last executing test programs: 1m55.414138301s ago: executing program 1 (id=79): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000001440)=[{&(0x7f0000000100)=""/4, 0x4}, {&(0x7f00000002c0)=""/41, 0x29}], 0x2, 0x0) r1 = userfaultfd(0x80801) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) creat(&(0x7f0000002800)='./file0\x00', 0x1ab) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@flushpolicy={0x18, 0x12, 0x105, 0x404, 0x25dfdbff, "", [@proto={0x5, 0x19, 0xff}]}, 0x18}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000fc0)={0x2, 0x0, [{0xfec00000, 0x90, &(0x7f0000000880)=""/144}, {0x0, 0x0, 0x0}]}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000002780)=[{&(0x7f0000008480)=""/95, 0x5f}, {&(0x7f0000001480)=""/21, 0x15}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/185, 0xb9}, {&(0x7f0000002580)=""/103, 0x67}, {&(0x7f0000002600)=""/224, 0xe0}, {&(0x7f0000002700)=""/71, 0x47}], 0x7, 0x0) 1m55.201292772s ago: executing program 1 (id=81): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) inotify_init() (async) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000140)='./control\x00', 0x8) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0x21000700) rmdir(&(0x7f0000000280)='./control\x00') sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000001a80)=""/264, 0x108}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000380)=""/155, 0x9b}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000380)="0f", 0x1}], 0x1}}], 0x1, 0x4000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x10, 0x10000000000000d, 0x0, 0x44233, 0x7, 0x3, 0x941, 0x8001, 0x1001, 0xc, 0xc, 0x7ff, 0xfffffdfffffffffd], 0x0, 0x80300}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x10, 0x10000000000000d, 0x0, 0x44233, 0x7, 0x3, 0x941, 0x8001, 0x1001, 0xc, 0xc, 0x7ff, 0xfffffdfffffffffd], 0x0, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, &(0x7f0000001980)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x3, 0x3, {{0x22, 0x4, 0x2, 0x8, 0x88, 0x65, 0x0, 0x7f, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @rr={0x7, 0x1f, 0xf4, [@local, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @loopback]}, @ssrr={0x89, 0xb, 0x4d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xa6, 0x1, 0x3, [{@loopback, 0xb787}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xfffffffb}, {@loopback, 0xaf78}, {@local, 0x6}, {@empty, 0x1a87}, {@remote, 0x7}, {@rand_addr=0x64010101, 0x6}]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x3, 0x3, {{0x22, 0x4, 0x2, 0x8, 0x88, 0x65, 0x0, 0x7f, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @rr={0x7, 0x1f, 0xf4, [@local, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @loopback]}, @ssrr={0x89, 0xb, 0x4d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0xa6, 0x1, 0x3, [{@loopback, 0xb787}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xfffffffb}, {@loopback, 0xaf78}, {@local, 0x6}, {@empty, 0x1a87}, {@remote, 0x7}, {@rand_addr=0x64010101, 0x6}]}, @ra={0x94, 0x4}]}}}}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000001940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000001bc0)=@getpolicy={0x100, 0x15, 0x200, 0x70bd2b, 0x25dfdbfd, {{@in6=@local, @in6=@private1, 0x4e23, 0xd, 0x4e20, 0x8, 0xa, 0x80, 0x20, 0x0, r6, r7}, 0x6e6bb4}, [@replay_esn_val={0x28, 0x17, {0x3, 0x70bd2c, 0x70bd29, 0x70bd2d, 0x70bd27, 0x96a1, [0x81, 0x3, 0x10000]}}, @algo_auth={0x62, 0x1, {{'md5-generic\x00'}, 0xd0, "909b74910a102aad44b8d3279f719148f739e8874fa24b784163"}}, @encap={0x1c, 0x4, {0x3, 0x4e23, 0x4e20, @in6=@loopback}}, @proto={0x5, 0x19, 0x2b}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0xc0) sendmsg$AUDIT_USER(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0xac, 0x3ed, 0x27ed3cc3077cc70e, 0x70bd26, 0x25dfdbfd, "02b788760e365fa38617893c39af95bb78505143b9961a060433fb0e766fb8c670d666fe26fd5f60f6db42b7d1aea4e040557f13d724475139cdf95f23441ab556b4c6649a57ecea3d503c65c49efd8f569df57ecd4bb4e035e968db3ef071df4ef7dce38174527b7dcdb25938c83fcec16d5f173e32c8589820f68f1efab8b2bb89147654ef0f3a968dc2da8a8f149389af2f80c6fc3b956ba9", [""]}, 0xac}, 0x1, 0x0, 0x0, 0x40080}, 0x40012) 1m54.941589555s ago: executing program 1 (id=84): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m54.566141756s ago: executing program 1 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000015}, 0x4000804) r1 = syz_open_dev$rtc(&(0x7f0000000100), 0x6, 0x10000) ioctl$RTC_UIE_OFF(r1, 0x7004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)={0x3a, 0x1e, '\x00', [@hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x2}, @generic={0xf, 0x32, "702a749e18447ba8c9e72259c69f88af30252ec7b10a5f051cd77412ced870fe0fecd233a38e054193ca95e9fd75ab2eca72"}, @generic={0x9, 0xa5, "cd49a402590dce3f7ddeb0c1bc028785c8cd176ec1318ed09363033666e959f20958eed05770174b1b756f69f9dddcc1eb8e5aec44ca1f256507222b2da912efb0bd7491c70336245099658d2b830ec5d9a8d3df5831a0b5bf3ea4cbd6fdccf721e70002cac8752017249ec402c029bb05268fa4611b60ecf09356f338dafbe880682f46fd90989d4a09120abfcfd42d85137dae8090d77af7954c316f28fb3c79bd50cda8"}]}, 0x100) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x60, 0x41000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r0, 0x8, 0xfffffffffffffffb, 0x7}) getsockopt$inet6_buf(r4, 0x29, 0xcc, &(0x7f0000000380)=""/237, &(0x7f0000000480)=0xed) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ppoll(&(0x7f00000004c0)=[{r1, 0x8000}, {r1, 0x2100}], 0x2, &(0x7f0000000540)={r5, r6+10000000}, &(0x7f0000000580)={[0x1564]}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'veth1_to_bridge\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x600, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r8, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x8}}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48004}, 0x80) r9 = dup(r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x2000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000840)={0x0, 0x7, 0xacf}) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004005}, 0x80) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000009c0)={0x1, 0x7, 0x6}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x1, 0x4, 0x0, 0x0, 0x0, {0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0xffffffb2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x53, 0x2}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x12}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) r10 = getpgrp(0xffffffffffffffff) timer_create(0x3, &(0x7f0000000c40)={0x0, 0x35, 0x1, @tid=r10}, &(0x7f0000000c80)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000cc0)=0x33a, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x78, r12, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048000}, 0xa5ee8cf8e82fa8c0) 1m54.354536827s ago: executing program 1 (id=86): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (fail_nth: 22) 1m53.751235286s ago: executing program 1 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) (async) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}], [], 0x6b}}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xb0, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8002}, 0x4000) syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103", @ANYRES16], 0x0) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103", @ANYRES16], 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ppoll(&(0x7f0000000180)=[{r4, 0x2111}], 0x1, &(0x7f0000000200), &(0x7f0000000240)={[0x461]}, 0x8) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) 1m38.619450961s ago: executing program 32 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) (async) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}], [], 0x6b}}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xb0, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8002}, 0x4000) syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103", @ANYRES16], 0x0) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103", @ANYRES16], 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ppoll(&(0x7f0000000180)=[{r4, 0x2111}], 0x1, &(0x7f0000000200), &(0x7f0000000240)={[0x461]}, 0x8) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) 1m24.941940551s ago: executing program 4 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prlimit64(r0, 0x4, &(0x7f0000000280)={0x800, 0x6}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000000c0), 0x0, 0x4000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x23) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="110000005a001f001007f4110800040002", 0x11) r5 = open(0x0, 0x48141, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000080)=0xa4c, 0x4) sendto$inet(r6, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) fstat(r7, &(0x7f0000000580)) 1m24.000222179s ago: executing program 4 (id=252): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2006}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000dc0)="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", 0xdbc}], 0x3}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='n', 0x1}], 0x1}}], 0x2, 0x119e75c40673edef) dup(0xffffffffffffffff) 1m23.934822237s ago: executing program 4 (id=253): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000040) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') exit(0x3) read$FUSE(r7, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m22.993318934s ago: executing program 4 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280), 0x2, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00') syz_usb_control_io$hid(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x105842, 0x8d) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000580)=0xfe) unlinkat(r1, &(0x7f0000000300)='./file1\x00', 0x0) 1m20.124353258s ago: executing program 4 (id=272): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) eventfd(0x9) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be", 0xc0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f", 0x35}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1}, 0x2}], 0x2, 0x121, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, '\a$}*'}, @global=@item_4={0x3, 0x1, 0x6, "e87a3176"}]}}, 0x0}, 0x0) 1m19.998302944s ago: executing program 4 (id=273): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = creat(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) sendmmsg$sock(r3, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="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", 0x58b}], 0x1}}], 0x1, 0x24058805) (async) sendmmsg$sock(r3, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="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", 0x58b}], 0x1}}], 0x1, 0x24058805) close(r0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) (async) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 1m19.97117998s ago: executing program 33 (id=273): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = creat(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) sendmmsg$sock(r3, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="d543ed80cff5cb0ed8de530d2bdf0917e0e269f944f3909527b9dca884c259452506c7a928755a28517d40597654a9424d8698c05883caa910f422713bfaa1219963d64edf9facebd5cd321654b19a897e010bc2cb58cd850580bae53fec7e1050af6dc1295563ff83773a39b35019a921b2a61637a3a49431f835d9edc49ee9161ed8c593930d0746f5792fa31d11fc79f8b07a72fd5f682fdafa063383c47a21a167a4ded3c1c39e0df3ab84e82ce3cb9dcbf2a068732e8172122e364a836c189569fa533300d94fb584d2ec536a4438f7672cabfc661628dec235198c4db2261762fbbfb96368c47f6a8ed3b84bb9b491e2b3face6de8da474769e411d78697b34157afef7f07dbd62b32ed97c0a7573fd74a184daa5b76b4da23d2c5badf453aa2a4d44ece626acf6dc67ba56ed4ad08ffa6e22c8ad04c2f9234b4658da440bd645ca4b1e3cde2b8612eed975dbfb9d9850bc750c830128c63e6980b2e3e8e9583b066e580e4fda915820650525d8f1b928f7594e6d5aa367c8cc75e452d16329e81ec51a6141584290be1ef0fae0cd991b81453312b5ff0adbb6706fe300f65edeeac80dbd9c9e1bbac48999809b13dbc05a6ac54d87fb193029d1636aa6793a92d5de8a27d100c8c9f3a16ebe41b128c92d22a1ca222f313f126b0db00bcdb68b30a01d7b09f6e9b3a2326233b2c7cde1901eb44a510c907a7112e8a2e2fc961a2b6a46087bc26cb1bc3a4968e51e7c00c88b72dcbc21f0b190f94c8b5386f3f23fca45b67b99e06cf4d77d63b6b4cb5fad06603a47deb6bd4cd92404a24f73fd1ab410b52fb776eed0cac546d02e45c24700a96f4c6339fd4508aa93303a75a5500935ea10e66998ec5a1230e21f78ec7a4f77aa89eda529a456096786456c4bb05cfbd3753ea8ff2e071a093b3aef3f604b7fbb70838f665068211a811e2287158c03f06f89107016d028f7c321b27b9477a06e05983c7fb99c7a9e8b91fffe65a0aacd850baeb4752b7c0585c0ea9e0d0017dd37546e67a63d9000102f4d72025df3162979b22b70e37ac55f96d55dab16969068a9974cebee7a045dd9421bcecc3afe3b304758c903e1255cbfbbc020b29d2e1facf5501664711ae23bae1134089907c8047f1f76c7ad901ada09beb1f63bb83467cd31f5b9a29fd53ce4774b334cfc723e8793e8d194bf5dc06ab3aa01829e69a42e153ffe433eb21433b0c14ef1271cbf2658c6c11310172dbf172a2abeed455e8896c5480816949c39b63167259e4780ba1cd3fb334438164fca6e88fa00966e61f44586e15e151180a97a8e884de6f6a66e3fd6341cb8297edefc120f051925c779f0d9b411d11b5cb8e9ec85e038a6f05cd4beb2538034caf757a41df560fcc46b3a698e4d68bfb8f9632771692589f52c76a72870cda94adeb74560b905245578abd0d68bcbae65c025a8c4332e84645bd6756f151839a99c769419b2f95460613a3c7e87ae9752819eaada6e3ee876e9018512c2cc0b04db33e5c2cb370943818a7487a96dc1554a6edf6135af1e1b6f6457fd6567931e84960f8d9e0912b908a6d17477bbf3ea961de009fe60d655ea5f7957284d3e150c4c342bad590d60b752135c76a70b2feed17fe12a7735bb7d6e32abbecb6febe6cca1916d7d0e3e06e6080fe583bc136a7e8f4e29c81d5d32bf1addb18c6ae3c7aa23edd4a110e3eb76da6964572ddecee8220c1ffb72beb3d4131a96314a07d6f851971fddddc094b2ee164898fc808b445387833419fbf2624472b97857ef2944d2d2e1eca4e0558497b1b99ef020505abb35d04225a46c48c4c899bd7e2a0a37c606c9cb6af41df85113faa718280f4d1151aece9818d59ca641f45889355f91a67811c2ad401d26918522e2197d1739370bec44e924c4750549d730332ef051056fd9ef466b075dde6c5b3ea9bedd50c10dc8ce506b820c97f6d13767b40b48bb1e19ab56367c4ec0843963fb4f5904d54bf3b1c82ce", 0x58b}], 0x1}}], 0x1, 0x24058805) (async) sendmmsg$sock(r3, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="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", 0x58b}], 0x1}}], 0x1, 0x24058805) close(r0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) (async) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 4.255993131s ago: executing program 3 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) memfd_create(0x0, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000180)='/dev/ttyS3\x00', &(0x7f00000001c0)='^.)(}\'^(\x00', &(0x7f0000000200)='cpuset.effective_cpus\x00', &(0x7f0000000240)='\x00']}, &(0x7f0000000440)={[&(0x7f00000002c0)='&\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='&\x00', &(0x7f0000000380)='/dev/net/tun\x00', &(0x7f00000003c0)=':-\x00', &(0x7f0000000400)='\x00']}) add_key$user(0x0, 0x0, &(0x7f0000000100)="6a0a4534a1f7af289a", 0x9, 0xfffffffffffffffd) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0xe, 0x88, "bb0fc787", "9a428076"}}, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$usbfs(0x0, 0x204, 0x2) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x2, 0x4, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x7, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x89], 0xc000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 4.102492773s ago: executing program 0 (id=689): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) unshare(0x6020400) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) (async) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fsmount(0xffffffffffffffff, 0x1, 0xf6) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./cgroup/../file0\x00') (async) pivot_root(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./cgroup/../file0\x00') r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0xb0) (async) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0xb0) close(r5) socket$inet(0x2, 0x803, 0x4) sendfile(r5, r0, 0x0, 0x578410ed) (async) sendfile(r5, r0, 0x0, 0x578410ed) 4.060164495s ago: executing program 0 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000300)="66baf80cb80a7a7083ef66bafc0c66ed660fdfb6f67f0000b9df090000b8ed000000ba000000000f30f30fc7b70f00000026670f09c4c17d5a52000f1c28ea7e00c0fe1f01b9ff0200000f320f235d", 0x4f}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001000010000000800fedbdf25070400001300000008000000", @ANYRES32, @ANYBLOB="0c003a00f8ff070000000000"], 0x2c}], 0x1}, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x9, 0x9, 0x82}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xca, 0x8, 0x4, 0xff, 0x81, 0x0, 0x800000000000000}, {0xffffff01, 0x0, 0x7, 0x4, 0x4, 0x5, 0x7, 0x8, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0x40003}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x43, 0x0, 0x0, 0x2004cb, 0x3, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x8000002, 0x0, 0x1], 0x8080000}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) (async) prlimit64(0x0, 0x2, &(0x7f0000000440)={0x6, 0x1000000000000000}, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0xa, 0xce, 0xfa, 0x5, 0x7, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0xbb, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x6, 0x8, 0xe, 0x40, 0xf4, 0x4, 0x200}], 0x9}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0xdf}) 3.560494633s ago: executing program 0 (id=693): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x14b040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000080)=0x4) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000040)=0x1) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x0, 0x7fff7ffc}]}) close_range(r4, r3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f00000000c0)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000180)) (async) dup(r1) syz_open_dev$evdev(&(0x7f0000000040), 0x100000000000000, 0x40041) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0xa, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x187542, 0x0) (async) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) (async) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x10, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$loop(&(0x7f0000000000), 0x8001, 0x600c0) (async) r8 = fcntl$getown(r4, 0x9) syz_open_procfs$pagemap(r8, &(0x7f0000000300)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88700, 0x0) (async) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYBLOB="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"], 0x0) 3.395272653s ago: executing program 0 (id=694): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000040) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.226463982s ago: executing program 0 (id=695): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r1 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, 0x0, 0x1) io_pgetevents(0x0, 0x0, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0x113, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x101, 0x3, 0x1, 0x3, 0x50, 0xd, {0x8, 0xb, 0x0, 0x2, 0x1, 0xa, 0x20, 0x99}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xc, 0x2c, 0xff}, [@mixer_unit={0x8, 0x24, 0x4, 0x6, 0xef, "f99137"}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x400, 0x40, 0x4, 0x9, 0x9000, 0x4}, @effect_unit={0xf, 0x24, 0x7, 0x4, 0x1, 0x2, [0x2, 0x1, 0x1, 0xbdf33b163582381b]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xa, 0x0, 0xc4, "4d1bbf"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x52d4, 0x8, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3c, 0x1, 0x5, 0x7}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x4, 0x7, 'W'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0x3, 0x0, "e4f8b9261f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3, 0x0, 0x7f, {0x8, 0x25, 0x1, 0x82, 0x0, 0x81, 0xe46a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x4, 0x1, 0x2, 0x5, 0x9, 0xa, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x80}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x40, 0x3, 0x5, 0x4, "0513a8b5b4d48b"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x7f, 0x4, "03a1b9619c9b4b98"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x2, 0x2, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x30, 0xc7, 0x7, {0x8, 0x25, 0x1, 0x80, 0x3f, 0x64, 0x3}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x101, 0x7, 0x1, 0xff, 0x20, 0x4}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x80, 0x5, 0x7ff, 0x5}]}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x2400}, {r1, 0x92c0}], 0x2, &(0x7f00000002c0), &(0x7f0000000540)={[0x3]}, 0x8) 3.226062102s ago: executing program 2 (id=696): setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = gettid() (async, rerun: 32) getsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (rerun: 32) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000200)=0x6, 0x4) (async) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000340)=@get={0x1, &(0x7f0000000240)=""/194, 0x4}) (async) listen(r3, 0x4) (async) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000440)={{[0x401, 0xba, 0x4, 0x8]}, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000380)=[{{@_ha_fsid={[0xa, 0x3]}, {0x9, 0x7fff, 0x7ff, 0x7}}, 0x0, 0x0, '\x00'}, {{@align=0x80000001, {0x3, 0xa, 0x2}}, 0xffffffff, 0x0, '@{\x00'}, {{@align=0xffff, {0x7ef0, 0x8, 0xc126, 0xa}}, 0xbf3, 0x0, ':\xda%\x00'}, {{@_ha_fsid={[0xe, 0xc]}, {0x5, 0x80, 0xb0, 0x800}}, 0x80, 0x0, '[^[\x00'}]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000001580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f0000000500)={0xff8, r5, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}], @NL80211_ATTR_CSA_IES={0xf7c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x3ff, 0x0, 0x0, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xdea, 0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x4, 0xfde4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x6c9, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x91, 0x7f, [@random_vendor={0xdd, 0x88, "3ac0c0045a103a5d3567d405e48b66ec4c82be786f5efa16c2f9b84652e2d6f9b7005c7991393f0618153020a6bfdb3a8ca23bef9a9f406bd4505d33d8dda2b387222d347e567f3bd08822c7af3de1d7c97a88e0a6fb27b9046849feee888e6f60125b4cbc9ab0389102df96f68e4e3f244da85d03c573e0be0cfb2ffef652e040fa03942002f5ae"}, @challenge={0x10, 0x1, 0x78}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x187, 0xf, [@ssid={0x0, 0x6, @default_ap_ssid}, @fast_bss_trans={0x37, 0x88, {0x7f, 0x2, "60b0f674fcf08207b7fc094a6dd8c953", "8832ebdeca404bef53e384c0238530934aeadda6fba542f61379b99d2b7b8e0d", "3185984ff87244ba2165d79fe1e3a2f873177edc0ee1d4ef76279dccfda737b0", [{0x4, 0xe, "4dd4b983d0ac533d11636f987dc9"}, {0x3, 0x24, "35d4db95777569765cbe47de4d8c485b3bc8d4568d5231c357e8a482d21983709eb18ec1"}]}}, @dsss={0x3, 0x1, 0x64}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x88, 0xff}}, @measure_req={0x26, 0x1e, {0xf4, 0x8, 0xe, "c5dfb125afc35b57897713c89c0ff07a31c77f4a8d0719cf89623d"}}, @ssid={0x0, 0x18, @random="55854b0c645979df3f4d00c0e56b05d2c9b3e08b1f490f83"}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xa2, {0xb, 0xa, [{{0x0, 0x1}, @device_b, 0xff, @value, 0x3a}, {{}, @broadcast, 0x401, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x38, @value, 0x35}, {{}, @device_b, 0x1, @void, 0x35}, {{0x0, 0x1}, @device_a, 0x7fff, @value=@broadcast, 0x30}, {{}, @device_b, 0x7, @void, 0x12}, {{}, @device_b, 0xe, @void, 0x3b}, {{}, @broadcast, 0x5, @void, 0x1e}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x10}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x21}]}}]}, @NL80211_ATTR_PROBE_RESP={0x643, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x6, 0x5, 0xfffe, 0x7ff, 0xa91a, 0x7f]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x8f86]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x8, 0x5]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @chandef_params, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xff8}, 0x1, 0x0, 0x0, 0x4000844}, 0x48050) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0), r4) (async) statx(0xffffffffffffffff, &(0x7f0000001600)='./file0\x00', 0x2000, 0x40, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, r6, &(0x7f0000001740)) (async) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$RTC_PLL_GET(r7, 0x80207011, &(0x7f0000001800)) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r7, 0x0) (async) r8 = landlock_create_ruleset(&(0x7f0000001840)={0x4050, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r8, 0x2) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000018c0)=0xffffffffffffffff, 0x4) (async, rerun: 64) sched_setattr(r2, &(0x7f0000001900)={0x38, 0x3, 0x2, 0x200, 0x3, 0x8, 0x7, 0x631efee2, 0x3, 0x1000}, 0x0) (async) sendmsg$SOCK_DESTROY(r7, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x4c, 0x15, 0x400, 0x70bd2d, 0x25dfdbfc, {0x2}, [@INET_DIAG_REQ_BYTECODE={0x38, 0x1, "260f624d713ac224a16e1d1ea81002c383d4aad2ff230b9abfb32afc4b153ee19582d6dccc06b7b33df1dae3e11232a87f7edf28"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x54229b81db2ae62c) getpriority(0x2, r2) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000001ac0)={0x3, r3, 'id0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001a80), r10) fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f0000001b40)) 3.069720874s ago: executing program 2 (id=697): sched_setscheduler(0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x32c28000) madvise(&(0x7f000012c000/0x3000)=nil, 0x3000, 0xe) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.39841852s ago: executing program 3 (id=699): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0x8, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x9, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x80, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x2, 0xffffffffffffff0e, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x90, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800, 0xa}, [@output_terminal={0x0, 0x24, 0x3, 0x5, 0x305, 0x4, 0x2, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x7, 0x1, {0x7, 0x25, 0x1, 0x0, 0x2c, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x0, 0x24, 0x1, 0x9, 0x6, 0x2}, @format_type_i_ext={0x0, 0x24, 0x2, 0x1, 0xff, 0x4, 0x6, 0x2, 0x8}, @format_type_i_discrete={0x0, 0x24, 0x2, 0x1, 0x6, 0x3, 0x10, 0x2, "fe2759a77d6e94"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf8, 0x6, 0xff, {0x7, 0x25, 0x1, 0x0, 0xb, 0xcd}}}}}}}}]}}, 0x0) 1.583009241s ago: executing program 5 (id=701): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2010400, &(0x7f00000001c0)={[{@name={'name', 0x3d, 'fuse\x00'}}]}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000240)=@ethtool_sset_info={0x37, 0xff, 0x7c}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x700, 0x1, 0x401, 0x0, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x66, 0x0, 0x37, 0x0, 0x0, @rand_addr=0x64010100, @loopback, {[@generic={0x94, 0x8, "ab2ddf89ff9d"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x9f, 0x3, 0x8, [{@broadcast, 0xffffffff}]}, @rr={0x7, 0xf, 0xf, [@rand_addr=0x64010101, @multicast1, @rand_addr=0x64010102]}, @end]}}}}}) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="85801275cbee0ba4219d540e3780ed223cd6f41085b51416bcf505bea42705c24d0ac2a39daac75e6be838eaa61fcc3c5e5f98dac6e9d19d92618ace6a640b75a03f254da65514e5106af39f12bd6928ba7b2eb824362bbe892a01671981d9456f3d5858f218d993b97eeb5b4b4dce0bc60d0241037adc03c7255b4557f578932c4b86653fd905d6ea7b1a5c5acc9c2ae5f51ca16bc2a3b15eeded583f8bcd0090e94000625d181d97b83dc3baf050", 0xaf}], 0x1, &(0x7f0000000300)}}, {{&(0x7f00000003c0)={0xa, 0x4e22, 0x8, @empty, 0xff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000400)="c5abdace66580e2b3a51e62e2e26406314e83b9c2d0ce4b3", 0x18}], 0x1, &(0x7f0000000480)}}], 0x2, 0x72c760b88a74c6af) 1.466393209s ago: executing program 5 (id=702): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = getpid() sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB="680011000c0601040000000000000000030000010900020073797a32000000000500010007000000050001000700000005000100070000000900020073797a300000000005000100070000000900020073797a300000000005000100070000000500010007000000"], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x40040) (async) syz_pidfd_open(r1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) (async, rerun: 64) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000207e050e2000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (rerun: 64) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x7, "b1ff3b48"}, @local=@item_4={0x3, 0x2, 0x3, "720b95b4"}, @main]}}, 0x0}, 0x0) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0x13, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x53, 0x9, 0x3, 0x5, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0xfffffffe, 0x5, 0x6, 0x8, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000134, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x1c, 0x8000, 0x2f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xfffffffe, 0xd, 0x4004e0, 0x1, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x7f, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfffffff8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x8, 0x24], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xfffffff2, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x1, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xffd]}, 0x45c) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000004c0)='./file1\x00', 0x5) unlinkat(r3, &(0x7f00000011c0)='./file0\x00', 0x0) r4 = getpgid(0x0) ioprio_set$pid(0x2, r4, 0x4000) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) (async) mknod(&(0x7f0000000600)='./file0\x00', 0x1000, 0x1) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x2b}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "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"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) (async) getdents64(r5, &(0x7f0000000080)=""/4096, 0x1000) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x84041, 0x10) renameat2(r8, &(0x7f00000010c0)='.\x02\x00', r0, &(0x7f0000001100)='./file0\x00', 0x5) (async, rerun: 64) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='.\x02\x00', 0x4) (rerun: 64) 1.128881207s ago: executing program 5 (id=703): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000040) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.046997402s ago: executing program 5 (id=704): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x4e22, @empty}}) syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000001d40)={{0x12, 0x1, 0xae1fef3bfef42fc5, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x7, 0x10, 0x82, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe, 0x4, 0xd, 0x1, "fc29ac"}, @as_header={0x7, 0x24, 0x1, 0x40, 0xb, 0x1005}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5a, 0xb, 0x6, {0x7, 0x25, 0x1, 0x4, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x0, 0x1, {0x7, 0x25, 0x1, 0x8, 0x6, 0x95c}}}}}}}}]}}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0}) 998.445144ms ago: executing program 2 (id=705): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40580, 0x0) (async) r3 = socket$inet(0x2, 0x3, 0x1) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) (async) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f0000000140)="631d9ed88b690904f69a0b189ea05b1124575f4a196117ed2af80c4050f15e4b3588bbd8b36ffb8f954502927130") (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000100)={0x6, 'erspan0\x00', {0x5}, 0x3}) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20008004) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000300)={0x918d1e52e2cb83a3, 0x0, {[0xfffffffffffffffe, 0xffffffffffffff00, 0xffffffffffffffff, 0x4, 0xce0, 0x4, 0x8000000008, 0x3fffff]}}) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x6d, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 866.555159ms ago: executing program 2 (id=706): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f00000000c0)={0x100008, 0x0, 0x80000}, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000191c0)={'sit0\x00', &(0x7f0000019100)={'sit0\x00', 0x0, 0x1, 0x7800, 0xe, 0x100, {{0x21, 0x4, 0x3, 0x4, 0x84, 0x68, 0xfffd, 0xca, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "1803a5c7929c"}]}, @end, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x5, 0x6, "82ed8cf7"}, {0x5, 0x9, "2610e84f64e784"}, {0x6, 0x5, "c6c37b"}, {0x2, 0x9, "47c176d65ff500"}, {0x6, 0x10, "b98831fb9217177453c9f11ece07"}]}, @timestamp_addr={0x44, 0x2c, 0x42, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x10}, {@remote, 0x4}, {@multicast2, 0x8}, {@broadcast, 0xcee}, {@multicast2, 0x8001}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000192c0)={'syztnl1\x00', &(0x7f0000019200)={'gre0\x00', r3, 0x8000, 0x10, 0x9, 0xffffffff, {{0x1f, 0x4, 0x3, 0x3d, 0x7c, 0x64, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @empty, {[@timestamp_addr={0x44, 0x34, 0xbc, 0x1, 0x4, [{@loopback, 0x7}, {@remote, 0x460}, {@local, 0x11}, {@empty, 0xffffffff}, {@remote, 0x3ff}, {@rand_addr=0x64010102, 0xe}]}, @timestamp_addr={0x44, 0x24, 0xf1, 0x1, 0x3, [{@loopback, 0x6}, {@remote, 0x6}, {@empty, 0xffff6af7}, {@rand_addr=0x64010101, 0x1}]}, @timestamp={0x44, 0x10, 0x65, 0x0, 0x0, [0x1ff, 0x3, 0x6]}]}}}}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/102386, 0x18ff5}, {0x0, 0x11}], 0x2, 0x0, 0x29) close_range(r0, 0xffffffffffffffff, 0x0) 745.089337ms ago: executing program 2 (id=707): mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000cc0)={[{@mode={'mode', 0x3d, 0x9}}]}) (async, rerun: 32) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) tkill(r0, 0xf) (async) wait4(r0, 0x0, 0x2, 0x0) (async) tkill(r0, 0x3) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') (rerun: 32) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) (async) bind$packet(r1, &(0x7f0000000000)={0x11, 0xd, 0x0, 0x1, 0x9, 0x6, @broadcast}, 0x14) 562.516173ms ago: executing program 2 (id=708): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x80000) socket$inet6(0xa, 0x800, 0x5) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r0], 0x0) 474.727418ms ago: executing program 3 (id=709): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x15}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) writev(r1, 0x0, 0x0) 365.713727ms ago: executing program 3 (id=710): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec13060000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec13060000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x81, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x9, 0x0, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "87bb"}, {0x5, 0x24, 0x0, 0x87}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x6, 0x7}, {0x6, 0x24, 0x1a, 0x400, 0x35}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x9, 0x3, 0x3, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x7, 0x85}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x21, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x3, 0x9}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3c, 0x40, 0x2, 0x40, 0x7}, 0xbd, &(0x7f0000000380)={0x5, 0xf, 0xbd, 0x3, [@ptm_cap={0x3}, @generic={0xab, 0x10, 0x2, "ee5fe455fd854e462b54a379f99f56bee0cecf47fb22bde0315c09a5dd2d069abceba7e35e619d793003ce0402d63cf9812586de705c3cc93b321d9f526955d3f229f11ed1240514b92dd6dd5c5764519dc87cd83076563a7f277477fa48e8e5b94c042a0abd20836a3310cef516725f0fd28bb3b65283fbe28716d79c2a8ef21fbee23546560c92ec8fccc06a67c650e90bf56b49d815170d904ac85d61e626676ae9794393f587"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xb, 0x4, 0xcb4}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc07}}]}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @rand_addr=0x10}, 0x10) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @rand_addr=0x10}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$setpipe(r3, 0x407, 0x4) ioctl$TUNGETFEATURES(r2, 0x5452, &(0x7f0000001740)) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="2023029df30f7416"], 0x0, 0x0, 0x0}, 0x0) 234.422553ms ago: executing program 5 (id=711): r0 = socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000080)={0x9, 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0501c000080054"], 0xfdef) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_pidfd_open(0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast1, 0x80, 0x0, 0x7fff, 0xfffffffe}}) waitid(0x2, 0x0, 0xffffffffffffffff, 0x40000000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x5, 0xd, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x10, 0x40, 0x1d28, 0x2}}) 168.395071ms ago: executing program 3 (id=712): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r1], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000040) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 112.116761ms ago: executing program 0 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000080)=@filename='./file0\x00', r0, &(0x7f0000000200)) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r1, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0xffffffffffffff80, 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}], [], 0x6b}}) 62.555761ms ago: executing program 5 (id=714): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0x58}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0xde, 0x0, &(0x7f0000000300)="31b7262890f85f40d82d3768172a25e1eed786e373acd47a2db53b368724e467457114beaae16c952dfc65d49aa101ee065c0463a19cb0d87b052ea41f6f256952ddb6863d8b43dcb70e40795ecae737cd39e3550b7cc6d49de815986bc8d57545442960dca6d8180fd17cd5bb6f0f998ae671601bb25e0d1701177da9fa12ac41b2d5de6484529e900506f479bc5238f17e0e9d3596a09619cca912d26d2f1018c05d075011258fc3878976113f15f4e44dfb1414b89258cb9216d87711e1d4235572a5a89415029e48f0ecddb7dd033819df11391639b75d9c8e04b08d"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) (async) preadv(r2, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 0s ago: executing program 3 (id=715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r0}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00004b2000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000240)="660fc737f30f9951000f01c1260fc79b98440f001a81250000b880028ee0d9940000660f382942f3660f3804b518b7", 0x2f}], 0x1, 0x37, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=@newtaction={0x44, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x284b2, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}, {@inode32}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0x1, 0x2000, 0xb, 0xad, 0x3, 0x4, 0x7f, 0x5, 0x0, 0x2b, 0x9}, {0x2, 0x30000, 0xf, 0x2c, 0x8, 0x80, 0x7f, 0x24, 0x3, 0xf0, 0x9}, {0x2, 0x50000, 0x8, 0x5, 0x1, 0x2, 0x0, 0xb, 0x20, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8000000, 0xd, 0x3, 0x5, 0x80, 0x9, 0x7f, 0xa, 0x0, 0xf2, 0x43}, {0x6000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x82, 0xaf, 0x83, 0xc, 0x8, 0x3d}, {0xd000, 0x2, 0xd, 0x3, 0x8, 0x3, 0x1, 0x3, 0x5, 0x7f, 0x5}, {0x5000, 0xffff1000, 0x5, 0x5, 0x9, 0xf, 0x7, 0x37, 0x0, 0x9, 0xf0, 0x80}, {0xeeee8000, 0x2070}, {0x4000, 0x7}, 0xc0040033, 0x0, 0xeeef0000, 0x152104, 0x4, 0x0, 0x80a0000, [0x4, 0xd, 0x7, 0x9]}) kernel console output (not intermixed with test programs): lNumber: syz [ 95.203199][ T386] usb 1-1: config 0 descriptor?? [ 95.226695][ T548] usb 6-1: device descriptor read/64, error -71 [ 95.356745][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 95.379094][ T10] usb 3-1: device descriptor read/8, error -71 [ 95.415611][ T386] usb 1-1: 0:2 : does not exist [ 95.425131][ T386] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 95.451437][ T386] usb 1-1: USB disconnect, device number 38 [ 95.468256][ T548] usb 6-1: device descriptor read/64, error -71 [ 95.520519][ T10] usb 3-1: device descriptor read/8, error -71 [ 95.538905][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.636977][ T10] usb usb3-port1: unable to enumerate USB device [ 95.736709][ T548] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 95.876719][ T548] usb 6-1: device descriptor read/64, error -71 [ 96.146698][ T548] usb 6-1: device descriptor read/64, error -71 [ 96.180566][ T1519] SELinux: security_context_str_to_sid (=5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 96.268520][ T548] usb usb6-port1: attempt power cycle [ 96.644450][ T548] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 96.688990][ T548] usb 6-1: device descriptor read/8, error -71 [ 96.706713][ T67] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 96.819220][ T548] usb 6-1: device descriptor read/8, error -71 [ 96.861818][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.873527][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.883396][ T67] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 96.892821][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.902977][ T67] usb 4-1: config 0 descriptor?? [ 96.990968][ T330] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 97.066754][ T548] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 97.090002][ T548] usb 6-1: device descriptor read/8, error -71 [ 97.149398][ T330] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 97.156819][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 97.166996][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 97.182087][ T330] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.191249][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.199314][ T330] usb 3-1: Product: syz [ 97.203497][ T330] usb 3-1: Manufacturer: syz [ 97.208140][ T330] usb 3-1: SerialNumber: syz [ 97.214629][ T330] usb 3-1: config 0 descriptor?? [ 97.227344][ T385] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 97.230364][ T330] usb 3-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 97.246348][ T548] usb 6-1: device descriptor read/8, error -71 [ 97.332684][ T67] logitech-djreceiver 0003:046D:C71F.0010: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 97.356803][ T548] usb usb6-port1: unable to enumerate USB device [ 97.404828][ T385] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.414997][ T385] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 97.433442][ T385] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 97.450764][ T1543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.466695][ T385] usb 1-1: config 63 has no interface number 0 [ 97.467372][ T1543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.480144][ T385] usb 1-1: config 63 interface 66 has no altsetting 0 [ 97.499441][ T385] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 97.509027][ T385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.535170][ T386] usb 4-1: USB disconnect, device number 37 [ 97.536788][ T385] usb 1-1: Product: syz [ 97.545443][ T385] usb 1-1: Manufacturer: syz [ 97.560609][ T385] usb 1-1: SerialNumber: syz [ 97.620420][ T330] usb 3-1: USB disconnect, device number 42 [ 97.682313][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.784363][ T385] usb 1-1: Found UVC 0.07 device syz (174f:8acf) [ 97.793878][ T385] usb 1-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 97.803157][ T385] usb 1-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 97.812659][ T385] usb 1-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 97.821866][ T385] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 97.831056][ T385] usb 1-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 97.840147][ T385] usb 1-1: No streaming interface found for terminal 29. [ 97.847249][ T385] uvcvideo 1-1:63.66: Entity type for entity Output 5 was not initialized! [ 97.866144][ T385] usb 1-1: USB disconnect, device number 39 [ 97.926824][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.064015][ T36] kauditd_printk_skb: 661 callbacks suppressed [ 98.064034][ T36] audit: type=1400 audit(2000000044.620:7210): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.096703][ T36] audit: type=1400 audit(2000000044.650:7211): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.148521][ T36] audit: type=1400 audit(2000000044.660:7212): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.190040][ T36] audit: type=1400 audit(2000000044.660:7213): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.216540][ T36] audit: type=1400 audit(2000000044.690:7214): avc: denied { read write } for pid=1551 comm="syz.3.399" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.242620][ T36] audit: type=1400 audit(2000000044.690:7215): avc: denied { read write open } for pid=1551 comm="syz.3.399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.268955][ T36] audit: type=1400 audit(2000000044.690:7216): avc: denied { ioctl } for pid=1551 comm="syz.3.399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.295208][ T36] audit: type=1400 audit(2000000044.690:7217): avc: denied { ioctl } for pid=1551 comm="syz.3.399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.376746][ T330] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 98.412449][ T36] audit: type=1400 audit(2000000044.700:7218): avc: denied { ioctl } for pid=1551 comm="syz.3.399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.472553][ T36] audit: type=1400 audit(2000000044.700:7219): avc: denied { ioctl } for pid=1551 comm="syz.3.399" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.546966][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 98.559955][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.596726][ T330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.616909][ T330] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 98.626101][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.658599][ T330] usb 4-1: config 0 descriptor?? [ 98.676707][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 98.826892][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 98.838746][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.849108][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.860416][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 98.869556][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.882760][ T10] usb 3-1: SerialNumber: syz [ 98.887469][ T386] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 98.907614][ T10] usb 3-1: 0:2 : does not exist [ 99.026712][ T386] usb 1-1: device descriptor read/64, error -71 [ 99.099767][ T330] usbhid 4-1:0.0: can't add hid device: -71 [ 99.105807][ T330] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 99.132491][ T1557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.140528][ T330] usb 4-1: USB disconnect, device number 38 [ 99.158891][ T1557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.184421][ T1557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.203042][ T1557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.238542][ T10] usb 3-1: USB disconnect, device number 43 [ 99.292752][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.309165][ T386] usb 1-1: device descriptor read/64, error -71 [ 99.546723][ T386] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 99.675195][ T1562] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 99.675226][ T1562] rust_binder: Read failure Err(EFAULT) in pid:348 [ 99.686715][ T386] usb 1-1: device descriptor read/64, error -71 [ 99.936717][ T386] usb 1-1: device descriptor read/64, error -71 [ 99.946718][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.952860][ T738] Bluetooth: hci0: command 0x1003 tx timeout [ 99.961295][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.970220][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.016746][ T385] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 100.047376][ T386] usb usb1-port1: attempt power cycle [ 100.176725][ T385] usb 3-1: Using ep0 maxpacket: 16 [ 100.193242][ T385] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.216789][ T385] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 100.247376][ T385] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 100.256844][ T385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.264891][ T385] usb 3-1: Product: syz [ 100.269367][ T385] usb 3-1: Manufacturer: syz [ 100.274000][ T385] usb 3-1: SerialNumber: syz [ 100.396767][ T386] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 100.419384][ T386] usb 1-1: device descriptor read/8, error -71 [ 100.446758][ T67] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 100.486554][ T385] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 100.494905][ T385] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 100.549698][ T386] usb 1-1: device descriptor read/8, error -71 [ 100.596699][ T67] usb 4-1: Using ep0 maxpacket: 32 [ 100.610012][ T67] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 100.619269][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.627312][ T67] usb 4-1: Product: syz [ 100.631706][ T67] usb 4-1: Manufacturer: syz [ 100.636338][ T67] usb 4-1: SerialNumber: syz [ 100.786768][ T386] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 100.809889][ T386] usb 1-1: device descriptor read/8, error -71 [ 100.917347][ T1549] Bluetooth: hci0: Opcode 0x1003 failed: -4 [ 100.940231][ T386] usb 1-1: device descriptor read/8, error -71 [ 101.056827][ T386] usb usb1-port1: unable to enumerate USB device [ 101.336764][ T386] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 101.424290][ T385] usb 3-1: USB disconnect, device number 44 [ 101.447323][ T67] usb 4-1: MIDIStreaming interface descriptor not found [ 101.470228][ T67] usb 4-1: USB disconnect, device number 39 [ 101.489910][ T386] usb 6-1: Using ep0 maxpacket: 16 [ 101.525728][ T386] usb 6-1: config 247 has an invalid interface number: 176 but max is 0 [ 101.537573][ T1588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 101.556563][ T386] usb 6-1: config 247 has an invalid interface number: 200 but max is 0 [ 101.586630][ T386] usb 6-1: config 247 has 2 interfaces, different from the descriptor's value: 1 [ 101.595842][ T386] usb 6-1: config 247 has no interface number 0 [ 101.655662][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.691032][ T386] usb 6-1: config 247 has no interface number 1 [ 101.700957][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 101.716692][ T386] usb 6-1: config 247 interface 176 altsetting 255 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 101.732421][ T386] usb 6-1: config 247 interface 176 altsetting 255 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 101.748457][ T386] usb 6-1: config 247 interface 176 altsetting 255 has a duplicate endpoint with address 0x6, skipping [ 101.759555][ T386] usb 6-1: config 247 interface 176 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 101.779732][ T386] usb 6-1: config 247 interface 176 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 101.795462][ T386] usb 6-1: config 247 interface 176 altsetting 255 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 101.820335][ T386] usb 6-1: config 247 interface 176 altsetting 255 has 8 endpoint descriptors, different from the interface descriptor's value: 11 [ 101.846631][ T386] usb 6-1: too many endpoints for config 247 interface 200 altsetting 23: 129, using maximum allowed: 30 [ 101.876704][ T386] usb 6-1: config 247 interface 200 altsetting 23 has a duplicate endpoint with address 0x6, skipping [ 101.896695][ T385] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 101.904864][ T386] usb 6-1: config 247 interface 200 altsetting 23 has an invalid descriptor for endpoint zero, skipping [ 101.917943][ T386] usb 6-1: config 247 interface 200 altsetting 23 bulk endpoint 0xE has invalid maxpacket 64 [ 101.928790][ T386] usb 6-1: config 247 interface 200 altsetting 23 has 3 endpoint descriptors, different from the interface descriptor's value: 129 [ 101.942911][ T386] usb 6-1: config 247 interface 176 has no altsetting 0 [ 101.956707][ T67] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 101.964938][ T386] usb 6-1: config 247 interface 200 has no altsetting 0 [ 102.006703][ T386] usb 6-1: New USB device found, idVendor=093a, idProduct=2460, bcdDevice=a0.2a [ 102.015801][ T386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.025127][ T10] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 102.038038][ T386] usb 6-1: Product: ÐŽ [ 102.042162][ T386] usb 6-1: Manufacturer: î£ïµ¨á“²é†¨ê½·ï’¼å¨‘îµã«å¡½èŽ•ì¶¤î¶’êžê˜ªè´¬î˜›ç—‚퉴夿ₛ咙ࢯá·á•¸ã¤å¹©ä¢œê¹¶ì¥•æ™á…é¾âµ¤ä³…â ì¼†ì¹æ‡žç²¬Ä¹ì½„â묋䒺塓땲莘俛ä¥è˜ é®è‹ážºí–¥ì„¼ã掦瞧묙ℌ㺬魩춙㫆㠹ᣀꎒæ¿á—¨î”¸å€¬à£¸â¥šä¥Œë¥…뫟ӆ蟠ﳙ೰꯺齃喓‷惢ì‡è±‡ä¬­Ý¬ê €á¿î”…䴘ḣ [ 102.072150][ T386] usb 6-1: SerialNumber: Ї [ 102.076837][ T385] usb 3-1: device descriptor read/64, error -71 [ 102.089653][ T1586] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 102.159602][ T67] usb 4-1: config 0 has no interfaces? [ 102.168871][ T67] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 102.178075][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.186078][ T67] usb 4-1: SerialNumber: syz [ 102.196569][ T67] usb 4-1: config 0 descriptor?? [ 102.217198][ T10] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 102.226307][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.234914][ T10] usb 1-1: Product: syz [ 102.240591][ T10] usb 1-1: Manufacturer: syz [ 102.245244][ T10] usb 1-1: SerialNumber: syz [ 102.326757][ T385] usb 3-1: device descriptor read/64, error -71 [ 102.407547][ T67] usb 4-1: USB disconnect, device number 40 [ 102.474139][ T10] usb 1-1: USB disconnect, device number 44 [ 102.516144][ T386] usb 6-1: USB disconnect, device number 19 [ 102.531277][ T334] udevd[334]: setting owner of /dev/bus/usb/006/019 to uid=0, gid=0 failed: No such file or directory [ 102.566697][ T385] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 102.601218][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.706731][ T385] usb 3-1: device descriptor read/64, error -71 [ 102.946747][ T385] usb 3-1: device descriptor read/64, error -71 [ 103.060158][ T385] usb usb3-port1: attempt power cycle [ 103.066769][ T36] kauditd_printk_skb: 496 callbacks suppressed [ 103.066788][ T36] audit: type=1400 audit(2000000049.620:7716): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.122888][ T36] audit: type=1400 audit(2000000049.670:7717): avc: denied { ioctl } for pid=1589 comm="syz.2.413" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.148639][ T36] audit: type=1400 audit(2000000049.670:7718): avc: denied { ioctl } for pid=1589 comm="syz.2.413" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.174481][ T36] audit: type=1400 audit(2000000049.680:7719): avc: denied { read write } for pid=1603 comm="syz.0.418" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.211746][ T36] audit: type=1400 audit(2000000049.680:7720): avc: denied { read write open } for pid=1603 comm="syz.0.418" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.263197][ T36] audit: type=1400 audit(2000000049.680:7721): avc: denied { ioctl } for pid=1603 comm="syz.0.418" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.289375][ T36] audit: type=1400 audit(2000000049.680:7722): avc: denied { ioctl } for pid=1603 comm="syz.0.418" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.342970][ T36] audit: type=1400 audit(2000000049.680:7723): avc: denied { ioctl } for pid=1603 comm="syz.0.418" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.372074][ T36] audit: type=1400 audit(2000000049.680:7724): avc: denied { ioctl } for pid=1603 comm="syz.0.418" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.397194][ T31] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 103.432662][ T36] audit: type=1400 audit(2000000049.710:7725): avc: denied { create } for pid=1602 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.466718][ T385] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 103.499404][ T385] usb 3-1: device descriptor read/8, error -71 [ 103.566734][ T31] usb 1-1: Invalid ep0 maxpacket: 16 [ 103.639563][ T385] usb 3-1: device descriptor read/8, error -71 [ 103.696762][ T31] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 103.776725][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 103.846770][ T31] usb 1-1: Invalid ep0 maxpacket: 16 [ 103.852683][ T31] usb usb1-port1: attempt power cycle [ 103.876745][ T385] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 103.899231][ T385] usb 3-1: device descriptor read/8, error -71 [ 103.926733][ T10] usb 4-1: device descriptor read/64, error -71 [ 104.029361][ T385] usb 3-1: device descriptor read/8, error -71 [ 104.136948][ T385] usb usb3-port1: unable to enumerate USB device [ 104.166737][ T10] usb 4-1: device descriptor read/64, error -71 [ 104.196787][ T31] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 104.217617][ T31] usb 1-1: Invalid ep0 maxpacket: 16 [ 104.363206][ T31] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 104.397519][ T31] usb 1-1: Invalid ep0 maxpacket: 16 [ 104.403834][ T31] usb usb1-port1: unable to enumerate USB device [ 104.406847][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 104.556839][ T10] usb 4-1: device descriptor read/64, error -71 [ 104.656733][ T31] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 104.796751][ T10] usb 4-1: device descriptor read/64, error -71 [ 104.809608][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.820817][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.830708][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.843639][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.852835][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.862607][ T31] usb 6-1: config 0 descriptor?? [ 104.867662][ T67] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 104.907235][ T10] usb usb4-port1: attempt power cycle [ 105.016705][ T67] usb 3-1: Using ep0 maxpacket: 16 [ 105.025181][ T67] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.035529][ T67] usb 3-1: config 129 has an invalid interface number: 202 but max is 0 [ 105.043956][ T67] usb 3-1: config 129 has no interface number 0 [ 105.050300][ T67] usb 3-1: config 129 interface 202 has no altsetting 0 [ 105.060659][ T67] usb 3-1: New USB device found, idVendor=0711, idProduct=0179, bcdDevice=1f.6f [ 105.069771][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.077830][ T67] usb 3-1: Product: syz [ 105.082042][ T67] usb 3-1: Manufacturer: syz [ 105.086719][ T67] usb 3-1: SerialNumber: syz [ 105.246747][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 105.269697][ T10] usb 4-1: device descriptor read/8, error -71 [ 105.294485][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 105.305157][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 105.314407][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 105.322911][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 105.331223][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 105.338825][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 105.346263][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 105.354014][ T31] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 105.368184][ T31] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 105.410655][ T10] usb 4-1: device descriptor read/8, error -71 [ 105.560323][ T1622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.569054][ T1622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.591190][ T1622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.605259][ T1622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.620135][ T1283] usb 6-1: USB disconnect, device number 20 [ 105.656731][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 105.689259][ T10] usb 4-1: device descriptor read/8, error -71 [ 105.819314][ T10] usb 4-1: device descriptor read/8, error -71 [ 105.926883][ T10] usb usb4-port1: unable to enumerate USB device [ 106.168370][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.177558][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.526766][ T31] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 106.576729][ T385] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 106.696685][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 106.704342][ T31] usb 1-1: config 8 has an invalid interface number: 29 but max is 0 [ 106.712631][ T31] usb 1-1: config 8 has no interface number 0 [ 106.718837][ T31] usb 1-1: too many endpoints for config 8 interface 29 altsetting 224: 168, using maximum allowed: 30 [ 106.729941][ T31] usb 1-1: config 8 interface 29 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 106.743306][ T31] usb 1-1: config 8 interface 29 has no altsetting 0 [ 106.753013][ T385] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 106.761364][ T385] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.772924][ T385] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 106.783958][ T385] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 106.793797][ T385] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.806872][ T31] usb 1-1: New USB device found, idVendor=19d2, idProduct=1015, bcdDevice=ec.1a [ 106.815943][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.824005][ T385] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.833119][ T385] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.841167][ T31] usb 1-1: Product: syz [ 106.845350][ T31] usb 1-1: Manufacturer: syz [ 106.850454][ T31] usb 1-1: SerialNumber: syz [ 106.855942][ T385] usb 6-1: config 0 descriptor?? [ 106.896745][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 107.056716][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 107.067775][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.077859][ T31] usb 1-1: USB disconnect, device number 49 [ 107.108992][ T10] usb 4-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 107.123840][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.134028][ T10] usb 4-1: config 0 descriptor?? [ 107.242082][ T1636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.250756][ T1636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.282311][ T385] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 107.291649][ T385] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 107.303368][ T385] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 107.353182][ T1283] usb 4-1: USB disconnect, device number 45 [ 107.518112][ T67] ax88179_178a 3-1:129.202: probe with driver ax88179_178a failed with error -22 [ 107.546751][ T67] usb 3-1: USB disconnect, device number 49 [ 108.086845][ T36] kauditd_printk_skb: 507 callbacks suppressed [ 108.086888][ T36] audit: type=1400 audit(2000000054.640:8233): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.123502][ T36] audit: type=1400 audit(2000000054.680:8234): avc: denied { read write } for pid=293 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.173260][ T36] audit: type=1400 audit(2000000054.680:8235): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.186990][ T738] Bluetooth: hci0: command 0x1003 tx timeout [ 108.204597][ T737] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.239102][ T36] audit: type=1400 audit(2000000054.680:8236): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.265813][ T36] audit: type=1400 audit(2000000054.720:8237): avc: denied { read } for pid=1658 comm="syz.2.436" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.288469][ T36] audit: type=1400 audit(2000000054.720:8238): avc: denied { read open } for pid=1658 comm="syz.2.436" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.312157][ T36] audit: type=1400 audit(2000000054.720:8239): avc: denied { ioctl } for pid=1658 comm="syz.2.436" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.341928][ T36] audit: type=1400 audit(2000000054.900:8240): avc: denied { read write } for pid=293 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.373188][ T36] audit: type=1400 audit(2000000054.900:8241): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.403575][ T36] audit: type=1400 audit(2000000054.900:8242): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.636705][ T385] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 108.726719][ T1283] usb 6-1: reset high-speed USB device number 21 using dummy_hcd [ 108.775465][ T385] usb 3-1: device descriptor read/64, error -71 [ 109.026730][ T385] usb 3-1: device descriptor read/64, error -71 [ 109.146812][ T386] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 109.266715][ T385] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 109.299658][ T386] usb 4-1: config 162 has an invalid interface number: 79 but max is 1 [ 109.308038][ T386] usb 4-1: config 162 has an invalid interface number: 183 but max is 1 [ 109.316449][ T386] usb 4-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 109.326770][ T386] usb 4-1: config 162 has no interface number 0 [ 109.333409][ T386] usb 4-1: config 162 has no interface number 1 [ 109.339787][ T386] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.363567][ T386] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 109.375029][ T386] usb 4-1: config 162 interface 183 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 109.387212][ T386] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 109.416699][ T385] usb 3-1: device descriptor read/64, error -71 [ 109.416704][ T386] usb 4-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 109.416735][ T386] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 109.450199][ T386] usb 4-1: config 162 interface 79 has no altsetting 0 [ 109.457419][ T386] usb 4-1: config 162 interface 183 has no altsetting 0 [ 109.475931][ T386] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 109.495145][ T386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.508559][ T386] usb 4-1: Product: syz [ 109.516178][ T386] usb 4-1: Manufacturer: syz [ 109.520963][ T386] usb 4-1: SerialNumber: syz [ 109.532030][ T1672] Unsupported ieee802154 address type: 0 [ 109.647273][ T1674] x_tables: duplicate underflow at hook 1 [ 109.677305][ T385] usb 3-1: device descriptor read/64, error -71 [ 109.757134][ T1669] netlink: 'syz.3.440': attribute type 6 has an invalid length. [ 109.798056][ T385] usb usb3-port1: attempt power cycle [ 109.799066][ T386] pl2303 4-1:162.79: required endpoints missing [ 109.816227][ T1678] fuse: Bad value for 'rootmode' [ 109.823487][ T1679] random: crng reseeded on system resumption [ 109.839325][ T1678] fuse: Bad value for 'rootmode' [ 109.961559][ T1686] rust_binder: Error while translating object. [ 109.961644][ T1686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 109.968929][ T1686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:107 [ 110.001021][ T1688] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.007970][ T386] pl2303 4-1:162.183: required endpoints missing [ 110.068111][ T386] usb 4-1: USB disconnect, device number 46 [ 110.147019][ T10] usb 6-1: USB disconnect, device number 21 [ 110.155594][ T385] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 110.164931][ T1696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.193647][ T385] usb 3-1: device descriptor read/8, error -71 [ 110.350442][ T385] usb 3-1: device descriptor read/8, error -71 [ 110.626756][ T385] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 110.659641][ T385] usb 3-1: device descriptor read/8, error -71 [ 110.756687][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 110.800657][ T385] usb 3-1: device descriptor read/8, error -71 [ 110.906693][ T10] usb 6-1: device descriptor read/64, error -71 [ 110.917586][ T385] usb usb3-port1: unable to enumerate USB device [ 111.146789][ T10] usb 6-1: device descriptor read/64, error -71 [ 111.297205][ T1718] fuse: Bad value for 'user_id' [ 111.316728][ T1718] fuse: Bad value for 'user_id' [ 111.386761][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 111.546691][ T10] usb 6-1: device descriptor read/64, error -71 [ 111.566723][ T372] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 111.739538][ T372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 111.766687][ T372] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 111.796724][ T372] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 111.806734][ T10] usb 6-1: device descriptor read/64, error -71 [ 111.813262][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.831466][ T372] usb 1-1: config 0 descriptor?? [ 111.916784][ T10] usb usb6-port1: attempt power cycle [ 112.246952][ T372] hid (null): global environment stack underflow [ 112.254619][ T372] playstation 0003:054C:0DF2.0013: global environment stack underflow [ 112.264018][ T372] playstation 0003:054C:0DF2.0013: item 0 2 1 11 parsing failed [ 112.272708][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 112.280533][ T372] playstation 0003:054C:0DF2.0013: Parse failed [ 112.288073][ T372] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -22 [ 112.319290][ T10] usb 6-1: device descriptor read/8, error -71 [ 112.356720][ T31] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 112.449179][ T10] usb 6-1: device descriptor read/8, error -71 [ 112.467688][ T67] usb 1-1: USB disconnect, device number 50 [ 112.519351][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.538591][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.549274][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.562785][ T31] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 112.572551][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.583082][ T31] usb 3-1: config 0 descriptor?? [ 112.686711][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 112.745535][ T10] usb 6-1: device descriptor read/8, error -71 [ 112.807994][ T1742] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.828991][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 112.835001][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 112.844760][ T31] usb 3-1: USB disconnect, device number 54 [ 112.889396][ T10] usb 6-1: device descriptor read/8, error -71 [ 112.906341][ T1750] netlink: 'syz.3.466': attribute type 13 has an invalid length. [ 112.999855][ T10] usb usb6-port1: unable to enumerate USB device [ 113.108683][ T36] kauditd_printk_skb: 514 callbacks suppressed [ 113.108701][ T36] audit: type=1400 audit(2000000059.670:8757): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.140782][ T36] audit: type=1400 audit(2000000059.700:8758): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.186778][ T36] audit: type=1400 audit(2000000059.700:8759): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.230377][ T36] audit: type=1400 audit(2000000059.780:8760): avc: denied { read write } for pid=1761 comm="syz.0.470" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.271617][ T36] audit: type=1400 audit(2000000059.780:8761): avc: denied { read write open } for pid=1761 comm="syz.0.470" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.296028][ T36] audit: type=1400 audit(2000000059.780:8762): avc: denied { ioctl } for pid=1761 comm="syz.0.470" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.321877][ T36] audit: type=1400 audit(2000000059.780:8763): avc: denied { ioctl } for pid=1761 comm="syz.0.470" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.348002][ T36] audit: type=1400 audit(2000000059.800:8764): avc: denied { ioctl } for pid=1761 comm="syz.0.470" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.402306][ T36] audit: type=1400 audit(2000000059.800:8765): avc: denied { ioctl } for pid=1761 comm="syz.0.470" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.447920][ T36] audit: type=1400 audit(2000000059.810:8766): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.466891][ T31] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 113.477371][ T1767] netlink: 'syz.3.473': attribute type 5 has an invalid length. [ 113.498972][ T1767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 113.640592][ T31] usb 1-1: device descriptor read/64, error -71 [ 113.876913][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 113.906784][ T31] usb 1-1: device descriptor read/64, error -71 [ 114.036764][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 114.046838][ T67] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 114.049046][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.068229][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.083739][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.092979][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.108032][ T10] usb 4-1: config 0 descriptor?? [ 114.156727][ T31] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 114.206741][ T67] usb 6-1: Using ep0 maxpacket: 32 [ 114.220128][ T67] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 114.229375][ T67] usb 6-1: config 0 has no interface number 0 [ 114.235580][ T67] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 114.250604][ T67] usb 6-1: config 0 interface 196 has no altsetting 0 [ 114.267381][ T67] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 114.277015][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.285648][ T67] usb 6-1: Product: syz [ 114.291098][ T67] usb 6-1: Manufacturer: syz [ 114.295842][ T67] usb 6-1: SerialNumber: syz [ 114.308490][ T67] usb 6-1: config 0 descriptor?? [ 114.314049][ T31] usb 1-1: device descriptor read/64, error -71 [ 114.331906][ T1780] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 114.567423][ T31] usb 1-1: device descriptor read/64, error -71 [ 114.589796][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 114.595826][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 114.617655][ T10] usb 4-1: USB disconnect, device number 47 [ 114.639044][ T1785] netlink: 'syz.2.479': attribute type 13 has an invalid length. [ 114.681433][ T31] usb usb1-port1: attempt power cycle [ 115.036725][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 115.059107][ T31] usb 1-1: device descriptor read/8, error -71 [ 115.146958][ T1283] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 115.199372][ T31] usb 1-1: device descriptor read/8, error -71 [ 115.312239][ T67] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 115.329286][ T1283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.337108][ T67] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 115.353173][ T1283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.393595][ T1283] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 115.410387][ T1283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.428270][ T1283] usb 3-1: config 0 descriptor?? [ 115.436691][ T31] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 115.469338][ T31] usb 1-1: device descriptor read/8, error -71 [ 115.515875][ T1793] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1793 comm=syz.5.477 [ 115.622238][ T31] usb 1-1: device descriptor read/8, error -71 [ 115.757209][ T31] usb usb1-port1: unable to enumerate USB device [ 115.871368][ T1792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.886501][ T1792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.903007][ T1283] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 115.910516][ T1283] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 115.926697][ T1283] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 115.944624][ T1283] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 115.952166][ T1283] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 115.961579][ T1283] playstation 0003:054C:0DF2.0014: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 115.966789][ T385] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 116.110746][ T1283] playstation 0003:054C:0DF2.0014: Failed to retrieve feature with reportID 9: -71 [ 116.131840][ T1283] playstation 0003:054C:0DF2.0014: Failed to retrieve DualSense pairing info: -71 [ 116.141158][ T1283] playstation 0003:054C:0DF2.0014: Failed to get MAC address from DualSense [ 116.149913][ T1283] playstation 0003:054C:0DF2.0014: Failed to create dualsense. [ 116.159586][ T1283] playstation 0003:054C:0DF2.0014: probe with driver playstation failed with error -71 [ 116.163825][ T385] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.172579][ T1283] usb 3-1: USB disconnect, device number 55 [ 116.225477][ T385] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 116.264437][ T385] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 116.291453][ T385] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x83 has invalid maxpacket 46587, setting to 64 [ 116.315348][ C1] ipheth 6-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 116.331775][ T385] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.342215][ T385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.354856][ T385] usb 4-1: Product: syz [ 116.358501][ T1824] netlink: 348 bytes leftover after parsing attributes in process `syz.0.487'. [ 116.359333][ T385] usb 4-1: Manufacturer: syz [ 116.376815][ T385] usb 4-1: SerialNumber: syz [ 116.524131][ T31] usb 6-1: USB disconnect, device number 26 [ 116.579870][ T31] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 116.700492][ T1828] netlink: 'syz.2.488': attribute type 13 has an invalid length. [ 116.813591][ T1809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'. [ 116.827911][ T1809] netlink: 64 bytes leftover after parsing attributes in process `syz.3.486'. [ 117.245664][ T385] cdc_ncm 4-1:1.0: bind() failure [ 117.252269][ T385] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 117.261797][ T385] cdc_ncm 4-1:1.1: bind() failure [ 117.276728][ T385] usb 4-1: USB disconnect, device number 48 [ 117.356702][ T31] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 117.419140][ T1857] fuse: root generation should be zero [ 117.424741][ T1857] incfs_lookup_dentry err:-5 [ 117.429472][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.436113][ T1857] incfs: mount failed -5 [ 117.441922][ T1857] incfs_lookup_dentry err:-5 [ 117.446590][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.453320][ T1857] incfs: mount failed -5 [ 117.458904][ T1857] incfs_lookup_dentry err:-5 [ 117.463543][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.470345][ T1857] incfs: mount failed -5 [ 117.475641][ T1857] incfs_lookup_dentry err:-5 [ 117.480282][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.486986][ T1857] incfs: mount failed -5 [ 117.492294][ T1857] incfs_lookup_dentry err:-5 [ 117.496976][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.503664][ T1857] incfs: mount failed -5 [ 117.509016][ T1857] incfs_lookup_dentry err:-5 [ 117.513638][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.520352][ T1857] incfs: mount failed -5 [ 117.525936][ T1857] incfs_lookup_dentry err:-5 [ 117.529269][ T31] usb 6-1: config 0 has no interfaces? [ 117.534690][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.536041][ T31] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.546452][ T1857] incfs: mount failed -5 [ 117.553054][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.563095][ T1857] incfs_lookup_dentry err:-5 [ 117.570040][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.570671][ T31] usb 6-1: config 0 descriptor?? [ 117.587586][ T1857] incfs: mount failed -5 [ 117.597854][ T1857] incfs_lookup_dentry err:-5 [ 117.606734][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.615077][ T1857] incfs: mount failed -5 [ 117.623195][ T1857] incfs_lookup_dentry err:-5 [ 117.628706][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.635451][ T1857] incfs: mount failed -5 [ 117.641757][ T1857] incfs_lookup_dentry err:-5 [ 117.646555][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.654996][ T1857] incfs: mount failed -5 [ 117.664812][ T1857] incfs_lookup_dentry err:-5 [ 117.690258][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.697185][ T1857] incfs: mount failed -5 [ 117.702872][ T1857] incfs_lookup_dentry err:-5 [ 117.707907][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.714562][ T1857] incfs: mount failed -5 [ 117.720403][ T1857] incfs_lookup_dentry err:-5 [ 117.725033][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.732935][ T1857] incfs: mount failed -5 [ 117.739036][ T1857] incfs_lookup_dentry err:-5 [ 117.743760][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.751633][ T1857] incfs: mount failed -5 [ 117.757732][ T1857] incfs_lookup_dentry err:-5 [ 117.762361][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.770150][ T1857] incfs: mount failed -5 [ 117.775612][ T1857] incfs_lookup_dentry err:-5 [ 117.781364][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.809954][ T1283] usb 6-1: USB disconnect, device number 27 [ 117.823996][ T1857] incfs: mount failed -5 [ 117.897777][ T1857] incfs_lookup_dentry err:-5 [ 117.901912][ T1866] netlink: 252 bytes leftover after parsing attributes in process `syz.3.495'. [ 117.902436][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.911743][ T1866] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.956759][ T1857] incfs: mount failed -5 [ 117.968059][ T1857] incfs_lookup_dentry err:-5 [ 117.985055][ T1857] incfs: Can't find or create .index dir in ./file0 [ 117.992275][ T1874] netlink: 'syz.5.497': attribute type 13 has an invalid length. [ 118.010474][ T1857] incfs: mount failed -5 [ 118.015630][ T1857] incfs_lookup_dentry err:-5 [ 118.075493][ T1857] incfs: Can't find or create .index dir in ./file0 [ 118.093196][ T1857] incfs: mount failed -5 [ 118.105137][ T1879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.499'. [ 118.118541][ T36] kauditd_printk_skb: 868 callbacks suppressed [ 118.118560][ T36] audit: type=1400 audit(2000000064.680:9635): avc: denied { mounton } for pid=1856 comm="syz.0.493" path="/126/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 118.119765][ T1857] incfs_lookup_dentry err:-5 [ 118.166272][ T36] audit: type=1400 audit(2000000064.720:9636): avc: denied { read write } for pid=1878 comm="syz.3.499" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.172470][ T1857] incfs: Can't find or create .index dir in ./file0 [ 118.236784][ T36] audit: type=1400 audit(2000000064.730:9637): avc: denied { read open } for pid=1878 comm="syz.3.499" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.253632][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.269338][ T1172] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.276522][ T1857] incfs: mount failed -5 [ 118.281955][ T1879] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.288844][ T1172] audit: audit_lost=38 audit_rate_limit=0 audit_backlog_limit=64 [ 118.296735][ T293] audit: audit_lost=39 audit_rate_limit=0 audit_backlog_limit=64 [ 118.304589][ T293] audit: backlog limit exceeded [ 118.309714][ T36] audit: type=1400 audit(2000000064.760:9638): avc: denied { ioctl } for pid=1878 comm="syz.3.499" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.335293][ T1879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 118.582565][ T1900] syzkaller1: entered promiscuous mode [ 118.594751][ T1900] syzkaller1: entered allmulticast mode [ 119.066721][ T1283] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 119.220096][ T1283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.232060][ T1283] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 119.255862][ T1283] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 119.285463][ T1283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.305635][ T1283] usb 1-1: config 0 descriptor?? [ 119.496675][ T1915] overlayfs: workdir and upperdir must reside under the same mount [ 119.625417][ T1926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.513'. [ 119.726756][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.733872][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.753779][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.771658][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.796722][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.813955][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.834122][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.844937][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.853455][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.856783][ T31] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 119.862782][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.875816][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.880426][ T1929] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 119.885141][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.898300][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.905431][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.913486][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.956681][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 119.980152][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.006718][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.015343][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.023463][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.031148][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.039021][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.046150][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.054406][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.062431][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.066451][ T31] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 120.078423][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.085551][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.088128][ T31] usb 6-1: config 0 has no interface number 0 [ 120.097326][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.106712][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.113892][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.122050][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.133823][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.133961][ T31] usb 6-1: config 0 interface 41 has no altsetting 0 [ 120.144408][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.155603][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.182078][ T31] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 120.194480][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.196713][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.213121][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.217120][ T31] usb 6-1: Product: syz [ 120.225284][ T31] usb 6-1: Manufacturer: syz [ 120.230483][ T31] usb 6-1: SerialNumber: syz [ 120.231578][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.243498][ T1283] uclogic 0003:5543:0781.0015: unknown main item tag 0x0 [ 120.247917][ T31] usb 6-1: config 0 descriptor?? [ 120.255844][ T1283] uclogic 0003:5543:0781.0015: No inputs registered, leaving [ 120.263329][ T385] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 120.272985][ T1283] uclogic 0003:5543:0781.0015: hidraw0: USB HID v0.fe Device [HID 5543:0781] on usb-dummy_hcd.0-1/input0 [ 120.290561][ T1283] usb 1-1: USB disconnect, device number 55 [ 120.361630][ T1939] fido_id[1939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 120.431056][ T385] usb 3-1: config 0 has no interfaces? [ 120.437246][ T385] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.446413][ T385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.457800][ T385] usb 3-1: config 0 descriptor?? [ 120.691374][ T67] usb 3-1: USB disconnect, device number 56 [ 121.136695][ T67] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 121.205267][ T31] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 121.299227][ T67] usb 3-1: config 0 has no interfaces? [ 121.304793][ T67] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.314357][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.324351][ T67] usb 3-1: config 0 descriptor?? [ 121.346693][ T386] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 121.516697][ T386] usb 4-1: Using ep0 maxpacket: 16 [ 121.525195][ T386] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.536875][ T386] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.547135][ T386] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 121.549411][ T1936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.560304][ T386] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.575200][ T386] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 121.585933][ T1936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.594322][ T386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.612099][ T386] usb 4-1: config 0 descriptor?? [ 121.832490][ T1972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.841228][ T1972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.006728][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 122.159213][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 122.172292][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.181502][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.191417][ T10] usb 1-1: config 0 descriptor?? [ 122.207320][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 122.259069][ T386] usbhid 4-1:0.0: can't add hid device: -71 [ 122.265142][ T386] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 122.275992][ T386] usb 4-1: USB disconnect, device number 49 [ 122.430054][ T31] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 122.440839][ T31] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 122.450367][ T31] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 122.467114][ T31] usb 6-1: USB disconnect, device number 28 [ 122.543065][ T386] usb 1-1: USB disconnect, device number 56 [ 123.054798][ T10] usb 3-1: USB disconnect, device number 57 [ 123.086717][ T386] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 123.133096][ T36] kauditd_printk_skb: 621 callbacks suppressed [ 123.133124][ T36] audit: type=1400 audit(2000000069.690:10227): avc: denied { create } for pid=1991 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.182743][ T36] audit: type=1400 audit(2000000069.720:10228): avc: denied { read } for pid=1990 comm="syz.2.530" dev="nsfs" ino=4026532508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.237236][ T36] audit: type=1400 audit(2000000069.720:10229): avc: denied { read open } for pid=1990 comm="syz.2.530" path="net:[4026532508]" dev="nsfs" ino=4026532508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.262814][ T386] usb 4-1: Using ep0 maxpacket: 16 [ 123.268067][ T36] audit: type=1400 audit(2000000069.720:10230): avc: denied { create } for pid=1990 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.290549][ T386] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.308616][ T386] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.326723][ T36] audit: type=1400 audit(2000000069.720:10231): avc: denied { create } for pid=1991 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.347498][ T36] audit: type=1400 audit(2000000069.720:10232): avc: denied { create } for pid=1991 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.369333][ T36] audit: type=1400 audit(2000000069.720:10233): avc: denied { create } for pid=1991 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.390037][ T386] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.399598][ T36] audit: type=1400 audit(2000000069.720:10234): avc: denied { create } for pid=1991 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.420545][ T386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.429350][ T386] usb 4-1: Product: syz [ 123.433555][ T386] usb 4-1: Manufacturer: syz [ 123.439283][ T386] usb 4-1: SerialNumber: syz [ 123.444382][ T36] audit: type=1400 audit(2000000069.720:10235): avc: denied { setopt } for pid=1990 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.466274][ T36] audit: type=1400 audit(2000000069.720:10236): avc: denied { create } for pid=1991 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.481769][ T2000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 123.556704][ T385] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 123.708136][ T386] usb 4-1: 0:2 : does not exist [ 123.716233][ T386] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 123.728077][ T385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.744820][ T386] usb 4-1: USB disconnect, device number 50 [ 123.752776][ T385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.766154][ T385] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.770205][ T353] udevd[353]: setting mode of /dev/bus/usb/004/050 to 020664 failed: No such file or directory [ 123.799382][ T353] udevd[353]: setting owner of /dev/bus/usb/004/050 to uid=0, gid=0 failed: No such file or directory [ 123.808023][ T385] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.833206][ T385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.867391][ T385] usb 3-1: config 0 descriptor?? [ 123.895467][ T2011] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.928286][ T2009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.535'. [ 123.964847][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.137244][ T2016] kvm: pic: non byte write [ 124.289469][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.306703][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.314142][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.321595][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.329066][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.336457][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.343885][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.351371][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.358793][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.366199][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.373623][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.381152][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.388799][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.396218][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.396787][ T386] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 124.403672][ T385] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 124.418937][ T385] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 124.431467][ T385] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 124.549607][ T1998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.567254][ T2022] pim6reg1: entered promiscuous mode [ 124.576705][ T386] usb 4-1: Using ep0 maxpacket: 8 [ 124.586872][ T1998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.607608][ T2022] pim6reg1: entered allmulticast mode [ 124.617414][ T386] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.647806][ T386] usb 4-1: config 2 has an invalid interface number: 15 but max is 0 [ 124.656526][ T386] usb 4-1: config 2 has no interface number 0 [ 124.661608][ T1998] netlink: 'syz.2.532': attribute type 19 has an invalid length. [ 124.664979][ T386] usb 4-1: config 2 interface 15 has no altsetting 0 [ 124.696783][ T386] usb 4-1: New USB device found, idVendor=079b, idProduct=000f, bcdDevice=43.1d [ 124.705947][ T386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.717236][ T385] usb 3-1: USB disconnect, device number 58 [ 124.727522][ T386] usb 4-1: Product: syz [ 124.731727][ T386] usb 4-1: Manufacturer: syz [ 124.736452][ T386] usb 4-1: SerialNumber: syz [ 124.971890][ T386] usb 4-1: USB disconnect, device number 51 [ 125.235178][ T2048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.243794][ T2048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.476721][ T548] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 125.641580][ T548] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 125.651547][ T548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 125.662677][ T548] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 125.679503][ T548] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 125.696695][ T548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.710286][ T548] usb 1-1: Product: syz [ 125.714540][ T548] usb 1-1: Manufacturer: syz [ 125.720450][ T548] usb 1-1: SerialNumber: syz [ 125.727814][ T548] usb 1-1: config 0 descriptor?? [ 125.734423][ T2049] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.752629][ T548] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 126.046688][ T386] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 126.156702][ T548] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 126.186717][ T386] usb 4-1: device descriptor read/64, error -71 [ 126.318949][ T548] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.332346][ T548] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.341524][ T548] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 126.349580][ T548] usb 6-1: Product: syz [ 126.353832][ T548] usb 6-1: SerialNumber: syz [ 126.405097][ T2072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.426724][ T386] usb 4-1: device descriptor read/64, error -71 [ 126.435464][ T2071] rust_binder: Error in use_page_slow: ESRCH [ 126.435485][ T2071] rust_binder: use_range failure ESRCH [ 126.441612][ T2071] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 126.447317][ T2071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 126.455320][ T2071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:394 [ 126.666750][ T386] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 126.806791][ T386] usb 4-1: device descriptor read/64, error -71 [ 127.047069][ T10] usb 1-1: USB disconnect, device number 57 [ 127.053947][ T386] usb 4-1: device descriptor read/64, error -71 [ 127.176754][ T386] usb usb4-port1: attempt power cycle [ 127.210416][ T2090] mmap: syz.2.559 (2090) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.452012][ T548] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 127.464679][ T548] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 127.473054][ T548] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 127.536752][ T386] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 127.559064][ T386] usb 4-1: device descriptor read/8, error -71 [ 127.652610][ T548] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 127.662804][ T548] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 127.680070][ T548] usb 6-1: USB disconnect, device number 29 [ 127.686326][ T548] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 127.699436][ T386] usb 4-1: device descriptor read/8, error -71 [ 127.764665][ T334] udevd[334]: setting mode of /dev/bus/usb/006/029 to 020664 failed: No such file or directory [ 127.775555][ T334] udevd[334]: setting owner of /dev/bus/usb/006/029 to uid=0, gid=0 failed: No such file or directory [ 127.936739][ T386] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 127.958787][ T386] usb 4-1: device descriptor read/8, error -71 [ 128.099231][ T386] usb 4-1: device descriptor read/8, error -71 [ 128.171035][ T36] kauditd_printk_skb: 630 callbacks suppressed [ 128.171054][ T36] audit: type=1400 audit(2000000074.730:10861): avc: denied { read write } for pid=1172 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.201925][ T36] audit: type=1400 audit(2000000074.730:10862): avc: denied { read write open } for pid=1172 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.229599][ T386] usb usb4-port1: unable to enumerate USB device [ 128.237611][ T36] audit: type=1400 audit(2000000074.730:10863): avc: denied { ioctl } for pid=1172 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.267999][ T36] audit: type=1400 audit(2000000074.740:10864): avc: denied { ioctl } for pid=2103 comm="syz.0.563" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.300070][ T36] audit: type=1400 audit(2000000074.790:10865): avc: denied { ioctl } for pid=2062 comm="syz.3.551" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.306878][ T548] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 128.334433][ T36] audit: type=1400 audit(2000000074.810:10866): avc: denied { ioctl } for pid=2103 comm="syz.0.563" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.372596][ T36] audit: type=1400 audit(2000000074.860:10867): avc: denied { read write } for pid=2105 comm="syz.5.564" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.407821][ T36] audit: type=1400 audit(2000000074.860:10868): avc: denied { read write open } for pid=2105 comm="syz.5.564" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.444456][ T36] audit: type=1400 audit(2000000074.860:10869): avc: denied { ioctl } for pid=2105 comm="syz.5.564" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.470232][ T36] audit: type=1400 audit(2000000074.860:10870): avc: denied { ioctl } for pid=2105 comm="syz.5.564" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.546748][ T548] usb 1-1: Using ep0 maxpacket: 16 [ 128.546753][ T386] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 128.561773][ T548] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 128.576117][ T548] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 128.585215][ T548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.593267][ T548] usb 1-1: Product: syz [ 128.597828][ T548] usb 1-1: Manufacturer: syz [ 128.602441][ T548] usb 1-1: SerialNumber: syz [ 128.696680][ T386] usb 6-1: Using ep0 maxpacket: 32 [ 128.704876][ T386] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.715813][ T386] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.725585][ T386] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 128.738410][ T386] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 128.747489][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 128.755113][ T386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.765835][ T386] usb 6-1: config 0 descriptor?? [ 128.816341][ T548] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 128.837565][ T548] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 128.857533][ T548] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 128.886107][ T548] usb 1-1: USB disconnect, device number 58 [ 128.910470][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 128.946390][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.969619][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 128.993595][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 129.003426][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.014243][ T10] usb 3-1: config 0 descriptor?? [ 129.027102][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 129.203753][ T386] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0017/input/input19 [ 129.217712][ T386] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0017/input/input20 [ 129.235816][ T2108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.249222][ T386] kye 0003:0458:5011.0017: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 129.265335][ T2108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.290928][ T2108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.309016][ T2108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.613785][ T386] usb 6-1: USB disconnect, device number 30 [ 130.216689][ T386] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 130.366678][ T386] usb 4-1: Using ep0 maxpacket: 16 [ 130.374932][ T386] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.384941][ T386] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 130.396688][ T67] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 130.404738][ T386] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 130.413854][ T386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.421894][ T386] usb 4-1: Product: syz [ 130.426070][ T386] usb 4-1: Manufacturer: syz [ 130.430700][ T386] usb 4-1: SerialNumber: syz [ 130.556699][ T67] usb 6-1: Using ep0 maxpacket: 16 [ 130.565029][ T67] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 130.574284][ T67] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.584976][ T67] usb 6-1: config 0 has no interface number 0 [ 130.595026][ T67] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 130.604117][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.612171][ T67] usb 6-1: Product: syz [ 130.616399][ T67] usb 6-1: Manufacturer: syz [ 130.621052][ T67] usb 6-1: SerialNumber: syz [ 130.638728][ T67] usb 6-1: config 0 descriptor?? [ 130.650779][ T2130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.662694][ T67] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 130.670388][ T2130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.686685][ T67] usb 6-1: No valid video chain found. [ 130.880039][ T67] usb 6-1: USB disconnect, device number 31 [ 130.894655][ T386] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 130.904685][ T386] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 130.926792][ T386] usb 4-1: USB disconnect, device number 56 [ 130.953669][ T334] udevd[334]: setting mode of /dev/bus/usb/004/056 to 020664 failed: No such file or directory [ 130.967417][ T334] udevd[334]: setting owner of /dev/bus/usb/004/056 to uid=0, gid=0 failed: No such file or directory [ 131.019962][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.459909][ T372] usb 3-1: USB disconnect, device number 59 [ 131.611156][ T2144] netlink: 'syz.5.576': attribute type 12 has an invalid length. [ 131.676751][ T386] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 131.849644][ T386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.866677][ T386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.886598][ T386] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.904758][ T386] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 131.914431][ T386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.940134][ T386] usb 4-1: config 0 descriptor?? [ 132.136715][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 132.286679][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 132.295272][ T10] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 132.320093][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 132.344512][ T10] usb 6-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice=ff.ff [ 132.364731][ T386] usbhid 4-1:0.0: can't add hid device: -71 [ 132.375139][ T386] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 132.386486][ T2174] netlink: 316 bytes leftover after parsing attributes in process `syz.0.585'. [ 132.394103][ T10] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=3 [ 132.396265][ T2174] netlink: 316 bytes leftover after parsing attributes in process `syz.0.585'. [ 132.409524][ T386] usb 4-1: USB disconnect, device number 57 [ 132.420402][ T10] usb 6-1: Product: syz [ 132.424606][ T10] usb 6-1: Manufacturer: syz [ 132.430881][ T10] usb 6-1: SerialNumber: syz [ 132.650022][ T2150] netlink: 57 bytes leftover after parsing attributes in process `syz.5.579'. [ 132.684896][ T10] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 132.704473][ T10] usb 6-1: USB disconnect, device number 32 [ 132.759921][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.176710][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 133.185057][ T36] kauditd_printk_skb: 452 callbacks suppressed [ 133.185092][ T36] audit: type=1400 audit(2000000079.740:11323): avc: denied { ioctl } for pid=2185 comm="syz.3.588" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.218624][ T36] audit: type=1400 audit(2000000079.750:11324): avc: denied { ioctl } for pid=2193 comm="syz.2.591" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.244267][ T36] audit: type=1400 audit(2000000079.780:11325): avc: denied { ioctl } for pid=2185 comm="syz.3.588" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.269956][ T36] audit: type=1400 audit(2000000079.780:11326): avc: denied { ioctl } for pid=2185 comm="syz.3.588" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.296103][ T36] audit: type=1400 audit(2000000079.830:11327): avc: denied { ioctl } for pid=2193 comm="syz.2.591" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.321713][ T36] audit: type=1400 audit(2000000079.850:11328): avc: denied { ioctl } for pid=2185 comm="syz.3.588" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.347681][ T36] audit: type=1400 audit(2000000079.850:11329): avc: denied { read write } for pid=1172 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.348440][ T67] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 133.385131][ T36] audit: type=1400 audit(2000000079.850:11330): avc: denied { read write open } for pid=1172 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.410859][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 133.427609][ T10] usb 4-1: New USB device strings: Mfr=14, Product=20, SerialNumber=0 [ 133.442095][ T36] audit: type=1400 audit(2000000079.850:11331): avc: denied { ioctl } for pid=1172 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.476668][ T10] usb 4-1: Product: syz [ 133.480954][ T10] usb 4-1: Manufacturer: syz [ 133.498640][ T10] usb 4-1: config 0 descriptor?? [ 133.515189][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 133.524212][ T36] audit: type=1400 audit(2000000079.930:11332): avc: denied { ioctl } for pid=2185 comm="syz.3.588" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.549589][ T10] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 133.591445][ T67] usb 3-1: Using ep0 maxpacket: 32 [ 133.627247][ T67] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 133.644228][ T67] usb 3-1: config 0 has no interface number 0 [ 133.655071][ T67] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 133.674342][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.695445][ T67] usb 3-1: Product: syz [ 133.702711][ T67] usb 3-1: Manufacturer: syz [ 133.717563][ T67] usb 3-1: SerialNumber: syz [ 133.739283][ T2186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.739341][ T67] usb 3-1: config 0 descriptor?? [ 133.748091][ T2186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.800532][ T67] smsc95xx v2.0.0 [ 133.908551][ T2204] 9pnet_fd: Insufficient options for proto=fd [ 134.036719][ T1283] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 134.176894][ T1283] usb 1-1: device descriptor read/64, error -71 [ 134.216119][ T67] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 134.226917][ T67] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 134.236686][ T386] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 134.386690][ T386] usb 6-1: Using ep0 maxpacket: 8 [ 134.394565][ T386] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.402991][ T386] usb 6-1: config 179 has no interface number 0 [ 134.409332][ T386] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 134.420435][ T1283] usb 1-1: device descriptor read/64, error -71 [ 134.426736][ T386] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 134.438098][ T386] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.449545][ T386] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 134.460997][ T386] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.474269][ T386] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 134.483479][ T386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.494935][ T2213] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 134.653725][ T67] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 134.664710][ T67] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 134.677451][ T67] usb 3-1: USB disconnect, device number 60 [ 134.684988][ T1283] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 134.711294][ T386] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input21 [ 134.866681][ T1283] usb 1-1: device descriptor read/64, error -71 [ 135.106701][ T1283] usb 1-1: device descriptor read/64, error -71 [ 135.213348][ T2217] netlink: 104 bytes leftover after parsing attributes in process `syz.2.598'. [ 135.218978][ T1283] usb usb1-port1: attempt power cycle [ 135.491911][ T2230] syz.5.601 uses obsolete (PF_INET,SOCK_PACKET) [ 135.569178][ T2233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.576900][ T1283] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 135.578164][ T2233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.639977][ T1283] usb 1-1: device descriptor read/8, error -71 [ 135.656756][ T386] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 135.779477][ T1283] usb 1-1: device descriptor read/8, error -71 [ 135.806669][ T386] usb 3-1: Using ep0 maxpacket: 32 [ 135.814307][ T386] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 135.824574][ T386] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 135.836974][ T386] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice=ff.ff [ 135.846230][ T386] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=3 [ 135.854672][ T386] usb 3-1: Product: syz [ 135.858987][ T386] usb 3-1: Manufacturer: syz [ 135.863637][ T386] usb 3-1: SerialNumber: syz [ 135.957785][ T67] usb 4-1: USB disconnect, device number 58 [ 135.965346][ T67] ftdi_sio 4-1:0.0: device disconnected [ 136.022323][ T1283] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 136.059846][ T1283] usb 1-1: device descriptor read/8, error -71 [ 136.084022][ T2227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.095971][ T2227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.106538][ T2227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 136.120313][ T386] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 136.143518][ T386] usb 3-1: USB disconnect, device number 61 [ 136.200231][ T1283] usb 1-1: device descriptor read/8, error -71 [ 136.290950][ T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.307566][ T1283] usb usb1-port1: unable to enumerate USB device [ 136.966248][ T2253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.609'. [ 137.066699][ T385] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 137.164401][ T2265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.173034][ T2265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.185371][ T2265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.196127][ T2264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.205919][ T2265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.214875][ T2264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.246707][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.262532][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.292620][ T385] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 137.304519][ T385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.356900][ T385] usb 1-1: config 0 descriptor?? [ 137.816735][ T2250] syzkaller1: left promiscuous mode [ 137.828500][ T2250] syzkaller1: left allmulticast mode [ 137.857059][ T2250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.875817][ T2250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.894106][ T2279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.906050][ T2279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.915974][ T2250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.964691][ T2250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.011352][ T385] hid-led 0003:1D34:000A.0018: item fetching failed at offset 0/3 [ 138.035441][ T385] hid-led 0003:1D34:000A.0018: probe with driver hid-led failed with error -22 [ 138.200424][ T36] kauditd_printk_skb: 498 callbacks suppressed [ 138.200442][ T36] audit: type=1400 audit(2000000084.760:11831): avc: denied { read write } for pid=293 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.233728][ T385] usb 1-1: USB disconnect, device number 63 [ 138.272763][ T36] audit: type=1400 audit(2000000084.800:11832): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.333230][ T2289] rust_binder: 474: no such ref 1 [ 138.338474][ T36] audit: type=1400 audit(2000000084.800:11833): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.364183][ T2289] rust_binder: 474: no such ref 3 [ 138.375077][ T2289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 138.387343][ T2289] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 138.387365][ T2289] rust_binder: Read failure Err(EFAULT) in pid:474 [ 138.407384][ T36] audit: type=1400 audit(2000000084.810:11834): avc: denied { create } for pid=2286 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.464521][ T36] audit: type=1400 audit(2000000084.810:11835): avc: denied { write } for pid=2286 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.518414][ T36] audit: type=1400 audit(2000000084.810:11836): avc: denied { create } for pid=2286 comm="syz.3.620" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.561038][ T2293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.569639][ T36] audit: type=1400 audit(2000000084.810:11837): avc: denied { ioctl } for pid=2286 comm="syz.3.620" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=22545 ioctlcmd=0xaee0 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.597216][ T2293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.626692][ T36] audit: type=1400 audit(2000000084.810:11838): avc: denied { ioctl } for pid=2286 comm="syz.3.620" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=22545 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.696678][ T36] audit: type=1400 audit(2000000084.860:11839): avc: denied { read } for pid=2288 comm="syz.2.621" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.748042][ T36] audit: type=1400 audit(2000000084.860:11840): avc: denied { read open } for pid=2288 comm="syz.2.621" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 139.086695][ T385] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 139.239401][ T385] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.266097][ T385] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.282921][ T385] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 139.295452][ T385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 139.304301][ T385] usb 1-1: SerialNumber: syz [ 139.538968][ T385] usb 1-1: 0:2 : does not exist [ 139.557574][ T385] usb 1-1: USB disconnect, device number 64 [ 139.679484][ T386] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 139.706745][ T1283] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 139.730315][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 139.846782][ T386] usb 3-1: Using ep0 maxpacket: 16 [ 139.867441][ T1283] usb 4-1: Using ep0 maxpacket: 8 [ 139.874653][ T386] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.901693][ T1283] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 139.913344][ T386] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.922874][ T1283] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 139.938418][ T1283] usb 4-1: config 179 has no interface number 0 [ 139.945959][ T1283] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 139.961011][ T1283] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 139.971438][ T386] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.981110][ T1283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.989261][ T386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.997837][ T386] usb 3-1: Product: syz [ 140.002436][ T386] usb 3-1: Manufacturer: syz [ 140.008711][ T386] usb 3-1: SerialNumber: syz [ 140.099139][ T2339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.107911][ T2339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.222913][ T386] usb 3-1: 0:2 : does not exist [ 140.227595][ T385] usb 4-1: USB disconnect, device number 59 [ 140.238945][ T386] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 140.268715][ T386] usb 3-1: USB disconnect, device number 62 [ 140.404007][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 140.556715][ T67] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 140.712640][ T67] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 140.720862][ T67] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.732562][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.743537][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 140.753384][ T67] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.767128][ T67] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.776198][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.787963][ T67] usb 1-1: config 0 descriptor?? [ 140.936527][ T2351] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 141.252150][ T2351] SELinux: failed to load policy [ 141.351894][ T2356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.387081][ T2356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.454952][ T2345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.486850][ T2345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.715896][ T67] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 141.735507][ T67] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 141.791142][ T67] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 142.027250][ T2370] netlink: 'syz.3.648': attribute type 4 has an invalid length. [ 142.058372][ T2370] netlink: 'syz.3.648': attribute type 5 has an invalid length. [ 142.066236][ T2370] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.648'. [ 142.080502][ T2372] netlink: 5 bytes leftover after parsing attributes in process `syz.5.647'. [ 142.146772][ T67] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 142.328459][ T67] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.380711][ T67] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.400750][ T67] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 142.435506][ T67] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.458649][ T67] usb 3-1: config 0 descriptor?? [ 142.546702][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 142.700269][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.713938][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.724022][ T10] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 142.733175][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.746983][ T10] usb 4-1: config 0 descriptor?? [ 142.804271][ T2388] netlink: 'syz.5.652': attribute type 13 has an invalid length. [ 142.897591][ T67] hid-led 0003:27B8:01ED.001A: collection stack underflow [ 142.916701][ T67] hid-led 0003:27B8:01ED.001A: item 0 4 0 12 parsing failed [ 142.929866][ T67] hid-led 0003:27B8:01ED.001A: probe with driver hid-led failed with error -22 [ 143.083097][ T2394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.101837][ T2394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.124776][ T386] usb 3-1: USB disconnect, device number 63 [ 143.166676][ T67] usb 1-1: reset high-speed USB device number 65 using dummy_hcd [ 143.177970][ T10] hid-led 0003:27B8:01ED.001B: unknown main item tag 0x3 [ 143.206688][ T36] kauditd_printk_skb: 589 callbacks suppressed [ 143.206737][ T36] audit: type=1400 audit(2000000089.761:12430): avc: denied { bind } for pid=2398 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.246761][ T36] audit: type=1400 audit(2000000089.771:12431): avc: denied { name_bind } for pid=2398 comm="syz.2.655" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 143.346670][ T36] audit: type=1400 audit(2000000089.771:12432): avc: denied { node_bind } for pid=2398 comm="syz.2.655" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 143.386227][ T10] hid-led 0003:27B8:01ED.001B: probe with driver hid-led failed with error -71 [ 143.407962][ T10] usb 4-1: USB disconnect, device number 60 [ 143.410671][ T2406] tipc: Started in network mode [ 143.421840][ T36] audit: type=1400 audit(2000000089.801:12433): avc: denied { read } for pid=2398 comm="syz.2.655" dev="nsfs" ino=4026532508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 143.453116][ T2406] tipc: Node identity 4, cluster identity 4711 [ 143.461580][ T36] audit: type=1400 audit(2000000089.801:12434): avc: denied { read open } for pid=2398 comm="syz.2.655" path="net:[4026532508]" dev="nsfs" ino=4026532508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 143.489720][ T2406] tipc: Node number set to 4 [ 143.492427][ T36] audit: type=1400 audit(2000000089.801:12435): avc: denied { create } for pid=2398 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.541609][ T36] audit: type=1400 audit(2000000089.801:12436): avc: denied { getopt } for pid=2398 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.562155][ T36] audit: type=1400 audit(2000000089.801:12437): avc: denied { read write } for pid=2398 comm="syz.2.655" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 143.626776][ T36] audit: type=1400 audit(2000000089.801:12438): avc: denied { read write open } for pid=2398 comm="syz.2.655" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 143.706666][ T36] audit: type=1400 audit(2000000089.801:12439): avc: denied { ioctl } for pid=2398 comm="syz.2.655" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 143.733402][ T2413] syz_tun: entered allmulticast mode [ 144.091561][ T385] usb 1-1: USB disconnect, device number 65 [ 144.097696][ T548] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 144.246817][ T385] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 144.266727][ T548] usb 3-1: Using ep0 maxpacket: 16 [ 144.275869][ T548] usb 3-1: unable to get BOS descriptor or descriptor too short [ 144.285783][ T548] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 144.301178][ T548] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 144.310311][ T548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.318402][ T548] usb 3-1: Product: syz [ 144.322594][ T548] usb 3-1: Manufacturer: syz [ 144.327859][ T548] usb 3-1: SerialNumber: syz [ 144.409765][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.420926][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.430773][ T385] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.439876][ T385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.450738][ T385] usb 1-1: config 0 descriptor?? [ 144.469793][ T385] hub 1-1:0.0: USB hub found [ 144.584210][ T548] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 144.592562][ T548] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 144.672786][ T385] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 144.687407][ T385] hid-generic 0003:046D:C31C.001C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 144.986392][ T548] usb 3-1: 2:1 : invalid Cluster Descriptor size [ 144.996824][ T10] usb 1-1: USB disconnect, device number 66 [ 145.196386][ T10] usb 3-1: USB disconnect, device number 64 [ 145.256682][ T548] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 145.416834][ T548] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 145.425076][ T548] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.442502][ T548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.456806][ T548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.467324][ T548] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.481194][ T548] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.490975][ T548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.501709][ T548] usb 4-1: config 0 descriptor?? [ 145.512972][ T2433] SELinux: failed to load policy [ 145.846746][ T386] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 145.856514][ T2431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.866113][ T2431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.018560][ T386] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 146.039420][ T386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.060304][ T386] usb 1-1: config 0 descriptor?? [ 146.194083][ T2449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.211397][ T2449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.233369][ T2449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.244796][ T2449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.266059][ T2449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.274758][ T2449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.136702][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 147.300344][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.326276][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.346753][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 147.356499][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 147.364625][ T10] usb 3-1: Manufacturer: syz [ 147.377040][ T10] usb 3-1: config 0 descriptor?? [ 147.505126][ T2484] netlink: 112 bytes leftover after parsing attributes in process `syz.5.683'. [ 147.525768][ T386] usb 1-1: Cannot set autoneg [ 147.535815][ T386] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 147.548541][ T386] usb 1-1: USB disconnect, device number 67 [ 147.734976][ T2493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.744036][ T2493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.753503][ T2494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.767773][ T2494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.024664][ T548] usbhid 4-1:0.0: can't add hid device: -71 [ 148.040383][ T548] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 148.067641][ T548] usb 4-1: USB disconnect, device number 61 [ 148.217463][ T10] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input24 [ 148.238722][ T36] kauditd_printk_skb: 451 callbacks suppressed [ 148.238744][ T36] audit: type=1400 audit(2000000094.801:12891): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.291601][ T10] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input25 [ 148.310967][ T10] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input26 [ 148.335644][ T36] audit: type=1400 audit(2000000094.801:12892): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.360874][ T10] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001D/input/input27 [ 148.392326][ T2506] netlink: 'syz.0.690': attribute type 58 has an invalid length. [ 148.409119][ T2461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.425705][ T36] audit: type=1400 audit(2000000094.841:12893): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.461514][ T2461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.482784][ T10] uclogic 0003:256C:006D.001D: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 148.496670][ T36] audit: type=1400 audit(2000000094.871:12894): avc: denied { read } for pid=96 comm="acpid" name="event4" dev="devtmpfs" ino=868 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.519142][ T548] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 148.535781][ T10] usb 3-1: USB disconnect, device number 65 [ 148.573354][ T36] audit: type=1400 audit(2000000094.871:12895): avc: denied { read open } for pid=96 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=868 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.636737][ T36] audit: type=1400 audit(2000000094.891:12896): avc: denied { read } for pid=2504 comm="syz.0.690" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.676241][ T36] audit: type=1400 audit(2000000094.891:12897): avc: denied { read open } for pid=2504 comm="syz.0.690" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.702737][ T36] audit: type=1400 audit(2000000094.921:12898): avc: denied { ioctl } for pid=2497 comm="syz.3.687" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.728370][ T36] audit: type=1400 audit(2000000094.921:12899): avc: denied { ioctl } for pid=2504 comm="syz.0.690" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.749471][ T548] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.764940][ T36] audit: type=1400 audit(2000000094.941:12900): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=868 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.790467][ T548] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.816693][ T548] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 148.831818][ T2516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.836730][ T548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.850255][ T2516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.865058][ T548] hub 4-1:4.0: USB hub found [ 148.874474][ T2518] Unsupported ieee802154 address type: 0 [ 149.074604][ T548] hub 4-1:4.0: 2 ports detected [ 149.116675][ T548] usb 4-1: selecting invalid altsetting 1 [ 149.122471][ T548] hub 4-1:4.0: Using single TT (err -22) [ 149.202030][ T2524] fido_id[2524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 149.334874][ T548] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 149.341369][ T548] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 149.377129][ T548] usb 4-1: USB disconnect, device number 62 [ 149.406739][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 149.526718][ T330] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 149.571538][ T10] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 149.596220][ T2541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.698'. [ 149.599161][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.618025][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.646726][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 149.667855][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.684566][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.686349][ T2542] incfs: Options parsing error. -22 [ 149.694071][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 149.710806][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.723646][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.726801][ T2542] incfs: mount failed -22 [ 149.741422][ T10] usb 1-1: config 0 descriptor?? [ 149.746609][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.762425][ T330] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 149.774751][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.786373][ T330] usb 3-1: config 0 descriptor?? [ 149.797704][ T2542] netlink: 44 bytes leftover after parsing attributes in process `syz.5.698'. [ 150.081572][ T2526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.090444][ T2526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.116723][ T548] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 150.202412][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.213255][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.221001][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.230112][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.238242][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.245326][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.252406][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.259455][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.266471][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.273812][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.280933][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.286787][ T548] usb 4-1: Using ep0 maxpacket: 8 [ 150.288340][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.299999][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.309101][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.316682][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.323731][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.332319][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.340226][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.347495][ T548] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 150.352009][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.364814][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.367697][ T548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.380119][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.380303][ T548] usb 4-1: Product: syz [ 150.391418][ T548] usb 4-1: Manufacturer: syz [ 150.396050][ T548] usb 4-1: SerialNumber: syz [ 150.401539][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.411664][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.419997][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.430132][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.438072][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.445171][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.453399][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.465793][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.482851][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.490873][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.498759][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.505955][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.514353][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.522267][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.530155][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.538020][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.545113][ T330] belkin 0003:1020:0006.001E: unknown main item tag 0x0 [ 150.556317][ T330] belkin 0003:1020:0006.001E: hidraw0: USB HID v0.0a Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 150.605291][ T2550] x_tables: duplicate entry at hook 1 [ 150.696056][ T330] usb 3-1: USB disconnect, device number 66 [ 150.757399][ T2553] cgroup: No subsys list or none specified [ 150.830807][ T2556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.846433][ T2556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.863269][ T2556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.891944][ T2556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.925938][ T2556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.940946][ T2556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.953488][ T2556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.962152][ T2556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.976660][ T2556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.986559][ T2556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.998433][ T2556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.007184][ T2556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.250047][ T2545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.262240][ T2545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.297179][ T548] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 151.324834][ T548] usb 4-1: USB disconnect, device number 63 [ 151.432210][ T2567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.457211][ T2567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.527219][ T2540] udevd[2540]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.905091][ T2583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 151.982229][ T2587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.006555][ T2587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.016672][ T548] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 152.036707][ T2587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.066789][ T2587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.150804][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 152.156937][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 152.186505][ T10] usb 1-1: USB disconnect, device number 68 [ 152.206662][ T548] usb 3-1: Using ep0 maxpacket: 16 [ 152.241389][ T548] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.280826][ T548] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.295470][ T548] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.311111][ T2597] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 88) [ 152.311139][ T2597] rust_binder: Error while translating object. [ 152.321699][ T548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.336193][ T548] usb 3-1: Product: syz [ 152.340732][ C1] BUG: TASK stack guard page was hit at ffffc90010ac7ff8 (stack is ffffc90010ac8000..ffffc90010ad0000) [ 152.340781][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 152.340814][ C1] CPU: 1 UID: 0 PID: 2597 Comm: syz.5.714 Not tainted syzkaller #0 6689bf08a63a9fd1d154dffed701218a84e741b5 [ 152.340842][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.340857][ C1] RIP: 0010:check_new_pages+0x134/0x390 [ 152.340908][ C1] Code: 00 00 00 3e 48 89 44 24 60 0f 1f 44 00 00 48 8b 44 24 60 48 89 44 24 38 48 8b 44 24 08 4c 8d 64 18 30 4c 89 e7 be 04 00 00 00 67 e7 05 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 46 [ 152.340928][ C1] RSP: 0018:ffffc90010ac8000 EFLAGS: 00010206 [ 152.340953][ C1] RAX: ffffea00045e8500 RBX: 0000000000000000 RCX: 0000000000000002 [ 152.340969][ C1] RDX: ffffea00045e8508 RSI: 0000000000000004 RDI: ffffea00045e8530 [ 152.340985][ C1] RBP: ffffc90010ac80d0 R08: ffff8881f6f722c0 R09: 0000000000000002 [ 152.341001][ C1] R10: 0000000000000000 R11: 00000000fffffffc R12: ffffea00045e8530 [ 152.341015][ C1] R13: dffffc0000000000 R14: ffffc90010ac8060 R15: 1ffff92002159008 [ 152.341032][ C1] FS: 00007f3ccba006c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 152.341051][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.341067][ C1] CR2: ffffc90010ac7ff8 CR3: 0000000136eec000 CR4: 00000000003526b0 [ 152.341088][ C1] Call Trace: [ 152.341096][ C1] [ 152.341106][ C1] ? free_contig_range+0x260/0x260 [ 152.341137][ C1] ___rmqueue_pcplist+0x3ae/0x31b0 [ 152.341169][ C1] ? __kasan_check_read+0x15/0x20 [ 152.341197][ C1] ? __zone_watermark_ok+0x134/0x630 [ 152.341221][ C1] ? __cfi___zone_watermark_ok+0x10/0x10 [ 152.341246][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 152.341274][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 152.341299][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 152.341325][ C1] get_page_from_freelist+0x6f5/0x4a20 [ 152.341355][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 152.341378][ C1] ? static_key_count+0x45/0x70 [ 152.341398][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 152.341427][ C1] ? lruvec_init+0x211/0x280 [ 152.341457][ C1] __alloc_pages_noprof+0x35f/0x7e0 [ 152.341480][ C1] ? unwind_next_frame+0x3c1/0x750 [ 152.341504][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 152.341527][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x6c90/0x8370 [ 152.341562][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 152.341585][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x6c90/0x8370 [ 152.341618][ C1] stack_depot_save_flags+0x672/0x800 [ 152.341647][ C1] stack_depot_save+0x12/0x20 [ 152.341671][ C1] save_stack+0x133/0x240 [ 152.341714][ C1] ? free_contig_range+0x260/0x260 [ 152.341739][ C1] ? __reset_page_owner+0x450/0x450 [ 152.341770][ C1] ? zone_page_state_add+0x43/0x90 [ 152.341799][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 152.341817][ C1] ? prep_new_page+0x20/0x120 [ 152.341837][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 152.341859][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 152.341881][ C1] ? stack_depot_save_flags+0x672/0x800 [ 152.341926][ C1] ? kasan_save_track+0x4f/0x80 [ 152.341952][ C1] ? kasan_save_free_info+0x4a/0x60 [ 152.341973][ C1] ? __kasan_slab_free+0x5f/0x80 [ 152.341999][ C1] ? kfree+0x158/0x440 [ 152.342020][ C1] ? krealloc_noprof+0xfa/0x130 [ 152.342046][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xc6/0x200 [ 152.342082][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kvec3VecNtNtCskDQVOo9v79Q_16rust_binder_main10allocation9FileEntryNtNtBL_9allocator7KmallocEEB1r_+0x1f7/0x300 [ 152.342138][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation8FileListEBK_+0x7e/0x220 [ 152.342177][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x2043/0x5360 [ 152.342217][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x26/0x1a0 [ 152.342255][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x6c90/0x8370 [ 152.342284][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 152.342313][ C1] ? sched_clock_noinstr+0xd/0x30 [ 152.342340][ C1] __set_page_owner+0x8e/0x600 [ 152.342369][ C1] ? __zone_watermark_ok+0x134/0x630 [ 152.342390][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 152.342420][ C1] ? kasan_unpoison+0x4a/0x70 [ 152.342444][ C1] post_alloc_hook+0x3b8/0x3f0 [ 152.342463][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 152.342482][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 152.342507][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 152.342528][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 152.342550][ C1] prep_new_page+0x20/0x120 [ 152.342568][ C1] get_page_from_freelist+0x496e/0x4a20 [ 152.342594][ C1] ? krealloc_noprof+0xfa/0x130 [ 152.342619][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16remove_node_info+0x10/0x10 [ 152.342662][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 152.342683][ C1] ? static_key_count+0x45/0x70 [ 152.342701][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 152.342743][ C1] ? lruvec_init+0x211/0x280 [ 152.342772][ C1] __alloc_pages_noprof+0x35f/0x7e0 [ 152.342796][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 152.342819][ C1] ? unwind_get_return_address+0x51/0x90 [ 152.342842][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 152.342863][ C1] ? arch_stack_walk+0x10a/0x170 [ 152.342901][ C1] ? stack_trace_save+0xaa/0x100 [ 152.342922][ C1] stack_depot_save_flags+0x672/0x800 [ 152.342947][ C1] kasan_save_track+0x4f/0x80 [ 152.342975][ C1] ? kasan_save_track+0x3e/0x80 [ 152.343019][ C1] ? kasan_save_free_info+0x4a/0x60 [ 152.343044][ C1] ? __kasan_slab_free+0x5f/0x80 [ 152.343074][ C1] ? kfree+0x158/0x440 [ 152.343097][ C1] ? krealloc_noprof+0xfa/0x130 [ 152.343125][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xc6/0x200 [ 152.343162][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kvec3VecNtNtCskDQVOo9v79Q_16rust_binder_main10allocation9FileEntryNtNtBL_9allocator7KmallocEEB1r_+0x1f7/0x300 [ 152.343216][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation8FileListEBK_+0x7e/0x220 [ 152.343258][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x2043/0x5360 [ 152.343303][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x26/0x1a0 [ 152.343343][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x6c90/0x8370 [ 152.343374][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x390/0x2070 [ 152.343409][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x896/0x1090 [ 152.343444][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1560/0xa0f0 [ 152.343486][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1019/0x55c0 [ 152.343516][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 152.343546][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 152.343576][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 152.343606][ C1] ? do_syscall_64+0x57/0xf0 [ 152.343630][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.343661][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 152.343692][ C1] kasan_save_free_info+0x4a/0x60 [ 152.343717][ C1] __kasan_slab_free+0x5f/0x80 [ 152.343747][ C1] kfree+0x158/0x440 [ 152.343771][ C1] ? krealloc_noprof+0xfa/0x130 [ 152.343799][ C1] krealloc_noprof+0xfa/0x130 [ 152.343827][ C1] _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xc6/0x200 [ 152.343868][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 152.343915][ C1] ? __kasan_check_write+0x18/0x20 [ 152.343942][ C1] ? _raw_spin_lock+0x92/0x120 [ 152.343966][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 152.343991][ C1] ? __kasan_check_write+0x18/0x20 [ 152.344017][ C1] ? fput+0x1a4/0x240 [ 152.344037][ C1] _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kvec3VecNtNtCskDQVOo9v79Q_16rust_binder_main10allocation9FileEntryNtNtBL_9allocator7KmallocEEB1r_+0x1f7/0x300 [ 152.344093][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kvec3VecNtNtCskDQVOo9v79Q_16rust_binder_main10allocation9FileEntryNtNtBL_9allocator7KmallocEEB1r_+0x10/0x10 [ 152.344149][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 152.344187][ C1] ? __asan_memcpy+0x5a/0x80 [ 152.344214][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 152.344250][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 152.344286][ C1] _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation8FileListEBK_+0x7e/0x220 [ 152.344329][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation8FileListEBK_+0x10/0x10 [ 152.344374][ C1] ? __kasan_check_write+0x18/0x20 [ 152.344400][ C1] ? _raw_spin_lock+0x92/0x120 [ 152.344424][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 152.344447][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x302/0x5360 [ 152.344493][ C1] ? __asan_memcpy+0x5a/0x80 [ 152.344519][ C1] _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x2043/0x5360 [ 152.344570][ C1] ? __kasan_check_write+0x18/0x20 [ 152.344595][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 152.344621][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 152.344665][ C1] ? __asan_memcpy+0x5a/0x80 [ 152.344691][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 152.344727][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 152.344766][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 152.344803][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 152.344841][ C1] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter12pad_integral+0x342/0x760 [ 152.344869][ C1] ? put_dec_trunc8+0x229/0x380 [ 152.344893][ C1] ? put_dec+0xd7/0xf0 [ 152.344932][ C1] ? __asan_memset+0x39/0x50 [ 152.344957][ C1] ? move_right+0x8e/0xb0 [ 152.344980][ C1] ? format_decode+0x1bb/0x1610 [ 152.345001][ C1] ? vsnprintf+0x7b4/0x1ad0 [ 152.345022][ C1] ? __asan_memcpy+0x5a/0x80 [ 152.345047][ C1] ? vsnprintf+0x19ef/0x1ad0 [ 152.345070][ C1] ? desc_read+0x202/0x3e0 [ 152.345101][ C1] ? __kasan_check_write+0x18/0x20 [ 152.345127][ C1] ? desc_read+0x1ab/0x3e0 [ 152.345159][ C1] ? prb_first_seq+0x109/0x1d0 [ 152.345190][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 152.345221][ C1] ? __kasan_check_write+0x18/0x20 [ 152.345246][ C1] ? desc_read+0x1ab/0x3e0 [ 152.345277][ C1] ? __kasan_check_read+0x15/0x20 [ 152.345302][ C1] ? this_cpu_in_panic+0x56/0x90 [ 152.345322][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 152.345341][ C1] ? record_print_text+0x290/0x450 [ 152.345369][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 152.345395][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 152.345420][ C1] ? update_curr+0xf8/0x9e0 [ 152.345450][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 152.345480][ C1] ? sched_clock_noinstr+0xd/0x30 [ 152.345523][ C1] ? __kasan_check_write+0x18/0x20 [ 152.345547][ C1] ? __switch_to+0xc4f/0x1300 [ 152.345572][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 152.345596][ C1] ? __cfi___switch_to+0x10/0x10 [ 152.345621][ C1] ? psi_task_switch+0xad/0xa10 [ 152.345643][ C1] ? __kasan_check_write+0x18/0x20 [ 152.345666][ C1] ? finish_task_switch+0x1d9/0x760 [ 152.345687][ C1] ? __switch_to_asm+0x3d/0x70 [ 152.345714][ C1] ? __schedule+0x1357/0x1ea0 [ 152.345739][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 152.345766][ C1] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 152.345793][ C1] ? __sched_text_start+0x10/0x10 [ 152.345817][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 152.345841][ C1] ? up+0x10a/0x1b0 [ 152.345868][ C1] ? __cfi_up+0x10/0x10 [ 152.345906][ C1] ? krealloc_noprof+0xfa/0x130 [ 152.345932][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 152.345955][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xed/0x200 [ 152.345991][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 152.346027][ C1] ? preempt_schedule+0xc5/0xe0 [ 152.346051][ C1] ? __cfi_preempt_schedule+0x10/0x10 [ 152.346075][ C1] ? __printk_safe_exit+0xd/0x20 [ 152.346100][ C1] ? console_trylock+0x17e/0x220 [ 152.346121][ C1] ? __cfi_console_trylock+0x10/0x10 [ 152.346142][ C1] ? preempt_schedule_thunk+0x1a/0x40 [ 152.346172][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x3a3/0x660 [ 152.346210][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 152.346231][ C1] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x470/0x750 [ 152.346262][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 152.346300][ C1] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 152.346331][ C1] ? vprintk_default+0x2a/0x40 [ 152.346352][ C1] ? vprintk+0x93/0xa0 [ 152.346378][ C1] ? _printk+0xde/0x140 [ 152.346416][ C1] ? __cfi___check_object_size+0x10/0x10 [ 152.346445][ C1] ? __cfi__printk+0x10/0x10 [ 152.346466][ C1] ? _copy_from_user+0x87/0xa0 [ 152.346495][ C1] _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x26/0x1a0 [ 152.346536][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation13NewAllocationEBK_+0x5b/0x80 [ 152.346572][ C1] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x6c90/0x8370 [ 152.346616][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 152.346685][ C1] ? __cfi__RNvYNCINvMNtNtCsb7ts3l0a5c3_4core3fmt2rtNtB8_8Argument11new_displayjE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 152.346749][ C1] ? __cfi__RNvYNCINvMNtNtCsb7ts3l0a5c3_4core3fmt2rtNtB8_8Argument11new_displayjE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 152.346806][ C1] ? __cfi__RNvYNCINvMNtNtCsb7ts3l0a5c3_4core3fmt2rtNtB8_8Argument11new_displayjE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 152.346928][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 152.346962][ C1] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 152.346992][ C1] ? __enqueue_entity+0x58a/0x630 [ 152.347031][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 152.347058][ C1] ? kernel_text_address+0xa9/0xe0 [ 152.347087][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 152.347113][ C1] _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x390/0x2070 [ 152.347150][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 152.347180][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x80c/0x1090 [ 152.347214][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 152.347242][ C1] ? do_syscall_64+0x57/0xf0 [ 152.347264][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.347288][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 152.347329][ C1] ? __wake_up+0x169/0x190 [ 152.347359][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 152.347383][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 152.347413][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 152.347442][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 152.347490][ C1] ? krealloc_noprof+0xfa/0x130 [ 152.347518][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xcb/0x200 [ 152.347560][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 152.347605][ C1] ? slow_avc_audit+0x19f/0x220 [ 152.347633][ C1] ? __asan_memset+0x39/0x50 [ 152.347656][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x26e/0x650 [ 152.347725][ C1] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10 [ 152.347795][ C1] ? avc_has_perm_noaudit+0x220/0x360 [ 152.347823][ C1] ? avc_has_perm+0x1ec/0x240 [ 152.347848][ C1] ? avc_has_perm+0x211/0x240 [ 152.347873][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 152.347903][ C1] ? __kasan_check_write+0x18/0x20 [ 152.347927][ C1] ? _raw_spin_lock+0x92/0x120 [ 152.347950][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 152.347972][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 152.348001][ C1] ? bpf_lsm_binder_transaction+0xd/0x20 [ 152.348025][ C1] _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x896/0x1090 [ 152.348060][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 152.348100][ C1] ? __kasan_check_write+0x18/0x20 [ 152.348124][ C1] ? _raw_spin_lock+0x92/0x120 [ 152.348145][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 152.348167][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1514/0xa0f0 [ 152.348207][ C1] ? __asan_memcpy+0x5a/0x80 [ 152.348232][ C1] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1560/0xa0f0 [ 152.348287][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 152.348381][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 152.348406][ C1] ? kernel_text_address+0xa9/0xe0 [ 152.348431][ C1] ? __kernel_text_address+0x11/0x40 [ 152.348455][ C1] ? unwind_get_return_address+0x51/0x90 [ 152.348478][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 152.348498][ C1] ? arch_stack_walk+0x10a/0x170 [ 152.348570][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 152.348597][ C1] ? kernel_text_address+0xa9/0xe0 [ 152.348621][ C1] ? __kernel_text_address+0x11/0x40 [ 152.348645][ C1] ? unwind_get_return_address+0x51/0x90 [ 152.348669][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 152.348691][ C1] ? arch_stack_walk+0x10a/0x170 [ 152.348724][ C1] ? stack_depot_save_flags+0x38/0x800 [ 152.348752][ C1] ? kasan_save_track+0x4f/0x80 [ 152.348781][ C1] ? kasan_save_track+0x3e/0x80 [ 152.348810][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 152.348833][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 152.348864][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 152.348892][ C1] ? krealloc_noprof+0x8d/0x130 [ 152.348927][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 152.348972][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x6e2/0x1be0 [ 152.349013][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3ef/0x55c0 [ 152.349043][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 152.349072][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 152.349101][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 152.349130][ C1] ? do_syscall_64+0x57/0xf0 [ 152.349154][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.349186][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 152.349210][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 152.349240][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 152.349270][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 152.349317][ C1] ? krealloc_noprof+0xfa/0x130 [ 152.349345][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 152.349394][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 152.349424][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 152.349474][ C1] ? __kasan_check_write+0x18/0x20 [ 152.349500][ C1] ? _raw_spin_lock+0x92/0x120 [ 152.349523][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 152.349546][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0xdaf/0x1be0 [ 152.349586][ C1] ? __asan_memcpy+0x5a/0x80 [ 152.349611][ C1] ? _raw_spin_unlock+0x45/0x60 [ 152.349634][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 152.349657][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9ab/0x1be0 [ 152.349712][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 152.349752][ C1] ? __kasan_slab_free+0x6a/0x80 [ 152.349781][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 152.349806][ C1] ? __wake_up+0x169/0x190 [ 152.349835][ C1] ? audit_log_end+0x1f1/0x240 [ 152.349864][ C1] ? audit_log_end+0x1f1/0x240 [ 152.349891][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 152.349926][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 152.349952][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 152.349976][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 152.350004][ C1] ? __cfi_common_lsm_audit+0x10/0x10 [ 152.350035][ C1] ? avc_denied+0x112/0x180 [ 152.350074][ C1] ? slow_avc_audit+0x19f/0x220 [ 152.350104][ C1] ? unwind_next_frame+0x3c1/0x750 [ 152.350124][ C1] ? vfs_open+0x86/0x240 [ 152.350142][ C1] ? vfs_open+0x86/0x240 [ 152.350159][ C1] ? __kernel_text_address+0x11/0x40 [ 152.350182][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 152.350202][ C1] ? arch_stack_walk+0x12c/0x170 [ 152.350229][ C1] ? vfs_open+0x86/0x240 [ 152.350247][ C1] ? stack_depot_save_flags+0x38/0x800 [ 152.350271][ C1] ? stack_depot_save+0x12/0x20 [ 152.350292][ C1] ? save_stack+0x149/0x240 [ 152.350321][ C1] ? free_contig_range+0x260/0x260 [ 152.350345][ C1] ? __reset_page_owner+0x450/0x450 [ 152.350373][ C1] ? stack_depot_save_flags+0x38/0x800 [ 152.350395][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 152.350413][ C1] ? prep_new_page+0x20/0x120 [ 152.350430][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 152.350451][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 152.350471][ C1] ? alloc_slab_page+0x6b/0x1e0 [ 152.350498][ C1] ? allocate_slab+0x69/0x420 [ 152.350526][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0xfc3/0x55c0 [ 152.350552][ C1] ? __asan_memcpy+0x5a/0x80 [ 152.350575][ C1] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1019/0x55c0 [ 152.350604][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 152.350633][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 152.350665][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 152.350707][ C1] ? kernel_text_address+0xa9/0xe0 [ 152.350732][ C1] ? __kasan_check_write+0x18/0x20 [ 152.350758][ C1] ? resched_curr+0x119/0x440 [ 152.350785][ C1] ? __cfi_resched_curr+0x10/0x10 [ 152.350812][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 152.350842][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 152.350865][ C1] ? update_curr+0x5c4/0x9e0 [ 152.350910][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 152.350959][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 152.350996][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 152.351021][ C1] ? kernel_text_address+0xa9/0xe0 [ 152.351044][ C1] ? __kernel_text_address+0x11/0x40 [ 152.351068][ C1] ? unwind_get_return_address+0x51/0x90 [ 152.351091][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 152.351112][ C1] ? arch_stack_walk+0x10a/0x170 [ 152.351144][ C1] ? stack_trace_save+0xaa/0x100 [ 152.351166][ C1] ? kasan_save_track+0x4f/0x80 [ 152.351194][ C1] ? kasan_save_track+0x3e/0x80 [ 152.351221][ C1] ? kasan_save_free_info+0x4a/0x60 [ 152.351244][ C1] ? __kasan_slab_free+0x5f/0x80 [ 152.351278][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 152.351304][ C1] ? audit_log_end+0x1f1/0x240 [ 152.351332][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 152.351356][ C1] ? slow_avc_audit+0x19f/0x220 [ 152.351381][ C1] ? avc_has_extended_perms+0x8e1/0xe70 [ 152.351406][ C1] ? ioctl_has_perm+0x39a/0x500 [ 152.351429][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 152.351452][ C1] ? security_file_ioctl+0x87/0x110 [ 152.351472][ C1] ? __se_sys_ioctl+0x53/0x1b0 [ 152.351499][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 152.351526][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 152.351554][ C1] ? do_syscall_64+0x57/0xf0 [ 152.351577][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.351609][ C1] ? __kasan_slab_free+0x6a/0x80 [ 152.351637][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 152.351662][ C1] ? __wake_up+0x169/0x190 [ 152.351691][ C1] ? audit_log_end+0x1f1/0x240 [ 152.351720][ C1] ? audit_log_end+0x1f1/0x240 [ 152.351749][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 152.351777][ C1] ? common_lsm_audit+0x14fe/0x18e0 [ 152.351802][ C1] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 152.351830][ C1] ? __cfi_common_lsm_audit+0x10/0x10 [ 152.351856][ C1] ? __kasan_slab_free+0x6a/0x80 [ 152.351885][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 152.351917][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 152.351941][ C1] ? avc_node_kill+0x29e/0x2f0 [ 152.351968][ C1] ? slow_avc_audit+0x19f/0x220 [ 152.351993][ C1] ? __cfi_slow_avc_audit+0x10/0x10 [ 152.352021][ C1] ? avc_denied+0x112/0x180 [ 152.352048][ C1] ? avc_has_extended_perms+0x8e1/0xe70 [ 152.352073][ C1] ? avc_has_extended_perms+0x962/0xe70 [ 152.352102][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 152.352123][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 152.352153][ C1] ? preempt_schedule_thunk+0x1a/0x40 [ 152.352184][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 152.352216][ C1] ? try_to_wake_up+0xf9e/0x1db0 [ 152.352236][ C1] ? stack_trace_save+0xaa/0x100 [ 152.352257][ C1] ? __cfi_try_to_wake_up+0x10/0x10 [ 152.352280][ C1] ? ioctl_has_perm+0x39a/0x500 [ 152.352304][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 152.352330][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 152.352352][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 152.352376][ C1] ? do_futex+0x37d/0x510 [ 152.352399][ C1] ? __cfi_do_futex+0x10/0x10 [ 152.352424][ C1] ? __fget_files+0x2c5/0x340 [ 152.352453][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 152.352473][ C1] ? security_file_ioctl+0x3e/0x110 [ 152.352492][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 152.352520][ C1] __se_sys_ioctl+0x135/0x1b0 [ 152.352548][ C1] __x64_sys_ioctl+0x7f/0xa0 [ 152.352575][ C1] x64_sys_call+0x1878/0x2ee0 [ 152.352602][ C1] do_syscall_64+0x57/0xf0 [ 152.352625][ C1] ? clear_bhb_loop+0x50/0xa0 [ 152.352659][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.352680][ C1] RIP: 0033:0x7f3ccab9c799 [ 152.352711][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.352729][ C1] RSP: 002b:00007f3ccba00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.352751][ C1] RAX: ffffffffffffffda RBX: 00007f3ccae15fa0 RCX: 00007f3ccab9c799 [ 152.352766][ C1] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 152.352780][ C1] RBP: 00007f3ccac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 152.352792][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.352804][ C1] R13: 00007f3ccae16038 R14: 00007f3ccae15fa0 R15: 00007fff7a6ccf08 [ 152.352821][ C1] [ 152.352828][ C1] Modules linked in: [ 152.352863][ C1] ---[ end trace 0000000000000000 ]--- [ 152.352876][ C1] RIP: 0010:check_new_pages+0x134/0x390 [ 152.352910][ C1] Code: 00 00 00 3e 48 89 44 24 60 0f 1f 44 00 00 48 8b 44 24 60 48 89 44 24 38 48 8b 44 24 08 4c 8d 64 18 30 4c 89 e7 be 04 00 00 00 67 e7 05 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 46 [ 152.352928][ C1] RSP: 0018:ffffc90010ac8000 EFLAGS: 00010206 [ 152.352946][ C1] RAX: ffffea00045e8500 RBX: 0000000000000000 RCX: 0000000000000002 [ 152.352959][ C1] RDX: ffffea00045e8508 RSI: 0000000000000004 RDI: ffffea00045e8530 [ 152.352974][ C1] RBP: ffffc90010ac80d0 R08: ffff8881f6f722c0 R09: 0000000000000002 [ 152.352989][ C1] R10: 0000000000000000 R11: 00000000fffffffc R12: ffffea00045e8530 [ 152.353004][ C1] R13: dffffc0000000000 R14: ffffc90010ac8060 R15: 1ffff92002159008 [ 152.353039][ C1] FS: 00007f3ccba006c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 152.353058][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.353074][ C1] CR2: ffffc90010ac7ff8 CR3: 0000000136eec000 CR4: 00000000003526b0 [ 152.353099][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 152.353242][ C1] Kernel Offset: disabled