last executing test programs: 1.895621469s ago: executing program 1 (id=920): pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000003c0)={@ipv4={'\x00', '\xff\xff', @loopback}}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x3, 0x8, 0x6ad725f6d6a2f9, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x51}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x40000000}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004000}, 0x40810) r2 = socket(0x8000000010, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5457, &(0x7f0000000100)={0xd9, 0x62d, 0xffffffff, 0x0, 0xe, "7a5800800000fffffffffffffff10000008000"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) landlock_create_ruleset(&(0x7f00000002c0)={0x2401, 0x3}, 0x7, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) r5 = socket$packet(0x11, 0x2, 0x300) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r5, 0x0) fadvise64(r4, 0x3, 0x40000000002, 0x5) utimensat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}}, 0x0) write(r2, &(0x7f0000000500)="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", 0xfc) 1.895001339s ago: executing program 1 (id=921): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x2}]}}}], 0x18}}], 0x1, 0x44008004) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f00009fa000/0x2000)=nil, 0x2000}) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) fcntl$lock(r7, 0x24, &(0x7f0000000380)={0x2, 0x1, 0xfff, 0x100, r8}) mount$incfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000100)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x5}}]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x6) 1.033473815s ago: executing program 1 (id=935): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x109, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x8000, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3f000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2], [0xd68a, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0xb05f, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0xa}]}]}, 0x28}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000e, &(0x7f0000000300)={[{@favordynmods}, {@memory_localevents}, {@pids_localevents}, {}, {@memory_hugetlb_accounting}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_type}, {@obj_user={'obj_user', 0x3d, '\x13\x00'}}]}) tkill(r3, 0xf) wait4(r3, 0x0, 0x2, 0x0) tkill(r3, 0x3) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x70bd28, 0x25dfdbfe, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x50004031}, 0x0) ptrace$setregset(0x4205, r3, 0x202, &(0x7f0000000140)={&(0x7f0000000040)="c59eda5ce6d1baea881ff3a9703ab824c139eb3c98f5928e7d28f0a2ee0c0a92b9f46c7666882f89bfcc0fe01af15b176e8783a5656d3763b5d9b005393e1b1d3745f44d91091475b5b1dc959ddb86df034ba53eacebff09965cbdeb02c73c97878fb7d81333c240ce7c742837b8d3ada240be797b006235086946d89a0596781aa99ee948bb4e6626020379951ba5db37905603967c679362d615c5625b09eeecc3ba3d9e5db54a827a09ae53eb5cda5e5279be9e8c76b24c25a1ac62dc2348ea453658a5900063b4c7cc1e1e", 0xcd}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0) 961.944389ms ago: executing program 0 (id=938): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setresuid(0x0, 0xee00, 0x0) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(r2, &(0x7f0000000000)='./file0\x00', 0x1) move_mount(r2, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x11) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x8) r3 = fsmount(r0, 0x0, 0x0) fchownat(r3, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 894.874822ms ago: executing program 0 (id=939): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000000)="98f0814aaf99bc003ce01d87", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1005848, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)=ANY=[@ANYBLOB='np,\x00\x00\x00\x00\x00']) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000005d489a5a8979a346c672da4c930ba0793f540b582bf880b764448dae6901040cbdc9745a3327a98bade54b2ae38fe683186123578192431001a842271705d1e1e8bc000000000000000000000000000000000000140dc6797ed3ef9ab73aa98d567fdfabf845d8b50b488b570cbd7df97e7c30c01851f46f24d8b870c9e4ef2e48ebf76337aea9d0def454e8c91a0d43095e409d59629dd8630cda19f4e6a7b05ab8a85039188784f8b72e73671d7521bb03547c8818e559d37d6e119d14ed482a684277b9f73e59550627247f2e0cd3c9159bdc6fc60700"/229, @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf2516000000"], 0xffffff06}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) fchown(r1, r3, 0xee01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x100000c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x19) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0ae0"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) 894.016592ms ago: executing program 1 (id=940): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2, 0x0) 892.619432ms ago: executing program 1 (id=941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x80001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x140}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000811000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, &(0x7f00000006c0)="66b9f30b00000f320f01da0fc7b74f4566b9d909000066b844af000066ba000000000f3064f30fa7c0bad104b000ee0f23ca0f205a66b99609000066b8f4ffffff66ba000000000f30baf80c66b86ea9fb8b66efbafc0cb000ee", 0x5a}], 0x1, 0x0, &(0x7f0000000880)=[@cr0={0x0, 0x40000}, @efer={0x2, 0x7000}], 0x2) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r7, 0x4068aea3, &(0x7f0000000400)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f00000002c0)="0f01c4670fc7a8e6060000f40f01c466b9aa09000066b80000010066ba000000000f30650fc3a60300baf80c66b882e7218f66efbafc0cb87703efea072e3801640f01f79af9573400", 0x49}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 892.116403ms ago: executing program 0 (id=942): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) shutdown(r0, 0x1) 770.292759ms ago: executing program 2 (id=943): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) sendfile(r0, r0, 0x0, 0x3) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r3, 0x8000, 0x1, 0x1, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) 765.282669ms ago: executing program 0 (id=944): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@free_buffer], 0x41, 0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) 688.266783ms ago: executing program 2 (id=945): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x21, 0x7d, 0x5, 0x8, 0x7ab, 0xfc01, 0x736f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xc, 0x80, 0x80, "", [{{0x9, 0x4, 0x41, 0x9, 0x0, 0x8, 0xa7, 0xc8, 0xc2}}]}}]}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./bus/file0\x00', 0x80100) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000280)=[0x0, 0x8000]) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e35000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0xce6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x9, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000af80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a940)={0xb0, 0x0, 0x3, [{{0x80000000000002, 0x1, 0x0, 0xb, 0xe, 0x1, {0x3, 0x3, 0x3, 0x0, 0x8, 0x8000000000000001, 0xd, 0x0, 0x10, 0x4000, 0xfffffffd, r2, r3, 0x7, 0xfff}}, {0x2, 0x8, 0x7, 0x400, 'user_id'}}]}, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0x0, &(0x7f0000000040)=@sr0, r2, &(0x7f0000000480)={0x8, 0xfb, 0x9, 0x6, 0x6, 0xffffffffffffff81, 0x4, 0xac, 0x7}) 686.926523ms ago: executing program 0 (id=946): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') unshare(0x20000400) recvmmsg(r0, 0x0, 0x0, 0x40000101, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a21028344"], 0x0}, 0x0) 666.829884ms ago: executing program 1 (id=947): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000880)={0x20, 0xe, 0x2, "ea61"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xf7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0xa, 0x2, {0x2, 0x5}}, 0x0}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x1, 0xfffffe6f, "bad936cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x33) write$cgroup_freezer_state(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 580.220929ms ago: executing program 3 (id=948): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e22, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x3}}]}, 0xc4}}, 0x80c4) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff6edb2fceb3c88100410086dd694f92060000000000000000000000dc5501ff0200000000000000000000000000018900907800000000fe80"], 0x62) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1) socket$inet6_icmp(0xa, 0x2, 0x11) 413.692028ms ago: executing program 3 (id=949): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"000000008000", 0x0, 0x0, {0x1}, {0x1, 0x3}, 0x7, [0x3ff, 0x2004, 0xfffffffffffffc00, 0xe, 0xd1, 0x6, 0x200000001, 0x1, 0x10000, 0x9, 0x8, 0xfc, 0xfffffffffffffffe, 0x7, 0x0, 0x800000b]}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 413.125558ms ago: executing program 3 (id=950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000003a00)=0x27, 0x4) r3 = fsopen(&(0x7f00000000c0)='qnx4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="360fc72c3d0900000066b822000f00d0f466b825000f00d866b890008ee0b852d700000f23c80f21f835080080000f23f80f3804383e0f01c3628103000000b9d20a00000f32", 0x46}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) socket$inet6(0xa, 0x3, 0xff) ioctl$KVM_RUN(r7, 0xae80, 0x0) flistxattr(r7, &(0x7f0000000240)=""/120, 0x78) 315.887002ms ago: executing program 3 (id=951): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x17, 0x800, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r2 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000200000020820525004000010203010102710007170ebb05080b020001052008090400000001012000092401fdff0a11004708240a00800b7f0009010000010200000000010101010220000905010940000204d80825010230cc00000904020000010220000904020101010220000905820900040d0700082501010f041000"], 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000002400df1e02000000fadbdf25000000001000000000000800", @ANYRES32], 0x30}], 0x1}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}, 0x0, 0x0, 0x0}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) (rerun: 32) syz_usb_control_io$uac2(r2, 0x0, 0x0) (async) syz_usb_control_io$uac2(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) 202.551709ms ago: executing program 3 (id=952): r0 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) 149.763931ms ago: executing program 2 (id=953): syz_open_dev$mouse(&(0x7f0000000000), 0x100000001, 0x40002) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x2, 0x400, 0x100002d0}, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) 149.183971ms ago: executing program 2 (id=954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x7) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f0000000400), 0x2, 0x0) epoll_create1(0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000240)={[{0xfff, 0x8, 0x1, 0x9f, 0x34, 0xef, 0x8, 0x7f, 0x4, 0x0, 0x55, 0x1, 0x3}, {0xfff, 0x86, 0x5, 0x8, 0x6, 0x6, 0x4, 0x4, 0xc, 0x2a, 0x6, 0x4, 0x5}, {0x7fff, 0x1, 0x80, 0x3, 0x2, 0x6, 0x1, 0x47, 0x89, 0x6, 0x3}], 0x7ff}) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffe, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x40}, 0x2}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet6(r6, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ec010000000000000000000000080001", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x4001c00) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) timer_settime(0x0, 0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setitimer(0x1, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) getitimer(0x1, &(0x7f0000000740)) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d000df0", 0x13}, {&(0x7f00000003c0)="8d70565665269fd7c12af60d", 0xc}], 0x2) 4.078499ms ago: executing program 3 (id=955): openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r0 = socket(0x10, 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000006c0)={0x2c, &(0x7f0000000200)={0x40, 0x31, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b3e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x50, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x8, 0xf, 0x1, {0x22, 0x66c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x76, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0xfe, 0xc}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xd9, 0x9, 0x1, 0x40, 0xb2}, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x5, 0xa5}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x3, 0xf, 0x9, [0x30, 0x3f00]}]}, 0x1, [{0x8a, &(0x7f0000000140)=@string={0x8a, 0x3, "6bea126cd801d69044af3f237bd6546172e72fa501d427400abafae0a3b24eeaf069d4b0c316d5091bf4f4037b8f0ff3aecc43fd4f8b9fb25bc68c2c1b38758142e867e2e110955c0b2167729fd1859497a4b4e7f2e01c1b63761e4c53a56a0d2b4cea510641a0f1d366ed15254b0abb91d044de631c0944e1a9d55932eb217706c70ee3de85caa8"}}]}) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x9, &(0x7f00000002c0)="b9425b44651dd23241") close_range(r0, 0xffffffffffffffff, 0x0) 2.252459ms ago: executing program 0 (id=956): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x2, 0x1}) r1 = socket(0xa, 0x3, 0xff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000280)={0x402, 0x0, 0x0, 0x1000000800, 0x20000090000000, 0x0, 0x4, 0x1b, 0x1c, "85a28ce8bd916f2a5ccc0b0d5590273806c31323fc52fd75fb5524d02d8a32455a987d752c11461658d587239b609f16b450267aca32e47bffe0dcfb99073bc5", "d0ca2765f7475ce6cc48c6f36928e30be5410ea6bccc103c8811263ed21770cdf8098f970ed354aab3768a8d702783a05e9db0b9b9786ff8b8d586f77e18dd1f", "41939ec53465d2c08ca5dd5acfc9502e5eb1374fe54e3ab3ec504b22558e22e1", [0x1, 0x100]}) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0x4, 0x0, [{0xf88e470f, 0xed}, {0x297, 0x0, 0x8000000000000000}, {0xa2d, 0x0, 0x9}, {0x9e4, 0x0, 0x8}]}) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x6cb571fa, 0x1, 0x80000000, 0x2, 0xbe, 0x1004, 0x8000000000000000, 0x3, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x201051}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x1}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x50, 0xfffffffffffffff5, 0xffc0000000000000, {0x7, 0x29, 0x500, 0xffffffff93510433, 0xfffd, 0x800d, 0x5, 0x56, 0x0, 0x0, 0x10, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='sched\x00') (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20) utimensat(r6, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0xea60}}, 0x100) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203017158af6bd041284f72c7019e8119bf0002010650000900000002020dc3662bffcf00400524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c"], 0x0) r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_user(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="73797374656d5f753a6f358ffe50745f723a7661725f6c6f636b5f743a73302075"], 0x2d) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 559.529µs ago: executing program 2 (id=957): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8004, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xa, 0x0, 0x0, 0x0, @str='/D00#\x00'}]}]}, 0x20}], 0x1}, 0x0) sendto$packet(r3, &(0x7f00000000c0)="6c49f25ce675b8", 0x7, 0x100400c1, &(0x7f00000002c0)={0x11, 0x8100, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) 0s ago: executing program 2 (id=958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e30, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, 0x0, 0x0) close(0x3) (async) close(0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000140)="360f7883b81e2626660fc7354f79f4650606b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x2a}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000140)="360f7883b81e2626660fc7354f79f4650606b95c0300000f32f4656df30f09e3650f01efeff8000f0d35", 0x2a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000003c0)={0x74, 0x0, 0x28}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xd000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000000)='smaps\x00') (async) r6 = syz_open_procfs(r5, &(0x7f0000000000)='smaps\x00') pread64(r6, &(0x7f00000001c0)=""/210, 0xd2, 0x60a2d3b9) (async) pread64(r6, &(0x7f00000001c0)=""/210, 0xd2, 0x60a2d3b9) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060102ef"], 0x0) fcntl$getflags(r1, 0xb) (async) fcntl$getflags(r1, 0xb) 0s ago: executing program 0 (id=959): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@flat=@weak_handle, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0x3a}, @fda={0x66646185, 0x9, 0x1, 0xd8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) socket$nl_route(0x10, 0x3, 0x0) fchmod(0xffffffffffffffff, 0x42) socket$tipc(0x1e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x6, 0x0, 0x7, 0xd4}, {0x2, 0x0, 0xf7, 0x4}, {0x1, 0xc, 0x10, 0x1}, {0x8, 0x38, 0x9, 0x3c2e}, {0x1, 0x3, 0x6, 0x5}, {0x9, 0xd, 0xff, 0xffffffff}, {0xd606, 0x2, 0x1, 0xde2f}, {0xc, 0x0, 0xa}, {0x5, 0xe, 0xf}, {0x9, 0x0, 0x8, 0x2}]}) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) kernel console output (not intermixed with test programs): ][ T369] usb 1-1: SerialNumber: syz [ 41.855250][ T369] usb 1-1: config 0 descriptor?? [ 41.933925][ T359] usb 4-1: device descriptor read/64, error -71 [ 42.083951][ T66] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 42.173903][ T359] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 42.235116][ T66] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 42.247121][ T66] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 42.258248][ T66] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 42.270027][ T66] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 42.279142][ T66] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 42.287203][ T66] usb 2-1: Manufacturer: syz [ 42.292975][ T642] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 42.303902][ T359] usb 4-1: device descriptor read/64, error -71 [ 42.543965][ T359] usb 4-1: device descriptor read/64, error -71 [ 42.651321][ T36] audit: type=1400 audit(1777168313.710:231): avc: denied { map } for pid=650 comm="syz.0.112" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.675078][ T359] usb usb4-port1: attempt power cycle [ 43.013928][ T359] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 43.035044][ T359] usb 4-1: device descriptor read/8, error -71 [ 43.166390][ T359] usb 4-1: device descriptor read/8, error -71 [ 43.212303][ T36] audit: type=1400 audit(1777168314.270:232): avc: denied { read } for pid=661 comm="syz.0.115" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.214612][ T662] 9pnet_fd: p9_fd_create_unix (662): problem connecting socket: ./file0: -111 [ 43.251764][ T36] audit: type=1400 audit(1777168314.270:233): avc: denied { open } for pid=661 comm="syz.0.115" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.256561][ T664] 9pnet_fd: p9_fd_create_unix (664): problem connecting socket: ./file0: -111 [ 43.291454][ T36] audit: type=1400 audit(1777168314.350:234): avc: denied { bind } for pid=665 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.397712][ T673] netlink: 'syz.0.118': attribute type 16 has an invalid length. [ 43.405584][ T673] netlink: 'syz.0.118': attribute type 2 has an invalid length. [ 43.413336][ T673] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.118'. [ 43.423907][ T359] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 43.446702][ T359] usb 4-1: device descriptor read/8, error -71 [ 43.575072][ T359] usb 4-1: device descriptor read/8, error -71 [ 43.685505][ T359] usb usb4-port1: unable to enumerate USB device [ 44.372592][ T36] audit: type=1326 audit(1777168315.430:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.2.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f355a59cdd9 code=0x0 [ 44.409100][ T36] audit: type=1400 audit(1777168315.460:236): avc: denied { setopt } for pid=688 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.454505][ T36] audit: type=1400 audit(1777168315.520:237): avc: denied { name_bind } for pid=691 comm="syz.3.125" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 44.713933][ T326] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 44.801145][ T66] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 44.810292][ T66] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6 [ 44.829681][ T697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.835275][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 44.841562][ T697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.852443][ T66] usb 2-1: USB disconnect, device number 16 [ 44.873915][ T326] usb 4-1: Using ep0 maxpacket: 32 [ 44.880912][ T326] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.889664][ T326] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 44.898450][ T326] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.908662][ T326] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.919831][ T326] usb 4-1: string descriptor 0 read error: -22 [ 44.926128][ T326] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.935279][ T326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.945719][ T326] usb 4-1: 0:2 : does not exist [ 45.153911][ T66] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 45.220293][ T326] usb 4-1: USB disconnect, device number 15 [ 45.277251][ T706] netlink: 52 bytes leftover after parsing attributes in process `syz.3.128'. [ 45.313916][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 45.320282][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.331433][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.341296][ T66] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 45.350400][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.359355][ T66] usb 2-1: config 0 descriptor?? [ 45.567971][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 45.574044][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 45.582938][ T66] usb 2-1: USB disconnect, device number 17 [ 45.614017][ T326] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 45.763639][ T711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.130'. [ 45.773866][ T326] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 45.782074][ T326] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 45.792419][ T326] usb 4-1: config 8 has no interface number 0 [ 45.798592][ T326] usb 4-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 45.813199][ T326] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 45.822358][ T326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.830407][ T326] usb 4-1: Product: syz [ 45.834686][ T326] usb 4-1: Manufacturer: syz [ 45.839323][ T326] usb 4-1: SerialNumber: syz [ 46.047440][ T66] usb 4-1: USB disconnect, device number 16 [ 46.083812][ T36] audit: type=1400 audit(1777168317.140:238): avc: denied { setopt } for pid=713 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.103730][ T36] audit: type=1400 audit(1777168317.160:239): avc: denied { read } for pid=713 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.803910][ T66] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 46.818813][ T725] netlink: 64 bytes leftover after parsing attributes in process `syz.2.134'. [ 46.831473][ T725] tipc: Invalid UDP bearer configuration [ 46.831502][ T725] tipc: Enabling of bearer rejected, failed to enable media [ 46.862831][ T36] audit: type=1400 audit(1777168317.920:240): avc: denied { mounton } for pid=732 comm="syz.2.136" path="/46/file0" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 46.862863][ T733] fuse: Bad value for 'user_id' [ 46.890767][ T733] fuse: Bad value for 'user_id' [ 46.897705][ T733] netlink: 104 bytes leftover after parsing attributes in process `syz.2.136'. [ 46.907620][ T36] audit: type=1400 audit(1777168317.980:241): avc: denied { ioctl } for pid=732 comm="syz.2.136" path="socket:[6116]" dev="sockfs" ino=6116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.940205][ T36] audit: type=1400 audit(1777168318.000:242): avc: denied { setopt } for pid=732 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.979373][ T36] audit: type=1400 audit(1777168318.040:243): avc: denied { call } for pid=734 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 46.999508][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.008028][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.018272][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.028747][ T66] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 47.032262][ T737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 47.038107][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.042030][ T737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.048541][ T66] usb 4-1: Product: syz [ 47.057907][ T737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.063938][ T66] usb 4-1: Manufacturer: syz [ 47.080141][ T66] usb 4-1: SerialNumber: syz [ 47.286559][ T722] cgroup: subsys name conflicts with all [ 47.294140][ T66] usb 4-1: 0:1 : does not exist [ 47.299066][ T66] usb 4-1: unit 255 not found! [ 47.306791][ T66] usb 4-1: USB disconnect, device number 17 [ 47.320057][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.462651][ T36] audit: type=1326 audit(1777168318.520:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.2.141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f355a59cdd9 code=0x0 [ 48.083941][ T66] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 48.163970][ T715] Bluetooth: hci0: command 0x1003 tx timeout [ 48.163970][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.195666][ T768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.204701][ T768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.213017][ T768] overlay: ./file0 is not a directory [ 48.244580][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 48.251222][ T66] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 48.259949][ T66] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 48.268811][ T66] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 48.278081][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 48.287799][ T66] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 48.297644][ T66] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.310764][ T66] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 48.319866][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.329062][ T66] usb 4-1: config 0 descriptor?? [ 48.423933][ T369] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 48.539397][ T66] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 48.552572][ T66] usb 4-1: USB disconnect, device number 18 [ 48.559859][ T66] usblp0: removed [ 48.574459][ T369] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 48.588483][ T369] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 48.597757][ T369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.608456][ T369] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 48.617066][ T369] usb 2-1: No valid video chain found. [ 48.807842][ T66] usb 2-1: USB disconnect, device number 18 [ 49.004110][ T782] mmap: syz.2.155 (782): VmData 29208576 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 49.418867][ T796] netlink: 'syz.1.161': attribute type 14 has an invalid length. [ 49.513897][ T369] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 49.522305][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 49.522321][ T36] audit: type=1400 audit(1777172672.586:249): avc: denied { mount } for pid=800 comm="syz.1.162" name="/" dev="configfs" ino=2163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 49.551338][ T36] audit: type=1400 audit(1777172672.586:250): avc: denied { search } for pid=800 comm="syz.1.162" name="/" dev="configfs" ino=2163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.573684][ T36] audit: type=1400 audit(1777172672.596:251): avc: denied { read } for pid=800 comm="syz.1.162" name="/" dev="configfs" ino=2163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.595763][ T36] audit: type=1400 audit(1777172672.596:252): avc: denied { open } for pid=800 comm="syz.1.162" path="/" dev="configfs" ino=2163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.635305][ T814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'. [ 49.665087][ T369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.676132][ T369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.686163][ T369] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 49.695351][ T369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.704392][ T369] usb 4-1: config 0 descriptor?? [ 49.881992][ T36] audit: type=1400 audit(1777172672.946:253): avc: denied { bind } for pid=820 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.112533][ T369] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 50.133908][ T369] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 50.140768][ T369] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 50.147644][ T369] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 50.154519][ T369] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 50.161358][ T369] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 50.168570][ T369] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 50.179950][ T369] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 50.218874][ T827] netlink: 'syz.2.169': attribute type 9 has an invalid length. [ 50.227102][ T827] incfs: Backing dir is not set, filesystem can't be mounted. [ 50.235029][ T827] incfs: mount failed -2 [ 50.323945][ T369] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 50.331406][ T369] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 50.344529][ T369] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -32 [ 50.415733][ T835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.426741][ T833] kvm: emulating exchange as write [ 50.432447][ T835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.611174][ T838] netlink: 'syz.1.174': attribute type 5 has an invalid length. [ 50.618949][ T838] netlink: 'syz.1.174': attribute type 5 has an invalid length. [ 50.626812][ T838] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.174'. [ 50.644200][ T835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.653580][ T835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.674006][ T835] netlink: 'syz.0.173': attribute type 11 has an invalid length. [ 50.682197][ T835] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 50.689975][ T835] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.173'. [ 50.700253][ T36] audit: type=1400 audit(1777172673.766:254): avc: denied { bind } for pid=834 comm="syz.0.173" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.724077][ T36] audit: type=1400 audit(1777172673.766:255): avc: denied { name_bind } for pid=834 comm="syz.0.173" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 50.745935][ T36] audit: type=1400 audit(1777172673.766:256): avc: denied { node_bind } for pid=834 comm="syz.0.173" saddr=10.1.1.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.768131][ T36] audit: type=1400 audit(1777172673.786:257): avc: denied { name_bind } for pid=834 comm="syz.0.173" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 50.779531][ T844] ip_tunnel: non-ECT from 172.30.253.2 with TOS=0x19 [ 51.362570][ T854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.373149][ T854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.796533][ T878] overlayfs: failed to clone upperpath [ 51.810752][ T879] netlink: 1 bytes leftover after parsing attributes in process `syz.1.188'. [ 51.834567][ T881] netlink: 67 bytes leftover after parsing attributes in process `syz.2.189'. [ 52.048682][ T886] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 52.058714][ T36] audit: type=1400 audit(1777172675.126:258): avc: denied { relabelto } for pid=885 comm="syz.0.191" name="44" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 52.103094][ T886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.111821][ T886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.290374][ T10] usb 4-1: USB disconnect, device number 19 [ 52.489147][ T899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 52.623906][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 52.773889][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 52.784465][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 52.796756][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.809431][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.818658][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.818748][ T905] rust_binder: Write failure EFAULT in pid:134 [ 52.826936][ T10] usb 4-1: Product: syz [ 52.829335][ T905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.833300][ T10] usb 4-1: Manufacturer: syz [ 52.840848][ T905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.846033][ T10] usb 4-1: SerialNumber: syz [ 53.067496][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.080122][ T10] usb 4-1: USB disconnect, device number 20 [ 53.089947][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.780651][ T927] overlayfs: failed to clone upperpath [ 53.811701][ T932] netlink: 'syz.2.208': attribute type 11 has an invalid length. [ 53.819676][ T932] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 53.827398][ T932] netlink: 3593 bytes leftover after parsing attributes in process `syz.2.208'. [ 53.833994][ T46] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 53.995445][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 54.003505][ T46] usb 4-1: not running at top speed; connect to a high speed hub [ 54.012658][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.022911][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.034057][ T46] usb 4-1: string descriptor 0 read error: -22 [ 54.040325][ T46] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.049485][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.061863][ T46] usb 4-1: 0:2 : does not exist [ 54.486846][ T941] netlink: 88 bytes leftover after parsing attributes in process `syz.2.211'. [ 54.536429][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 54.536446][ T36] audit: type=1400 audit(1777172677.606:264): avc: denied { ioctl } for pid=944 comm="syz.0.212" path="socket:[8636]" dev="sockfs" ino=8636 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.660936][ T916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.673635][ T916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.716489][ T36] audit: type=1326 audit(1777172677.786:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=946 comm="syz.2.213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f355a59cdd9 code=0x0 [ 54.803532][ T36] audit: type=1400 audit(1777172677.866:266): avc: denied { append } for pid=956 comm="syz.0.215" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.826698][ T36] audit: type=1400 audit(1777172677.876:267): avc: denied { map } for pid=956 comm="syz.0.215" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.849722][ T36] audit: type=1400 audit(1777172677.876:268): avc: denied { execute } for pid=956 comm="syz.0.215" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.884005][ T961] 9pnet_fd: p9_fd_create_tcp (961): problem connecting socket to 127.0.0.1 [ 54.908865][ T36] audit: type=1400 audit(1777172677.976:269): avc: denied { mount } for pid=963 comm="syz.0.217" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 54.931062][ T36] audit: type=1400 audit(1777172677.976:270): avc: denied { watch watch_reads } for pid=963 comm="syz.0.217" path="/55/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.957975][ T36] audit: type=1400 audit(1777172677.976:271): avc: denied { mounton } for pid=963 comm="syz.0.217" path="/55/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.996500][ T36] audit: type=1400 audit(1777172678.066:272): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 55.060846][ T974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.069440][ T974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.222842][ T976] netlink: 'syz.3.222': attribute type 4 has an invalid length. [ 55.284566][ T359] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 55.433922][ T359] usb 2-1: Using ep0 maxpacket: 32 [ 55.440667][ T359] usb 2-1: unable to get BOS descriptor or descriptor too short [ 55.449339][ T359] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 195, changing to 7 [ 55.462072][ T359] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.471228][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.479288][ T359] usb 2-1: Product: syz [ 55.483526][ T359] usb 2-1: Manufacturer: syz [ 55.488191][ T359] usb 2-1: SerialNumber: syz [ 55.608889][ T36] audit: type=1400 audit(1777172678.676:273): avc: denied { validate_trans } for pid=978 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.633335][ T979] overlayfs: failed to resolve './file0': -2 [ 55.753708][ T992] netlink: 'syz.3.227': attribute type 4 has an invalid length. [ 55.761482][ T992] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.227'. [ 55.788538][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.797184][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.806765][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.815937][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.826856][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.835963][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.259424][ T997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.269515][ T997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.573226][ T1010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 56.606747][ T1013] netlink: 348 bytes leftover after parsing attributes in process `syz.0.234'. [ 56.745395][ T1018] netlink: 'syz.0.236': attribute type 29 has an invalid length. [ 56.753246][ T1018] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.236'. [ 56.858191][ T1024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.866847][ T1024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.881334][ T1024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.890664][ T1024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.421541][ T1037] syzkaller1: entered promiscuous mode [ 57.428780][ T1037] syzkaller1: entered allmulticast mode [ 57.430395][ T1039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.438497][ T1037] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 57.450220][ T1039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.598673][ T1052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.608587][ T1052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.618205][ T1051] ip_tunnel: non-ECT from 172.30.253.1 with TOS=0x19 [ 57.724638][ T1055] syz.0.247 uses obsolete (PF_INET,SOCK_PACKET) [ 57.782695][ T1055] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 58.217723][ T1062] capability: warning: `syz.3.249' uses 32-bit capabilities (legacy support in use) [ 58.332239][ T1066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.340867][ T1066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.349397][ T1066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.358089][ T1066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.366463][ T1066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.375076][ T1066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.383227][ T1066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.392916][ T1066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.401113][ T1066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.409722][ T1066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.417947][ T1066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.427165][ T1066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.404756][ T1097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.413354][ T1097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.764452][ T46] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 59.774488][ T46] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 59.784196][ T46] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 59.798036][ T359] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 59.805136][ T359] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 59.818933][ T359] usb 2-1: USB disconnect, device number 19 [ 59.831773][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 59.978117][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 59.978137][ T36] audit: type=1400 audit(1777172683.046:354): avc: denied { lock } for pid=1123 comm="syz.0.267" path="socket:[9167]" dev="sockfs" ino=9167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 60.034534][ T1126] ip_tunnel: non-ECT from 172.30.253.4 with TOS=0x19 [ 60.098817][ T1129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.107383][ T1129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.133965][ T359] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 60.194717][ T1139] TCP: TCP_TX_DELAY enabled [ 60.200860][ T1139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1139 comm=syz.2.272 [ 60.213315][ T1139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1139 comm=syz.2.272 [ 60.225656][ T1139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1139 comm=syz.2.272 [ 60.237992][ T1139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1139 comm=syz.2.272 [ 60.250351][ T1139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1139 comm=syz.2.272 [ 60.285205][ T359] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 60.295113][ T359] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 60.305037][ T359] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.319687][ T359] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 60.328952][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.337045][ T359] usb 2-1: Product: syz [ 60.341336][ T359] usb 2-1: Manufacturer: syz [ 60.346008][ T359] usb 2-1: SerialNumber: syz [ 60.352277][ T359] hub 2-1:1.0: bad descriptor, ignoring hub [ 60.359901][ T359] hub 2-1:1.0: probe with driver hub failed with error -5 [ 60.372556][ T1151] netlink: 'syz.2.275': attribute type 27 has an invalid length. [ 60.392353][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.399714][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.464208][ T1154] overlayfs: failed to clone lowerpath [ 60.553186][ T359] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 60.584464][ T359] usb 2-1: USB disconnect, device number 20 [ 60.590999][ T359] usblp0: removed [ 60.771312][ T1159] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 60.781066][ T36] audit: type=1400 audit(1777172683.846:355): avc: denied { relabelto } for pid=1158 comm="syz.3.278" name="cgroup" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 60.808248][ T36] audit: type=1400 audit(1777172683.846:356): avc: denied { associate } for pid=1158 comm="syz.3.278" name="cgroup" dev="tmpfs" ino=295 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 60.849988][ T36] audit: type=1400 audit(1777172683.906:357): avc: denied { unlink } for pid=360 comm="syz-executor" name="cgroup" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 60.907246][ T1170] netlink: 'syz.0.282': attribute type 1 has an invalid length. [ 60.917118][ T1172] netlink: 72 bytes leftover after parsing attributes in process `syz.3.281'. [ 60.957499][ T36] audit: type=1400 audit(1777172684.016:358): avc: denied { getopt } for pid=1173 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.971860][ T1176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.001354][ T36] audit: type=1400 audit(1777172684.056:359): avc: denied { map } for pid=1177 comm="syz.3.284" path="socket:[9491]" dev="sockfs" ino=9491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 61.012492][ T1176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.042331][ T1176] +$<¶: renamed from bridge0 (while UP) [ 61.111489][ T36] audit: type=1400 audit(1777172684.176:360): avc: denied { mount } for pid=1193 comm="syz.2.290" name="/" dev="ramfs" ino=9578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 61.136976][ T1198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.146431][ T1198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.242985][ T36] audit: type=1400 audit(1777172684.306:361): avc: denied { bind } for pid=1204 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.263928][ T36] audit: type=1400 audit(1777172684.306:362): avc: denied { name_bind } for pid=1204 comm="syz.2.294" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 61.284967][ T36] audit: type=1400 audit(1777172684.306:363): avc: denied { node_bind } for pid=1204 comm="syz.2.294" saddr=fe80::29 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 61.691061][ T1214] SELinux: Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped). [ 62.373890][ T326] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 62.401311][ T1245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1245 comm=syz.2.307 [ 62.429749][ T1245] netlink: 'syz.2.307': attribute type 4 has an invalid length. [ 62.437888][ T1245] netlink: 140 bytes leftover after parsing attributes in process `syz.2.307'. [ 62.513899][ T326] usb 2-1: device descriptor read/64, error -71 [ 62.586853][ T1271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 62.596529][ T1271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1271 comm=syz.2.315 [ 62.609555][ T1271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=1271 comm=syz.2.315 [ 62.753892][ T326] usb 2-1: device descriptor read/64, error -71 [ 63.013942][ T326] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 63.027489][ T1283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.036146][ T1283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.143886][ T326] usb 2-1: device descriptor read/64, error -71 [ 63.383887][ T326] usb 2-1: device descriptor read/64, error -71 [ 63.494006][ T326] usb usb2-port1: attempt power cycle [ 63.500176][ T1289] overlayfs: failed to clone upperpath [ 63.833897][ T326] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 63.854964][ T326] usb 2-1: device descriptor read/8, error -71 [ 63.985400][ T326] usb 2-1: device descriptor read/8, error -71 [ 64.022038][ T1302] tmpfs: Unknown parameter '0000000000000000000500000000000000000000' [ 64.034235][ T1302] overlayfs: workdir and upperdir must be separate subtrees [ 64.054907][ T1304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.063509][ T1304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.223897][ T326] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 64.245128][ T326] usb 2-1: device descriptor read/8, error -71 [ 64.375077][ T326] usb 2-1: device descriptor read/8, error -71 [ 64.483984][ T326] usb usb2-port1: unable to enumerate USB device [ 65.543935][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 65.693876][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 65.700274][ T31] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 65.708702][ T31] usb 2-1: config 0 has no interface number 0 [ 65.714864][ T31] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 65.726362][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 65.735517][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.743649][ T31] usb 2-1: Product: syz [ 65.747865][ T31] usb 2-1: Manufacturer: syz [ 65.752486][ T31] usb 2-1: SerialNumber: syz [ 65.757873][ T31] usb 2-1: config 0 descriptor?? [ 65.763233][ T1311] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 65.894312][ T1313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.903449][ T1313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.971041][ T1311] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 66.379928][ T31] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 66.390279][ T31] asix 2-1:0.188: probe with driver asix failed with error -61 [ 66.402010][ T10] usb 2-1: USB disconnect, device number 25 [ 66.437288][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 66.437308][ T36] audit: type=1400 audit(1777172689.506:373): avc: denied { connect } for pid=1317 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.476456][ T36] audit: type=1400 audit(1777172689.546:374): avc: denied { create } for pid=1323 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.513780][ T1329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.522330][ T1329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.526307][ T1328] netlink: 48 bytes leftover after parsing attributes in process `syz.1.332'. [ 66.781940][ T36] audit: type=1400 audit(1777172689.846:375): avc: denied { create } for pid=1342 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 66.863890][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 67.033868][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 67.040222][ T10] usb 2-1: config 0 has no interfaces? [ 67.045848][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 67.064103][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.076001][ T1345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.084780][ T10] usb 2-1: config 0 descriptor?? [ 67.095014][ T1345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.107235][ T1349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.117304][ T1349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.129261][ T1347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 67.165081][ T1347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.173706][ T1347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.265507][ T1358] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 67.298187][ T1328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.298578][ T36] audit: type=1400 audit(1777172690.366:376): avc: denied { associate } for pid=1325 comm="syz.1.332" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.314396][ T1328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.344204][ T10] usb 2-1: USB disconnect, device number 26 [ 67.370919][ T1373] netlink: 57 bytes leftover after parsing attributes in process `syz.2.346'. [ 67.383278][ T1373] netlink: 57 bytes leftover after parsing attributes in process `syz.2.346'. [ 67.447039][ T1382] kvm: pic: non byte write [ 67.505272][ T1386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.515071][ T1386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.530795][ T1386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.540112][ T1386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.601121][ T36] audit: type=1400 audit(1777172690.666:377): avc: denied { create } for pid=1387 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 67.621972][ T36] audit: type=1400 audit(1777172690.666:378): avc: denied { write } for pid=1387 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 67.669159][ T1394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 67.828011][ T1407] netlink: 57 bytes leftover after parsing attributes in process `syz.0.358'. [ 67.840163][ T1407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.849355][ T1407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.048117][ T1418] ªªªªªª: renamed from vlan0 (while UP) [ 68.137924][ T1421] netlink: 'syz.1.363': attribute type 27 has an invalid length. [ 68.269682][ T1427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.278356][ T1427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.377251][ T36] audit: type=1400 audit(1777172691.446:379): avc: denied { ioctl } for pid=1428 comm="syz.0.366" path="socket:[11106]" dev="sockfs" ino=11106 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.402078][ T387] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 68.554971][ T387] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.563648][ T387] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 68.574279][ T387] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.583248][ T387] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.597447][ T387] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.606602][ T387] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.614740][ T387] usb 2-1: Product: syz [ 68.618947][ T387] usb 2-1: Manufacturer: syz [ 68.815666][ T1437] syzkaller1: entered promiscuous mode [ 68.821253][ T1437] syzkaller1: entered allmulticast mode [ 68.836625][ T387] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 68.847472][ T387] usb 2-1: USB disconnect, device number 27 [ 68.920949][ T1444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 68.930091][ T1444] netlink: 40 bytes leftover after parsing attributes in process `syz.3.370'. [ 69.004897][ T1452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.013613][ T1452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.026172][ T36] audit: type=1400 audit(1777172692.096:380): avc: denied { read } for pid=1451 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.222747][ T36] audit: type=1400 audit(1777172692.286:381): avc: denied { map } for pid=1454 comm="syz.0.373" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 69.255334][ T1460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.264551][ T1460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.432337][ T36] audit: type=1326 audit(1777172692.496:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1469 comm="syz.1.377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd8739cdd9 code=0x0 [ 69.636433][ T1483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.645641][ T1483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.659660][ T1483] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.743888][ T359] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 69.893909][ T359] usb 2-1: Using ep0 maxpacket: 8 [ 69.900465][ T359] usb 2-1: unable to get BOS descriptor or descriptor too short [ 69.908933][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 69.919852][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 69.929648][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 69.940761][ T359] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 69.950728][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 69.960412][ T359] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 69.971837][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 8192, setting to 1024 [ 69.982830][ T359] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 69.994441][ T359] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 70.003568][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.011645][ T359] usb 2-1: Product: syz [ 70.015886][ T359] usb 2-1: Manufacturer: syz [ 70.020512][ T359] usb 2-1: SerialNumber: syz [ 70.026241][ T359] usb 2-1: config 0 descriptor?? [ 70.031555][ T1475] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 70.242374][ T359] usb 2-1: USB disconnect, device number 28 [ 70.295789][ T1489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.304396][ T1489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.763378][ T1492] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 70.851254][ T1497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1497 comm=syz.3.385 [ 70.864765][ T1497] SELinux: policydb string length 51858 does not match expected length 8 [ 70.873355][ T1497] SELinux: failed to load policy [ 70.909704][ T1501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.919001][ T1501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.582894][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 71.582912][ T36] audit: type=1400 audit(1777172694.646:387): avc: denied { write } for pid=1517 comm="syz.3.392" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.612358][ T36] audit: type=1400 audit(1777172694.646:388): avc: denied { ioctl } for pid=1517 comm="syz.3.392" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.785767][ T1526] netlink: 'syz.3.394': attribute type 11 has an invalid length. [ 71.793600][ T1526] netlink: 'syz.3.394': attribute type 12 has an invalid length. [ 71.807462][ T1526] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 71.815500][ T1526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 71.825779][ T1532] 9pnet_fd: p9_fd_create_unix (1532): problem connecting socket: ./cgroup/file0: -2 [ 72.021444][ T36] audit: type=1400 audit(1777172695.086:389): avc: denied { read write } for pid=1539 comm="syz.3.399" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.045670][ T36] audit: type=1400 audit(1777172695.086:390): avc: denied { open } for pid=1539 comm="syz.3.399" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.103886][ T369] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 72.254902][ T369] usb 2-1: config 120 has an invalid interface number: 19 but max is 0 [ 72.269229][ T369] usb 2-1: config 120 has no interface number 0 [ 72.276648][ T369] usb 2-1: config 120 interface 19 has no altsetting 0 [ 72.285262][ T369] usb 2-1: New USB device found, idVendor=050d, idProduct=0128, bcdDevice=6c.f3 [ 72.294398][ T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.302448][ T369] usb 2-1: Product: syz [ 72.306685][ T369] usb 2-1: Manufacturer: syz [ 72.311351][ T369] usb 2-1: SerialNumber: syz [ 72.335210][ T1542] sock: sock_set_timeout: `syz.2.400' (pid 1542) tries to set negative timeout [ 72.336369][ T1544] overlayfs: conflicting options: metacopy=off,verity=require [ 72.353368][ T1544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.374052][ T1544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.476998][ T36] audit: type=1400 audit(1777172695.546:391): avc: denied { sqpoll } for pid=1543 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.521803][ T1536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.534589][ T1536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.553937][ T1536] netlink: 104 bytes leftover after parsing attributes in process `syz.1.398'. [ 72.582889][ T369] ax88179_178a 2-1:120.19: probe with driver ax88179_178a failed with error -22 [ 72.607775][ T369] usb 2-1: USB disconnect, device number 29 [ 72.631627][ T1555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.641716][ T1555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.039688][ T1557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1557 comm=syz.2.405 [ 73.290084][ T36] audit: type=1400 audit(1777172696.356:392): avc: denied { read } for pid=1580 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.343419][ T1585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 73.394757][ T1585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'. [ 73.507407][ T36] audit: type=1400 audit(1777172696.576:393): avc: denied { getopt } for pid=1592 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.595405][ T36] audit: type=1400 audit(1777172696.666:394): avc: denied { create } for pid=1596 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.635499][ T36] audit: type=1400 audit(1777172696.706:395): avc: denied { connect } for pid=1598 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.696774][ T36] audit: type=1400 audit(1777172696.766:396): avc: denied { accept } for pid=1608 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.730731][ T1611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.739381][ T1611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.749164][ T1611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.761116][ T1611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.830354][ T1617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.838916][ T1617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.063927][ T387] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 74.207718][ T1624] raw_sendmsg: syz.2.425 forgot to set AF_INET. Fix it! [ 74.216008][ T387] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 74.231425][ T387] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 74.244170][ T387] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 74.253357][ T387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.261577][ T387] usb 2-1: Product: syz [ 74.265895][ T387] usb 2-1: Manufacturer: syz [ 74.270621][ T387] usb 2-1: SerialNumber: syz [ 74.310285][ T1633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.319282][ T1633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.489167][ T387] usb 2-1: Can't get UAC3 power state for id 10 [ 74.496271][ T387] usb 2-1: BAAD MICROPHONE c_chmask mismatch [ 74.504904][ T387] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 74.517119][ T387] usb 2-1: USB disconnect, device number 30 [ 74.526542][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 75.086608][ T1642] netlink: 232 bytes leftover after parsing attributes in process `syz.3.432'. [ 75.243884][ T369] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 75.393912][ T369] usb 2-1: Using ep0 maxpacket: 16 [ 75.400830][ T369] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.411530][ T369] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 75.420779][ T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.429050][ T369] usb 2-1: Product: 칢왲ëšâ¤Šà¼ºé¶©ï«•à¡…íŸÆ¼á–Žá°¡ï•¶â¼Œç¶«ë—¾å¼›åš›ãª‡æµ¯áƒ«í™„︞슠쳅ꡎ錴싸ç™é¹ƒà¡žì„§ìœí’ºå´«ã¯›à³ºîŒ­å—¬ë¨ä·” 즱뒳篋໡渻ٯ韆囗јϭ휀 [ 75.446706][ T369] usb 2-1: Manufacturer: ᤵᛄ鿈è—ë¡ŒÚˆì½Œî³¬è‡Ÿé® [ 75.454469][ T1647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.462990][ T1647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.470914][ T369] usb 2-1: SerialNumber: 슄嵉㤶㞹쒬옺ⵊ乂炇쬎ë‘롌䞳ᒭ敇褸愻ᣋ㇃䗜í©è¼Ÿçµ¨â¢Šà±¤è³Œä¿™æŒ¼ë´ªï¶ãœ§ê½¦ì¶îžê®¨ì€Žä¦‹î¥‹âº‹è´‘冯괷댇ìµìº™á­“ॹ⑓䄳赾͒ [ 75.693467][ T1638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.702134][ T1638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.713522][ T369] usb 2-1: 1:1 : no cluster descriptor [ 75.719956][ T369] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 75.730162][ T369] usb 2-1: USB disconnect, device number 31 [ 75.742056][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 75.856231][ T1653] netlink: 388 bytes leftover after parsing attributes in process `syz.2.437'. [ 75.882852][ T1659] 9pnet: Unknown protocol version 9 [ 75.889009][ T1659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.438'. [ 75.922835][ T1664] netlink: 'syz.2.440': attribute type 12 has an invalid length. [ 76.003384][ T1669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.014574][ T1669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.039249][ T1676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.049417][ T1676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.064647][ T1676] netlink: 'syz.3.444': attribute type 93 has an invalid length. [ 76.073145][ T1676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.084087][ T1676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.089045][ T1678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=1678 comm=syz.0.445 [ 76.230039][ T1681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'. [ 76.305077][ T1676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.313713][ T1676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.471002][ T1683] futex_wake_op: syz.2.447 tries to shift op by 144; fix this program [ 76.479313][ T369] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 76.634004][ T369] usb 2-1: Using ep0 maxpacket: 16 [ 76.643901][ T369] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 76.652097][ T369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.663356][ T369] usb 2-1: config 0 has no interface number 0 [ 76.677261][ T369] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 76.686988][ T1686] netlink: 112 bytes leftover after parsing attributes in process `syz.0.448'. [ 76.693238][ T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.704074][ T369] usb 2-1: Product: syz [ 76.708275][ T369] usb 2-1: Manufacturer: syz [ 76.712894][ T369] usb 2-1: SerialNumber: syz [ 76.718369][ T369] usb 2-1: config 0 descriptor?? [ 76.729584][ T369] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 76.738988][ T369] usb 2-1: No valid video chain found. [ 76.836542][ T1692] capability: warning: `syz.3.450' uses deprecated v2 capabilities in a way that may be insecure [ 76.847670][ T1692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.857278][ T1692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.936800][ T1681] tipc: Enabling of bearer rejected, failed to enable media [ 76.945729][ T1681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'. [ 76.948004][ T1697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.963252][ T1697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.976362][ T359] usb 2-1: USB disconnect, device number 32 [ 76.991753][ T1700] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2 sclass=netlink_xfrm_socket pid=1700 comm=syz.1.451 [ 77.019611][ T1702] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 77.046859][ T1706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 77.166867][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 77.166886][ T36] audit: type=1400 audit(1777172700.236:402): avc: denied { getopt } for pid=1710 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.193390][ T1711] pim6reg1: entered promiscuous mode [ 77.199189][ T1711] pim6reg1: entered allmulticast mode [ 77.228608][ T36] audit: type=1400 audit(1777172700.296:403): avc: denied { map } for pid=1712 comm="syz.0.455" path="pipe:[13395]" dev="pipefs" ino=13395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 77.288874][ T36] audit: type=1400 audit(1777172700.356:404): avc: denied { read write } for pid=1719 comm="syz.1.457" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:traceroute_exec_t:s0" [ 77.317736][ T36] audit: type=1400 audit(1777172700.376:405): avc: denied { open } for pid=1719 comm="syz.1.457" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:traceroute_exec_t:s0" [ 77.408447][ T1731] syzkaller0: refused to change device tx_queue_len [ 77.428725][ T1731] netlink: 104 bytes leftover after parsing attributes in process `syz.0.460'. [ 77.448138][ T1736] netlink: 'syz.3.461': attribute type 27 has an invalid length. [ 77.453509][ T36] audit: type=1326 audit(1777172700.516:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1733 comm="syz.1.462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd8739cdd9 code=0xffff0000 [ 77.545007][ T36] audit: type=1400 audit(1777172700.606:407): avc: denied { accept } for pid=1744 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.627851][ T1751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.650308][ T1751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.749333][ T1757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.757979][ T1757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.263954][ T46] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 78.353070][ T36] audit: type=1400 audit(1777172701.416:408): avc: denied { getopt } for pid=1785 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.403888][ T46] usb 2-1: device descriptor read/64, error -71 [ 78.419092][ T1795] overlayfs: missing 'lowerdir' [ 78.446810][ T1797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.480'. [ 78.480327][ T36] audit: type=1400 audit(1777172701.546:409): avc: denied { connect } for pid=1801 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.500676][ T36] audit: type=1400 audit(1777172701.566:410): avc: denied { shutdown } for pid=1801 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.552495][ T36] audit: type=1400 audit(1777172701.616:411): avc: denied { read } for pid=1801 comm="syz.2.481" path="socket:[14368]" dev="sockfs" ino=14368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.619876][ T1812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.628586][ T1812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.645238][ T46] usb 2-1: device descriptor read/64, error -71 [ 78.651804][ T1812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.673038][ T1812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.706543][ T1818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.715951][ T1818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.805941][ T1833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.815304][ T1833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.913885][ T46] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 79.053893][ T46] usb 2-1: device descriptor read/64, error -71 [ 79.163689][ T1848] overlayfs: failed to resolve './cgroup': -2 [ 79.293913][ T46] usb 2-1: device descriptor read/64, error -71 [ 79.403995][ T46] usb usb2-port1: attempt power cycle [ 79.435210][ T1857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.443835][ T1857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.722901][ T1870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.731528][ T1870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.753893][ T46] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 79.775045][ T46] usb 2-1: device descriptor read/8, error -71 [ 79.905052][ T46] usb 2-1: device descriptor read/8, error -71 [ 79.969691][ T1872] netlink: 'syz.0.507': attribute type 39 has an invalid length. [ 79.977571][ T1872] gretap0: entered promiscuous mode [ 79.982798][ T1872] gretap0: entered allmulticast mode [ 79.988785][ T1872] netlink: 212 bytes leftover after parsing attributes in process `syz.0.507'. [ 80.016506][ T1874] netlink: 'syz.0.508': attribute type 4 has an invalid length. [ 80.024453][ T1874] netlink: 17 bytes leftover after parsing attributes in process `syz.0.508'. [ 80.130937][ T1886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.139691][ T1886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.153924][ T46] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 80.174856][ T46] usb 2-1: device descriptor read/8, error -71 [ 80.197919][ T1886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.206538][ T1886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.305029][ T46] usb 2-1: device descriptor read/8, error -71 [ 80.414664][ T46] usb usb2-port1: unable to enumerate USB device [ 81.065305][ T1901] netlink: 37 bytes leftover after parsing attributes in process `syz.1.517'. [ 81.433887][ T46] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 81.585381][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.593525][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 81.602059][ T46] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 81.613565][ T46] usb 2-1: language id specifier not provided by device, defaulting to English [ 81.623721][ T46] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 81.632822][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.640873][ T46] usb 2-1: Product: syz [ 81.645193][ T46] usb 2-1: Manufacturer: ⧄亨ç¤ï¼å¿ƒì¤¨âƒ´×Œî‹å¹²èª¤å›¦ã•¸ï¬€å [ 81.653434][ T46] usb 2-1: SerialNumber: syz [ 81.806242][ T1909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.815009][ T1909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.862394][ T46] usb 2-1: BAAD SPEAKERPHONE c_chmask mismatch [ 81.870515][ T46] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 81.881413][ T46] usb 2-1: USB disconnect, device number 37 [ 81.893871][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 82.509208][ T1927] bridge: RTM_NEWNEIGH with invalid ether address [ 82.516338][ T1927] netlink: 148 bytes leftover after parsing attributes in process `syz.2.528'. [ 82.525852][ T1927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 82.534870][ T1927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 82.545950][ T1929] netlink: 'syz.0.529': attribute type 4 has an invalid length. [ 82.556731][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 82.556747][ T36] audit: type=1400 audit(1777172705.626:424): avc: denied { map } for pid=1926 comm="syz.2.528" path="socket:[14150]" dev="sockfs" ino=14150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.559126][ T1929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.570140][ T36] audit: type=1400 audit(1777172705.626:425): avc: denied { read } for pid=1926 comm="syz.2.528" path="socket:[14150]" dev="sockfs" ino=14150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.587952][ T1929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.663896][ T369] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 82.686770][ T1936] netlink: 'syz.3.532': attribute type 29 has an invalid length. [ 82.694615][ T1936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 82.749448][ T36] audit: type=1400 audit(1777172705.816:426): avc: denied { setattr } for pid=1940 comm="syz.3.534" name="timer" dev="devtmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 82.805260][ T1946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.814435][ T1946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.825035][ T369] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.840821][ T369] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 12592, setting to 64 [ 82.853203][ T369] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 82.862422][ T369] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 82.870778][ T369] usb 2-1: Manufacturer: syz [ 82.875478][ T369] usb 2-1: SerialNumber: syz [ 82.883287][ T1925] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 82.921602][ T1946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.930225][ T1946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.102111][ T369] usb 2-1: USB disconnect, device number 38 [ 83.167675][ T36] audit: type=1400 audit(1777172706.236:427): avc: denied { create } for pid=1951 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.204322][ T36] audit: type=1400 audit(1777172706.276:428): avc: denied { create } for pid=1955 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.255902][ T1960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.541'. [ 83.267028][ T1960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.271393][ T36] audit: type=1400 audit(1777172706.336:429): avc: denied { read } for pid=1959 comm="syz.0.541" name="file0" dev="tmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.278097][ T1960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.308346][ T36] audit: type=1400 audit(1777172706.336:430): avc: denied { open } for pid=1959 comm="syz.0.541" path="/124/file0" dev="tmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.363112][ T36] audit: type=1400 audit(1777172706.426:431): avc: denied { ioctl } for pid=1959 comm="syz.0.541" path="/124/file0" dev="tmpfs" ino=687 ioctlcmd=0x4c05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.667635][ T1968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.544'. [ 83.688441][ T36] audit: type=1400 audit(1777172706.756:432): avc: denied { ioctl } for pid=1967 comm="syz.3.545" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 83.814636][ T1974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.823564][ T1973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.824048][ T1974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.839850][ T1975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.851818][ T1973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.860216][ T1975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.913906][ T66] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 83.936371][ T36] audit: type=1400 audit(1777172707.006:433): avc: denied { bind } for pid=1990 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.937479][ T1991] netlink: 'syz.2.552': attribute type 10 has an invalid length. [ 84.063930][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 84.070865][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.079603][ T66] usb 2-1: config 3 has an invalid interface number: 242 but max is 0 [ 84.088402][ T66] usb 2-1: config 3 has no interface number 0 [ 84.096815][ T66] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=18.b3 [ 84.105973][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.114102][ T66] usb 2-1: Product: syz [ 84.118326][ T66] usb 2-1: Manufacturer: syz [ 84.122971][ T66] usb 2-1: SerialNumber: syz [ 84.132163][ T66] r8152-cfgselector 2-1: Unknown version 0x0000 [ 84.346867][ T66] r8152-cfgselector 2-1: Unknown version 0x0000 [ 84.353432][ T66] r8153_ecm 2-1:3.242: More than one union descriptor, skipping ... [ 84.361746][ T66] r8152-cfgselector 2-1: bad CDC descriptors [ 84.379385][ T66] r8152-cfgselector 2-1: USB disconnect, device number 39 [ 84.394805][ T1997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.406508][ T1997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.592453][ T2018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.561'. [ 85.828707][ T2026] netlink: 'syz.3.565': attribute type 32 has an invalid length. [ 85.852936][ T2028] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 85.863957][ T369] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 85.896439][ T2032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.905092][ T2032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.024622][ T369] usb 2-1: Using ep0 maxpacket: 16 [ 86.031365][ T369] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 86.039594][ T369] usb 2-1: config 1 has no interface number 0 [ 86.045794][ T369] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 86.055755][ T369] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 86.065825][ T369] usb 2-1: config 1 interface 105 has no altsetting 0 [ 86.073953][ T369] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 86.083340][ T369] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 86.091642][ T369] usb 2-1: Product: syz [ 86.095866][ T369] usb 2-1: Manufacturer: syz [ 86.100486][ T369] usb 2-1: SerialNumber: syz [ 86.106273][ T2022] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 86.113464][ T2022] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 86.131515][ T2034] x_tables: duplicate entry at hook 2 [ 86.526977][ T2022] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 86.534323][ T2022] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 86.547367][ T2054] can0: slcan on ptm0. [ 86.706937][ T2079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.716257][ T2079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.725151][ T2081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.733722][ T2081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.946728][ T2022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.956096][ T2022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.964958][ T369] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 86.976289][ T369] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 86.987675][ T369] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 87.000611][ T369] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2e:8b:3b:ff:bf:47 [ 87.014975][ T369] usb 2-1: USB disconnect, device number 40 [ 87.022036][ T369] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 87.054207][ T2047] can0 (unregistered): slcan off ptm0. [ 87.093468][ T369] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 87.107092][ T369] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 87.118815][ T369] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 87.231478][ T2109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.582'. [ 87.758046][ T66] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 87.909199][ T66] usb 2-1: Invalid ep0 maxpacket: 32 [ 88.050290][ T66] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 88.201381][ T66] usb 2-1: Invalid ep0 maxpacket: 32 [ 88.206887][ T66] usb usb2-port1: attempt power cycle [ 88.360997][ T2150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.369713][ T2150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.391441][ T2152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.400046][ T2152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.410047][ T2152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.418598][ T2152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.453588][ T2161] netlink: 104 bytes leftover after parsing attributes in process `syz.3.597'. [ 88.463129][ T2161] netlink: 'syz.3.597': attribute type 1 has an invalid length. [ 88.470819][ T2161] netlink: 9 bytes leftover after parsing attributes in process `syz.3.597'. [ 88.554108][ T66] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 88.565560][ T2163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 88.574776][ T66] usb 2-1: Invalid ep0 maxpacket: 32 [ 88.685744][ T2165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.694301][ T2165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.705213][ T66] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 88.725766][ T66] usb 2-1: Invalid ep0 maxpacket: 32 [ 88.731198][ T66] usb usb2-port1: unable to enumerate USB device [ 88.804350][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 88.804370][ T36] audit: type=1400 audit(1777172711.844:461): avc: denied { mount } for pid=2166 comm="syz.2.599" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 88.805481][ T2167] overlayfs: failed to clone lowerpath [ 88.856127][ T2170] netlink: 'syz.2.600': attribute type 12 has an invalid length. [ 88.941633][ T2177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 88.952487][ T2177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 88.963008][ T2177] fuse: Bad value for 'fd' [ 88.967903][ T36] audit: type=1400 audit(1777172712.013:462): avc: denied { remount } for pid=2175 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.988333][ T2177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 89.056473][ T2180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.065843][ T2180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.076941][ T2182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.086633][ T2182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.632481][ T2184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'. [ 89.663409][ T2186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.672177][ T2186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.686359][ T36] audit: type=1400 audit(1777172712.727:463): avc: denied { ioctl } for pid=2185 comm="syz.0.606" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:traceroute_exec_t:s0" [ 90.378339][ T2209] random: crng reseeded on system resumption [ 90.387752][ T36] audit: type=1400 audit(1777172713.412:464): avc: denied { read append } for pid=2201 comm="syz.0.611" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.411419][ T36] audit: type=1400 audit(1777172713.412:465): avc: denied { ioctl open } for pid=2201 comm="syz.0.611" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 91.132801][ T2234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 91.145632][ T2234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 91.155401][ T36] audit: type=1400 audit(1777172714.187:466): avc: denied { write } for pid=2222 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.176108][ T2223] 9pnet_fd: Insufficient options for proto=fd [ 91.202834][ T2243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.211427][ T2243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.285066][ T2245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.626'. [ 91.596545][ T359] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 91.625161][ T2250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.633730][ T2250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.700967][ T2262] x_tables: duplicate underflow at hook 1 [ 91.737601][ T359] usb 2-1: device descriptor read/64, error -71 [ 91.979311][ T359] usb 2-1: device descriptor read/64, error -71 [ 92.221034][ T359] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 92.351956][ T359] usb 2-1: device descriptor read/64, error -71 [ 92.593703][ T359] usb 2-1: device descriptor read/64, error -71 [ 92.704610][ T359] usb usb2-port1: attempt power cycle [ 93.047049][ T359] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 93.068053][ T359] usb 2-1: device descriptor read/8, error -71 [ 93.199209][ T359] usb 2-1: device descriptor read/8, error -71 [ 93.439665][ T359] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 93.460938][ T359] usb 2-1: device descriptor read/8, error -71 [ 93.591912][ T359] usb 2-1: device descriptor read/8, error -71 [ 93.701612][ T359] usb usb2-port1: unable to enumerate USB device [ 117.309256][ T36] audit: type=1400 audit(1777172740.171:467): avc: denied { write } for pid=2265 comm="syz.1.633" path="socket:[16884]" dev="sockfs" ino=16884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.366044][ T2278] Invalid ELF header type: 2 != 1 [ 117.369607][ T36] audit: type=1400 audit(1777172740.231:468): avc: denied { module_load } for pid=2276 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 117.442648][ T2277] 9pnet_fd: Insufficient options for proto=fd [ 117.623351][ T2296] tmpfs: Unknown parameter 'no' [ 117.628410][ T2296] futex_wake_op: syz.3.644 tries to shift op by -1; fix this program [ 117.637622][ T2294] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 117.638819][ T2296] Invalid argument reading file caps for ./file0 [ 117.660933][ T2294] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 117.696430][ T36] audit: type=1400 audit(1777172740.549:469): avc: denied { accept } for pid=2299 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.720480][ T2308] can0: slcan on ptm0. [ 117.778163][ T36] audit: type=1326 audit(1777172740.639:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8739cdd9 code=0x7ffc0000 [ 117.803141][ T2306] can0 (unregistered): slcan off ptm0. [ 117.818177][ T36] audit: type=1326 audit(1777172740.639:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8739cdd9 code=0x7ffc0000 [ 117.858221][ T36] audit: type=1326 audit(1777172740.668:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd8735d60e code=0x7ffc0000 [ 117.888316][ T36] audit: type=1326 audit(1777172740.668:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efd8739e0d7 code=0x7ffc0000 [ 117.921357][ T36] audit: type=1326 audit(1777172740.668:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd8739cdd9 code=0x7ffc0000 [ 117.957796][ T36] audit: type=1326 audit(1777172740.668:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efd8739e0d7 code=0x7ffc0000 [ 117.981159][ T36] audit: type=1326 audit(1777172740.668:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2313 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efd8735d60e code=0x7ffc0000 [ 118.449527][ T2367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.458329][ T2367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.481030][ T2367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.491559][ T2367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.680934][ T2379] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 118.690198][ T2379] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 118.691390][ T2375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.706791][ T2379] kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 118.709605][ T2375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.714745][ T2374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.731980][ T2375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.740559][ T2374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.748798][ T2375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.019528][ T2389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.028157][ T2389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.058762][ T66] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 119.218334][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 119.223917][ T66] usb 2-1: no configurations [ 119.228602][ T66] usb 2-1: can't read configurations, error -22 [ 119.389200][ T66] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 119.444003][ T2401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.452606][ T2401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.540082][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 119.545683][ T66] usb 2-1: no configurations [ 119.550356][ T66] usb 2-1: can't read configurations, error -22 [ 119.556761][ T66] usb usb2-port1: attempt power cycle [ 119.901545][ T66] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 119.922058][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 119.928085][ T66] usb 2-1: no configurations [ 119.932931][ T66] usb 2-1: can't read configurations, error -22 [ 119.979922][ T2426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.988580][ T2426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.062273][ T66] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 120.082741][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 120.088325][ T66] usb 2-1: no configurations [ 120.093059][ T66] usb 2-1: can't read configurations, error -22 [ 120.099545][ T66] usb usb2-port1: unable to enumerate USB device [ 120.207885][ T2436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.216541][ T2436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.515881][ T2442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.523152][ T2442] IPv6: NLM_F_CREATE should be set when creating new route [ 120.530443][ T2442] IPv6: NLM_F_CREATE should be set when creating new route [ 120.768680][ T2446] kvm: Disabled LAPIC found during irq injection [ 120.796023][ T2446] Invalid logical block size (4) [ 120.950513][ T2455] netlink: 328 bytes leftover after parsing attributes in process `syz.0.687'. [ 120.961184][ T2455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.970375][ T2455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.144303][ T2462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.689'. [ 121.153556][ T2463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.689'. [ 121.235174][ T2474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.244518][ T2474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.531909][ T2482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.540548][ T2482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.811812][ T2484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.821082][ T2484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.891765][ T2490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 121.900763][ T2490] bridge_slave_1: left allmulticast mode [ 121.906421][ T2490] bridge_slave_1: left promiscuous mode [ 121.912174][ T2490] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.919784][ T2490] bridge_slave_0: left allmulticast mode [ 121.925566][ T2490] bridge_slave_0: left promiscuous mode [ 121.931431][ T2490] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.973118][ T2491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2491 comm=syz.2.699 [ 122.066068][ T2499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.074667][ T2499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.083090][ T2499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.091630][ T2499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.099859][ T2499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.108580][ T2500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.109792][ T2499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.119010][ T2500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.262268][ T326] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 122.395618][ T2502] netlink: 'syz.3.703': attribute type 13 has an invalid length. [ 122.415204][ T326] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 122.423585][ T326] usb 2-1: config 0 has no interface number 0 [ 122.429757][ T326] usb 2-1: too many endpoints for config 0 interface 237 altsetting 128: 144, using maximum allowed: 30 [ 122.441058][ T326] usb 2-1: config 0 interface 237 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 122.454613][ T326] usb 2-1: config 0 interface 237 has no altsetting 0 [ 122.461602][ T326] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 122.471395][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.480363][ T326] usb 2-1: config 0 descriptor?? [ 122.570892][ T36] kauditd_printk_skb: 4778 callbacks suppressed [ 122.570911][ T36] audit: type=1400 audit(1777172745.416:5255): avc: denied { search } for pid=2508 comm="syz.2.705" name="/" dev="configfs" ino=2163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.662781][ T2517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'. [ 122.675361][ T2517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.683951][ T2517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.692855][ T326] usb 2-1: USB disconnect, device number 53 [ 123.124465][ T2519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 123.135969][ T2519] syzkaller1: entered promiscuous mode [ 123.141634][ T2519] syzkaller1: entered allmulticast mode [ 123.246688][ T2532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.255720][ T2532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.269834][ T2532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.278663][ T2532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.308264][ T2537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.324546][ T2537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.457490][ T326] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 123.608139][ T326] usb 2-1: Using ep0 maxpacket: 8 [ 123.614355][ T326] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 123.622703][ T326] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 123.630921][ T326] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 123.639847][ T326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 123.650810][ T326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.666668][ T326] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 123.676013][ T326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.684092][ T326] usb 2-1: Product: syz [ 123.688321][ T326] usb 2-1: Manufacturer: syz [ 123.692980][ T326] usb 2-1: SerialNumber: syz [ 123.703506][ T326] usb 2-1: config 0 descriptor?? [ 123.709744][ T326] hub 2-1:0.0: bad descriptor, ignoring hub [ 123.715705][ T326] hub 2-1:0.0: probe with driver hub failed with error -5 [ 123.733890][ T326] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 123.821906][ T36] audit: type=1400 audit(1777172746.661:5256): avc: denied { nlmsg_tty_audit } for pid=2540 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 123.915026][ T326] usb 2-1: USB disconnect, device number 54 [ 123.925302][ T36] audit: type=1400 audit(1777172746.760:5257): avc: denied { nlmsg_write } for pid=2548 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 123.935715][ T2546] netlink: 96 bytes leftover after parsing attributes in process `syz.0.720'. [ 124.000855][ T2553] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2553 comm=syz.3.723 [ 124.032602][ T2557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.051033][ T2557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.225667][ T2578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.234365][ T2578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.457206][ T2583] GUP no longer grows the stack in syz.1.733 (2583): 200000005000-200000008000 (200000004000) [ 124.467741][ T2583] CPU: 1 UID: 0 PID: 2583 Comm: syz.1.733 Not tainted syzkaller #0 0f3775a9ea948f8f8f06e34e337f4a1c8395b27e [ 124.467790][ T2583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.467807][ T2583] Call Trace: [ 124.467816][ T2583] [ 124.467826][ T2583] __dump_stack+0x21/0x30 [ 124.467874][ T2583] dump_stack_lvl+0x140/0x1c0 [ 124.467907][ T2583] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.467939][ T2583] ? futex_lock_pi_atomic+0xe3/0xcd0 [ 124.467976][ T2583] dump_stack+0x19/0x20 [ 124.468006][ T2583] fixup_user_fault+0x62a/0x6b0 [ 124.468035][ T2583] fault_in_user_writeable+0x75/0xe0 [ 124.468064][ T2583] futex_lock_pi+0x2d7/0xa70 [ 124.468096][ T2583] ? __cfi_futex_lock_pi+0x10/0x10 [ 124.468131][ T2583] ? __cfi_futex_wake_mark+0x10/0x10 [ 124.468167][ T2583] ? futex_setup_timer+0xb4/0xd0 [ 124.468194][ T2583] ? __cfi_futex_wake_mark+0x10/0x10 [ 124.468229][ T2583] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 124.468267][ T2583] ? mas_find+0x358/0x5f0 [ 124.468304][ T2583] do_futex+0x270/0x510 [ 124.468332][ T2583] ? do_vmi_munmap+0x245/0x2e0 [ 124.468370][ T2583] ? __cfi_do_futex+0x10/0x10 [ 124.468399][ T2583] ? __vm_munmap+0x2de/0x390 [ 124.468435][ T2583] __se_sys_futex+0x13c/0x320 [ 124.468465][ T2583] ? __x64_sys_futex+0x110/0x110 [ 124.468497][ T2583] ? __kasan_check_write+0x18/0x20 [ 124.468556][ T2583] __x64_sys_futex+0xe9/0x110 [ 124.468588][ T2583] x64_sys_call+0x227f/0x2ee0 [ 124.468623][ T2583] do_syscall_64+0x57/0xf0 [ 124.468652][ T2583] ? clear_bhb_loop+0x50/0xa0 [ 124.468685][ T2583] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.468715][ T2583] RIP: 0033:0x7efd8739cdd9 [ 124.468743][ T2583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.468766][ T2583] RSP: 002b:00007efd88298028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.468798][ T2583] RAX: ffffffffffffffda RBX: 00007efd87615fa0 RCX: 00007efd8739cdd9 [ 124.468817][ T2583] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 124.468833][ T2583] RBP: 00007efd87432d69 R08: 0000000000000000 R09: 0000000000000001 [ 124.468850][ T2583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.468866][ T2583] R13: 00007efd87616038 R14: 00007efd87615fa0 R15: 00007ffdc23b26f8 [ 124.468888][ T2583] [ 124.470578][ T2583] netlink: 80 bytes leftover after parsing attributes in process `syz.1.733'. [ 124.734427][ T36] audit: type=1400 audit(1777172747.577:5258): avc: denied { ioctl } for pid=2585 comm="syz.0.734" path="socket:[18944]" dev="sockfs" ino=18944 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.798156][ T2592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.807766][ T2592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.897192][ T2595] netlink: 440 bytes leftover after parsing attributes in process `syz.0.738'. [ 124.964687][ T36] audit: type=1400 audit(1777172747.806:5259): avc: denied { shutdown } for pid=2606 comm="syz.0.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.018270][ T2592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.031970][ T2614] netlink: 964 bytes leftover after parsing attributes in process `syz.0.743'. [ 125.041277][ T2592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.069931][ T36] audit: type=1400 audit(1777172747.906:5260): avc: denied { setattr } for pid=2591 comm="syz.3.737" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.176999][ T2618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.185632][ T2618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.309348][ T2621] overlayfs: workdir and upperdir must be separate subtrees [ 125.510902][ T2638] tipc: Started in network mode [ 125.515883][ T2638] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 125.524851][ T2638] tipc: Enabling of bearer rejected, failed to enable media [ 125.730072][ T2647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.738725][ T2647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.787536][ T359] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 125.939578][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.950655][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.960513][ T359] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.973468][ T359] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.982613][ T359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.991748][ T359] usb 2-1: config 0 descriptor?? [ 126.005788][ T2649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.014453][ T2649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.404082][ T2656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.413219][ T2656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.425158][ T359] usbhid 2-1:0.0: can't add hid device: -71 [ 126.431346][ T359] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 126.440095][ T359] usb 2-1: USB disconnect, device number 55 [ 126.566024][ T36] audit: type=1400 audit(1777172749.389:5261): avc: denied { relabelfrom } for pid=2662 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 126.585943][ T36] audit: type=1400 audit(1777172749.389:5262): avc: denied { relabelto } for pid=2662 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 126.697290][ T2677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2677 comm=syz.0.765 [ 126.719460][ T2677] netlink: 'syz.0.765': attribute type 63 has an invalid length. [ 126.726897][ T2679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'. [ 126.727782][ T2677] netlink: 5 bytes leftover after parsing attributes in process `syz.0.765'. [ 126.759019][ T2681] bpf: Bad value for 'mode' [ 126.926666][ T2687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.770'. [ 126.944348][ T2687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.954095][ T2687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.964465][ T2689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 127.129056][ T2700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.146306][ T2700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.495463][ T2707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.504093][ T2707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.749289][ T2712] x_tables: duplicate underflow at hook 4 [ 127.756358][ T36] audit: type=1400 audit(1777172750.584:5263): avc: denied { ioctl } for pid=2710 comm="syz.3.779" path="socket:[19783]" dev="sockfs" ino=19783 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.068198][ T2719] netlink: 252 bytes leftover after parsing attributes in process `syz.1.781'. [ 128.079608][ T2719] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.102312][ T36] audit: type=1400 audit(1777172750.923:5264): avc: denied { map } for pid=2716 comm="syz.1.781" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:traceroute_exec_t:s0" [ 128.132717][ T36] audit: type=1400 audit(1777172750.923:5265): avc: denied { execute } for pid=2716 comm="syz.1.781" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:traceroute_exec_t:s0" [ 128.280786][ T2731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 128.378418][ T66] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 128.518775][ T36] audit: type=1400 audit(1777172751.331:5266): avc: denied { create } for pid=2750 comm="syz.2.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 128.555465][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 128.569733][ T66] usb 2-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 128.592766][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.614745][ T66] usb 2-1: Product: syz [ 128.628866][ T66] usb 2-1: Manufacturer: syz [ 128.633805][ T66] usb 2-1: SerialNumber: syz [ 128.642948][ T2760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.657614][ T2760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.668742][ T2762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.677998][ T2762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.682456][ T36] audit: type=1400 audit(1777172751.501:5267): avc: denied { module_load } for pid=2761 comm="syz.2.796" path="/276/file1" dev="tmpfs" ino=1501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 128.709007][ T2763] Invalid ELF header len 9 [ 128.714994][ T2763] Invalid ELF header len 9 [ 128.760905][ T2772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.763201][ T36] audit: type=1400 audit(1777172751.580:5268): avc: denied { create } for pid=2769 comm="syz.2.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 128.772060][ T2772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.798093][ T2770] netlink: 9 bytes leftover after parsing attributes in process `syz.2.798'. [ 128.807956][ T2770] gretap0: entered promiscuous mode [ 128.843642][ T2719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.853373][ T2719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.864195][ T66] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 128.871293][ T66] usb 2-1: unit 5 not found! [ 128.881687][ T66] usb 2-1: USB disconnect, device number 56 [ 128.898748][ T36] audit: type=1400 audit(1777172751.710:5269): avc: denied { execute } for pid=2779 comm="syz.0.800" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.001039][ T2786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.010404][ T2786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.020374][ T2786] sit0: entered promiscuous mode [ 129.027001][ T2786] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 129.035103][ T2786] netlink: 'syz.0.802': attribute type 3 has an invalid length. [ 129.443874][ T2803] netlink: 104 bytes leftover after parsing attributes in process `syz.1.808'. [ 129.449096][ T36] audit: type=1400 audit(1777172752.267:5270): avc: denied { bind } for pid=2802 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.488378][ T2805] netlink: 'syz.2.809': attribute type 13 has an invalid length. [ 129.643668][ T2852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.652301][ T2852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.661654][ T2852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.670314][ T2852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.743694][ T359] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 129.895460][ T359] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 129.906370][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.917429][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.927231][ T359] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 129.941042][ T359] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 129.950159][ T359] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 129.958298][ T359] usb 2-1: Manufacturer: syz [ 129.963649][ T359] usb 2-1: config 0 descriptor?? [ 130.172696][ T359] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 130.180116][ T359] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 130.189477][ T359] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 130.300414][ T2861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.309086][ T2861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.429350][ T10] usb 2-1: USB disconnect, device number 57 [ 130.602618][ T36] audit: type=1400 audit(1777172753.413:5271): avc: denied { append } for pid=2876 comm="syz.3.822" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:traceroute_exec_t:s0" [ 130.736392][ T2886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.745175][ T2886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.757056][ T2886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.765675][ T2886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.269675][ T10] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 131.291202][ T2899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.300031][ T2899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.308835][ T2899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.318316][ T2899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.365064][ T2904] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3302380784 (422704740352 ns) > initial count (376454525824 ns). Using initial count to start timer. [ 131.384382][ T2904] kvm: kvm [2903]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 131.393397][ T2904] kvm: kvm [2903]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 131.410124][ T2904] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 131.421836][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.440693][ T10] usb 2-1: config 172 has an invalid descriptor of length 100, skipping remainder of the config [ 131.451284][ T10] usb 2-1: config 172 has 0 interfaces, different from the descriptor's value: 1 [ 131.463383][ T10] usb 2-1: string descriptor 0 read error: -22 [ 131.469617][ T10] usb 2-1: New USB device found, idVendor=2020, idProduct=2060, bcdDevice=3d.9e [ 131.479315][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.692737][ T10] usb 2-1: USB disconnect, device number 58 [ 131.775784][ T36] audit: type=1400 audit(1777172754.578:5272): avc: denied { mounton } for pid=2919 comm="syz.0.837" path="/209/file0" dev="tmpfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.394636][ T2933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.841'. [ 132.598256][ T2940] netlink: 100 bytes leftover after parsing attributes in process `syz.2.844'. [ 132.675068][ T369] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 132.825616][ T369] usb 2-1: Using ep0 maxpacket: 8 [ 132.831971][ T369] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.842536][ T369] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 132.852737][ T369] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.877050][ T369] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 132.886259][ T369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.894322][ T369] usb 2-1: Product: syz [ 132.898687][ T369] usb 2-1: Manufacturer: syz [ 132.903452][ T369] usb 2-1: SerialNumber: syz [ 132.916779][ T2935] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 133.190417][ T369] usb 2-1: MIDIStreaming interface descriptor not found [ 133.205530][ T369] usb 2-1: USB disconnect, device number 59 [ 133.238500][ T2279] udevd[2279]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 133.332241][ T2967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 133.351836][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 133.351855][ T36] audit: type=1400 audit(1777172756.152:5275): avc: denied { map } for pid=2969 comm="syz.2.853" path="socket:[20975]" dev="sockfs" ino=20975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.396859][ T36] audit: type=1400 audit(1777172756.192:5276): avc: denied { map } for pid=2971 comm="syz.3.854" path="socket:[20352]" dev="sockfs" ino=20352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.435899][ T2979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.445540][ T2979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.981883][ T36] audit: type=1400 audit(1777172756.780:5277): avc: denied { execute_no_trans } for pid=2985 comm="syz.2.860" path="/294/file0" dev="tmpfs" ino=1593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.013965][ T2988] overlayfs: missing 'lowerdir' [ 134.024684][ T36] audit: type=1400 audit(1777172756.820:5278): avc: denied { read } for pid=2982 comm="syz.3.859" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.047637][ T36] audit: type=1400 audit(1777172756.820:5279): avc: denied { open } for pid=2982 comm="syz.3.859" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.654474][ T36] audit: type=1400 audit(1777172757.458:5280): avc: denied { accept } for pid=3006 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.864957][ T3012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.880080][ T3013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.880394][ T3012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.894313][ T3013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.033827][ T359] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 135.185645][ T359] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 135.196734][ T359] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.209918][ T359] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.216875][ T359] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 135.226133][ T359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.236531][ T359] usb 2-1: config 0 descriptor?? [ 135.247890][ T3010] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 135.344519][ T36] audit: type=1400 audit(1777172758.135:5281): avc: denied { connect } for pid=3038 comm="syz.0.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.398596][ T36] audit: type=1400 audit(1777172758.195:5282): avc: denied { mount } for pid=3043 comm="syz.0.877" name="/" dev="pstore" ino=2445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 135.483207][ T3052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.599035][ T3057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.607781][ T3057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.676387][ T36] audit: type=1400 audit(1777172758.474:5283): avc: denied { watch_reads } for pid=3009 comm="syz.1.867" path="/133" dev="tmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 135.698880][ T36] audit: type=1326 audit(1777172758.484:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3009 comm="syz.1.867" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd8739cdd9 code=0x0 [ 135.748630][ T359] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0003/input/input13 [ 135.761964][ T359] uclogic 0003:28BD:0933.0003: input,hidraw0: USB HID v0.20 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 136.052262][ T3075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.060883][ T3075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.133716][ T3077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.142395][ T3077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.320343][ T3084] overlayfs: failed to clone lowerpath [ 136.337334][ T3086] netlink: 'syz.2.891': attribute type 39 has an invalid length. [ 136.347416][ T3087] netlink: 'syz.2.891': attribute type 39 has an invalid length. [ 136.685177][ T3095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:665 [ 136.686288][ T3093] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.783401][ T3095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.792060][ T3095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.919402][ T3111] netlink: 37 bytes leftover after parsing attributes in process `syz.2.898'. [ 136.941974][ T3115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 136.967740][ T3118] overlayfs: failed to clone upperpath [ 136.974956][ T3118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 137.362582][ T3136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.371268][ T3136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.380675][ T3136] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 137.389974][ T3136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.398629][ T3136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.805934][ T3138] overlayfs: failed to clone upperpath [ 137.867838][ T359] usb 2-1: USB disconnect, device number 60 [ 137.947275][ T3159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.956423][ T3159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.024774][ T3162] SELinux: failed to load policy [ 138.127999][ T3172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.136623][ T3172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.176731][ T3179] netlink: 'syz.1.920': attribute type 12 has an invalid length. [ 138.399035][ T3184] new mount options do not match the existing superblock, will be ignored [ 138.458920][ T3193] SELinux: Context system_u:object_r:kvm_device_t:s0 is not valid (left unmapped). [ 138.468649][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 138.468665][ T36] audit: type=1400 audit(1777172761.254:5290): avc: denied { relabelto } for pid=3192 comm="syz.2.926" name="bus" dev="tmpfs" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kvm_device_t:s0" [ 138.506500][ T3193] overlayfs: failed to clone upperpath [ 138.515510][ T3195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.525002][ T3195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.532835][ T36] audit: type=1400 audit(1777172761.284:5291): avc: denied { associate } for pid=3192 comm="syz.2.926" name="bus" dev="tmpfs" ino=1740 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:kvm_device_t:s0" [ 138.560073][ T36] audit: type=1400 audit(1777172761.294:5292): avc: denied { mounton } for pid=3192 comm="syz.2.926" path="/319/bus" dev="tmpfs" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kvm_device_t:s0" [ 138.586739][ T36] audit: type=1400 audit(1777172761.314:5293): avc: denied { rmdir } for pid=292 comm="syz-executor" name="bus" dev="tmpfs" ino=1740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kvm_device_t:s0" [ 138.698779][ T36] audit: type=1400 audit(1777172761.483:5294): avc: denied { execmem } for pid=3199 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 138.841353][ T3203] overlayfs: missing 'lowerdir' [ 139.017423][ T3214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.026071][ T3214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.038731][ T3214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.047468][ T3214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.091940][ T3221] input: syz0 as /devices/virtual/input/input14 [ 139.133918][ T36] audit: type=1400 audit(1777172761.912:5295): avc: denied { module_load } for pid=3223 comm="syz.0.936" path="/sys/kernel/address_bits" dev="sysfs" ino=1453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 139.228067][ T3231] tmpfs: Unknown parameter 'np' [ 139.233908][ T3231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.939'. [ 139.246115][ T36] audit: type=1400 audit(1777172762.031:5296): avc: denied { shutdown } for pid=3232 comm="syz.1.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.298514][ T3236] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.416596][ T3247] overlayfs: failed to resolve './cgroup': -2 [ 139.422873][ T3245] rust_binder: Write failure EFAULT in pid:701 [ 139.423936][ T3247] fuse: Bad value for 'fd' [ 139.450432][ T36] audit: type=1400 audit(1777172762.231:5297): avc: denied { write } for pid=3248 comm="syz.0.946" name="ptype" dev="proc" ino=4026532343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 139.454149][ T3249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.481702][ T3249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.590972][ T36] audit: type=1400 audit(1777172762.370:5298): avc: denied { create } for pid=3252 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.611288][ T36] audit: type=1400 audit(1777172762.370:5299): avc: denied { write } for pid=3252 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.740356][ T359] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 139.854793][ T3261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 139.890900][ T359] usb 2-1: Using ep0 maxpacket: 32 [ 139.897375][ T359] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 139.905743][ T359] usb 2-1: config 0 has no interface number 0 [ 139.911990][ T359] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 139.914033][ T3262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.925042][ T359] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 139.934054][ T3262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.940052][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.972438][ T359] usb 2-1: Product: syz [ 139.977665][ T359] usb 2-1: Manufacturer: syz [ 139.982686][ T359] usb 2-1: SerialNumber: syz [ 139.995555][ T359] usb 2-1: config 0 descriptor?? [ 140.000958][ T3251] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 140.017115][ T3271] overlay: ./file0 is not a directory [ 140.040550][ T3276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.056402][ T3276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.068509][ T3276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.077169][ T3276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.128265][ C0] BUG: TASK stack guard page was hit at ffffc90008e47eb8 (stack is ffffc90008e48000..ffffc90008e50000) [ 140.128311][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 140.128334][ C0] CPU: 0 UID: 0 PID: 3286 Comm: syz.0.959 Not tainted syzkaller #0 0f3775a9ea948f8f8f06e34e337f4a1c8395b27e [ 140.128363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.128376][ C0] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 140.128414][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 140.128432][ C0] RSP: 0018:ffffc90008e47ec0 EFLAGS: 00010286 [ 140.128451][ C0] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc90008e48230 [ 140.128465][ C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 140.128478][ C0] RBP: ffffc90008e48190 R08: ffffffff876acb23 R09: 1ffffffff0ed5964 [ 140.128494][ C0] R10: dffffc0000000000 R11: fffffbfff0ed5965 R12: 0000000000000680 [ 140.128510][ C0] R13: dffffc0000000000 R14: 1ffff920011c9038 R15: ffffc90008e48230 [ 140.128527][ C0] FS: 00007f8c7b22a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 140.128546][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.128562][ C0] CR2: ffffc90008e47eb8 CR3: 000000011eeb8000 CR4: 00000000003526b0 [ 140.128586][ C0] Call Trace: [ 140.128596][ C0] [ 140.128606][ C0] ? __kasan_check_read+0x15/0x20 [ 140.128638][ C0] ? static_key_count+0x45/0x70 [ 140.128656][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 140.128702][ C0] ? __cfi_gfp_zone+0x10/0x10 [ 140.128734][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 140.128758][ C0] ? unwind_next_frame+0x3c1/0x750 [ 140.128785][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 140.128803][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 140.128849][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 140.128874][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 140.128915][ C0] ? stack_depot_save_flags+0x672/0x800 [ 140.128946][ C0] ? stack_depot_save+0x12/0x20 [ 140.128965][ C0] ? save_stack+0x133/0x240 [ 140.128981][ C0] ? free_contig_range+0x260/0x260 [ 140.129023][ C0] ? __reset_page_owner+0x450/0x450 [ 140.129045][ C0] ? zone_page_state_add+0x43/0x90 [ 140.129063][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 140.129087][ C0] ? prep_new_page+0x2d/0x190 [ 140.129102][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 140.129121][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 140.129158][ C0] ? stack_depot_save_flags+0x672/0x800 [ 140.129186][ C0] ? kasan_save_track+0x4f/0x80 [ 140.129205][ C0] ? kasan_save_free_info+0x4a/0x60 [ 140.129235][ C0] ? __kasan_slab_free+0x5f/0x80 [ 140.129249][ C0] ? kfree+0x158/0x440 [ 140.129268][ C0] ? krealloc_noprof+0xfa/0x130 [ 140.129304][ C0] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 140.129363][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 140.129394][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 140.129427][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 140.129473][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 140.129514][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 140.129548][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 140.129571][ C0] ? sched_clock_noinstr+0xd/0x30 [ 140.129607][ C0] ? __set_page_owner+0x8e/0x600 [ 140.129629][ C0] ? __zone_watermark_ok+0x134/0x630 [ 140.129654][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 140.129681][ C0] ? kasan_unpoison+0x4a/0x70 [ 140.129703][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 140.129719][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 140.129735][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 140.129778][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 140.129800][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 140.129823][ C0] ? prep_new_page+0x2d/0x190 [ 140.129847][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 140.129884][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 140.129930][ C0] ? static_key_count+0x45/0x70 [ 140.129952][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 140.129986][ C0] ? lruvec_init+0x261/0x280 [ 140.130010][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 140.130029][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 140.130065][ C0] ? unwind_get_return_address+0x51/0x90 [ 140.130090][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 140.130111][ C0] ? arch_stack_walk+0x10a/0x170 [ 140.130146][ C0] ? stack_trace_save+0xaa/0x100 [ 140.130162][ C0] ? stack_depot_save_flags+0x672/0x800 [ 140.130184][ C0] ? kasan_save_track+0x4f/0x80 [ 140.130214][ C0] ? kasan_save_track+0x3e/0x80 [ 140.130233][ C0] ? kasan_save_free_info+0x4a/0x60 [ 140.130258][ C0] ? __kasan_slab_free+0x5f/0x80 [ 140.130279][ C0] ? kfree+0x158/0x440 [ 140.130302][ C0] ? krealloc_noprof+0xfa/0x130 [ 140.130323][ C0] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 140.130391][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 140.130420][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 140.130462][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 140.130487][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 140.130542][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 140.130574][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 140.130615][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 140.130657][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 140.130688][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 140.130707][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 140.130725][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 140.130754][ C0] ? do_syscall_64+0x57/0xf0 [ 140.130770][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.130810][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 140.130845][ C0] ? kasan_save_free_info+0x4a/0x60 [ 140.130871][ C0] ? __kasan_slab_free+0x5f/0x80 [ 140.130898][ C0] ? kfree+0x158/0x440 [ 140.130917][ C0] ? krealloc_noprof+0xfa/0x130 [ 140.130940][ C0] ? krealloc_noprof+0xfa/0x130 [ 140.130983][ C0] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 140.131045][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 140.131067][ C0] ? __cfi__RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x10/0x10 [ 140.131131][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 140.131178][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 140.131219][ C0] ? __kasan_check_write+0x18/0x20 [ 140.131239][ C0] ? _raw_spin_lock+0x92/0x120 [ 140.131275][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.131299][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1706/0x2660 [ 140.131332][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 140.131364][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 140.131382][ C0] ? __asan_memcpy+0x5a/0x80 [ 140.131428][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 140.131453][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 140.131480][ C0] ? __kasan_check_write+0x18/0x20 [ 140.131508][ C0] ? _raw_spin_lock+0x92/0x120 [ 140.131524][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.131541][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 140.131587][ C0] ? __asan_memcpy+0x5a/0x80 [ 140.131614][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 140.131655][ C0] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 140.131681][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 140.131700][ C0] ? __asan_memcpy+0x5a/0x80 [ 140.131742][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 140.131766][ C0] ? __kasan_check_write+0x18/0x20 [ 140.131793][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 140.131821][ C0] ? __kasan_check_write+0x18/0x20 [ 140.131841][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.131871][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 140.131923][ C0] ? __asan_memcpy+0x5a/0x80 [ 140.131955][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 140.131995][ C0] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 140.132033][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 140.132064][ C0] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 140.132113][ C0] ? __kasan_check_write+0x18/0x20 [ 140.132133][ C0] ? mutex_unlock+0x90/0x240 [ 140.132155][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 140.132198][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 140.132223][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 140.132262][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 140.132286][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 140.132306][ C0] ? update_curr+0x6c1/0x9e0 [ 140.132351][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 140.132371][ C0] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 140.132407][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 140.132421][ C0] ? __enqueue_entity+0x58a/0x630 [ 140.132445][ C0] ? __cgroup_account_cputime+0xa5/0xd0 [ 140.132479][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 140.132508][ C0] ? kernel_text_address+0xa9/0xe0 [ 140.132534][ C0] ? __kernel_text_address+0x11/0x40 [ 140.132562][ C0] ? __kasan_check_write+0x18/0x20 [ 140.132582][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 140.132600][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 140.132634][ C0] ? stack_trace_save+0xaa/0x100 [ 140.132655][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 140.132679][ C0] ? stack_depot_save_flags+0x399/0x800 [ 140.132713][ C0] ? kasan_save_track+0x4f/0x80 [ 140.132728][ C0] ? kasan_save_free_info+0x4a/0x60 [ 140.132747][ C0] ? __kasan_slab_free+0x5f/0x80 [ 140.132760][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 140.132803][ C0] ? audit_log_end+0x1f1/0x240 [ 140.132831][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 140.132865][ C0] ? security_binder_transfer_binder+0x54/0xf0 [ 140.132887][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x40e9/0x9130 [ 140.132939][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 140.132973][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 140.133019][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 140.133047][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 140.133069][ C0] ? do_syscall_64+0x57/0xf0 [ 140.133106][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.133135][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page9write_raw+0x1ef/0x3d0 [ 140.133171][ C0] ? __asan_memcpy+0x5a/0x80 [ 140.133191][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page9write_raw+0x1ef/0x3d0 [ 140.133210][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page9write_raw+0x10/0x10 [ 140.133246][ C0] ? __kasan_slab_free+0x6a/0x80 [ 140.133267][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 140.133295][ C0] ? __wake_up+0x169/0x190 [ 140.133318][ C0] ? audit_log_end+0x1f1/0x240 [ 140.133340][ C0] ? __kasan_check_read+0x15/0x20 [ 140.133360][ C0] ? __check_object_size+0x527/0x830 [ 140.133401][ C0] ? __cfi___check_object_size+0x10/0x10 [ 140.133430][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 140.133467][ C0] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 140.133491][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page24copy_from_user_slice_raw+0x34f/0x4f0 [ 140.133512][ C0] ? krealloc_noprof+0xfa/0x130 [ 140.133554][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 140.133583][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 140.133625][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 140.133653][ C0] ? _raw_spin_lock+0x92/0x120 [ 140.133669][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.133706][ C0] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 140.133736][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB2_10Allocation9copy_into+0x5dc/0x710 [ 140.133769][ C0] ? check_stack_object+0x12b/0x150 [ 140.133791][ C0] ? __check_object_size+0xe0/0x830 [ 140.133813][ C0] ? __cfi___check_object_size+0x10/0x10 [ 140.133855][ C0] ? __kasan_check_write+0x18/0x20 [ 140.133882][ C0] ? _copy_from_user+0x87/0xa0 [ 140.133907][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 140.133940][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 140.133971][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 140.134039][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 140.134114][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 140.134151][ C0] ? kernel_text_address+0xa9/0xe0 [ 140.134178][ C0] ? __kernel_text_address+0x11/0x40 [ 140.134202][ C0] ? unwind_get_return_address+0x51/0x90 [ 140.134231][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 140.134247][ C0] ? arch_stack_walk+0x10a/0x170 [ 140.134271][ C0] ? stack_depot_save_flags+0x38/0x800 [ 140.134311][ C0] ? kasan_save_track+0x4f/0x80 [ 140.134329][ C0] ? kasan_save_track+0x3e/0x80 [ 140.134347][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 140.134374][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 140.134392][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 140.134415][ C0] ? krealloc_noprof+0x8d/0x130 [ 140.134452][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x57f/0x32e0 [ 140.134485][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x7c0/0x2660 [ 140.134512][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x220e/0xaf80 [ 140.134548][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 140.134571][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 140.134585][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 140.134622][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 140.134650][ C0] ? do_syscall_64+0x57/0xf0 [ 140.134672][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.134701][ C0] ? __kasan_check_write+0x18/0x20 [ 140.134721][ C0] ? _raw_spin_lock+0x92/0x120 [ 140.134736][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.134773][ C0] ? __kasan_check_write+0x18/0x20 [ 140.134800][ C0] ? _RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0xc1/0x260 [ 140.134832][ C0] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 140.134854][ C0] ? _raw_spin_unlock+0x45/0x60 [ 140.134870][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 140.134910][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 140.134957][ C0] ? __kasan_check_write+0x18/0x20 [ 140.134989][ C0] ? mutex_unlock+0x90/0x240 [ 140.135008][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 140.135030][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 140.135066][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 140.135103][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 140.135161][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 140.135182][ C0] ? kernel_text_address+0xa9/0xe0 [ 140.135218][ C0] ? core_kernel_text+0x50/0xa0 [ 140.135242][ C0] ? unwind_get_return_address+0x51/0x90 [ 140.135265][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 140.135295][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 140.135319][ C0] ? krealloc_noprof+0x8d/0x130 [ 140.135354][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 140.135421][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xa2f/0x1290 [ 140.135465][ C0] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 140.135505][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 140.135533][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 140.135553][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 140.135589][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 140.135639][ C0] ? __asan_memset+0x39/0x50 [ 140.135681][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x2ff/0x850 [ 140.135747][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.135764][ C0] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10 [ 140.135833][ C0] ? __kasan_check_write+0x18/0x20 [ 140.135860][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 140.135897][ C0] ? __asan_memcpy+0x5a/0x80 [ 140.135925][ C0] ? avc_has_perm_noaudit+0x28a/0x360 [ 140.135957][ C0] ? avc_has_perm+0x155/0x240 [ 140.135988][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 140.136015][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 140.136042][ C0] ? __kasan_check_write+0x18/0x20 [ 140.136070][ C0] ? _raw_spin_lock+0x92/0x120 [ 140.136093][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 140.136128][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 140.136175][ C0] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 140.136224][ C0] ? __kasan_check_write+0x18/0x20 [ 140.136251][ C0] ? _raw_spin_lock+0x92/0x120 [ 140.136274][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.136297][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x155c/0xaf80 [ 140.136333][ C0] ? __asan_memcpy+0x5a/0x80 [ 140.136359][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 140.136411][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 140.136514][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 140.136544][ C0] ? kernel_text_address+0xa9/0xe0 [ 140.136569][ C0] ? __kernel_text_address+0x11/0x40 [ 140.136594][ C0] ? unwind_get_return_address+0x51/0x90 [ 140.136618][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 140.136641][ C0] ? arch_stack_walk+0x10a/0x170 [ 140.136674][ C0] ? stack_depot_save_flags+0x38/0x800 [ 140.136704][ C0] ? kasan_save_track+0x4f/0x80 [ 140.136722][ C0] ? kasan_save_track+0x3e/0x80 [ 140.136740][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 140.136766][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 140.136786][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 140.136815][ C0] ? krealloc_noprof+0x8d/0x130 [ 140.136843][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x914/0x1bb0 [ 140.136873][ C0] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 140.136928][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 140.136947][ C0] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 140.136992][ C0] ? __kasan_check_write+0x18/0x20 [ 140.137020][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x502/0xee0 [ 140.137056][ C0] ? __kasan_check_write+0x18/0x20 [ 140.137084][ C0] ? _raw_spin_lock+0x92/0x120 [ 140.137107][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.137130][ C0] ? _raw_spin_unlock+0x45/0x60 [ 140.137152][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x5ec/0x950 [ 140.137187][ C0] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 140.137223][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 140.137276][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 140.137328][ C0] ? __kasan_check_write+0x18/0x20 [ 140.137355][ C0] ? _raw_spin_lock+0x92/0x120 [ 140.137377][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.137400][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x125c/0x1bb0 [ 140.137430][ C0] ? __asan_memcpy+0x5a/0x80 [ 140.137458][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 140.137483][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x12e9/0x1bb0 [ 140.137517][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x10/0x10 [ 140.137545][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 140.137597][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 140.137646][ C0] ? __kasan_check_write+0x18/0x20 [ 140.137674][ C0] ? _raw_spin_lock+0x92/0x120 [ 140.137694][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.137716][ C0] ? _raw_spin_unlock+0x45/0x60 [ 140.137737][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 140.137761][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 140.137800][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 140.137843][ C0] ? __kasan_check_write+0x18/0x20 [ 140.137871][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 140.137933][ C0] ? avc_has_perm+0x155/0x240 [ 140.137964][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 140.137992][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 140.138021][ C0] ? __kasan_check_write+0x18/0x20 [ 140.138048][ C0] ? _raw_spin_lock+0x92/0x120 [ 140.138071][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.138093][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0xb14/0x1030 [ 140.138158][ C0] ? __asan_memcpy+0x5a/0x80 [ 140.138188][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0xd14/0x1030 [ 140.138226][ C0] ? __kernel_text_address+0x11/0x40 [ 140.138255][ C0] ? stack_trace_save+0xaa/0x100 [ 140.138277][ C0] ? __kasan_check_write+0x18/0x20 [ 140.138306][ C0] ? _raw_spin_lock+0x92/0x120 [ 140.138330][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 140.138360][ C0] ? __asan_memcpy+0x5a/0x80 [ 140.138388][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 140.138420][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 140.138445][ C0] ? _raw_spin_unlock+0x45/0x60 [ 140.138467][ C0] ? call_rcu_nocb+0x6d7/0xc80 [ 140.138493][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 140.138526][ C0] ? swake_up_one_online_ipi+0x30/0x30 [ 140.138554][ C0] ? __cfi_mt_free_rcu+0x10/0x10 [ 140.138581][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 140.138609][ C0] ? kernel_text_address+0xa9/0xe0 [ 140.138633][ C0] ? __kernel_text_address+0x11/0x40 [ 140.138658][ C0] ? unwind_get_return_address+0x51/0x90 [ 140.138682][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 140.138704][ C0] ? arch_stack_walk+0x10a/0x170 [ 140.138737][ C0] ? stack_trace_save+0xaa/0x100 [ 140.138758][ C0] ? stack_depot_save_flags+0x38/0x800 [ 140.138790][ C0] ? kasan_save_track+0x4f/0x80 [ 140.138808][ C0] ? kasan_save_track+0x3e/0x80 [ 140.138826][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 140.138853][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 140.138873][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 140.138914][ C0] ? krealloc_noprof+0x8d/0x130 [ 140.138945][ C0] ? kvrealloc_noprof+0x59/0x120 [ 140.138974][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_mmap+0x78b/0x11f0 [ 140.139006][ C0] ? mmap_region+0x1579/0x1d60 [ 140.139034][ C0] ? do_mmap+0xb85/0x13c0 [ 140.139061][ C0] ? vm_mmap_pgoff+0x36e/0x4b0 [ 140.139094][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 140.139116][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 140.139137][ C0] ? __kernel_text_address+0x11/0x40 [ 140.139163][ C0] ? unwind_get_return_address+0x51/0x90 [ 140.139188][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 140.139211][ C0] ? __cgroup_account_cputime+0xa5/0xd0 [ 140.139232][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 140.139259][ C0] ? update_curr+0x50c/0x9e0 [ 140.139290][ C0] ? update_load_avg+0x506/0x1990 [ 140.139313][ C0] ? __calc_delta+0x280/0x280 [ 140.139342][ C0] ? __kasan_record_aux_stack+0xb2/0xd0 [ 140.139371][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 140.139401][ C0] ? update_load_avg+0x506/0x1990 [ 140.139426][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 140.139468][ C0] ? __kasan_check_read+0x15/0x20 [ 140.139513][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 140.139541][ C0] ? xfd_validate_state+0x68/0x140 [ 140.139570][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 140.139591][ C0] ? __kasan_check_write+0x18/0x20 [ 140.139618][ C0] ? __switch_to+0xc4f/0x1300 [ 140.139650][ C0] ? __cfi___switch_to+0x10/0x10 [ 140.139670][ C0] ? psi_task_switch+0x59e/0xa10 [ 140.139717][ C0] ? _raw_spin_unlock+0x45/0x60 [ 140.139741][ C0] ? finish_task_switch+0x139/0x760 [ 140.139764][ C0] ? __switch_to_asm+0x3d/0x70 [ 140.139797][ C0] ? __schedule+0x13a1/0x1fa0 [ 140.139816][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 140.139840][ C0] ? __asan_memcpy+0x5a/0x80 [ 140.139883][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 140.139920][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 140.139948][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 140.139962][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 140.139978][ C0] ? schedule+0xc5/0x240 [ 140.140011][ C0] ? futex_unqueue+0x136/0x160 [ 140.140041][ C0] ? ioctl_has_perm+0x39a/0x500 [ 140.140067][ C0] ? __kasan_check_read+0x15/0x20 [ 140.140097][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 140.140117][ C0] ? futex_wait+0x2ac/0x7b0 [ 140.140138][ C0] ? __cfi_futex_wait+0x10/0x10 [ 140.140181][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 140.140207][ C0] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 140.140251][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 140.140270][ C0] ? do_futex+0x32a/0x510 [ 140.140288][ C0] ? __cfi_do_futex+0x10/0x10 [ 140.140321][ C0] ? vm_mmap_pgoff+0x153/0x4b0 [ 140.140350][ C0] ? __fget_files+0x2c5/0x340 [ 140.140368][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 140.140394][ C0] ? security_file_ioctl+0x3e/0x110 [ 140.140412][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 140.140434][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 140.140462][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 140.140482][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 140.140509][ C0] ? do_syscall_64+0x57/0xf0 [ 140.140530][ C0] ? clear_bhb_loop+0x50/0xa0 [ 140.140555][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.140575][ C0] [ 140.140580][ C0] Modules linked in: [ 140.140611][ C0] ---[ end trace 0000000000000000 ]--- [ 140.140626][ C0] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 140.140654][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 140.140671][ C0] RSP: 0018:ffffc90008e47ec0 EFLAGS: 00010286 [ 140.140693][ C0] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc90008e48230 [ 140.140703][ C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 140.140712][ C0] RBP: ffffc90008e48190 R08: ffffffff876acb23 R09: 1ffffffff0ed5964 [ 140.140723][ C0] R10: dffffc0000000000 R11: fffffbfff0ed5965 R12: 0000000000000680 [ 140.140734][ C0] R13: dffffc0000000000 R14: 1ffff920011c9038 R15: ffffc90008e48230 [ 140.140745][ C0] FS: 00007f8c7b22a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 140.140777][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.140792][ C0] CR2: ffffc90008e47eb8 CR3: 000000011eeb8000 CR4: 00000000003526b0 [ 140.140815][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 140.141378][ C0] Kernel Offset: disabled