][ T310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.733885][ T310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.747663][ T310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.757497][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.766545][ T310] usb 6-1: Product: syz [ 90.771099][ T310] usb 6-1: Manufacturer: syz [ 90.776237][ T310] usb 6-1: SerialNumber: syz [ 90.979826][ T36] audit: type=1400 audit(1775037123.436:348): avc: denied { mount } for pid=1765 comm="syz.2.460" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 91.009262][ T310] usb 6-1: 0:2 : does not exist [ 91.014489][ T310] usb 6-1: unit 0 not found! [ 91.021440][ T310] usb 6-1: USB disconnect, device number 20 [ 91.029515][ T1404] udevd[1404]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.130827][ T36] audit: type=1400 audit(1775037123.586:349): avc: denied { create } for pid=1777 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 91.147440][ T1778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.160366][ T1778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.245791][ T45] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 91.375732][ T45] usb 3-1: device descriptor read/64, error -71 [ 91.485768][ T31] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 91.528596][ T1788] syzkaller1: entered promiscuous mode [ 91.534380][ T1788] syzkaller1: entered allmulticast mode [ 91.615839][ T45] usb 3-1: device descriptor read/64, error -71 [ 91.637097][ T31] usb 1-1: config 2 has an invalid interface number: 237 but max is 0 [ 91.646144][ T31] usb 1-1: config 2 has no interface number 0 [ 91.653102][ T31] usb 1-1: config 2 interface 237 altsetting 9 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 91.664644][ T31] usb 1-1: config 2 interface 237 altsetting 9 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 91.675985][ T31] usb 1-1: config 2 interface 237 has no altsetting 0 [ 91.684815][ T31] usb 1-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=4a.2d [ 91.694046][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.702112][ T31] usb 1-1: Product: syz [ 91.706403][ T31] usb 1-1: Manufacturer: syz [ 91.711116][ T31] usb 1-1: SerialNumber: syz [ 91.727941][ T1792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.469'. [ 91.739634][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.855757][ T45] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 91.855843][ T310] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 91.920133][ T1785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.929611][ T1785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.941554][ T31] rndis_host 1-1:2.237: skipping garbage [ 91.947469][ T31] usb 1-1: bad CDC descriptors [ 91.952602][ T31] cdc_acm 1-1:2.237: skipping garbage [ 91.959981][ T31] usb 1-1: USB disconnect, device number 47 [ 91.985728][ T45] usb 3-1: device descriptor read/64, error -71 [ 92.015711][ T310] usb 6-1: Using ep0 maxpacket: 8 [ 92.024381][ T310] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 92.033987][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.042367][ T310] usb 6-1: Product: syz [ 92.046666][ T310] usb 6-1: Manufacturer: syz [ 92.051277][ T310] usb 6-1: SerialNumber: syz [ 92.225766][ T45] usb 3-1: device descriptor read/64, error -71 [ 92.335993][ T45] usb usb3-port1: attempt power cycle [ 92.458845][ T310] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 92.468324][ T310] usb 6-1: clock source 0 is not valid, cannot use [ 92.476355][ T310] usb 6-1: 1:1: cannot get freq (v2/v3): err -32 [ 92.483422][ T310] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 92.490710][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.504718][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.527481][ T310] usb 6-1: clock source 0 is not valid, cannot use [ 92.675722][ T45] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 92.696969][ T45] usb 3-1: device descriptor read/8, error -71 [ 92.706431][ T1190] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 92.786866][ T310] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 92.793581][ T310] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 92.806782][ T310] usb 6-1: USB disconnect, device number 21 [ 92.818712][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.837243][ T45] usb 3-1: device descriptor read/8, error -71 [ 92.857652][ T1190] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.866582][ T1190] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.877388][ T1190] usb 1-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 92.888724][ T1190] usb 1-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 92.902641][ T1190] usb 1-1: config 1 interface 0 has no altsetting 0 [ 92.911923][ T1190] usb 1-1: string descriptor 0 read error: -22 [ 92.918584][ T1190] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.927945][ T1190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.941073][ T1190] usb 1-1: bad CDC descriptors [ 93.075700][ T45] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 93.097376][ T45] usb 3-1: device descriptor read/8, error -71 [ 93.141024][ T1796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.149983][ T1796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.158293][ T1796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.167194][ T1796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.175382][ T1796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.184187][ T1796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.192786][ T1796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.201446][ T1796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.209882][ T1796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.218501][ T1796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.229927][ T310] usb 1-1: USB disconnect, device number 48 [ 93.229978][ T45] usb 3-1: device descriptor read/8, error -71 [ 93.345995][ T45] usb usb3-port1: unable to enumerate USB device [ 93.404527][ T1812] fuse: Bad value for 'fd' [ 93.415292][ T36] audit: type=1400 audit(1775037125.866:350): avc: denied { remount } for pid=1811 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.715729][ T31] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 93.815734][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.815758][ T695] Bluetooth: hci0: command 0x1003 tx timeout [ 93.865781][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 93.985703][ T45] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 94.145809][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 94.153598][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.162566][ T45] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 94.171411][ T45] usb 1-1: config 0 has no interface number 0 [ 94.177961][ T45] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 94.189235][ T45] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 94.199357][ T45] usb 1-1: config 0 interface 88 has no altsetting 0 [ 94.208575][ T45] usb 1-1: string descriptor 0 read error: -22 [ 94.214909][ T45] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 94.224715][ T45] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 94.234133][ T45] usb 1-1: config 0 descriptor?? [ 94.241855][ T45] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input19 [ 94.269198][ T1404] udevd[1404]: Error opening device "/dev/input/event3": Input/output error [ 94.278209][ T1404] udevd[1404]: Unable to EVIOCGABS device "/dev/input/event3" [ 94.286157][ T1404] udevd[1404]: Unable to EVIOCGABS device "/dev/input/event3" [ 94.425667][ T340] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 94.441338][ T310] usb 1-1: USB disconnect, device number 49 [ 94.575700][ T340] usb 3-1: Using ep0 maxpacket: 16 [ 94.582192][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.593534][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 94.606933][ T340] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 94.616472][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.625280][ T340] usb 3-1: config 0 descriptor?? [ 94.831801][ T1825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.840857][ T1825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.966357][ T36] audit: type=1400 audit(1775037127.426:351): avc: denied { relabelfrom } for pid=1826 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 94.986366][ T36] audit: type=1400 audit(1775037127.426:352): avc: denied { relabelto } for pid=1826 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 94.996961][ T1827] syzkaller1: entered promiscuous mode [ 95.011944][ T1827] syzkaller1: entered allmulticast mode [ 95.020661][ T1827] syzkaller1: left promiscuous mode [ 95.026240][ T1827] syzkaller1: left allmulticast mode [ 95.053195][ T340] usbhid 3-1:0.0: can't add hid device: -71 [ 95.059520][ T340] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 95.069382][ T340] usb 3-1: USB disconnect, device number 48 [ 95.089281][ T1829] tipc: Enabling of bearer rejected, media not registered [ 95.815792][ T340] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 95.968476][ T340] usb 3-1: Using ep0 maxpacket: 16 [ 95.971950][ T36] audit: type=1400 audit(1775037128.426:353): avc: denied { write } for pid=1845 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.974848][ T340] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 96.006632][ T340] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 95, changing to 7 [ 96.021861][ T340] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 96.032425][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.041083][ T340] usb 3-1: Product: syz [ 96.045467][ T340] usb 3-1: Manufacturer: syz [ 96.055734][ T340] usb 3-1: SerialNumber: syz [ 96.268314][ T340] usb 3-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 96.276257][ T340] usb 3-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 96.285936][ T340] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 96.299324][ T340] usb 3-1: USB disconnect, device number 49 [ 96.313348][ T1404] udevd[1404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.335764][ T45] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 96.437222][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 96.446710][ T31] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 96.457590][ T31] usb 6-1: can't read configurations, error -71 [ 96.465825][ T45] usb 1-1: device descriptor read/64, error -71 [ 96.705664][ T45] usb 1-1: device descriptor read/64, error -71 [ 96.945682][ T45] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 97.045673][ T310] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 97.075685][ T45] usb 1-1: device descriptor read/64, error -71 [ 97.082373][ T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 97.197288][ T36] audit: type=1400 audit(1775037129.656:354): avc: denied { append } for pid=1861 comm="syz.4.491" name="pfkey" dev="proc" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 97.198706][ T1862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.231017][ T1862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.241947][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.246658][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.251025][ T310] usb 3-1: not running at top speed; connect to a high speed hub [ 97.260749][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.280166][ T31] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.286408][ T310] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 97.291537][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.314380][ T31] usb 6-1: SerialNumber: syz [ 97.318307][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.328816][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.337244][ T310] usb 3-1: Manufacturer: 쏭끟髼ꐕ쮤픰懢ඕﴚ퉬궚輑膂⑟亡*츨퐨끿㣗⥊뫅뽓鄦泲ꗈ踙廉ἌԻ锴Ӗ奝︼滃㋵䚞극庙䊐ꥌ⵼㛦襪ँ驶열岬隽⩗﹖眤䑝ꟁ쀗尒퍼Ꮠ杚쵑灌꟒懽䙭擓萈酄ᖨ֧辅ぐ읒и꺞鷊 [ 97.364835][ T310] usb 3-1: SerialNumber: syz [ 97.365636][ T45] usb 1-1: device descriptor read/64, error -71 [ 97.485897][ T45] usb usb1-port1: attempt power cycle [ 97.540397][ T1855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.551362][ T1855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.591394][ T310] usb 3-1: USB disconnect, device number 50 [ 97.835696][ T45] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 97.856719][ T45] usb 1-1: device descriptor read/8, error -71 [ 97.882902][ T1868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.892008][ T1868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.996759][ T45] usb 1-1: device descriptor read/8, error -71 [ 98.237379][ T45] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 98.266751][ T45] usb 1-1: device descriptor read/8, error -71 [ 98.365671][ T65] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 98.416937][ T45] usb 1-1: device descriptor read/8, error -71 [ 98.445683][ T36] audit: type=1400 audit(1775037130.896:355): avc: denied { map } for pid=1871 comm="syz.4.495" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.515642][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 98.532575][ T65] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 98.543993][ T45] usb usb1-port1: unable to enumerate USB device [ 98.553946][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.575281][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.595641][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 98.625661][ T65] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 98.635158][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.666668][ T65] usb 3-1: config 0 descriptor?? [ 99.181327][ T36] audit: type=1400 audit(1775037131.636:356): avc: denied { execute_no_trans } for pid=1884 comm="syz.4.498" path=2F6D656D66643A5B0B7827A5291AA9FDFAADD16D64C8854858A9250C1A6501202864656C6574656429 dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.248995][ T1889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.267471][ T1889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.279831][ T1870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.286308][ T1889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1889 comm=syz.4.500 [ 99.290743][ T1870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.319934][ T36] audit: type=1400 audit(1775037131.766:357): avc: denied { append } for pid=1888 comm="syz.4.500" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.382049][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 99.393274][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 99.401675][ T36] audit: type=1400 audit(1775037131.856:358): avc: denied { lock } for pid=1897 comm="syz.0.502" path="socket:[16361]" dev="sockfs" ino=16361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 99.428066][ T65] usb 3-1: USB disconnect, device number 51 [ 99.468998][ T1905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1905 comm=syz.0.503 [ 99.481951][ T1905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1905 comm=syz.0.503 [ 99.494751][ T1905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1905 comm=syz.0.503 [ 99.507607][ T1905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1905 comm=syz.0.503 [ 99.520867][ T31] usb 6-1: 0:2 : does not exist [ 99.521158][ T1905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=1905 comm=syz.0.503 [ 99.555975][ T31] usb 6-1: USB disconnect, device number 23 [ 99.630331][ T1911] loop7: detected capacity change from 0 to 7 [ 99.637602][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.647036][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.656315][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.666044][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.674181][ T1911] loop7: unable to read partition table [ 99.680178][ T1911] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 99.682281][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.703234][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.711719][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.721007][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.729542][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.739100][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.747946][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.757703][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.766531][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.776375][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.785630][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.795005][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.815919][ T36] audit: type=1400 audit(1775037132.276:359): avc: denied { setopt } for pid=1921 comm="syz.5.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.971409][ T36] audit: type=1400 audit(1775037132.426:360): avc: denied { mount } for pid=1941 comm="syz.5.516" name="/" dev="configfs" ino=2341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 100.215654][ T31] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 100.345680][ T31] usb 6-1: device descriptor read/64, error -71 [ 100.585668][ T31] usb 6-1: device descriptor read/64, error -71 [ 100.755744][ T310] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 100.835677][ T31] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 100.898635][ T36] audit: type=1400 audit(1775037133.356:361): avc: denied { search } for pid=1955 comm="syz.4.520" name="/" dev="configfs" ino=2341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.905668][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 100.921464][ T36] audit: type=1400 audit(1775037133.356:362): avc: denied { read } for pid=1955 comm="syz.4.520" name="/" dev="configfs" ino=2341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.929519][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.963364][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.973879][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.987336][ T310] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.989622][ T1960] tipc: Started in network mode [ 100.996822][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.997651][ T310] usb 1-1: config 0 descriptor?? [ 101.005942][ T1960] tipc: Node identity ac14140f, cluster identity 4711 [ 101.022906][ T31] usb 6-1: device descriptor read/64, error -71 [ 101.029737][ T1960] tipc: New replicast peer: 255.255.255.255 [ 101.036254][ T1960] tipc: Enabled bearer , priority 10 [ 101.265817][ T31] usb 6-1: device descriptor read/64, error -71 [ 101.295717][ T1190] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 101.375826][ T31] usb usb6-port1: attempt power cycle [ 101.420547][ T310] microsoft 0003:045E:07DA.0010: global environment stack underflow [ 101.429139][ T310] microsoft 0003:045E:07DA.0010: item 0 2 1 11 parsing failed [ 101.437680][ T310] microsoft 0003:045E:07DA.0010: parse failed [ 101.444103][ T310] microsoft 0003:045E:07DA.0010: probe with driver microsoft failed with error -22 [ 101.457509][ T1190] usb 3-1: Using ep0 maxpacket: 8 [ 101.465657][ T1190] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.476647][ T1190] usb 3-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 101.486458][ T1190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.494829][ T1190] usb 3-1: Product: syz [ 101.499742][ T1190] usb 3-1: Manufacturer: syz [ 101.504993][ T1190] usb 3-1: SerialNumber: syz [ 101.583557][ T1968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1968 comm=syz.4.524 [ 101.636654][ T310] usb 1-1: USB disconnect, device number 54 [ 101.715515][ T1964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.725072][ T1964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.733985][ T31] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 101.736770][ T1964] tipc: Cannot configure node identity twice [ 101.750909][ T874] tipc: Subscription rejected, illegal request [ 101.758634][ T31] usb 6-1: device descriptor read/8, error -71 [ 101.763667][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 101.763707][ T36] audit: type=1400 audit(1775037134.216:364): avc: denied { create } for pid=1973 comm="syz.4.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.849916][ T1190] usb 3-1: 1:1 : bogus bTerminalLink 0 [ 101.856239][ T1190] usb 3-1: unit 4 not found! [ 101.862113][ T1190] usb 3-1: unit 255 not found! [ 101.870299][ T1190] usb 3-1: USB disconnect, device number 52 [ 101.880528][ T1404] udevd[1404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.899674][ T31] usb 6-1: device descriptor read/8, error -71 [ 101.900312][ T1979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.916204][ T1979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.926632][ T36] audit: type=1400 audit(1775037134.386:365): avc: denied { create } for pid=1978 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 101.959809][ T1979] kvm: emulating exchange as write [ 102.035747][ T340] tipc: Node number set to 2886997007 [ 102.145822][ T31] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 102.160348][ T1982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.527'. [ 102.171171][ T31] usb 6-1: device descriptor read/8, error -71 [ 102.310322][ T31] usb 6-1: device descriptor read/8, error -71 [ 102.318658][ T1990] syz.0.531 (1990): attempted to duplicate a private mapping with mremap. This is not supported. [ 102.340200][ T36] audit: type=1400 audit(1775037134.796:366): avc: denied { write } for pid=1991 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.361166][ T36] audit: type=1400 audit(1775037134.806:367): avc: denied { nlmsg_write } for pid=1991 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.395118][ T36] audit: type=1400 audit(1775037134.846:368): avc: denied { map } for pid=1993 comm="syz.2.533" path="socket:[17490]" dev="sockfs" ino=17490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.425916][ T31] usb usb6-port1: unable to enumerate USB device [ 102.497250][ T1999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.506006][ T1999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.516949][ T1999] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 102.524610][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.585692][ T310] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 102.736955][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.749124][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.759395][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.768850][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.778012][ T310] usb 1-1: config 0 descriptor?? [ 102.784050][ T310] hub 1-1:0.0: USB hub found [ 102.988457][ T310] hub 1-1:0.0: 1 port detected [ 103.193741][ T310] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 103.200576][ T310] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 103.209735][ T310] usbhid 1-1:0.0: can't add hid device: -71 [ 103.215788][ T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 103.218880][ T2014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10602 sclass=netlink_route_socket pid=2014 comm=syz.0.539 [ 103.239132][ T36] audit: type=1400 audit(1775037135.696:369): avc: denied { create } for pid=2013 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 103.246232][ T310] usb 1-1: USB disconnect, device number 55 [ 103.317675][ T36] audit: type=1400 audit(1775037135.776:370): avc: denied { remount } for pid=2021 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.385798][ T340] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 103.515778][ T340] usb 3-1: device descriptor read/64, error -71 [ 103.540033][ T36] audit: type=1400 audit(1775037135.996:371): avc: denied { getattr } for pid=2025 comm="syz.5.543" path="socket:[17004]" dev="sockfs" ino=17004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.603343][ T2028] netlink: 'syz.5.544': attribute type 4 has an invalid length. [ 103.611421][ T2028] netlink: 'syz.5.544': attribute type 4 has an invalid length. [ 103.755677][ T340] usb 3-1: device descriptor read/64, error -71 [ 103.995853][ T340] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 104.125788][ T340] usb 3-1: device descriptor read/64, error -71 [ 104.176448][ T45] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 104.184602][ T45] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.365712][ T340] usb 3-1: device descriptor read/64, error -71 [ 104.475690][ T310] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 104.475847][ T340] usb usb3-port1: attempt power cycle [ 104.535690][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.535702][ T695] Bluetooth: hci0: command 0x1003 tx timeout [ 104.625688][ T310] usb 6-1: Using ep0 maxpacket: 16 [ 104.632476][ T310] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.643618][ T310] usb 6-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 25 [ 104.657126][ T310] usb 6-1: config 0 interface 0 has no altsetting 0 [ 104.663994][ T310] usb 6-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 104.673370][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.682446][ T310] usb 6-1: config 0 descriptor?? [ 104.772858][ T2050] SELinux: security_context_str_to_sid (=5] S9q#) failed with errno=-22 [ 104.825807][ T340] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 104.847976][ T340] usb 3-1: device descriptor read/8, error -71 [ 104.916778][ T36] audit: type=1400 audit(1775037137.376:372): avc: denied { write } for pid=2059 comm="syz.0.553" path="socket:[17073]" dev="sockfs" ino=17073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.963057][ T36] audit: type=1400 audit(1775037137.416:373): avc: denied { create } for pid=2065 comm="syz.0.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 104.983953][ T340] usb 3-1: device descriptor read/8, error -71 [ 105.091020][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.098150][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.105203][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.112397][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.119343][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.126388][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.133322][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.140548][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.147886][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.155400][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.162376][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.169582][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.177744][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.184719][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.191763][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.198939][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.206053][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.213125][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.220540][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.227710][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.234633][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.242079][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.245657][ T340] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 105.249375][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.258733][ T2081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.266343][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.276753][ T2081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.281937][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.290944][ T340] usb 3-1: device descriptor read/8, error -71 [ 105.297607][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.304985][ T2043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=2043 comm=syz.5.548 [ 105.311330][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.326154][ T2043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=2043 comm=syz.5.548 [ 105.335239][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.344371][ T2043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2043 comm=syz.5.548 [ 105.351448][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.364495][ T2043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=2043 comm=syz.5.548 [ 105.371259][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.391970][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.399536][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.406657][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.413800][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.421032][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.425654][ T45] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 105.428229][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.444030][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.451612][ T310] wacom 0003:056A:0044.0012: unknown main item tag 0x0 [ 105.458985][ T310] wacom 0003:056A:0044.0012: Unknown device_type for 'HID 056a:0044'. Assuming pen. [ 105.466879][ T340] usb 3-1: device descriptor read/8, error -71 [ 105.470188][ T310] wacom 0003:056A:0044.0012: hidraw0: USB HID v0.08 Device [HID 056a:0044] on usb-dummy_hcd.5-1/input0 [ 105.488090][ T310] input: Wacom Intuos2 12x12 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0044.0012/input/input21 [ 105.505965][ T310] usb 6-1: USB disconnect, device number 28 [ 105.585797][ T340] usb usb3-port1: unable to enumerate USB device [ 105.595673][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 105.602230][ T45] usb 1-1: config 8 has an invalid interface number: 74 but max is 0 [ 105.610586][ T45] usb 1-1: config 8 has no interface number 0 [ 105.616975][ T45] usb 1-1: config 8 interface 74 has no altsetting 0 [ 105.625241][ T45] usb 1-1: New USB device found, idVendor=19d2, idProduct=1015, bcdDevice=ec.1a [ 105.635123][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.643520][ T45] usb 1-1: Product: syz [ 105.648174][ T45] usb 1-1: Manufacturer: syz [ 105.652968][ T45] usb 1-1: SerialNumber: syz [ 105.860820][ T45] usb 1-1: bad CDC descriptors [ 105.872869][ T45] usb 1-1: USB disconnect, device number 56 [ 105.883381][ T2088] rust_binder: Write failure EFAULT in pid:377 [ 105.895512][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.912012][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.185853][ T340] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 106.347164][ T340] usb 6-1: config 120 has an invalid interface number: 125 but max is 0 [ 106.356449][ T340] usb 6-1: config 120 has no interface number 0 [ 106.362943][ T340] usb 6-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64 [ 106.374896][ T340] usb 6-1: config 120 interface 125 has no altsetting 0 [ 106.383648][ T340] usb 6-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 106.392899][ T340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.401294][ T340] usb 6-1: Product: syz [ 106.405705][ T340] usb 6-1: Manufacturer: syz [ 106.410451][ T340] usb 6-1: SerialNumber: syz [ 106.416543][ T2093] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 106.558557][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.567253][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.577313][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.586598][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.595167][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.604091][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.605691][ T310] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 106.613102][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.630509][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.633559][ T340] ums-usbat 6-1:120.125: USB Mass Storage device detected [ 106.668826][ T340] usb 6-1: USB disconnect, device number 29 [ 106.765687][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 106.772932][ T310] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.781289][ T310] usb 1-1: config 0 has no interface number 0 [ 106.788216][ T310] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 106.801731][ T310] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 106.811295][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.820147][ T310] usb 1-1: Product: syz [ 106.824426][ T310] usb 1-1: Manufacturer: syz [ 106.829805][ T310] usb 1-1: SerialNumber: syz [ 106.835348][ T310] usb 1-1: config 0 descriptor?? [ 107.046228][ T2098] netlink: 'syz.0.566': attribute type 8 has an invalid length. [ 107.057404][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 107.057424][ T36] audit: type=1400 audit(1775037139.516:377): avc: denied { bpf } for pid=2097 comm="syz.0.566" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.080206][ T310] usb 1-1: USB disconnect, device number 57 [ 107.322250][ T2119] fuse: root generation should be zero [ 107.330995][ T2132] kvm: kvm [2131]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 107.341859][ T2132] kvm: kvm [2131]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 107.371337][ T2132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.576'. [ 107.373529][ T2119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.392471][ T2119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.479432][ T2139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.489210][ T2139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.521265][ T36] audit: type=1400 audit(1775037139.985:378): avc: denied { shutdown } for pid=2142 comm="syz.5.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.653406][ T2157] rust_binder: Read failure Err(EFAULT) in pid:194 [ 107.666722][ T2159] tipc: Started in network mode [ 107.678397][ T2159] tipc: Node identity 3a0000000000002d0000000000000001, cluster identity 4711 [ 107.687658][ T2159] tipc: Enabling of bearer rejected, failed to enable media [ 107.955676][ T310] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 108.075705][ T107] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 108.095774][ T310] usb 6-1: device descriptor read/64, error -71 [ 108.225706][ T107] usb 1-1: Using ep0 maxpacket: 16 [ 108.232863][ T107] usb 1-1: config 1 has an invalid interface number: 193 but max is 0 [ 108.241405][ T107] usb 1-1: config 1 has an invalid interface number: 104 but max is 0 [ 108.250312][ T107] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 108.260379][ T107] usb 1-1: config 1 has no interface number 0 [ 108.266815][ T107] usb 1-1: config 1 has no interface number 1 [ 108.273085][ T107] usb 1-1: config 1 interface 193 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 108.284988][ T107] usb 1-1: config 1 interface 193 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 108.299982][ T107] usb 1-1: too many endpoints for config 1 interface 104 altsetting 246: 114, using maximum allowed: 30 [ 108.312214][ T107] usb 1-1: config 1 interface 104 altsetting 246 bulk endpoint 0xE has invalid maxpacket 8 [ 108.322844][ T107] usb 1-1: config 1 interface 104 altsetting 246 has an invalid descriptor for endpoint zero, skipping [ 108.335306][ T107] usb 1-1: config 1 interface 104 altsetting 246 has 5 endpoint descriptors, different from the interface descriptor's value: 114 [ 108.349274][ T107] usb 1-1: config 1 interface 193 has no altsetting 0 [ 108.356568][ T310] usb 6-1: device descriptor read/64, error -71 [ 108.363675][ T107] usb 1-1: config 1 interface 104 has no altsetting 0 [ 108.370939][ T107] usb 1-1: New USB device found, idVendor=19d2, idProduct=1128, bcdDevice=bf.d5 [ 108.380889][ T107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.594516][ T107] usb 1-1: string descriptor 0 read error: -71 [ 108.601177][ T310] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 108.617933][ T107] usb 1-1: USB disconnect, device number 58 [ 108.755762][ T310] usb 6-1: device descriptor read/64, error -71 [ 108.995772][ T310] usb 6-1: device descriptor read/64, error -71 [ 109.105994][ T310] usb usb6-port1: attempt power cycle [ 109.121383][ T36] audit: type=1400 audit(1775037141.585:379): avc: denied { write } for pid=2184 comm="syz.0.592" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.214241][ T2196] SELinux: failed to load policy [ 109.445654][ T310] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 109.457580][ T10] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 109.467247][ T310] usb 6-1: device descriptor read/8, error -71 [ 109.595679][ T10] usb 1-1: device descriptor read/64, error -71 [ 109.603187][ T310] usb 6-1: device descriptor read/8, error -71 [ 109.835635][ T10] usb 1-1: device descriptor read/64, error -71 [ 109.845893][ T310] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 109.866952][ T310] usb 6-1: device descriptor read/8, error -71 [ 109.996758][ T310] usb 6-1: device descriptor read/8, error -71 [ 110.075729][ T10] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 110.105810][ T310] usb usb6-port1: unable to enumerate USB device [ 110.205681][ T10] usb 1-1: device descriptor read/64, error -71 [ 110.250390][ T36] audit: type=1400 audit(1775037142.715:380): avc: denied { sqpoll } for pid=2202 comm="syz.2.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 110.285660][ T36] audit: type=1400 audit(1775037142.745:381): avc: denied { getopt } for pid=2206 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.445713][ T10] usb 1-1: device descriptor read/64, error -71 [ 110.556044][ T10] usb usb1-port1: attempt power cycle [ 110.685693][ T107] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 110.835683][ T107] usb 3-1: Using ep0 maxpacket: 16 [ 110.841627][ T107] usb 3-1: too many configurations: 251, using maximum allowed: 8 [ 110.850627][ T107] usb 3-1: config 0 has no interfaces? [ 110.857423][ T107] usb 3-1: config 0 has no interfaces? [ 110.864030][ T107] usb 3-1: config 0 has no interfaces? [ 110.870679][ T107] usb 3-1: config 0 has no interfaces? [ 110.877130][ T107] usb 3-1: config 0 has no interfaces? [ 110.883682][ T107] usb 3-1: config 0 has no interfaces? [ 110.890303][ T107] usb 3-1: config 0 has no interfaces? [ 110.896133][ T10] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 110.905012][ T107] usb 3-1: config 0 has no interfaces? [ 110.912859][ T107] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 110.922462][ T107] usb 3-1: New USB device strings: Mfr=14, Product=241, SerialNumber=178 [ 110.931640][ T107] usb 3-1: Product: syz [ 110.936052][ T107] usb 3-1: Manufacturer: syz [ 110.941031][ T107] usb 3-1: SerialNumber: syz [ 110.946602][ T10] usb 1-1: device descriptor read/8, error -71 [ 110.953874][ T107] usb 3-1: config 0 descriptor?? [ 111.077031][ T10] usb 1-1: device descriptor read/8, error -71 [ 111.162595][ T2219] netlink: 64 bytes leftover after parsing attributes in process `syz.2.602'. [ 111.172935][ T107] usb 3-1: USB disconnect, device number 58 [ 111.205692][ T2228] fuse: Unknown parameter 'u' [ 111.212507][ T36] audit: type=1326 audit(1775037143.675:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2227 comm="syz.4.605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f573339c819 code=0x0 [ 111.313264][ T2229] overlayfs: failed to resolve './file2': -2 [ 111.315751][ T10] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 111.346885][ T10] usb 1-1: device descriptor read/8, error -71 [ 111.476866][ T10] usb 1-1: device descriptor read/8, error -71 [ 111.509197][ T2231] tmpfs: Bad value for 'nr_inodes' [ 111.585886][ T10] usb usb1-port1: unable to enumerate USB device [ 111.687210][ T36] audit: type=1400 audit(1775037144.155:383): avc: denied { create } for pid=2232 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.755701][ T310] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 111.885658][ T310] usb 6-1: device descriptor read/64, error -71 [ 111.925695][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 112.047708][ T2235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.056802][ T2235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.075758][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 112.083765][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.094223][ T10] usb 3-1: config 10 interface 0 has no altsetting 0 [ 112.104302][ T10] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=8e.f4 [ 112.114270][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.123436][ T10] usb 3-1: Product: ⁽䏉贡蹑詸㵾㭇꿯ࡦ쇾㏨㿅梆놭똉麍ᮅ멎ꢽ蹟⨶닿希뾵劲楡炥哭쥟᫹ᘠ㪋佖ﭠ౥劑ˣ滭ꌛ얿譌㿞ᬭ멏駍킣襋韔চ酈滢磈ῑ㢱쉺িᓤ型ᢳ罪ᭅ鈊䷙ꦚ㿡贔ꋥ픇暠霅쮳멎쑂⹋턚섌鉋∐褅聣敳術䵃鰭뚒讠䰃䜎䲇铗렞㯀菨煀撗뷳ꎅ俕龌々 [ 112.157163][ T310] usb 6-1: device descriptor read/64, error -71 [ 112.163845][ T10] usb 3-1: SerialNumber: 驲跓덱꾘鰦쁲靴빥ꑠᒦ讣樾縨烻솴餶⤞鋟屲畔蝲⢲ῖ㋯쟇睁㰜癶鍤鴙鳳㰘㈱ﻕ琜嬕괋虣娏즔⮪<홖祩嫋㓀ᰇ氧⧜痻㠤䄗稍ꇒо⾍╚㽓ゑ剏 [ 112.395864][ T310] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 112.419033][ T10] snd-usb-audio 3-1:10.0: probe with driver snd-usb-audio failed with error -22 [ 112.430150][ T10] usb 3-1: USB disconnect, device number 59 [ 112.460443][ T1404] udevd[1404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:10.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 112.525798][ T310] usb 6-1: device descriptor read/64, error -71 [ 112.587788][ T2244] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 112.605830][ T107] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 112.621382][ T2246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.630109][ T2246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.755710][ T107] usb 1-1: Using ep0 maxpacket: 16 [ 112.762658][ T107] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 112.771031][ T310] usb 6-1: device descriptor read/64, error -71 [ 112.777365][ T107] usb 1-1: config 0 has no interface number 0 [ 112.783599][ T107] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 112.793674][ T107] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.805494][ T107] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 112.814827][ T107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.822969][ T107] usb 1-1: Product: syz [ 112.827347][ T107] usb 1-1: Manufacturer: syz [ 112.832084][ T107] usb 1-1: SerialNumber: syz [ 112.837391][ T107] usb 1-1: config 0 descriptor?? [ 112.842959][ T2242] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 112.850698][ T2242] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 112.895787][ T310] usb usb6-port1: attempt power cycle [ 112.911360][ T36] audit: type=1400 audit(1775037145.375:384): avc: denied { create } for pid=2247 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 112.986324][ T36] audit: type=1400 audit(1775037145.455:385): avc: denied { getopt } for pid=2253 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.992748][ T2254] bpf: Bad value for 'uid' [ 113.060136][ T2242] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 113.061360][ T36] audit: type=1400 audit(1775037145.525:386): avc: denied { audit_read } for pid=2257 comm="syz.2.616" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.067590][ T2242] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 113.155177][ T2263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.164605][ T2263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.245791][ T310] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 113.266804][ T310] usb 6-1: device descriptor read/8, error -71 [ 113.396661][ T310] usb 6-1: device descriptor read/8, error -71 [ 113.519583][ T107] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 113.530605][ T107] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 113.543376][ T107] asix 1-1:0.251: probe with driver asix failed with error -71 [ 113.545667][ T340] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 113.552520][ T107] usb 1-1: USB disconnect, device number 63 [ 113.635695][ T310] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 113.656882][ T310] usb 6-1: device descriptor read/8, error -71 [ 113.695761][ T340] usb 3-1: device descriptor read/64, error -71 [ 113.754637][ T2267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.763662][ T2267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.778668][ T2267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.787776][ T2267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.797080][ T310] usb 6-1: device descriptor read/8, error -71 [ 113.905856][ T310] usb usb6-port1: unable to enumerate USB device [ 113.935726][ T340] usb 3-1: device descriptor read/64, error -71 [ 114.158547][ T36] audit: type=1400 audit(1775037146.625:387): avc: denied { accept } for pid=2276 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.182737][ T340] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 114.310190][ T2282] netlink: 'syz.4.624': attribute type 153 has an invalid length. [ 114.319380][ T340] usb 3-1: device descriptor read/64, error -71 [ 114.565803][ T340] usb 3-1: device descriptor read/64, error -71 [ 114.685907][ T340] usb usb3-port1: attempt power cycle [ 114.735287][ T36] audit: type=1400 audit(1775037147.195:388): avc: denied { execute } for pid=2293 comm="syz.4.628" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.771203][ T36] audit: type=1400 audit(1775037147.195:389): avc: denied { execute_no_trans } for pid=2293 comm="syz.4.628" path=2F6D656D66643A5B0B7827A5291AA9FDFAADD16D64C8854858A9250C1A6501202864656C6574656429 dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.802870][ T2296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.812781][ T2296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.826858][ T2296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.836798][ T2296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.847037][ T36] audit: type=1400 audit(1775037147.315:390): avc: denied { accept } for pid=2295 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 114.935664][ T107] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 115.025660][ T340] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 115.046698][ T340] usb 3-1: device descriptor read/8, error -71 [ 115.054702][ T2299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.064697][ T2299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.087142][ T107] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 115.097761][ T107] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 115.108542][ T107] usb 6-1: config 1 interface 0 has no altsetting 0 [ 115.117528][ T107] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 115.127462][ T107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.135457][ T107] usb 6-1: Product: syz [ 115.140140][ T107] usb 6-1: Manufacturer: syz [ 115.145366][ T107] usb 6-1: SerialNumber: syz [ 115.152097][ T2289] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 115.159669][ T2289] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 115.186811][ T340] usb 3-1: device descriptor read/8, error -71 [ 115.285655][ T310] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 115.396379][ T107] rtl8150 6-1:1.0: couldn't reset the device [ 115.404628][ T107] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 115.418141][ T107] usb 6-1: USB disconnect, device number 38 [ 115.426027][ T340] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 115.438845][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.447815][ T310] usb 1-1: not running at top speed; connect to a high speed hub [ 115.456894][ T340] usb 3-1: device descriptor read/8, error -71 [ 115.465003][ T310] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 115.477783][ T310] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 4 [ 115.491519][ T310] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 115.501154][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.509600][ T310] usb 1-1: Product: syz [ 115.514079][ T310] usb 1-1: Manufacturer: syz [ 115.520923][ T310] usb 1-1: SerialNumber: syz [ 115.581033][ T2313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=2313 comm=syz.5.634 [ 115.586686][ T340] usb 3-1: device descriptor read/8, error -71 [ 115.705805][ T340] usb usb3-port1: unable to enumerate USB device [ 115.729189][ T310] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 115.752376][ T310] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 115.764205][ T310] usb 1-1: USB disconnect, device number 64 [ 115.772741][ T1404] udevd[1404]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.845786][ T107] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 115.997057][ T107] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.007526][ T107] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.018192][ T107] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.028353][ T107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.036886][ T107] usb 6-1: SerialNumber: syz [ 116.077005][ T2320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.086183][ T2320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.249678][ T107] usb 6-1: 0:2 : does not exist [ 116.250037][ T2325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.259780][ T107] usb 6-1: USB disconnect, device number 39 [ 116.264323][ T2325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.278479][ T2325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.288096][ T2325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.400359][ T2326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.407443][ T36] audit: type=1326 audit(1775037148.865:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz.4.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573339c819 code=0x7fc00000 [ 116.409639][ T2326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.433846][ T2327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.452464][ T2327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.455892][ T310] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 116.505712][ T340] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 116.605856][ T36] audit: type=1400 audit(1775037149.075:392): avc: denied { setattr } for pid=2341 comm="syz.4.642" name="PPPOL2TP" dev="sockfs" ino=19685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.631235][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 116.640081][ T310] usb 3-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 116.651530][ T310] usb 3-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 116.656933][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.661948][ T310] usb 3-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 116.673559][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.683160][ T310] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 116.693238][ T340] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.706690][ T310] usb 3-1: config 1 interface 0 has no altsetting 0 [ 116.720805][ T340] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.736316][ T340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.744958][ T310] usb 3-1: string descriptor 0 read error: -22 [ 116.752356][ T310] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.763176][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.792623][ T2321] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 116.801680][ T340] usb 1-1: config 0 descriptor?? [ 116.804858][ T2321] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 116.819811][ T2352] input: syz1 as /devices/virtual/input/input24 [ 116.832428][ T2352] input: failed to attach handler leds to device input24, error: -6 [ 116.844829][ T310] usb 3-1: bad CDC descriptors [ 116.864647][ T1404] udevd[1404]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 116.908988][ T2358] netlink: 'syz.5.647': attribute type 1 has an invalid length. [ 116.919081][ T2358] netlink: 104 bytes leftover after parsing attributes in process `syz.5.647'. [ 116.919097][ T36] audit: type=1400 audit(1775037149.385:393): avc: denied { nlmsg_read } for pid=2357 comm="syz.5.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.920003][ T2358] netlink: 'syz.5.647': attribute type 16 has an invalid length. [ 117.219161][ T340] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 117.236796][ T340] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 117.382053][ T2372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.390843][ T2372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.403816][ T2321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.413205][ T2321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.423067][ T2372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.436637][ T2372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.447661][ T2372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.457998][ T2372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.466985][ T2372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 117.476702][ T2372] fuse: Bad value for 'fd' [ 117.768490][ T2323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.777656][ T2323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.786862][ T310] usb 1-1: USB disconnect, device number 65 [ 118.025664][ T2379] SELinux: failed to load policy [ 118.045421][ T2381] rust_binder: Error while translating object. [ 118.045457][ T2381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 118.053175][ T2381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:469 [ 118.185654][ T107] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 118.298263][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 118.298285][ T36] audit: type=1400 audit(1775037150.765:399): avc: denied { execheap } for pid=2385 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 118.301674][ T2386] tmpfs: Unknown parameter 'nr' [ 118.345633][ T107] usb 6-1: Using ep0 maxpacket: 8 [ 118.353773][ T107] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 118.357585][ T2395] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 118.362557][ T107] usb 6-1: config 179 has no interface number 0 [ 118.371816][ T2395] overlayfs: missing 'lowerdir' [ 118.379910][ T2396] netlink: 388 bytes leftover after parsing attributes in process `syz.4.659'. [ 118.393044][ T107] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 118.400157][ T2396] netlink: 388 bytes leftover after parsing attributes in process `syz.4.659'. [ 118.404737][ T107] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 118.414210][ T2396] netlink: 388 bytes leftover after parsing attributes in process `syz.4.659'. [ 118.425202][ T107] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.435105][ T2396] netlink: 388 bytes leftover after parsing attributes in process `syz.4.659'. [ 118.446334][ T107] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 118.456051][ T2396] netlink: 388 bytes leftover after parsing attributes in process `syz.4.659'. [ 118.467831][ T107] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 118.477185][ T2396] netlink: 388 bytes leftover after parsing attributes in process `syz.4.659'. [ 118.491649][ T107] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 118.500915][ T2396] netlink: 388 bytes leftover after parsing attributes in process `syz.4.659'. [ 118.510164][ T107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.520041][ T2396] netlink: 388 bytes leftover after parsing attributes in process `syz.4.659'. [ 118.532088][ T2376] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 118.645770][ T892] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 118.664976][ T2401] kvm: kvm [2399]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 118.674140][ T2401] kvm: kvm [2399]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 118.748848][ T107] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input25 [ 118.796930][ T892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.808253][ T892] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 118.818499][ T892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.827599][ T892] usb 1-1: config 0 descriptor?? [ 118.925747][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.933613][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.940426][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.957148][ T340] usb 6-1: USB disconnect, device number 40 [ 118.957239][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 118.972077][ T340] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 118.972156][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 119.019072][ T2413] netlink: 'syz.5.664': attribute type 6 has an invalid length. [ 119.089812][ T107] usb 3-1: USB disconnect, device number 64 [ 119.125295][ T2422] tipc: Started in network mode [ 119.131089][ T2422] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 119.140611][ T2422] tipc: Enabling of bearer rejected, failed to enable media [ 119.236281][ T892] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 119.245267][ T892] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 119.254064][ T892] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 119.264752][ T892] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 119.273798][ T892] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 119.283661][ T892] playstation 0003:054C:0DF2.0014: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 119.445769][ T107] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 119.475742][ T340] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 119.605697][ T107] usb 3-1: Using ep0 maxpacket: 32 [ 119.614179][ T107] usb 3-1: config 1 has an invalid descriptor of length 82, skipping remainder of the config [ 119.626856][ T107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.639300][ T107] usb 3-1: config 1 interface 0 has no altsetting 0 [ 119.650195][ T107] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 119.657453][ T340] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 119.663374][ T107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.673602][ T340] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 119.682994][ T107] usb 3-1: Product: syz [ 119.695492][ T340] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 119.701013][ T107] usb 3-1: Manufacturer: syz [ 119.714963][ T340] usb 6-1: config 220 has no interface number 2 [ 119.720745][ T107] usb 3-1: SerialNumber: syz [ 119.728152][ T340] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 119.749956][ T340] usb 6-1: config 220 interface 0 has no altsetting 0 [ 119.757816][ T340] usb 6-1: config 220 interface 76 has no altsetting 0 [ 119.765954][ T340] usb 6-1: config 220 interface 1 has no altsetting 0 [ 119.775229][ T340] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 119.784846][ T340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.794309][ T340] usb 6-1: Product: syz [ 119.799288][ T340] usb 6-1: Manufacturer: syz [ 119.804550][ T340] usb 6-1: SerialNumber: syz [ 119.841113][ T2395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.851413][ T2395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.862071][ T892] playstation 0003:054C:0DF2.0014: Failed to retrieve feature with reportID 5: -71 [ 119.874094][ T892] playstation 0003:054C:0DF2.0014: Failed to retrieve DualSense calibration info: -71 [ 119.887031][ T892] playstation 0003:054C:0DF2.0014: Failed to get calibration data from DualSense [ 119.899187][ T892] playstation 0003:054C:0DF2.0014: Failed to create dualsense. [ 119.910348][ T892] playstation 0003:054C:0DF2.0014: probe with driver playstation failed with error -71 [ 119.922998][ T892] usb 1-1: USB disconnect, device number 66 [ 119.937514][ T36] audit: type=1400 audit(1775037152.405:400): avc: denied { read } for pid=2420 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.015130][ T2426] netlink: 'syz.5.669': attribute type 4 has an invalid length. [ 120.046030][ T340] usb 6-1: selecting invalid altsetting 0 [ 120.054767][ T340] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 120.062018][ T340] usb 6-1: No valid video chain found. [ 120.072461][ T340] usb 6-1: USB disconnect, device number 41 [ 120.398147][ T2431] 9pnet_fd: Insufficient options for proto=fd [ 120.405196][ T2431] 9pnet_fd: Insufficient options for proto=fd [ 120.476051][ T36] audit: type=1400 audit(1775037152.945:401): avc: denied { mount } for pid=2434 comm="syz.0.671" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 120.583114][ T107] usb 3-1: unit 45 not found! [ 120.604932][ T107] usb 3-1: USB disconnect, device number 65 [ 120.754721][ T36] audit: type=1400 audit(1775037153.215:402): avc: denied { create } for pid=2454 comm="syz.2.678" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.779084][ T36] audit: type=1400 audit(1775037153.225:403): avc: denied { rename } for pid=2454 comm="syz.2.678" name="file0" dev="tmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.805815][ T36] audit: type=1400 audit(1775037153.225:404): avc: denied { unlink } for pid=2454 comm="syz.2.678" name=2E02 dev="tmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 120.831163][ T36] audit: type=1400 audit(1775037153.245:405): avc: denied { ioctl } for pid=2443 comm="syz.5.673" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.835742][ T892] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 120.858458][ T10] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 120.935743][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.936051][ T695] Bluetooth: hci0: command 0x1003 tx timeout [ 120.978631][ T36] audit: type=1400 audit(1775037153.445:406): avc: denied { read write } for pid=2461 comm="syz.2.680" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.006890][ T107] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 121.015667][ T892] usb 6-1: Using ep0 maxpacket: 32 [ 121.022517][ T107] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.036738][ T892] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 121.046301][ T892] usb 6-1: config 2 has no interface number 0 [ 121.053047][ T892] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 121.065644][ T36] audit: type=1400 audit(1775037153.445:407): avc: denied { open } for pid=2461 comm="syz.2.680" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.073032][ T892] usb 6-1: config 2 interface 88 has no altsetting 0 [ 121.092518][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.102285][ T892] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 121.122028][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 121.144760][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 121.145642][ T892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.172792][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 121.183299][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.193011][ T10] usb 1-1: Manufacturer: 탈ᖩ쒸阡翀⎇碭밨񦅡 [ 121.201706][ T10] usb 1-1: SerialNumber: syz [ 121.212985][ T892] usb 6-1: Product: syz [ 121.217574][ T892] usb 6-1: Manufacturer: syz [ 121.222818][ T892] usb 6-1: SerialNumber: syz [ 121.233868][ T2444] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 121.234213][ T2460] fuse: Bad value for 'rootmode' [ 121.256119][ T378] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 121.416567][ T378] usb 3-1: Invalid ep0 maxpacket: 32 [ 121.427125][ T10] usb 1-1: USB disconnect, device number 67 [ 121.452975][ T2444] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 121.555856][ T378] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 121.663831][ T2444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.677302][ T2444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.715903][ T378] usb 3-1: Invalid ep0 maxpacket: 32 [ 121.722603][ T378] usb usb3-port1: attempt power cycle [ 121.879093][ T36] audit: type=1400 audit(1775037154.345:408): avc: denied { nlmsg_write } for pid=2471 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 122.066016][ T378] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 122.086129][ T378] usb 3-1: Invalid ep0 maxpacket: 32 [ 122.103722][ T2444] __nla_validate_parse: 28 callbacks suppressed [ 122.103936][ T2444] netlink: 124 bytes leftover after parsing attributes in process `syz.5.673'. [ 122.157341][ T2484] rust_binder: Error while translating object. [ 122.157378][ T2484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 122.164166][ T2484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:504 [ 122.175743][ T2484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.686'. [ 122.195850][ T339] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 122.208489][ T892] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 122.215690][ T378] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 122.219830][ T892] asix 6-1:2.88: probe with driver asix failed with error -71 [ 122.237469][ T892] usb 6-1: USB disconnect, device number 42 [ 122.256084][ T378] usb 3-1: Invalid ep0 maxpacket: 32 [ 122.263243][ T378] usb usb3-port1: unable to enumerate USB device [ 122.288941][ T2488] overlayfs: failed to resolve './file1': -2 [ 122.306183][ T2490] loop7: detected capacity change from 0 to 7 [ 122.345747][ T339] usb 1-1: Using ep0 maxpacket: 32 [ 122.353003][ T339] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.361966][ T339] usb 1-1: config 0 has no interface number 0 [ 122.370886][ T339] usb 1-1: config 0 interface 184 has no altsetting 0 [ 122.380925][ T339] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 122.390603][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.399328][ T339] usb 1-1: Product: syz [ 122.404294][ T339] usb 1-1: Manufacturer: syz [ 122.410062][ T339] usb 1-1: SerialNumber: syz [ 122.416974][ T339] usb 1-1: config 0 descriptor?? [ 122.423662][ T339] smsc75xx v1.0.0 [ 122.457048][ T2501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.468773][ T2501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.995692][ T340] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 123.000303][ T2505] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 123.013147][ T2505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.023849][ T2505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.147247][ T340] usb 6-1: unable to get BOS descriptor or descriptor too short [ 123.156274][ T340] usb 6-1: config 1 has an invalid descriptor of length 149, skipping remainder of the config [ 123.167343][ T340] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.178233][ T340] usb 6-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 123.187793][ T340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.196110][ T340] usb 6-1: Product: syz [ 123.200795][ T340] usb 6-1: Manufacturer: syz [ 123.205490][ T340] usb 6-1: SerialNumber: syz [ 123.418972][ T340] usb 6-1: USB disconnect, device number 43 [ 123.431409][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 123.451003][ T339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 123.462602][ T339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 123.651287][ T339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 123.663088][ T339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 123.674265][ T339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 123.686165][ T339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 123.697104][ T339] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 123.708087][ T339] usb 1-1: USB disconnect, device number 68 [ 123.750327][ T2523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.763542][ T2523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.785264][ T2528] netlink: 964 bytes leftover after parsing attributes in process `syz.4.700'. [ 123.960094][ T2536] 9pnet_fd: p9_fd_create_unix (2536): problem connecting socket: ./cgroup/file0: -2 [ 124.036732][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 124.036752][ T36] audit: type=1400 audit(1775037156.505:410): avc: denied { write } for pid=339 comm="kworker/0:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20565 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.090821][ T2543] netlink: 240 bytes leftover after parsing attributes in process `syz.5.706'. [ 124.180037][ T2548] netlink: 188 bytes leftover after parsing attributes in process `syz.0.708'. [ 124.187685][ T36] audit: type=1400 audit(1775037156.655:411): avc: denied { map } for pid=2549 comm="syz.4.709" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.190266][ T2548] tipc: MTU too low for tipc bearer [ 124.228747][ T2553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.232735][ T36] audit: type=1400 audit(1775037156.685:412): avc: denied { ioctl } for pid=2547 comm="syz.0.708" path="socket:[20581]" dev="sockfs" ino=20581 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.242910][ T2553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.395676][ T340] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 124.405820][ T892] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 124.485828][ T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 124.545767][ T340] usb 3-1: Using ep0 maxpacket: 8 [ 124.553145][ T340] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.563085][ T340] usb 3-1: config 179 has no interface number 0 [ 124.570879][ T892] usb 6-1: Using ep0 maxpacket: 32 [ 124.576199][ T340] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 124.589917][ T340] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 124.601869][ T340] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.613566][ T340] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 124.626867][ T340] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.641886][ T340] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 124.651430][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.660066][ T892] usb 6-1: unable to get BOS descriptor or descriptor too short [ 124.665672][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 124.669967][ T892] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 117, changing to 7 [ 124.673241][ T2540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.689706][ T892] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 226, changing to 7 [ 124.693995][ T10] usb 1-1: config 2 has an invalid interface number: 152 but max is 0 [ 124.709237][ T892] usb 6-1: New USB device found, idVendor=0499, idProduct=1042, bcdDevice= 0.40 [ 124.717164][ T10] usb 1-1: config 2 has no interface number 0 [ 124.733077][ T892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.734917][ T10] usb 1-1: config 2 interface 152 has no altsetting 0 [ 124.747240][ T892] usb 6-1: Product: syz [ 124.756657][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8155, bcdDevice=c3.4d [ 124.758578][ T892] usb 6-1: Manufacturer: syz [ 124.768869][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.774283][ T892] usb 6-1: SerialNumber: syz [ 124.783585][ T10] usb 1-1: Product: syz [ 124.793238][ T10] usb 1-1: Manufacturer: syz [ 124.799382][ T10] usb 1-1: SerialNumber: syz [ 124.807560][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 124.934762][ T2540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.947285][ T2540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.000111][ T892] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 125.011426][ T892] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 125.016367][ T2555] usb usb7: usbfs: process 2555 (syz.0.711) did not claim interface 0 before use [ 125.024963][ T892] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 125.049192][ T892] usb 6-1: USB disconnect, device number 44 [ 125.050185][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.077424][ T10] r8152 1-1:2.152: Expected endpoints are not found [ 125.101241][ T10] r8152-cfgselector 1-1: USB disconnect, device number 69 [ 125.158605][ T2564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.168886][ T2566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.169203][ T2540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 125.178918][ T2564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.203475][ T2566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.257557][ T378] usb 3-1: USB disconnect, device number 70 [ 125.257607][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 125.278432][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 125.683890][ T2580] mmap: syz.0.718 (2580): VmData 29470720 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 125.730079][ T2589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.741566][ T2589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.763692][ T2587] kvm: kvm [2586]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 125.775126][ T2587] kvm: kvm [2586]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 125.786762][ T378] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 125.796484][ T2587] kvm: kvm [2586]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 125.807413][ T2592] SELinux: failed to load policy [ 125.811920][ T2587] kvm: kvm [2586]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 125.825686][ T2587] kvm: kvm [2586]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 125.842710][ T2587] kvm: kvm [2586]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 125.855333][ T2587] kvm: kvm [2586]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 125.866375][ T2587] kvm: kvm [2586]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 125.879745][ T2589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.880162][ T2587] kvm: kvm [2586]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 125.890287][ T2589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.905069][ T2587] kvm: kvm [2586]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 125.947444][ T378] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 125.962767][ T378] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 125.975496][ T378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.986636][ T378] usb 6-1: Product: syz [ 125.992674][ T378] usb 6-1: Manufacturer: syz [ 125.998153][ T378] usb 6-1: SerialNumber: syz [ 126.075679][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 126.226098][ T10] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 126.244155][ T10] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 126.255252][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.266033][ T10] usb 3-1: config 0 descriptor?? [ 126.476740][ T2596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.487422][ T2596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.497922][ T340] usb 3-1: USB disconnect, device number 71 [ 127.076095][ T2608] syzkaller1: entered promiscuous mode [ 127.082583][ T2608] syzkaller1: entered allmulticast mode [ 127.096356][ T36] audit: type=1326 audit(1775037159.565:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2607 comm="syz.2.728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bcdd9c819 code=0x0 [ 127.725811][ T340] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 127.885684][ T340] usb 1-1: Using ep0 maxpacket: 16 [ 127.892527][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.904130][ T340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.915088][ T340] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.929927][ T340] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 127.941798][ T340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.952088][ T340] usb 1-1: config 0 descriptor?? [ 128.245668][ T892] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 128.361728][ T340] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 128.371658][ T340] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 128.385652][ T892] usb 3-1: device descriptor read/64, error -71 [ 128.571549][ T378] usb 6-1: MIDIStreaming interface descriptor not found [ 128.577741][ T2611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.588307][ T378] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 128.592562][ T2611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.600880][ T378] usb 6-1: USB disconnect, device number 45 [ 128.618973][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.625680][ T892] usb 3-1: device descriptor read/64, error -71 [ 128.758484][ T340] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 128.768541][ T340] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 128.781233][ T340] microsoft 0003:045E:07DA.0016: no inputs found [ 128.787933][ T340] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 128.800636][ T340] usb 1-1: USB disconnect, device number 70 [ 128.875647][ T892] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 128.905646][ T378] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 128.950066][ T2623] rust_binder: Error while translating object. [ 128.950110][ C1] BUG: TASK stack guard page was hit at ffffc9000eda7ed8 (stack is ffffc9000eda8000..ffffc9000edb0000) [ 128.950129][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 128.950144][ C1] CPU: 1 UID: 0 PID: 2623 Comm: syz.4.733 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 128.950159][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.950166][ C1] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 128.950187][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 128.950197][ C1] RSP: 0018:ffffc9000eda7ee0 EFLAGS: 00010282 [ 128.950208][ C1] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc9000eda8250 [ 128.950217][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 128.950225][ C1] RBP: ffffc9000eda81b0 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 128.950233][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: 0000000000000680 [ 128.950241][ C1] R13: dffffc0000000000 R14: 1ffff92001db503c R15: ffffc9000eda8250 [ 128.950250][ C1] FS: 00007f57341c46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 128.950261][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.950269][ C1] CR2: ffffc9000eda7ed8 CR3: 000000011ec08000 CR4: 00000000003526b0 [ 128.950282][ C1] Call Trace: [ 128.950287][ C1] [ 128.950293][ C1] ? __kasan_check_read+0x15/0x20 [ 128.950310][ C1] ? static_key_count+0x45/0x70 [ 128.950321][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 128.950336][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 128.950353][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 128.950374][ C1] ? unwind_next_frame+0x3c1/0x750 [ 128.950386][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 128.950398][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 128.950426][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 128.950444][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 128.950463][ C1] ? stack_depot_save_flags+0x672/0x800 [ 128.950478][ C1] ? stack_depot_save+0x12/0x20 [ 128.950492][ C1] ? save_stack+0x133/0x240 [ 128.950502][ C1] ? free_contig_range+0x260/0x260 [ 128.950516][ C1] ? __reset_page_owner+0x450/0x450 [ 128.950526][ C1] ? zone_page_state_add+0x43/0x90 [ 128.950541][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 128.950552][ C1] ? prep_new_page+0x20/0x120 [ 128.950563][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 128.950576][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 128.950588][ C1] ? stack_depot_save_flags+0x672/0x800 [ 128.950602][ C1] ? kasan_save_track+0x4f/0x80 [ 128.950616][ C1] ? kasan_save_free_info+0x4a/0x60 [ 128.950629][ C1] ? __kasan_slab_free+0x5f/0x80 [ 128.950638][ C1] ? kfree+0x158/0x440 [ 128.950652][ C1] ? krealloc_noprof+0xfa/0x130 [ 128.950666][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 128.950706][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 128.950724][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 128.950743][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 128.950764][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 128.950781][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 128.950804][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 128.950816][ C1] ? sched_clock_noinstr+0xd/0x30 [ 128.950828][ C1] ? __set_page_owner+0x8e/0x600 [ 128.950839][ C1] ? __zone_watermark_ok+0x134/0x630 [ 128.950858][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 128.950869][ C1] ? kasan_unpoison+0x4a/0x70 [ 128.950883][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 128.950894][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 128.950906][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 128.950920][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 128.950934][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 128.950949][ C1] ? prep_new_page+0x20/0x120 [ 128.950959][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 128.950975][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 128.950987][ C1] ? static_key_count+0x45/0x70 [ 128.950998][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 128.951012][ C1] ? lruvec_init+0x1d1/0x280 [ 128.951027][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 128.951040][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 128.951063][ C1] ? unwind_get_return_address+0x51/0x90 [ 128.951075][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 128.951087][ C1] ? arch_stack_walk+0x10a/0x170 [ 128.951103][ C1] ? stack_trace_save+0xaa/0x100 [ 128.951113][ C1] ? stack_depot_save_flags+0x672/0x800 [ 128.951128][ C1] ? kasan_save_track+0x4f/0x80 [ 128.951142][ C1] ? kasan_save_track+0x3e/0x80 [ 128.951156][ C1] ? kasan_save_free_info+0x4a/0x60 [ 128.951169][ C1] ? __kasan_slab_free+0x5f/0x80 [ 128.951179][ C1] ? kfree+0x158/0x440 [ 128.951191][ C1] ? krealloc_noprof+0xfa/0x130 [ 128.951205][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 128.951241][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 128.951258][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 128.951277][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 128.951298][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 128.951319][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 128.951339][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 128.951357][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 128.951372][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 128.951385][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 128.951395][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 128.951404][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 128.951419][ C1] ? do_syscall_64+0x57/0xf0 [ 128.951433][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.951451][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 128.951469][ C1] ? kasan_save_free_info+0x4a/0x60 [ 128.951482][ C1] ? __kasan_slab_free+0x5f/0x80 [ 128.951493][ C1] ? kfree+0x158/0x440 [ 128.951505][ C1] ? krealloc_noprof+0xfa/0x130 [ 128.951525][ C1] ? krealloc_noprof+0xfa/0x130 [ 128.951539][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 128.951573][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x10/0x10 [ 128.951607][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 128.951633][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 128.951681][ C1] ? __kasan_check_write+0x18/0x20 [ 128.951695][ C1] ? _raw_spin_lock+0x92/0x120 [ 128.951708][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 128.951723][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 128.951742][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 128.951763][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 128.951785][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.951802][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 128.951819][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 128.951838][ C1] ? __kasan_check_write+0x18/0x20 [ 128.951851][ C1] ? _raw_spin_lock+0x92/0x120 [ 128.951865][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 128.951879][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 128.951900][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.951913][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 128.951934][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 128.951954][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 128.951972][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.951985][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 128.952002][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 128.952014][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 128.952032][ C1] ? __kasan_check_write+0x18/0x20 [ 128.952052][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 128.952066][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 128.952085][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.952098][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 128.952120][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 128.952139][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 128.952157][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 128.952176][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 128.952202][ C1] ? __kasan_check_write+0x18/0x20 [ 128.952215][ C1] ? mutex_unlock+0x90/0x240 [ 128.952226][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 128.952238][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 128.952250][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 128.952270][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 128.952289][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 128.952304][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 128.952323][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.952337][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 128.952356][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 128.952375][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 128.952394][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 128.952412][ C1] ? desc_read+0x202/0x3e0 [ 128.952423][ C1] ? __kasan_check_write+0x18/0x20 [ 128.952436][ C1] ? desc_read+0x1ab/0x3e0 [ 128.952446][ C1] ? prb_first_seq+0x109/0x1d0 [ 128.952456][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 128.952467][ C1] ? __kasan_check_write+0x18/0x20 [ 128.952480][ C1] ? desc_read+0x1ab/0x3e0 [ 128.952490][ C1] ? __kasan_check_read+0x15/0x20 [ 128.952503][ C1] ? this_cpu_in_panic+0x56/0x90 [ 128.952514][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 128.952525][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.952539][ C1] ? prb_read_valid+0x80/0x80 [ 128.952549][ C1] ? data_alloc+0x4d0/0x7e0 [ 128.952566][ C1] ? desc_read+0x202/0x3e0 [ 128.952576][ C1] ? __kasan_check_write+0x18/0x20 [ 128.952593][ C1] ? desc_read+0x1ab/0x3e0 [ 128.952603][ C1] ? prb_first_seq+0x109/0x1d0 [ 128.952613][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 128.952623][ C1] ? __kasan_check_write+0x18/0x20 [ 128.952637][ C1] ? desc_read+0x1ab/0x3e0 [ 128.952646][ C1] ? __kasan_check_read+0x15/0x20 [ 128.952660][ C1] ? this_cpu_in_panic+0x56/0x90 [ 128.952670][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 128.952681][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 128.952696][ C1] ? prb_read_valid+0x80/0x80 [ 128.952706][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 128.952721][ C1] ? up+0x10a/0x1b0 [ 128.952732][ C1] ? __cfi_up+0x10/0x10 [ 128.952743][ C1] ? __kasan_check_write+0x18/0x20 [ 128.952756][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 128.952772][ C1] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 128.952789][ C1] ? __cfi_llist_add_batch+0x10/0x10 [ 128.952803][ C1] ? console_unlock+0x247/0x2c0 [ 128.952815][ C1] ? __cfi_console_unlock+0x10/0x10 [ 128.952827][ C1] ? krealloc_noprof+0xfa/0x130 [ 128.952841][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 128.952856][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 128.952878][ C1] ? irq_work_queue+0xc2/0x160 [ 128.952891][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 128.952913][ C1] ? vprintk_emit+0x3e3/0x650 [ 128.952925][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 128.952936][ C1] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 128.952955][ C1] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 128.952974][ C1] ? vprintk_default+0x2a/0x40 [ 128.952985][ C1] ? vprintk+0x93/0xa0 [ 128.952999][ C1] ? _printk+0xde/0x140 [ 128.953010][ C1] ? __cfi___check_object_size+0x10/0x10 [ 128.953025][ C1] ? __cfi__printk+0x10/0x10 [ 128.953036][ C1] ? _copy_from_user+0x87/0xa0 [ 128.953052][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 128.953071][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 128.953089][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 128.953112][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 128.953146][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 128.953160][ C1] ? kernel_text_address+0xa9/0xe0 [ 128.953174][ C1] ? __kernel_text_address+0x11/0x40 [ 128.953186][ C1] ? unwind_get_return_address+0x51/0x90 [ 128.953198][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 128.953209][ C1] ? arch_stack_walk+0x10a/0x170 [ 128.953225][ C1] ? stack_depot_save_flags+0x38/0x800 [ 128.953239][ C1] ? kasan_save_track+0x4f/0x80 [ 128.953254][ C1] ? kasan_save_track+0x3e/0x80 [ 128.953268][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 128.953281][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 128.953290][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 128.953306][ C1] ? krealloc_noprof+0x8d/0x130 [ 128.953319][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x57f/0x32e0 [ 128.953338][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x7c0/0x2660 [ 128.953355][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x220e/0xaf80 [ 128.953371][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 128.953383][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 128.953393][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 128.953402][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 128.953417][ C1] ? do_syscall_64+0x57/0xf0 [ 128.953430][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.953447][ C1] ? __kasan_check_write+0x18/0x20 [ 128.953461][ C1] ? _raw_spin_lock+0x92/0x120 [ 128.953474][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 128.953488][ C1] ? __kasan_check_write+0x18/0x20 [ 128.953501][ C1] ? _RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0xc1/0x260 [ 128.953519][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 128.953537][ C1] ? _raw_spin_unlock+0x45/0x60 [ 128.953551][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 128.953570][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 128.953596][ C1] ? __kasan_check_write+0x18/0x20 [ 128.953610][ C1] ? mutex_unlock+0x90/0x240 [ 128.953621][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 128.953633][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 128.953645][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 128.953666][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 128.953696][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 128.953710][ C1] ? kernel_text_address+0xa9/0xe0 [ 128.953723][ C1] ? core_kernel_text+0x50/0xa0 [ 128.953735][ C1] ? unwind_get_return_address+0x51/0x90 [ 128.953748][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 128.953762][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 128.953782][ C1] ? krealloc_noprof+0x8d/0x130 [ 128.953799][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 128.953829][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xa2f/0x1290 [ 128.953850][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 128.953871][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 128.953884][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 128.953894][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 128.953910][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 128.953940][ C1] ? __asan_memset+0x39/0x50 [ 128.953954][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x2ff/0x850 [ 128.953982][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 128.953997][ C1] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10 [ 128.954025][ C1] ? __kasan_check_write+0x18/0x20 [ 128.954039][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 128.954061][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.954075][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 128.954091][ C1] ? avc_has_perm+0x155/0x240 [ 128.954106][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 128.954120][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 128.954134][ C1] ? __kasan_check_write+0x18/0x20 [ 128.954148][ C1] ? _raw_spin_lock+0x92/0x120 [ 128.954162][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 128.954173][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 128.954194][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 128.954219][ C1] ? __kasan_check_write+0x18/0x20 [ 128.954232][ C1] ? _raw_spin_lock+0x92/0x120 [ 128.954247][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 128.954261][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x155c/0xaf80 [ 128.954277][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.954291][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 128.954313][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 128.954357][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 128.954379][ C1] ? kernel_text_address+0xa9/0xe0 [ 128.954398][ C1] ? __kernel_text_address+0x11/0x40 [ 128.954418][ C1] ? unwind_get_return_address+0x51/0x90 [ 128.954436][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 128.954453][ C1] ? arch_stack_walk+0x10a/0x170 [ 128.954478][ C1] ? stack_depot_save_flags+0x38/0x800 [ 128.954502][ C1] ? kasan_save_track+0x4f/0x80 [ 128.954526][ C1] ? kasan_save_track+0x3e/0x80 [ 128.954543][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 128.954556][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 128.954566][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 128.954581][ C1] ? krealloc_noprof+0x8d/0x130 [ 128.954595][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x914/0x1bb0 [ 128.954614][ C1] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 128.954635][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 128.954645][ C1] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 128.954666][ C1] ? __kasan_check_write+0x18/0x20 [ 128.954680][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x502/0xee0 [ 128.954701][ C1] ? __kasan_check_write+0x18/0x20 [ 128.954714][ C1] ? _raw_spin_lock+0x92/0x120 [ 128.954729][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 128.954744][ C1] ? _raw_spin_unlock+0x45/0x60 [ 128.954758][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x5ec/0x950 [ 128.954778][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 128.954801][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 128.954824][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 128.954847][ C1] ? __kasan_check_write+0x18/0x20 [ 128.954861][ C1] ? _raw_spin_lock+0x92/0x120 [ 128.954874][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 128.954889][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x125c/0x1bb0 [ 128.954907][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.954920][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 128.954933][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x12e9/0x1bb0 [ 128.954953][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x10/0x10 [ 128.954971][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 128.954992][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 128.955013][ C1] ? __kasan_check_write+0x18/0x20 [ 128.955027][ C1] ? _raw_spin_lock+0x92/0x120 [ 128.955041][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 128.955062][ C1] ? _raw_spin_unlock+0x45/0x60 [ 128.955076][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 128.955089][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 128.955106][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 128.955124][ C1] ? __kasan_check_write+0x18/0x20 [ 128.955138][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 128.955161][ C1] ? avc_has_perm+0x155/0x240 [ 128.955176][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 128.955190][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 128.955204][ C1] ? __kasan_check_write+0x18/0x20 [ 128.955217][ C1] ? _raw_spin_lock+0x92/0x120 [ 128.955231][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 128.955246][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0xb14/0x1030 [ 128.955262][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.955276][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0xd14/0x1030 [ 128.955291][ C1] ? __kernel_text_address+0x11/0x40 [ 128.955305][ C1] ? stack_trace_save+0xaa/0x100 [ 128.955317][ C1] ? __kasan_check_write+0x18/0x20 [ 128.955330][ C1] ? _raw_spin_lock+0x92/0x120 [ 128.955344][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 128.955358][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.955371][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 128.955385][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 128.955400][ C1] ? __nla_put+0x9e/0xe0 [ 128.955411][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.955424][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 128.955439][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 128.955453][ C1] ? kernel_text_address+0xa9/0xe0 [ 128.955467][ C1] ? __kasan_check_write+0x18/0x20 [ 128.955481][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 128.955495][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 128.955511][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 128.955527][ C1] ? stack_depot_save_flags+0x399/0x800 [ 128.955541][ C1] ? fib_dump_info+0x916/0xfa0 [ 128.955579][ C1] ? kasan_save_track+0x4f/0x80 [ 128.955603][ C1] ? kasan_save_track+0x3e/0x80 [ 128.955626][ C1] ? kasan_save_free_info+0x4a/0x60 [ 128.955647][ C1] ? __kasan_slab_free+0x5f/0x80 [ 128.955663][ C1] ? kfree+0x158/0x440 [ 128.955685][ C1] ? inet6_dump_fib+0xba9/0xc70 [ 128.955699][ C1] ? rtnl_dump_all+0x265/0x3e0 [ 128.955715][ C1] ? rtnl_dumpit+0xbf/0x240 [ 128.955726][ C1] ? netlink_dump+0x6c5/0xee0 [ 128.955739][ C1] ? __netlink_dump_start+0x6f8/0x980 [ 128.955753][ C1] ? rtnetlink_rcv_msg+0x737/0xa40 [ 128.955764][ C1] ? netlink_rcv_skb+0x256/0x4f0 [ 128.955777][ C1] ? rtnetlink_rcv+0x20/0x30 [ 128.955788][ C1] ? netlink_unicast+0x8c0/0xa60 [ 128.955803][ C1] ? netlink_sendmsg+0x7fe/0xb10 [ 128.955817][ C1] ? sock_write_iter+0x4d9/0x530 [ 128.955827][ C1] ? vfs_write+0x764/0xf90 [ 128.955841][ C1] ? ksys_write+0x145/0x260 [ 128.955855][ C1] ? __x64_sys_write+0x7f/0x90 [ 128.955870][ C1] ? x64_sys_call+0x271c/0x2ee0 [ 128.955885][ C1] ? do_syscall_64+0x57/0xf0 [ 128.955900][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.955917][ C1] ? selinux_socket_sock_rcv_skb+0x331/0x890 [ 128.955929][ C1] ? __cfi_selinux_socket_sock_rcv_skb+0x10/0x10 [ 128.955942][ C1] ? __kasan_slab_free+0x6a/0x80 [ 128.955952][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 128.955965][ C1] ? __kasan_check_write+0x18/0x20 [ 128.955987][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 128.955998][ C1] ? inet6_dump_fib+0xba9/0xc70 [ 128.956011][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 128.956028][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 128.956042][ C1] ? update_curr+0x6c1/0x9e0 [ 128.956064][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 128.956079][ C1] ? __calc_delta+0x280/0x280 [ 128.956095][ C1] ? update_entity_lag+0x28f/0x2c0 [ 128.956110][ C1] ? dequeue_entity+0x809/0x1380 [ 128.956124][ C1] ? tg_unthrottle_up+0x9a0/0x9a0 [ 128.956137][ C1] ? __kasan_check_write+0x18/0x20 [ 128.956151][ C1] ? __cfi_update_misfit_status+0x10/0x10 [ 128.956164][ C1] ? dequeue_entities+0x1d7/0x1400 [ 128.956179][ C1] ? sched_balance_newidle+0x31a/0xab0 [ 128.956193][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 128.956205][ C1] ? sched_clock_noinstr+0xd/0x30 [ 128.956217][ C1] ? __kasan_check_write+0x18/0x20 [ 128.956231][ C1] ? __switch_to+0xc4f/0x1300 [ 128.956246][ C1] ? __cfi___switch_to+0x10/0x10 [ 128.956260][ C1] ? psi_task_switch+0x4f2/0xa10 [ 128.956282][ C1] ? __kasan_check_write+0x18/0x20 [ 128.956304][ C1] ? finish_task_switch+0x1d9/0x760 [ 128.956322][ C1] ? __switch_to_asm+0x3d/0x70 [ 128.956348][ C1] ? __schedule+0x13a1/0x1fa0 [ 128.956358][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 128.956374][ C1] ? __asan_memcpy+0x5a/0x80 [ 128.956388][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 128.956404][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 128.956416][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 128.956427][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 128.956439][ C1] ? schedule+0xc5/0x240 [ 128.956449][ C1] ? futex_unqueue+0x136/0x160 [ 128.956464][ C1] ? ioctl_has_perm+0x39a/0x500 [ 128.956478][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 128.956491][ C1] ? futex_wait+0x2ac/0x7b0 [ 128.956506][ C1] ? __cfi_futex_wait+0x10/0x10 [ 128.956520][ C1] ? selinux_socket_setsockopt+0x324/0x3d0 [ 128.956532][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 128.956546][ C1] ? vfs_write+0x9ab/0xf90 [ 128.956560][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 128.956573][ C1] ? do_futex+0x32a/0x510 [ 128.956586][ C1] ? __cfi_do_futex+0x10/0x10 [ 128.956600][ C1] ? __fget_files+0x2c5/0x340 [ 128.956610][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 128.956623][ C1] ? security_file_ioctl+0x3e/0x110 [ 128.956636][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 128.956649][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 128.956660][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 128.956670][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 128.956685][ C1] ? do_syscall_64+0x57/0xf0 [ 128.956700][ C1] ? clear_bhb_loop+0x50/0xa0 [ 128.956710][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.956727][ C1] [ 128.956731][ C1] Modules linked in: [ 128.956742][ C1] ---[ end trace 0000000000000000 ]--- [ 128.956749][ C1] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 128.956765][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 128.956776][ C1] RSP: 0018:ffffc9000eda7ee0 EFLAGS: 00010282 [ 128.956786][ C1] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc9000eda8250 [ 128.956797][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 128.956806][ C1] RBP: ffffc9000eda81b0 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 128.956814][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: 0000000000000680 [ 128.956822][ C1] R13: dffffc0000000000 R14: 1ffff92001db503c R15: ffffc9000eda8250 [ 128.956831][ C1] FS: 00007f57341c46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 128.956842][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.956850][ C1] CR2: ffffc9000eda7ed8 CR3: 000000011ec08000 CR4: 00000000003526b0 [ 128.956865][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 128.957015][ C1] Kernel Offset: disabled