last executing test programs: 1m25.948279635s ago: executing program 1 (id=104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 1m25.948010465s ago: executing program 1 (id=105): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0xfffffffe, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)={0x1, {{0xa, 0x4e20, 0x1, @mcast2, 0x3}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}]}, 0x110) r1 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r1, &(0x7f0000000000), 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) sendto$packet(r2, &(0x7f0000000140)="7d6e04060da13ddc47e1f31c71b8ad08c53f7239988c06d6212534b2cca00b7730281b20e929c354618c84a038ff6af631ff6af91e19535969f8e118e0e3b7bab7cfba153007cd4610b3f5fb4cc87883c6f3a746f4f64692ddfb44fe3a902703dcf21fbe0d680dc548e10743a55834778c92d578d7be65f086b8e77117d34e8808d4505ec5050b8ed8aab08213cf200c3ed628548a33622999da4cb9ef48ddaa99a268b88837935dabf177d2d7b6594560d88f9848cc0b6354aa055f19d68e6b75f2db3107eded9e596069f85e55521e", 0xd0, 0x10, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0xfffffffe, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)={0x1, {{0xa, 0x4e20, 0x1, @mcast2, 0x3}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}]}, 0x110) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) writev(r1, &(0x7f0000000000), 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) (async) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) (async) sendto$packet(r2, &(0x7f0000000140)="7d6e04060da13ddc47e1f31c71b8ad08c53f7239988c06d6212534b2cca00b7730281b20e929c354618c84a038ff6af631ff6af91e19535969f8e118e0e3b7bab7cfba153007cd4610b3f5fb4cc87883c6f3a746f4f64692ddfb44fe3a902703dcf21fbe0d680dc548e10743a55834778c92d578d7be65f086b8e77117d34e8808d4505ec5050b8ed8aab08213cf200c3ed628548a33622999da4cb9ef48ddaa99a268b88837935dabf177d2d7b6594560d88f9848cc0b6354aa055f19d68e6b75f2db3107eded9e596069f85e55521e", 0xd0, 0x10, 0x0, 0x0) (async) 1m25.937453776s ago: executing program 1 (id=106): openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x20900, 0x16a, 0x19}, 0x31) (async, rerun: 32) r0 = socket$inet6(0x10, 0x3, 0x0) (rerun: 32) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6c4) close(r1) (async, rerun: 32) execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000103c0)={[&(0x7f0000010340)='\x01', &(0x7f0000010380)=':4{@@$)\\\x00']}) (rerun: 32) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe000000802dca8a9848a3c728f1c46b7b311338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade0000", 0x55}], 0x1}, 0x0) 1m25.878739209s ago: executing program 1 (id=107): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) r2 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, "ded1f6ac277ef70df7c692a39418899f2193ff5fba90dd95cc9443619de3111f", 0x5, 0x960, 0xa153, 0x10}, 0xfffffffffffffce8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x40, @remote}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setsig(0x4203, r4, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) 1m25.816267472s ago: executing program 1 (id=108): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r0}, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x8) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(r3, r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r4, 0xd, 0x0, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = fcntl$dupfd(r5, 0x406, r5) r7 = eventfd2(0x9, 0x800) io_submit(r2, 0x8, &(0x7f0000002880)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0xab, r1, &(0x7f0000000280)="71f84b030e6f6997a439dcaf5fa385d47be013888a869a", 0x17, 0x8, 0x0, 0x1}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0xe, r6, &(0x7f0000001340)="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", 0x1000, 0x1, 0x0, 0x1}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0xd96, r6, &(0x7f0000002380)="d835ce685df9095d1bf5ea7aed7d72992e246c59", 0x14, 0x1, 0x0, 0x3, r7}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x3, 0xc, r5, &(0x7f0000002400)="4827de4b75361fe0effddf68e1e8563822ad1ea91f44a0889b08caf5e9e9efc63ec935d1eb5512a2e0ed1b979404b5619752c2b53d979e794534cf8ece1a37ed3611c204e5c84f123c1cac4299dadffb360165df9c123ad0e27ee95887dba4c49e681b6265992b42f800384afb7a9f49910f1b0e62038f4bb7ad4c44a690edcbdffa372cb711ce3990be2e20fb3a1e0031286efaf624c3e5076791bc90f10a85ca3a600605c30198fd878d47d22a2ea4f7f0f1cdb510ce9c1ca59d999ec3933674dbaed20c12ebd027e116b0", 0xcc, 0x1000, 0x0, 0x1, r6}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x8, 0xd, 0xffffffffffffffff, &(0x7f0000002540)="666ec18ff341812bea16a24f246e180e1a1eadf661c258057476a9e559c89cc6589d2f036af580965e4f0edaed641ed10e5630842ddc2510349e564bc155097ce5d418f9bad836", 0x47, 0x4, 0x0, 0x3, r6}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x6, 0xf6, r1, &(0x7f0000002600)="d2cf0aea7b6840cfd8747f666311a44bc37cd01ea830d8c4e37c668de24f8f23ffba5829e9db129eb4639791d093131c7923616498c32aa5d262d01d32bb456b351e3b4654046561958171b3a4b04675fbaf17eda20f8d52bbc3d9203e8475c273e43bfc55635c1a1717a625", 0x6c, 0xfffffffffffffff2, 0x0, 0x2}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x6, 0xe, r1, &(0x7f00000026c0)="0b2b69fbf07d72cdcf49a2b038125fc73a1704894b8dbf74b7504dbbbe2ddf1627bf4bf735a00f62018078f6e08dab1eed95ae553704e5343f1ca04e2fb4e20b92a2ad341a4314a2f250b8b158ced162b2dda89928905a0c76ac4e705d4ed913c734bfbb7d2158e08b41fb0e21c067ca5b5bcc38f871386310602f870da289f5ad749f6642999e5047b60ec861996dbb6cf4702616", 0x95, 0x3, 0x0, 0x2}, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x2, 0xff, r1, &(0x7f00000027c0)="bd7c4d548743803ed59fbc12adda2701a16f8f41ad276728bbdc9f4c81dcbf133e3fb69d306dda5fc03a6bc3abd3a897309a606c8dc7600ee97234eb3be917b9e79250fee5af05719e14", 0x4a, 0x100000000, 0x0, 0x3, r6}]) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) socket(0x10, 0x2, 0x172b) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x6}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x5}}}}}}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f7f84852f20f112d00080000700031000"], 0x3, [{0x0, 0x0}, {0xffd9, 0x0}, {0x0, 0x0}]}) 1m25.752816585s ago: executing program 1 (id=109): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="a5000000", @ANYRES16, @ANYBLOB="000126bd7000fcdbdf250700000008000100740000000c009900040000000f0000000a00180003030303030300001c00e700c7d4d3ab6cce8600706bb940e835d4fdf56b724def14b1491800178004000500040004"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4(r1, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02001300000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000024000d"], 0xb8}, 0x1, 0x0, 0x0, 0x10000}, 0x0) 1m25.723100587s ago: executing program 32 (id=109): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="a5000000", @ANYRES16, @ANYBLOB="000126bd7000fcdbdf250700000008000100740000000c009900040000000f0000000a00180003030303030300001c00e700c7d4d3ab6cce8600706bb940e835d4fdf56b724def14b1491800178004000500040004"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4(r1, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02001300000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000024000d"], 0xb8}, 0x1, 0x0, 0x0, 0x10000}, 0x0) 10.823492467s ago: executing program 4 (id=590): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599}) 9.59634828s ago: executing program 4 (id=594): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x80}, 0x24000810) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2400000002030101000000000007000000000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x6ae2ee1832508d96) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8881}, 0x20000000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0]) read$FUSE(r2, &(0x7f0000002580)={0x2020}, 0x6d) ppoll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0xf}, 0xc, 0x61, &(0x7f0000000180)="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", 0xfe, 0x200, 0x9, 0x24, 0x7, 0x4, &(0x7f00000002c0)="77470d893c9de3b7ca", [{0x0, 0x800, 0x7}, {0x34eb6162, 0x83, 0x8ee}, {0x9, 0xffff9e0c, 0x1ff}, {0x42, 0x3, 0xfffffff7}, {0x0, 0x80000001, 0x7}, {0x1ff, 0x2, 0xc}, {0x10000, 0x9}, {0xffffffff, 0x5, 0x7}, {0x9, 0x7, 0x8}, {0x3, 0x1, 0xfffff001}, {0x6, 0x9, 0x10001}, {0xf, 0x40000a26, 0x10}, {0x7f, 0x94, 0x1eb5}, {0x3, 0x1, 0x7}, {0x403, 0x8, 0x2}, {0x5, 0x4, 0x9}, {0x1000, 0x8000, 0x10001}, {0xffff5b28, 0x432, 0x6}, {0x0, 0x1fdee5b6, 0x9}, {0x9, 0x2, 0xaa8}, {0x7, 0x4, 0x1c}, {0x4, 0x3, 0x9}, {0x3, 0x5, 0x8}, {0x3b, 0x80, 0x3}, {0x100, 0x8, 0x4}, {0x3, 0x3, 0x6fa8}, {0x6, 0x960, 0x8}, {0x4, 0x8, 0x2}, {0x0, 0x7, 0xe}, {0x4, 0xde}, {0x7fffffff, 0x8, 0xca64}, {0x7ff, 0x3, 0x4}, {0x80, 0x4e83f27e, 0x3}, {0x8, 0x5, 0x3}, {0x3, 0x8ee5, 0xc1}, {0x2, 0x3, 0x80}]}) 8.787561621s ago: executing program 4 (id=598): r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet(0x2, 0x1, 0x0) (async) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x14008000}, 0x4840) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, &(0x7f0000000200)={0x3, 0x1}) (async) socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x7, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x2b, 0x7, 0x1, 0x0, "b8d4055aaac77be9a0e1a3268d32b62f98b023b107f1eecde781fb0eb0da3debc1d81769b046ed"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x44099}, 0x8880) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x309, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x5, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x19, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000680)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="000a29000000290e62dcd6291176b167ab2243e9ec5ed38c6e2b4fee4ea74328c31d71cd62144126c7726c79b4dca2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.664242938s ago: executing program 4 (id=599): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x4, r2}, 0x10) mount$tmpfs(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x4, r2}, 0x10) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x20, 0x0) (async) 8.575732902s ago: executing program 4 (id=600): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.553785293s ago: executing program 4 (id=601): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d07, &(0x7f0000000000)={0xfffffffe, 0xc}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000480)={[{@huge_never}]}) 8.505800456s ago: executing program 33 (id=601): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d07, &(0x7f0000000000)={0xfffffffe, 0xc}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000480)={[{@huge_never}]}) 7.870570068s ago: executing program 5 (id=602): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2202, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='unlock i'], 0xe) syz_usb_connect$midi(0x0, 0x2b, &(0x7f0000002540)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x4, 0x10, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x4, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x7f, 0x0, [], 0xfd}]}}}}}]}}, &(0x7f0000002840)={0x0, 0x0, 0x5, &(0x7f0000002680)={0x5, 0xf, 0x5}}) write$vga_arbiter(r0, &(0x7f0000000040), 0xf) 6.64923928s ago: executing program 5 (id=610): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000300)={0x14, &(0x7f00000006c0)={0x40, 0x23, 0x55, {0x55, 0xe, "00000000003a399f9412c47e094f4034a4f1ac22e28dadd70a6714c8d8a339e727d4e2235ab46a40e13fc75723953c0a0000004201000000827558ad22f7d819a8aeff030000d3d9f3a30534ee9a71494d2f93"}}, 0x0}, 0x0) 3.973810417s ago: executing program 3 (id=635): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x5ef5c000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000131000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000440)="c1bd09006e66b9b00000400f32660f38dc40f5b898000f00d866b8000000000f23d80f21f86635800000c00f23f82e0f35bad104ec0f6a0366b80500000066b9080000000f01c1b848008ee8", 0x4c}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) r6 = socket(0x11, 0x3, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) bind$packet(r6, &(0x7f0000000280)={0x11, 0xc, r9, 0x1, 0x11, 0x6, @local}, 0x14) 3.91659985s ago: executing program 3 (id=636): connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x3000000, @mcast2, 0x6}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.576436638s ago: executing program 5 (id=639): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4c, 0x2565}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001600010000000000000000000a00002c"], 0x20}}, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103", @ANYRES32], 0x0) 3.071131683s ago: executing program 3 (id=642): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f0000000100)={0x5, 0xffffffffffffffff, 0x1}) userfaultfd(0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast1, @multicast2, 0xffffffffffffffff, "95e16079468f28572351a919287decaaa334f5115dc4babb37f367e003821ca5", 0x0, 0x9, 0x9, 0x100}, 0x3c) bind$xdp(r0, &(0x7f0000000380)={0x2c, 0x2, 0x0, 0x800000}, 0x10) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904"], 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fc00000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24000845}, 0x40804) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) close(0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x64, r7, 0xa1fe24aae352b561, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4881}, 0x8880) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac3(0x0, 0x9c, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x26, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x2, 0x6, 0x2, 0x8002, 0x7, 0x10, 0x2}, @processing_unit={0x9, 0x24, 0x9, 0x2, 0x2, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xd, 0xb, {0xa, 0x25, 0x25, 0x401, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x5, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f0000000140)=@ethtool_modinfo={0x42, 0x1ff}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 2.842724735s ago: executing program 2 (id=644): r0 = open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'ip6tnl0\x00', {0x300}, 0x4b5e}) 2.74973806s ago: executing program 2 (id=645): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[{0x408, 0x1, 0x1, "62e1cf6111809460d79d98166e0894b9dd9be9395ddcb9aeb3d2ba29ddbef3493eb04f7b5e7d41c1440e4d3e76e06dcb279473c858a477abd89249670e258e88bd68e9955963557fdef8e94a34bf76126c3ebd3765c5a83955ea3ec2f549098b104d261b9c0f4def2249970af216ba4eca729bca1dddf06efb5d96db9acbe6d061aee4234cb09d5b02764dd1782f677f42be18722957f39e40afcb0bffd0a77a9ff46216462be4f27aacfefb754fa1e9b9922dc19dcd178849c2b96f075d1541d39d103d92c7153791f9653db140e631e6c006338235225be2c4c99eb14c68db1b6f840600c8a3ee9f6e1b5ac973b14f79141326e3520e368ca262a89fd22ab67ba0b4399304c37bb18756865f6d738162f778015dc09465667be08079e64ddd96d694531996207694039c0b265d7f7ae26746d7082c87889f60603143df207c4a7b87eea1118ff818c50e33a54a107985abdc860d65d7f92a0eeb3889d0647f2bb491e0b9fd77c6f5ec60b2d555017919e02e80fa0cfcadf878721b668f5240d819ed26b9ea263edf4a4dfebde53c87ff6c79ba12bf568ece8f85efe65b50edbc7bc3f9e4205a6a1e714edf7559d1d3c36efd88ba18ad9a4f006b7aa3fe8838129403cc4bae437ccfc0dbc1b7a625a7f48ae50b81a5e1553ae36d2287aad7f1223fdbd3a07e8d8bb5fdcce40a743629cc2c74075a1eaa7833872d5361cfeea1882e36a40272fcaac337b3956d321ec232854efc1b573138bd17fe5a38169cb10fe975521085394af6115a90703f6b24bc2af0c6e4249c13ef465611927f56511c9ab11f205ac6f64e73973d6c0a3875e00189584fba531cf6c931572791e7735a550ced06a2c6ae96c3245a401e89411b14eeeebc73ac2b99af153d71c99e3f29685b8dfd3ccd40bc45b7e8fcd45b79d44ce145ca3195ffd129b15b234c6dfaf0e801d31d683f3486b8d9b9af5c6ebd2b79b329be8d59b0545c3343297ee5e221ea8999980807d0e3e70a5e905d4d53abae5f20a93b1c3fda659c768d9e778755d9ae31bb1f01e3cb88b5e552ef2919b03bb2042a931dce3b8108ccb5b1eed51e2f42ba323f1024243183a2a202b8a733b5f0d3711afb466d7ca6bbf28273f26043c2e0c4308fc3312354b09b1e488372151df88732e01b0fc0af0cdcd91b87934030f18f87133b810ba1208443cfd0652fc195712e915399b01c361096c0b315943b1d5c123505a34c5091c59a124a6ad2566aad9a072d2a77449e418dfb2018b0680784dce9402f35bb3b9bf04381a76f3f63ba85c46da11d77fbc81d51a5f55c3b83575a2aaec4df5c57a534c5f3a6cc6e0f39f4616a4372f0638914dc9971bc596d2636544e9cb40f09982bf7fec24f6a84a694b60048550371ede29e256d99d5190ad07afc8a2763595bca2676f3"}], 0x408}}], 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xac000, 0x10) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000064000100000000020000000008000000", @ANYRES32=r5], 0x30}], 0x1}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x1126272c, r1, 'id0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 2.445192866s ago: executing program 5 (id=646): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="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", 0x1f0}], 0x1}, 0x20000090) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x38, 0x0, &(0x7f0000000080)) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101081, 0x0) fremovexattr(r2, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x600}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.372453939s ago: executing program 5 (id=647): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = dup(r1) write$binfmt_elf32(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c464a030103ff07000000000000020003"], 0x58) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$cgroup_pressure(r0, &(0x7f0000000240)='cpu.pressure\x00', 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="76f80aabb27f89cae70a"]) r4 = socket(0x11, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) readv(r5, &(0x7f0000000480)=[{&(0x7f0000001940)=""/4104, 0x1008}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, 0xffffffffffffffff, 0x0) splice(r6, 0x0, r8, 0x0, 0x7151, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000480)={@local, @empty, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="d8010000210b00012bbd7000fddbdf25ff010000000000000000000000000001000000000000000000000000000000004e2000074eec3400000030b03b000000d01dc8c7d38d750cdd1ccb60441bd7d4292fe913c2c8885eb6fe0b64453de58f1ab5201e8c9d3c32f89b8420574a0f2e7e924767738797f624987e4399cf682007d9b3eec2d7c22441977de5d63b0baa7f2474b4d044836854d11d3230ba04", @ANYRES32=r11, @ANYRES32=r13, @ANYRESHEX=r12, @ANYRES32=r14, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000004d6330000000a0101010000000000000000000000008000000000000000010000000000000005000000000000000100010000000000b356000000000000aa00000000000000050000000000000006000000000000000600000000000000b000000000000000030000000000000000000000080008008000000004000000080000002abd700006350000020001091800000000000000"], 0x1d8}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PPPIOCSMAXCID(r10, 0x40047451, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000280)) syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505072404", @ANYRES16=r3], 0x0) 2.108358253s ago: executing program 2 (id=650): connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x3000000, @mcast2, 0x6}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.608551028s ago: executing program 0 (id=653): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000011c0)=0x1) (async) mount$bpf(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x800000, &(0x7f0000006240)={[{}]}) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x400c1, 0x40) (async, rerun: 64) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) move_mount(r1, &(0x7f0000000040)='./cgroup\x00', r2, &(0x7f0000000140)='./cgroup\x00', 0x1) 1.595241649s ago: executing program 0 (id=654): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0000000210001000400000000000000fc020000000000000000000000000001ff02000000000000000000000000000100000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc000000000000000000000000000001fc010000000000000000000000000000fc020000000000000000000000000c01e00000010000000000000000000000003c040000000000000a000a00bc1af9c8fc5160282f608e3d19b295f225d69000e4313b52f9230ac71758ffec4872b033a30c5594df36c615e3a6db1d6ec70d7342f472fd92"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="200000006a001f03000000000000000008000000", @ANYRES32, @ANYBLOB="080005"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r2, 0x5402, 0x0) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$FUSE(r4, 0x0, 0x0) read$watch_queue(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x9}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xa, 0xfffffff7, 0x7, 0x0, 0x6, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10, 0x0, 0x8001786}]}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r7) getgroups(0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff]) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100257a7900ffdbdf2502000000180001801200010069623a76657468315f766c616ed9"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = syz_open_procfs(r6, &(0x7f0000000080)='timerslack_ns\x00') preadv(r13, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x3, 0x7, 0x4) 1.476508635s ago: executing program 0 (id=655): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) madvise(&(0x7f0000c01000/0x2000)=nil, 0x2000, 0x4) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4a1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/net\x00') ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000640)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'netpci0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0xbdc, 0x3) write$tun(r2, &(0x7f0000000680)=ANY=[@ANYRESOCT=r0, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="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"], 0x41e) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x7fff}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xc53}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000240)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x110, 0xffffffffffffffff, 0x4000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000005c0)={0x2, &(0x7f0000000480)=[{}, {@none}]}) signalfd(r4, &(0x7f0000000180)={[0x3fe]}, 0x8) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x10000000100000b, 0x40000000, 0x1, 0x4000000000000002, 0xa, 0x8000000000, 0x80000000000000, 0x53, 0x0, 0x8, 0x0, 0x5, 0x6, 0x1000000000018, 0x1ff], 0xeeee0000, 0x89340}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.37656745s ago: executing program 3 (id=656): socket(0x18, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @local, 0x1, 0x6, 0x0, 0x800, 0x4, 0x2080005, r1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="29a2b5e7e2fd35b3d2ff72c8da99aed1", 0x10) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x16}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001, 0x7, 0x0, 0x0, 0x0, 0x110022, r1}) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x16}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000001, 0x7, 0x0, 0x0, 0x0, 0x110022, r1}) 1.37635209s ago: executing program 3 (id=657): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201500000000010d90481a000000000000109022400010000000009040100010300000009210000000122080009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x3, 0xee, "a293c1562117a8b10d9a9f2e4f47af9b4c58c6c9abb756f71ca3b8591c8c70a344965751da2968aeb1606d3b31fdb431995d1fd99a940d5e5dcaa0ca8047a9495195b5baf35ea9aa1f2319e840c26eb56413ba7f0c2ca589ebaab4e5b8107c02a27cb4faf2978582ee37f452eb47a082c38e9b90d59b6c34f766fe5b99fd43bd86fed3188afd1701fdc729ca8a9b746fa086e1c48cf30f8dfed9851e5972dcce3985441ca15f436ab858cd0a0c95a671b33d42a47deadeec725bd4631436f0e59c0c95acbaf407c2096ebfef3ae6e55aa1aa2b02668b1234962f90ebf1a45d7e4084ffda728c7fcf48633177cbad"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x13}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x1, 0x5a, "dfa58823a1cfcbadb7f8a2f6213f8b09fba4e821300eab72be9e0eda0e55dc3d859db902acb0c696df1218be4833c88e31df44b906b7343c4f47468c8c9e767210496f6553a5f3a832aaef6795fae3c158f59aca5c2a32b20384"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x52}}) 1.316207263s ago: executing program 0 (id=658): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000080)="f6c9e32ae40f4dc0815fd0d897079a161cfb7702311e629acda76933ddd0c24165eb4d4d", 0x24}], 0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000080)="f6c9e32ae40f4dc0815fd0d897079a161cfb7702311e629acda76933ddd0c24165eb4d4d", 0x24}], 0x2, 0x0, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) (async) ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff) (async) 1.276086495s ago: executing program 0 (id=659): socket$can_raw(0x1d, 0x3, 0x1) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r3, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0xdb33}], 0x1, 0x40002042, 0x0) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x1, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2}, {0x4, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x4}}, {{0x3, 0x0, 0x1}, {0x3, 0x1}}, {{0x2}, {0x0, 0x0, 0x0, 0x1}}, {{0x3}, {0x0, 0x1, 0x1, 0x1}}, {{0x4}, {0x4, 0x1, 0x1}}], 0x50) setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4ca4, 0x78a2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89b1, &(0x7f0000000200)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}) 1.161109791s ago: executing program 2 (id=660): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0xe6}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_b']) chdir(&(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0x80000000) syz_usb_connect(0x0, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x1, 0x35, 0xe3, 0x1, 0x40, 0xeef, 0x1, 0x5a83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x3, 0xf7, 0xf7, 0x20, 0xd, "", [{{0x9, 0x4, 0x56, 0x1, 0x2, 0x3, 0x65, 0xc9, 0x60, [], [{{0x9, 0x5, 0x1, 0x3, 0x8, 0xc, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x5, 0x58}}]}}, {{0x9, 0x4, 0x9b, 0x6, 0x2, 0xff, 0xff, 0xff, 0x16, [], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x0, 0xfc, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x45, 0x1, 0x9}}]}}, {{0x9, 0x4, 0x3a, 0xf9, 0x0, 0xff, 0x2, 0x4, 0x6}}]}}]}}, 0x0) 1.024429248s ago: executing program 0 (id=661): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000140001032dbd7000fcdbdf250b00000008000100", @ANYRES32=r0], 0x1c}}, 0x0) setresuid(0xee00, 0x0, 0x0) keyctl$session_to_parent(0x12) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r1, 0x9c, 0x0, 0x0, r1) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10afe1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r3, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x2, 0x11, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc20d81a8ca55ba139c01802c4dae4162e43acff03ad02", [0x8000000000000002, 0x7]}}) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xa67, 0x5011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x20, 0xf, 0xd7, 0x2, {0x5, 0x25, 0x1, 0x1, '\''}}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x6d, 0xf7, 0x80, {0x5, 0x25, 0x1, 0x1, ':'}}}]}}}}}]}}, &(0x7f0000000000)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f0800010310"]}) 580.968681ms ago: executing program 2 (id=662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf2501000000000000000b000500000000146272"], 0x30}}, 0x8040) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x6) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xfa, 0x4, 0x1, '\x00', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 479.870126ms ago: executing program 2 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0x0) 0s ago: executing program 3 (id=664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@flat=@weak_handle, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x401, 0x1000000}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r4, &(0x7f0000000380)={0x2c, 0x4, 0x0, 0x800000}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0x3, 0x3cb}, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f0000000140)=@ethtool_modinfo={0x42, 0x1ff}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x1d, r4, 0x27cd7000) kernel console output (not intermixed with test programs): n available UDC or it's busy [ 68.888685][ T1192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.898844][ T1198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.914940][ T1192] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.914940][ T1198] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.939153][ T36] audit: type=1400 audit(1793897315.461:350): avc: denied { read } for pid=1191 comm="syz.3.287" path="socket:[11175]" dev="sockfs" ino=11175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.017496][ T316] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 69.038618][ T316] usb 3-1: device descriptor read/8, error -71 [ 69.058875][ T792] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 69.168558][ T316] usb 3-1: device descriptor read/8, error -71 [ 69.394149][ T36] audit: type=1400 audit(1793897315.911:351): avc: denied { setopt } for pid=1202 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.407495][ T316] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 69.415704][ T36] audit: type=1400 audit(1793897315.931:352): avc: denied { write } for pid=1202 comm="syz.4.291" path="socket:[11246]" dev="sockfs" ino=11246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.448534][ T316] usb 3-1: device descriptor read/8, error -71 [ 69.579002][ T316] usb 3-1: device descriptor read/8, error -71 [ 69.599251][ T36] audit: type=1400 audit(1793897316.121:353): avc: denied { create } for pid=1209 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 69.619760][ T36] audit: type=1400 audit(1793897316.121:354): avc: denied { write } for pid=1209 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 69.697659][ T316] usb usb3-port1: unable to enumerate USB device [ 69.867408][ T792] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 70.017458][ T792] usb 5-1: Using ep0 maxpacket: 16 [ 70.023810][ T792] usb 5-1: config index 0 descriptor too short (expected 52, got 36) [ 70.032223][ T792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.043882][ T792] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 70.053097][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.061229][ T792] usb 5-1: Product: syz [ 70.065582][ T792] usb 5-1: Manufacturer: syz [ 70.070224][ T792] usb 5-1: SerialNumber: syz [ 70.075814][ T792] usb 5-1: config 0 descriptor?? [ 70.082022][ T792] asix 5-1:0.0: probe with driver asix failed with error -22 [ 70.283235][ T316] usb 5-1: USB disconnect, device number 24 [ 70.977467][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 71.128546][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 71.138399][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 71.148158][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 71.157860][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 71.168871][ T31] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 71.178112][ T792] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 71.185704][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.193795][ T31] usb 1-1: Product: syz [ 71.197420][ T347] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 71.198155][ T31] usb 1-1: Manufacturer: syz [ 71.210252][ T31] usb 1-1: SerialNumber: syz [ 71.215601][ T31] usb 1-1: config 0 descriptor?? [ 71.222323][ T31] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 71.347421][ T347] usb 3-1: Using ep0 maxpacket: 32 [ 71.353697][ T347] usb 3-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 71.366397][ T347] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 71.368525][ T792] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 71.375552][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.388280][ T792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.395817][ T347] usb 3-1: Product: syz [ 71.395837][ T347] usb 3-1: Manufacturer: syz [ 71.395853][ T347] usb 3-1: SerialNumber: syz [ 71.396628][ T347] usb 3-1: config 0 descriptor?? [ 71.406482][ T792] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 71.412914][ T347] usb 3-1: bad CDC descriptors [ 71.416586][ T792] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 71.419629][ T347] usb 3-1: unsupported MDLM descriptors [ 71.426612][ T1228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.466038][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.474163][ T792] usb 5-1: Product: syz [ 71.478709][ T1228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.486599][ T792] usb 5-1: Manufacturer: syz [ 71.491274][ T792] usb 5-1: SerialNumber: syz [ 71.496677][ T792] usb 5-1: config 0 descriptor?? [ 71.509586][ T792] usb-storage 5-1:0.0: USB Mass Storage device detected [ 71.518975][ T792] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 71.527402][ T31] scsi host1: usb-storage 1-1:0.0 [ 71.536242][ T31] usb 1-1: USB disconnect, device number 26 [ 71.543578][ T319] usb 4-1: string descriptor 0 read error: -71 [ 71.549876][ T319] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 71.560338][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.581034][ T319] usb 4-1: can't set config #1, error -71 [ 71.587999][ T319] usb 4-1: USB disconnect, device number 27 [ 71.716497][ T1237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.725971][ T1237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.871682][ T347] usb 5-1: USB disconnect, device number 25 [ 71.907440][ T319] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 72.068417][ T319] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 72.087440][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.107407][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.117256][ T319] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 72.143352][ T319] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 72.167430][ T319] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 72.175538][ T319] usb 4-1: Manufacturer: syz [ 72.188012][ T319] usb 4-1: config 0 descriptor?? [ 72.312311][ T1276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 72.403724][ T1288] exfat: Deprecated parameter 'debug' [ 72.409432][ T1288] syz.2.317: attempt to access beyond end of device [ 72.409432][ T1288] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 72.427455][ T1288] exFAT-fs (loop2): unable to read boot sector [ 72.433648][ T1288] exFAT-fs (loop2): failed to read boot sector [ 72.440234][ T1288] exFAT-fs (loop2): failed to recognize exfat type [ 72.460472][ T1288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.472222][ T1288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.604327][ T319] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 72.617615][ T319] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 72.626768][ T319] appleir 0003:05AC:8243.000C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 72.726583][ T36] audit: type=1400 audit(72.693:355): avc: denied { getopt } for pid=1304 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.742579][ T1307] UHID_CREATE from different security context by process 229 (syz.0.322), this is not allowed. [ 72.769197][ T1309] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.769219][ T1309] rust_binder: Read failure Err(EFAULT) in pid:231 [ 72.778521][ T1309] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.785117][ T1309] rust_binder: Read failure Err(EFAULT) in pid:231 [ 72.793669][ T36] audit: type=1400 audit(72.763:356): avc: denied { transfer } for pid=1308 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 72.793674][ T1309] rust_binder: Error while translating object. [ 72.818681][ T316] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 72.818760][ T1309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.832688][ T1309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 72.887904][ T347] usb 4-1: USB disconnect, device number 28 [ 72.925286][ T1311] netlink: 'syz.0.324': attribute type 11 has an invalid length. [ 72.933136][ T1311] netlink: 44 bytes leftover after parsing attributes in process `syz.0.324'. [ 72.993292][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.995681][ T1317] veth1: entered allmulticast mode [ 73.004847][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.016711][ T1317] veth1: left allmulticast mode [ 73.019855][ T316] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 73.033487][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.050999][ T316] usb 5-1: config 0 descriptor?? [ 73.207430][ T319] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 73.207600][ T347] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 73.367418][ T319] usb 1-1: Using ep0 maxpacket: 32 [ 73.368587][ T347] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 73.374251][ T319] usb 1-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 73.383732][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.405022][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.415107][ T347] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 73.418806][ T319] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 73.447524][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.448869][ T347] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 73.455545][ T319] usb 1-1: Product: syz [ 73.455565][ T319] usb 1-1: Manufacturer: syz [ 73.473482][ T347] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 73.491993][ T347] usb 4-1: Manufacturer: syz [ 73.497392][ T319] usb 1-1: SerialNumber: syz [ 73.506554][ T347] usb 4-1: config 0 descriptor?? [ 73.506626][ T319] usb 1-1: config 0 descriptor?? [ 73.529217][ T319] usb 1-1: bad CDC descriptors [ 73.534210][ T319] usb 1-1: unsupported MDLM descriptors [ 73.666385][ T316] usbhid 5-1:0.0: can't add hid device: -71 [ 73.676449][ T316] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 73.695017][ T316] usb 5-1: USB disconnect, device number 26 [ 73.733415][ T36] audit: type=1400 audit(73.703:357): avc: denied { name_bind } for pid=1314 comm="syz.0.326" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 73.790328][ T351] usb 1-1: USB disconnect, device number 27 [ 73.853022][ T1336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.332'. [ 73.918667][ T347] appleir 0003:05AC:8243.000D: item fetching failed at offset 0/1 [ 73.926709][ T347] appleir 0003:05AC:8243.000D: parse failed [ 73.933230][ T347] appleir 0003:05AC:8243.000D: probe with driver appleir failed with error -22 [ 73.933847][ T1342] netlink: 'syz.2.335': attribute type 10 has an invalid length. [ 73.958039][ T36] audit: type=1400 audit(73.933:358): avc: denied { name_bind } for pid=1340 comm="syz.2.335" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 74.189861][ T351] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 74.192459][ T1345] veth1: entered allmulticast mode [ 74.204812][ T1345] veth1: left allmulticast mode [ 74.348911][ T351] usb 1-1: not running at top speed; connect to a high speed hub [ 74.358997][ T351] usb 1-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 74.368117][ T351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.376106][ T351] usb 1-1: Product: syz [ 74.380291][ T351] usb 1-1: Manufacturer: syz [ 74.384894][ T351] usb 1-1: SerialNumber: syz [ 74.457428][ T792] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 74.476868][ T1348] futex_wake_op: syz.3.306 tries to shift op by 144; fix this program [ 74.608570][ T792] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 74.619516][ T792] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.631333][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 74.642472][ T792] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.657004][ T792] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 74.666120][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.674226][ T792] usb 5-1: Product: syz [ 74.678445][ T792] usb 5-1: Manufacturer: syz [ 74.683050][ T792] usb 5-1: SerialNumber: syz [ 74.688517][ T792] usb 5-1: config 0 descriptor?? [ 74.693896][ T1347] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 74.702372][ T792] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 74.737632][ C1] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 74.789222][ T1351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.799815][ T351] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 74.802242][ T1351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.823188][ T351] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 74.838008][ T351] usb 1-1: USB disconnect, device number 28 [ 74.851489][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.472040][ T1363] netlink: 'syz.2.341': attribute type 15 has an invalid length. [ 75.479899][ T1363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.341'. [ 75.497425][ T316] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 75.505076][ T36] audit: type=1400 audit(75.473:359): avc: denied { setopt } for pid=1362 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.530349][ T319] usb 4-1: USB disconnect, device number 29 [ 75.553577][ T1372] input: syz1 as /devices/virtual/input/input15 [ 75.563604][ T1372] futex_wake_op: syz.3.344 tries to shift op by 32; fix this program [ 75.667456][ T316] usb 1-1: Using ep0 maxpacket: 16 [ 75.673714][ T316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.683867][ T316] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.694272][ T316] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.703392][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.711422][ T316] usb 1-1: Product: syz [ 75.715597][ T316] usb 1-1: Manufacturer: syz [ 75.720253][ T316] usb 1-1: SerialNumber: syz [ 75.867468][ T319] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 76.018616][ T319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.028903][ T319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 76.037900][ T319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.048947][ T319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 76.059625][ T319] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 76.074621][ T36] audit: type=1400 audit(76.043:360): avc: denied { write } for pid=1373 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.074794][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.102089][ T36] audit: type=1400 audit(76.073:361): avc: denied { associate } for pid=1373 comm="syz.2.345" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.105490][ T1372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.130414][ T319] hub 4-1:1.0: bad descriptor, ignoring hub [ 76.138780][ T319] hub 4-1:1.0: probe with driver hub failed with error -5 [ 76.147703][ T319] cdc_wdm 4-1:1.0: skipping garbage [ 76.152942][ T319] cdc_wdm 4-1:1.0: skipping garbage [ 76.161226][ T319] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 76.169398][ T319] cdc_wdm 4-1:1.0: Unknown control protocol [ 76.184968][ T36] audit: type=1400 audit(76.153:362): avc: denied { listen } for pid=1379 comm="syz.2.347" path=2F3130302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 76.289845][ T1390] FAULT_INJECTION: forcing a failure. [ 76.289845][ T1390] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.303166][ T1390] CPU: 1 UID: 0 PID: 1390 Comm: syz.2.350 Not tainted syzkaller #0 ac2a27d768ff058c41d327a0fd721d48eec9ad0c [ 76.303194][ T1390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.303204][ T1390] Call Trace: [ 76.303208][ T1390] [ 76.303215][ T1390] __dump_stack+0x21/0x30 [ 76.303246][ T1390] dump_stack_lvl+0x140/0x1c0 [ 76.303272][ T1390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.303296][ T1390] ? _parse_integer+0x2e/0x40 [ 76.303315][ T1390] ? kstrtoull+0x13b/0x1e0 [ 76.303329][ T1390] dump_stack+0x19/0x20 [ 76.303343][ T1390] should_fail_ex+0x3d7/0x530 [ 76.303358][ T1390] should_fail+0xf/0x20 [ 76.303375][ T1390] should_fail_usercopy+0x1e/0x30 [ 76.303400][ T1390] _copy_from_user+0x20/0xa0 [ 76.303418][ T1390] ___sys_sendmsg+0x1c7/0x370 [ 76.303438][ T1390] ? __sys_sendmsg+0x2a0/0x2a0 [ 76.303456][ T1390] ? proc_fail_nth_write+0x184/0x220 [ 76.303470][ T1390] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 76.303487][ T1390] __x64_sys_sendmsg+0x1fb/0x2d0 [ 76.303498][ T1390] ? fput+0x1a4/0x240 [ 76.303512][ T1390] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 76.303529][ T1390] ? ksys_write+0x1f3/0x260 [ 76.303555][ T1390] ? __kasan_check_read+0x15/0x20 [ 76.303581][ T1390] x64_sys_call+0x2a4c/0x2ee0 [ 76.303606][ T1390] do_syscall_64+0x57/0xf0 [ 76.303619][ T1390] ? clear_bhb_loop+0x50/0xa0 [ 76.303633][ T1390] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.303646][ T1390] RIP: 0033:0x7fe06159cdd9 [ 76.303659][ T1390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.303673][ T1390] RSP: 002b:00007fe062442028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.303697][ T1390] RAX: ffffffffffffffda RBX: 00007fe061815fa0 RCX: 00007fe06159cdd9 [ 76.303712][ T1390] RDX: 0000000000040010 RSI: 00002000000010c0 RDI: 0000000000000005 [ 76.303726][ T1390] RBP: 00007fe062442090 R08: 0000000000000000 R09: 0000000000000000 [ 76.303739][ T1390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.303751][ T1390] R13: 00007fe061816038 R14: 00007fe061815fa0 R15: 00007ffff7788c88 [ 76.303769][ T1390] [ 76.628103][ T316] usb 1-1: 0:2 : does not exist [ 76.637502][ T319] usb 4-1: USB disconnect, device number 30 [ 76.641849][ T316] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 76.673647][ T316] usb 1-1: USB disconnect, device number 29 [ 76.688967][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.836157][ T1396] veth1: entered allmulticast mode [ 76.841391][ T1398] veth1: left allmulticast mode [ 76.879274][ T1400] overlay: Unknown parameter 'func' [ 76.937063][ T36] audit: type=1400 audit(76.903:363): avc: denied { create } for pid=1401 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 77.071992][ T36] audit: type=1400 audit(77.043:364): avc: denied { mounton } for pid=1406 comm="syz.2.356" path="/105/file0" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 77.176001][ T1414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.184588][ T1414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.227414][ T316] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 77.230383][ T319] usb 5-1: USB disconnect, device number 27 [ 77.256546][ T1416] FAULT_INJECTION: forcing a failure. [ 77.256546][ T1416] name failslab, interval 1, probability 0, space 0, times 1 [ 77.271971][ T1416] CPU: 0 UID: 0 PID: 1416 Comm: syz.4.359 Not tainted syzkaller #0 ac2a27d768ff058c41d327a0fd721d48eec9ad0c [ 77.272005][ T1416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.272016][ T1416] Call Trace: [ 77.272023][ T1416] [ 77.272031][ T1416] __dump_stack+0x21/0x30 [ 77.272061][ T1416] dump_stack_lvl+0x140/0x1c0 [ 77.272085][ T1416] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.272110][ T1416] ? release_sock+0x171/0x1f0 [ 77.272137][ T1416] dump_stack+0x19/0x20 [ 77.272160][ T1416] should_fail_ex+0x3d7/0x530 [ 77.272186][ T1416] should_failslab+0xac/0x100 [ 77.272216][ T1416] kmem_cache_alloc_node_noprof+0x45/0x420 [ 77.272243][ T1416] ? netlink_data_ready+0x20/0x20 [ 77.272271][ T1416] ? __alloc_skb+0x108/0x370 [ 77.272297][ T1416] __alloc_skb+0x108/0x370 [ 77.272321][ T1416] netlink_alloc_large_skb+0xf7/0x1b0 [ 77.272348][ T1416] netlink_sendmsg+0x594/0xb10 [ 77.272368][ T1416] ? __cfi_netlink_sendmsg+0x10/0x10 [ 77.272388][ T1416] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 77.272416][ T1416] ? security_socket_sendmsg+0x3d/0x100 [ 77.272436][ T1416] ? __cfi_netlink_sendmsg+0x10/0x10 [ 77.272455][ T1416] ____sys_sendmsg+0xa8f/0xae0 [ 77.272474][ T1416] ? __import_iovec+0x5ad/0x7c0 [ 77.272494][ T1416] ? __sys_sendmsg_sock+0x50/0x50 [ 77.272512][ T1416] ? import_iovec+0x80/0xb0 [ 77.272532][ T1416] ___sys_sendmsg+0x2a6/0x370 [ 77.272552][ T1416] ? __sys_sendmsg+0x2a0/0x2a0 [ 77.272570][ T1416] ? proc_fail_nth_write+0x184/0x220 [ 77.272593][ T1416] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 77.272621][ T1416] __x64_sys_sendmsg+0x1fb/0x2d0 [ 77.272641][ T1416] ? fput+0x1a4/0x240 [ 77.272661][ T1416] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 77.272680][ T1416] ? ksys_write+0x1f3/0x260 [ 77.272708][ T1416] ? __kasan_check_read+0x15/0x20 [ 77.272734][ T1416] x64_sys_call+0x2a4c/0x2ee0 [ 77.272761][ T1416] do_syscall_64+0x57/0xf0 [ 77.272782][ T1416] ? clear_bhb_loop+0x50/0xa0 [ 77.272805][ T1416] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.272827][ T1416] RIP: 0033:0x7ffb94d9cdd9 [ 77.272846][ T1416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.272863][ T1416] RSP: 002b:00007ffb95cc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.272888][ T1416] RAX: ffffffffffffffda RBX: 00007ffb95015fa0 RCX: 00007ffb94d9cdd9 [ 77.272904][ T1416] RDX: 0000000000040010 RSI: 00002000000010c0 RDI: 0000000000000005 [ 77.272918][ T1416] RBP: 00007ffb95cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 77.272931][ T1416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.272945][ T1416] R13: 00007ffb95016038 R14: 00007ffb95015fa0 R15: 00007ffeb38a7e28 [ 77.272962][ T1416] [ 77.572853][ T1418] netlink: 228 bytes leftover after parsing attributes in process `syz.4.360'. [ 77.628580][ T316] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 77.640951][ T316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.651134][ T316] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 77.666247][ T316] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 77.675378][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.683743][ T316] usb 1-1: Product: syz [ 77.687957][ T316] usb 1-1: Manufacturer: syz [ 77.692651][ T316] usb 1-1: SerialNumber: syz [ 77.698369][ T316] usb 1-1: config 0 descriptor?? [ 77.704380][ T316] usb-storage 1-1:0.0: USB Mass Storage device detected [ 77.712910][ T316] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 77.907824][ T316] usb 1-1: USB disconnect, device number 30 [ 77.972029][ T1425] veth1: entered allmulticast mode [ 77.978710][ T1425] veth1: left allmulticast mode [ 78.089661][ T1430] netlink: 140 bytes leftover after parsing attributes in process `syz.2.363'. [ 78.102469][ T36] audit: type=1400 audit(78.073:365): avc: denied { ioctl } for pid=1429 comm="syz.2.363" path="mnt:[4026532316]" dev="nsfs" ino=4026532316 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.127233][ T1430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.135754][ T1430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.154943][ T36] audit: type=1400 audit(78.133:366): avc: denied { mount } for pid=1426 comm="syz.4.362" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 78.156517][ T1427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.184961][ T1427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.247464][ T319] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 78.689025][ T1443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.717598][ T1443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.275665][ T1456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.284533][ T1456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.290658][ T1459] tipc: Enabling not permitted [ 79.297965][ T1456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.298061][ T1459] tipc: Enabling of bearer rejected, failed to enable media [ 79.307104][ T1456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.322248][ T319] usb 5-1: device descriptor read/64, error -71 [ 79.527430][ T333] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 79.567406][ T319] usb 5-1: device descriptor read/64, error -71 [ 79.657419][ T333] usb 1-1: device descriptor read/64, error -71 [ 79.807464][ T319] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 79.897431][ T333] usb 1-1: device descriptor read/64, error -71 [ 79.937448][ T319] usb 5-1: device descriptor read/64, error -71 [ 80.147409][ T333] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 80.187424][ T319] usb 5-1: device descriptor read/64, error -71 [ 80.199020][ T1475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.208135][ T1475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.297526][ T333] usb 1-1: device descriptor read/64, error -71 [ 80.303919][ T319] usb usb5-port1: attempt power cycle [ 80.487420][ T351] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 80.547458][ T333] usb 1-1: device descriptor read/64, error -71 [ 80.648472][ T351] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 80.657422][ T319] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 80.657629][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.665310][ T333] usb usb1-port1: attempt power cycle [ 80.679608][ T351] usb 4-1: config 0 descriptor?? [ 80.698499][ T319] usb 5-1: device descriptor read/8, error -71 [ 80.828437][ T319] usb 5-1: device descriptor read/8, error -71 [ 81.017460][ T333] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 81.040627][ T333] usb 1-1: device descriptor read/8, error -71 [ 81.067438][ T319] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 81.088496][ T319] usb 5-1: device descriptor read/8, error -71 [ 81.168528][ T333] usb 1-1: device descriptor read/8, error -71 [ 81.218540][ T319] usb 5-1: device descriptor read/8, error -71 [ 81.327575][ T319] usb usb5-port1: unable to enumerate USB device [ 81.407445][ T333] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 81.448498][ T333] usb 1-1: device descriptor read/8, error -71 [ 81.578425][ T333] usb 1-1: device descriptor read/8, error -71 [ 81.687868][ T1477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.688637][ T333] usb usb1-port1: unable to enumerate USB device [ 81.697420][ T1477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.719660][ T351] usb 4-1: Cannot set autoneg [ 81.727307][ T351] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 81.747978][ T351] usb 4-1: USB disconnect, device number 31 [ 82.127437][ T351] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 82.278190][ T351] usb 4-1: not running at top speed; connect to a high speed hub [ 82.286692][ T351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.300825][ T316] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 82.308809][ T351] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 82.318366][ T351] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 82.330728][ T351] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 82.339820][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.347848][ T351] usb 4-1: Product: syz [ 82.352026][ T351] usb 4-1: Manufacturer: syz [ 82.356618][ T351] usb 4-1: SerialNumber: syz [ 82.468367][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.478125][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 82.490398][ T316] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.499590][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.507733][ T316] usb 5-1: Product: syz [ 82.511943][ T316] usb 5-1: Manufacturer: syz [ 82.516532][ T316] usb 5-1: SerialNumber: syz [ 82.521916][ T316] usb 5-1: config 0 descriptor?? [ 82.567472][ T347] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 82.718493][ T347] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 82.726739][ T347] usb 1-1: config 0 has no interface number 0 [ 82.733489][ T347] usb 1-1: config 0 interface 41 has no altsetting 0 [ 82.742779][ T351] usb 4-1: 1:1 : invalid UAC_AS_GENERAL desc [ 82.748984][ T316] usb 5-1: USB disconnect, device number 32 [ 82.755751][ T351] usb 4-1: 0:2 : does not exist [ 82.760716][ T351] usb 4-1: unit 1 not found! [ 82.765452][ T351] usb 4-1: unit 130 not found! [ 82.770481][ T347] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 82.779600][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.787917][ T347] usb 1-1: Product: syz [ 82.792180][ T347] usb 1-1: Manufacturer: syz [ 82.796840][ T347] usb 1-1: SerialNumber: syz [ 82.804251][ T351] usb 4-1: USB disconnect, device number 32 [ 82.818501][ T347] usb 1-1: config 0 descriptor?? [ 82.823962][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 83.115062][ T36] audit: type=1400 audit(83.083:367): avc: denied { map } for pid=1513 comm="syz.3.388" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.142272][ T36] audit: type=1400 audit(83.083:368): avc: denied { execute } for pid=1513 comm="syz.3.388" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.417411][ T316] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 83.547413][ T316] usb 4-1: device descriptor read/64, error -71 [ 83.787444][ T316] usb 4-1: device descriptor read/64, error -71 [ 83.827772][ T347] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 83.837206][ T347] usb 1-1: USB disconnect, device number 35 [ 84.027428][ T316] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 84.157487][ T316] usb 4-1: device descriptor read/64, error -71 [ 84.397461][ T316] usb 4-1: device descriptor read/64, error -71 [ 84.407439][ T347] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 84.507498][ T316] usb usb4-port1: attempt power cycle [ 84.557426][ T347] usb 5-1: Using ep0 maxpacket: 32 [ 84.563684][ T347] usb 5-1: config 8 has an invalid interface number: 74 but max is 0 [ 84.572026][ T347] usb 5-1: config 8 has no interface number 0 [ 84.578265][ T347] usb 5-1: config 8 interface 74 has no altsetting 0 [ 84.586749][ T347] usb 5-1: New USB device found, idVendor=19d2, idProduct=1015, bcdDevice=ec.1a [ 84.595867][ T347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.597421][ T333] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 84.603894][ T347] usb 5-1: Product: syz [ 84.603914][ T347] usb 5-1: Manufacturer: syz [ 84.620279][ T347] usb 5-1: SerialNumber: syz [ 84.757417][ T333] usb 1-1: Using ep0 maxpacket: 32 [ 84.764591][ T333] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 84.772865][ T333] usb 1-1: config 0 has no interface number 0 [ 84.779028][ T333] usb 1-1: config 0 interface 184 has no altsetting 0 [ 84.787680][ T333] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 84.796754][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.804984][ T333] usb 1-1: Product: syz [ 84.809198][ T333] usb 1-1: Manufacturer: syz [ 84.813815][ T333] usb 1-1: SerialNumber: syz [ 84.819180][ T333] usb 1-1: config 0 descriptor?? [ 84.826416][ T333] smsc75xx v1.0.0 [ 84.833089][ T347] usb 5-1: bad CDC descriptors [ 84.839189][ T347] usb 5-1: USB disconnect, device number 33 [ 84.847448][ T316] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 84.868464][ T316] usb 4-1: device descriptor read/8, error -71 [ 84.962681][ T1525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.971328][ T1525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.008533][ T316] usb 4-1: device descriptor read/8, error -71 [ 85.247455][ T316] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 85.268646][ T316] usb 4-1: device descriptor read/8, error -71 [ 85.398642][ T316] usb 4-1: device descriptor read/8, error -71 [ 85.515367][ T316] usb usb4-port1: unable to enumerate USB device [ 85.606488][ T1533] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3345889258 (6691778516 ns) > initial count (2414698942 ns). Using initial count to start timer. [ 85.849869][ T333] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 85.867393][ T333] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 85.937507][ T36] audit: type=1400 audit(85.903:369): avc: denied { write } for pid=1544 comm="syz.4.400" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.962145][ T36] audit: type=1400 audit(85.913:370): avc: denied { open } for pid=1544 comm="syz.4.400" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.986558][ T36] audit: type=1400 audit(85.913:371): avc: denied { setattr } for pid=1542 comm="syz.2.399" path="socket:[13369]" dev="sockfs" ino=13369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.011648][ T36] audit: type=1400 audit(85.953:372): avc: denied { ioctl } for pid=1544 comm="syz.4.400" path="socket:[13373]" dev="sockfs" ino=13373 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.036440][ T36] audit: type=1400 audit(85.953:373): avc: denied { watch watch_reads } for pid=1544 comm="syz.4.400" path="/64/file0" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.098221][ T333] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 86.109236][ T333] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 86.120201][ T333] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 86.130539][ T333] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 86.140692][ T333] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 86.153247][ T333] usb 1-1: USB disconnect, device number 36 [ 86.267405][ T351] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 86.397452][ T351] usb 5-1: device descriptor read/64, error -71 [ 86.486349][ T1556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.494885][ T1556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.507435][ T316] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 86.637725][ T351] usb 5-1: device descriptor read/64, error -71 [ 86.657425][ T316] usb 4-1: Using ep0 maxpacket: 8 [ 86.663592][ T316] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 86.671921][ T316] usb 4-1: config 179 has no interface number 0 [ 86.678252][ T316] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 86.689504][ T316] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 86.701022][ T316] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.712255][ T316] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 86.725741][ T316] usb 4-1: config 179 interface 65 has no altsetting 0 [ 86.732649][ T316] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 86.741965][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.753347][ T316] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input17 [ 86.797616][ T95] input input17: unable to receive magic message: -110 [ 86.805186][ T95] input input17: unable to receive magic message: -32 [ 86.812990][ T95] input input17: unable to receive magic message: -32 [ 86.867410][ T347] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 86.877408][ T351] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 86.951564][ T792] usb 4-1: USB disconnect, device number 37 [ 86.951654][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 86.965913][ T792] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 87.007432][ T351] usb 5-1: device descriptor read/64, error -71 [ 87.017799][ T347] usb 1-1: Using ep0 maxpacket: 32 [ 87.029875][ T347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.040243][ T347] usb 1-1: config 0 has no interfaces? [ 87.041423][ T1564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.046328][ T1560] syzkaller0: entered allmulticast mode [ 87.055208][ T1564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.062681][ T1560] syzkaller0: entered promiscuous mode [ 87.121755][ T1560] syzkaller0 (unregistering): left promiscuous mode [ 87.128472][ T1560] syzkaller0 (unregistering): left allmulticast mode [ 87.200768][ T347] usb 1-1: string descriptor 0 read error: -71 [ 87.207009][ T347] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 87.216088][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.224767][ T347] usb 1-1: config 0 descriptor?? [ 87.229954][ T347] usb 1-1: can't set config #0, error -71 [ 87.236324][ T347] usb 1-1: USB disconnect, device number 37 [ 87.247426][ T351] usb 5-1: device descriptor read/64, error -71 [ 87.357632][ T351] usb usb5-port1: attempt power cycle [ 87.697429][ T351] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 87.718559][ T351] usb 5-1: device descriptor read/8, error -71 [ 87.858535][ T351] usb 5-1: device descriptor read/8, error -71 [ 87.987426][ T792] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 88.097438][ T351] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 88.118645][ T351] usb 5-1: device descriptor read/8, error -71 [ 88.137440][ T792] usb 1-1: device descriptor read/64, error -71 [ 88.247494][ T347] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 88.256590][ T351] usb 5-1: device descriptor read/8, error -71 [ 88.367545][ T351] usb usb5-port1: unable to enumerate USB device [ 88.377436][ T347] usb 4-1: device descriptor read/64, error -71 [ 88.377565][ T792] usb 1-1: device descriptor read/64, error -71 [ 88.617414][ T347] usb 4-1: device descriptor read/64, error -71 [ 88.637484][ T792] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 88.767550][ T792] usb 1-1: device descriptor read/64, error -71 [ 88.857464][ T347] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 88.987457][ T347] usb 4-1: device descriptor read/64, error -71 [ 89.007461][ T792] usb 1-1: device descriptor read/64, error -71 [ 89.117598][ T792] usb usb1-port1: attempt power cycle [ 89.160778][ T36] audit: type=1400 audit(89.133:374): avc: denied { shutdown } for pid=1596 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.227428][ T347] usb 4-1: device descriptor read/64, error -71 [ 89.337545][ T347] usb usb4-port1: attempt power cycle [ 89.457423][ T792] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 89.478568][ T792] usb 1-1: device descriptor read/8, error -71 [ 89.608584][ T792] usb 1-1: device descriptor read/8, error -71 [ 89.677438][ T347] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 89.698511][ T347] usb 4-1: device descriptor read/8, error -71 [ 89.828619][ T347] usb 4-1: device descriptor read/8, error -71 [ 89.851943][ T792] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 89.878692][ T792] usb 1-1: device descriptor read/8, error -71 [ 89.954770][ T36] audit: type=1400 audit(89.923:375): avc: denied { wake_alarm } for pid=1600 comm="syz.4.421" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.985935][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 90.017612][ T792] usb 1-1: device descriptor read/8, error -71 [ 90.052977][ T1603] netlink: 'syz.4.422': attribute type 4 has an invalid length. [ 90.056925][ T1605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.060794][ T1603] netlink: 17 bytes leftover after parsing attributes in process `syz.4.422'. [ 90.069889][ T1605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.078023][ T347] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 90.108768][ T347] usb 4-1: device descriptor read/8, error -71 [ 90.127513][ T792] usb usb1-port1: unable to enumerate USB device [ 90.238946][ T347] usb 4-1: device descriptor read/8, error -71 [ 90.347934][ T347] usb usb4-port1: unable to enumerate USB device [ 90.604873][ T36] audit: type=1400 audit(90.573:376): avc: denied { read } for pid=1606 comm="syz.2.424" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 90.626816][ T36] audit: type=1400 audit(90.573:377): avc: denied { open } for pid=1606 comm="syz.2.424" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 90.649696][ T36] audit: type=1400 audit(90.603:378): avc: denied { ioctl } for pid=1606 comm="syz.2.424" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 90.709156][ T1609] FAULT_INJECTION: forcing a failure. [ 90.709156][ T1609] name failslab, interval 1, probability 0, space 0, times 0 [ 90.721965][ T1609] CPU: 0 UID: 0 PID: 1609 Comm: syz.4.425 Not tainted syzkaller #0 ac2a27d768ff058c41d327a0fd721d48eec9ad0c [ 90.722004][ T1609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.722016][ T1609] Call Trace: [ 90.722023][ T1609] [ 90.722032][ T1609] __dump_stack+0x21/0x30 [ 90.722063][ T1609] dump_stack_lvl+0x140/0x1c0 [ 90.722086][ T1609] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.722111][ T1609] ? __cfi_avc_has_perm+0x10/0x10 [ 90.722139][ T1609] ? kasan_save_alloc_info+0x40/0x50 [ 90.722164][ T1609] dump_stack+0x19/0x20 [ 90.722186][ T1609] should_fail_ex+0x3d7/0x530 [ 90.722211][ T1609] should_failslab+0xac/0x100 [ 90.722231][ T1609] __kmalloc_cache_noprof+0x41/0x470 [ 90.722259][ T1609] ? vhost_task_create+0x12c/0x400 [ 90.722280][ T1609] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 90.722303][ T1609] vhost_task_create+0x12c/0x400 [ 90.722322][ T1609] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 90.722344][ T1609] ? __cfi_vhost_task_create+0x10/0x10 [ 90.722365][ T1609] ? __cfi_vhost_task_fn+0x10/0x10 [ 90.722383][ T1609] ? __kasan_check_write+0x18/0x20 [ 90.722408][ T1609] ? mutex_lock+0x97/0x1d0 [ 90.722434][ T1609] ? __cfi_mutex_lock+0x10/0x10 [ 90.722458][ T1609] ? kernel_text_address+0xa9/0xe0 [ 90.722483][ T1609] kvm_mmu_post_init_vm+0x161/0x300 [ 90.722509][ T1609] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 90.722536][ T1609] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 90.722561][ T1609] ? kstrtoull+0x13b/0x1e0 [ 90.722584][ T1609] ? kstrtouint+0x78/0xf0 [ 90.722607][ T1609] ? ioctl_has_perm+0x1bc/0x500 [ 90.722631][ T1609] ? __asan_memcpy+0x5a/0x80 [ 90.722655][ T1609] ? ioctl_has_perm+0x408/0x500 [ 90.722678][ T1609] ? has_cap_mac_admin+0xd0/0xd0 [ 90.722700][ T1609] ? __kasan_check_write+0x18/0x20 [ 90.722724][ T1609] ? mutex_lock_killable+0x97/0x1d0 [ 90.722747][ T1609] ? __cfi_mutex_lock_killable+0x10/0x10 [ 90.722770][ T1609] ? proc_fail_nth_write+0x184/0x220 [ 90.722794][ T1609] kvm_vcpu_ioctl+0xa48/0x1000 [ 90.722820][ T1609] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 90.722858][ T1609] ? __cfi_vfs_write+0x10/0x10 [ 90.722882][ T1609] ? __kasan_check_write+0x18/0x20 [ 90.722908][ T1609] ? mutex_unlock+0x90/0x240 [ 90.722929][ T1609] ? __cfi_mutex_unlock+0x10/0x10 [ 90.722952][ T1609] ? __fget_files+0x2c5/0x340 [ 90.722970][ T1609] ? __fget_files+0x2c5/0x340 [ 90.722989][ T1609] ? bpf_lsm_file_ioctl+0xd/0x20 [ 90.723010][ T1609] ? security_file_ioctl+0x3e/0x110 [ 90.723035][ T1609] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 90.723064][ T1609] __se_sys_ioctl+0x135/0x1b0 [ 90.723084][ T1609] __x64_sys_ioctl+0x7f/0xa0 [ 90.723103][ T1609] x64_sys_call+0x1878/0x2ee0 [ 90.723131][ T1609] do_syscall_64+0x57/0xf0 [ 90.723151][ T1609] ? clear_bhb_loop+0x50/0xa0 [ 90.723175][ T1609] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.723198][ T1609] RIP: 0033:0x7ffb94d9cdd9 [ 90.723217][ T1609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.723234][ T1609] RSP: 002b:00007ffb95cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.723260][ T1609] RAX: ffffffffffffffda RBX: 00007ffb95015fa0 RCX: 00007ffb94d9cdd9 [ 90.723277][ T1609] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 90.723290][ T1609] RBP: 00007ffb95cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 90.723304][ T1609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.723316][ T1609] R13: 00007ffb95016038 R14: 00007ffb95015fa0 R15: 00007ffeb38a7e28 [ 90.723332][ T1609] [ 91.129919][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 91.142517][ T36] audit: type=1400 audit(91.113:379): avc: denied { map } for pid=1629 comm="syz.3.433" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 91.181201][ T1634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.190771][ T1634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.199455][ T1635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.208042][ T1635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.216595][ T1637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.436'. [ 91.233723][ T1637] netlink: 31 bytes leftover after parsing attributes in process `syz.4.436'. [ 91.242743][ T1637] netlink: 'syz.4.436': attribute type 3 has an invalid length. [ 91.250415][ T1637] netlink: 'syz.4.436': attribute type 2 has an invalid length. [ 91.258099][ T1637] netlink: 31 bytes leftover after parsing attributes in process `syz.4.436'. [ 91.417448][ T347] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 91.467427][ T351] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 91.568827][ T347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.579278][ T347] usb 4-1: string descriptor 0 read error: -22 [ 91.585471][ T347] usb 4-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 91.594645][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.606650][ T347] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 91.617419][ T351] usb 1-1: Using ep0 maxpacket: 16 [ 91.623629][ T351] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 91.634123][ T351] usb 1-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 91.643232][ T351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.651268][ T351] usb 1-1: Product: syz [ 91.655458][ T351] usb 1-1: Manufacturer: syz [ 91.660086][ T351] usb 1-1: SerialNumber: syz [ 91.742760][ T1649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.751384][ T1649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.819446][ T347] usb 4-1: USB disconnect, device number 42 [ 91.866279][ T351] usb 1-1: USB disconnect, device number 42 [ 92.328364][ T1657] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 92.401543][ T351] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 92.454244][ T1662] FAULT_INJECTION: forcing a failure. [ 92.454244][ T1662] name failslab, interval 1, probability 0, space 0, times 0 [ 92.467421][ T1662] CPU: 0 UID: 0 PID: 1662 Comm: syz.0.444 Not tainted syzkaller #0 ac2a27d768ff058c41d327a0fd721d48eec9ad0c [ 92.467455][ T1662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 92.467467][ T1662] Call Trace: [ 92.467474][ T1662] [ 92.467483][ T1662] __dump_stack+0x21/0x30 [ 92.467514][ T1662] dump_stack_lvl+0x140/0x1c0 [ 92.467539][ T1662] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.467566][ T1662] dump_stack+0x19/0x20 [ 92.467589][ T1662] should_fail_ex+0x3d7/0x530 [ 92.467615][ T1662] should_failslab+0xac/0x100 [ 92.467636][ T1662] kmem_cache_alloc_node_noprof+0x45/0x420 [ 92.467664][ T1662] ? dup_task_struct+0xc1/0xd80 [ 92.467686][ T1662] ? kasan_save_alloc_info+0x40/0x50 [ 92.467711][ T1662] ? __kasan_kmalloc+0x96/0xb0 [ 92.467729][ T1662] ? __kmalloc_cache_noprof+0x23c/0x470 [ 92.467756][ T1662] dup_task_struct+0xc1/0xd80 [ 92.467778][ T1662] ? __kasan_check_write+0x18/0x20 [ 92.467802][ T1662] ? _raw_spin_lock_irq+0x93/0x120 [ 92.467823][ T1662] ? copy_process+0x32a0/0x32a0 [ 92.467845][ T1662] ? __kasan_check_write+0x18/0x20 [ 92.467870][ T1662] copy_process+0x55a/0x32a0 [ 92.467894][ T1662] ? __cfi_copy_process+0x10/0x10 [ 92.467915][ T1662] ? __kmalloc_cache_noprof+0x23c/0x470 [ 92.467942][ T1662] ? __kasan_check_write+0x18/0x20 [ 92.467973][ T1662] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 92.467995][ T1662] vhost_task_create+0x1f7/0x400 [ 92.468014][ T1662] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 92.468037][ T1662] ? __cfi_vhost_task_create+0x10/0x10 [ 92.468056][ T1662] ? __cfi_vhost_task_fn+0x10/0x10 [ 92.468075][ T1662] ? __kasan_check_write+0x18/0x20 [ 92.468099][ T1662] ? mutex_lock+0x97/0x1d0 [ 92.468133][ T1662] ? __cfi_mutex_lock+0x10/0x10 [ 92.468156][ T1662] ? kernel_text_address+0xa9/0xe0 [ 92.468182][ T1662] kvm_mmu_post_init_vm+0x161/0x300 [ 92.468209][ T1662] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 92.468236][ T1662] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 92.468261][ T1662] ? kstrtoull+0x13b/0x1e0 [ 92.468284][ T1662] ? kstrtouint+0x78/0xf0 [ 92.468306][ T1662] ? ioctl_has_perm+0x1bc/0x500 [ 92.468331][ T1662] ? __asan_memcpy+0x5a/0x80 [ 92.468356][ T1662] ? ioctl_has_perm+0x408/0x500 [ 92.468380][ T1662] ? has_cap_mac_admin+0xd0/0xd0 [ 92.468405][ T1662] ? __kasan_check_write+0x18/0x20 [ 92.468429][ T1662] ? mutex_lock_killable+0x97/0x1d0 [ 92.468454][ T1662] ? __cfi_mutex_lock_killable+0x10/0x10 [ 92.468478][ T1662] ? proc_fail_nth_write+0x184/0x220 [ 92.468503][ T1662] kvm_vcpu_ioctl+0xa48/0x1000 [ 92.468531][ T1662] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 92.468559][ T1662] ? __cfi_vfs_write+0x10/0x10 [ 92.468585][ T1662] ? __kasan_check_write+0x18/0x20 [ 92.468610][ T1662] ? mutex_unlock+0x90/0x240 [ 92.468634][ T1662] ? __cfi_mutex_unlock+0x10/0x10 [ 92.468658][ T1662] ? __fget_files+0x2c5/0x340 [ 92.468678][ T1662] ? __fget_files+0x2c5/0x340 [ 92.468697][ T1662] ? bpf_lsm_file_ioctl+0xd/0x20 [ 92.468719][ T1662] ? security_file_ioctl+0x3e/0x110 [ 92.468742][ T1662] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 92.468770][ T1662] __se_sys_ioctl+0x135/0x1b0 [ 92.468789][ T1662] __x64_sys_ioctl+0x7f/0xa0 [ 92.468808][ T1662] x64_sys_call+0x1878/0x2ee0 [ 92.468836][ T1662] do_syscall_64+0x57/0xf0 [ 92.468856][ T1662] ? clear_bhb_loop+0x50/0xa0 [ 92.468878][ T1662] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.468900][ T1662] RIP: 0033:0x7fe4c4d9cdd9 [ 92.468918][ T1662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.468935][ T1662] RSP: 002b:00007fe4c5cb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.468959][ T1662] RAX: ffffffffffffffda RBX: 00007fe4c5015fa0 RCX: 00007fe4c4d9cdd9 [ 92.468975][ T1662] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 92.468988][ T1662] RBP: 00007fe4c5cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 92.469001][ T1662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.469014][ T1662] R13: 00007fe4c5016038 R14: 00007fe4c5015fa0 R15: 00007ffc5038a338 [ 92.469031][ T1662] [ 92.957536][ T351] usb 5-1: Using ep0 maxpacket: 32 [ 92.964299][ T351] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 92.974472][ T351] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 92.985009][ T351] usb 5-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 92.994152][ T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.002280][ T351] usb 5-1: Product: syz [ 93.006486][ T351] usb 5-1: Manufacturer: syz [ 93.011132][ T351] usb 5-1: SerialNumber: syz [ 93.152180][ T1673] can0: slcan on ttyS3. [ 93.178351][ T1671] can0 (unregistered): slcan off ttyS3. [ 93.225327][ T1678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.233990][ T1678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.277879][ T319] usb 5-1: USB disconnect, device number 38 [ 93.767754][ T1680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.776261][ T1680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.834214][ T36] audit: type=1400 audit(93.803:380): avc: denied { create } for pid=1683 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.893530][ T36] audit: type=1400 audit(93.863:381): avc: denied { mounton } for pid=1685 comm="syz.4.453" path="/75/file0" dev="incremental-fs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.049206][ T333] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 94.208493][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.219739][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.229546][ T333] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.242517][ T333] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.251611][ T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.260506][ T333] usb 1-1: config 0 descriptor?? [ 94.366295][ T36] audit: type=1400 audit(94.333:382): avc: denied { watch } for pid=1702 comm="syz.2.459" path="/file0" dev="ramfs" ino=13803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 94.417415][ T351] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 94.579562][ T351] usb 4-1: Using ep0 maxpacket: 32 [ 94.586936][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.604082][ T351] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 94.629312][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.645132][ T351] usb 4-1: config 0 descriptor?? [ 94.651338][ T351] hub 4-1:0.0: USB hub found [ 94.667254][ T36] audit: type=1400 audit(94.633:383): avc: denied { create } for pid=1681 comm="syz.0.452" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.668145][ T1682] netlink: 'syz.0.452': attribute type 46 has an invalid length. [ 94.687232][ T36] audit: type=1400 audit(94.643:384): avc: denied { write } for pid=1681 comm="syz.0.452" name="file0" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.695354][ T1682] netlink: 'syz.0.452': attribute type 28 has an invalid length. [ 94.716528][ T36] audit: type=1400 audit(94.643:385): avc: denied { open } for pid=1681 comm="syz.0.452" path="/99/file0" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.734281][ T333] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 94.754239][ T333] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 94.761789][ T333] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 94.769213][ T333] plantronics 0003:047F:FFFF.000E: unexpected long global item [ 94.776982][ T333] plantronics 0003:047F:FFFF.000E: parse failed [ 94.789889][ T333] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 94.856421][ T351] hub 4-1:0.0: 1 port detected [ 94.877443][ T319] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 94.954244][ T333] usb 1-1: USB disconnect, device number 43 [ 94.967011][ T1720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=1720 comm=syz.2.464 [ 95.007524][ T319] usb 5-1: device descriptor read/64, error -71 [ 95.044085][ T1727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.052654][ T1727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.111925][ T351] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 95.118507][ T351] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 95.127100][ T351] usbhid 4-1:0.0: can't add hid device: -71 [ 95.133136][ T351] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 95.158339][ T351] usb 4-1: USB disconnect, device number 43 [ 95.247491][ T319] usb 5-1: device descriptor read/64, error -71 [ 95.487468][ T319] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 95.608810][ T36] audit: type=1400 audit(95.583:386): avc: denied { map } for pid=1737 comm="syz.2.471" path="socket:[15127]" dev="sockfs" ino=15127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.632128][ T319] usb 5-1: device descriptor read/64, error -71 [ 95.634538][ T36] audit: type=1400 audit(95.583:387): avc: denied { read } for pid=1737 comm="syz.2.471" path="socket:[15127]" dev="sockfs" ino=15127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.647132][ T1738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.669821][ T1738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.717444][ T351] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 95.867401][ T351] usb 1-1: Using ep0 maxpacket: 32 [ 95.873632][ T351] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 95.881997][ T351] usb 1-1: config 0 has no interface number 0 [ 95.887403][ T319] usb 5-1: device descriptor read/64, error -71 [ 95.888227][ T351] usb 1-1: config 0 interface 184 has no altsetting 0 [ 95.902445][ T351] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.911500][ T351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.919509][ T351] usb 1-1: Product: syz [ 95.923676][ T351] usb 1-1: Manufacturer: syz [ 95.928324][ T351] usb 1-1: SerialNumber: syz [ 95.933528][ T351] usb 1-1: config 0 descriptor?? [ 95.939282][ T351] smsc75xx v1.0.0 [ 95.997543][ T319] usb usb5-port1: attempt power cycle [ 96.193961][ T1740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.203076][ T1740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.337423][ T319] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 96.358507][ T319] usb 5-1: device descriptor read/8, error -71 [ 96.488519][ T319] usb 5-1: device descriptor read/8, error -71 [ 96.545853][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 96.556735][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 96.727446][ T319] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 96.748552][ T319] usb 5-1: device descriptor read/8, error -71 [ 96.878741][ T319] usb 5-1: device descriptor read/8, error -71 [ 96.968566][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 96.979744][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 96.989486][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 96.997531][ T319] usb usb5-port1: unable to enumerate USB device [ 96.998995][ T351] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 97.014890][ T351] usb 1-1: USB disconnect, device number 44 [ 97.330842][ T1753] batadv_slave_1: entered promiscuous mode [ 97.336965][ T1753] batadv_slave_1: left promiscuous mode [ 97.391077][ T1758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.400496][ T1758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.497503][ T351] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 97.638147][ T1762] netlink: 'syz.4.481': attribute type 6 has an invalid length. [ 97.660554][ T351] usb 4-1: config 1 has an invalid interface number: 107 but max is 2 [ 97.672314][ T351] usb 4-1: config 1 has an invalid interface number: 232 but max is 2 [ 97.681568][ T351] usb 4-1: config 1 has an invalid interface number: 154 but max is 2 [ 97.690036][ T351] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 97.698885][ T351] usb 4-1: config 1 has no interface number 0 [ 97.705134][ T351] usb 4-1: config 1 has no interface number 1 [ 97.711485][ T351] usb 4-1: config 1 has no interface number 2 [ 97.711899][ T1764] batadv_slave_0: entered promiscuous mode [ 97.717913][ T351] usb 4-1: config 1 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.734475][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 97.742343][ T1763] batadv_slave_0: left promiscuous mode [ 97.742514][ T351] usb 4-1: config 1 interface 232 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 97.759150][ T351] usb 4-1: config 1 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.772407][ T351] usb 4-1: config 1 interface 232 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 97.784224][ T351] usb 4-1: config 1 interface 232 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 97.795165][ T351] usb 4-1: config 1 interface 232 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 97.806128][ T351] usb 4-1: config 1 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.817302][ T351] usb 4-1: config 1 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.828742][ T351] usb 4-1: config 1 interface 232 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 97.839761][ T351] usb 4-1: config 1 interface 232 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 97.854091][ T351] usb 4-1: config 1 interface 232 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 97.873176][ T351] usb 4-1: config 1 interface 154 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 97.884260][ T351] usb 4-1: config 1 interface 154 altsetting 1 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 97.896395][ T351] usb 4-1: config 1 interface 154 altsetting 1 endpoint 0x8B has invalid maxpacket 7145, setting to 64 [ 97.907560][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 97.912641][ T351] usb 4-1: config 1 interface 154 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 97.923513][ T351] usb 4-1: config 1 interface 154 altsetting 1 endpoint 0xA has an invalid bInterval 58, changing to 4 [ 97.934733][ T351] usb 4-1: config 1 interface 154 altsetting 1 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 97.938890][ T1769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.949416][ T351] usb 4-1: config 1 interface 154 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 97.954870][ T1769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.965632][ T351] usb 4-1: config 1 interface 154 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 97.965700][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.991187][ T351] usb 4-1: config 1 interface 154 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 98.001908][ T351] usb 4-1: config 1 interface 154 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 98.012860][ T351] usb 4-1: config 1 interface 154 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 98.023609][ T351] usb 4-1: config 1 interface 154 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 98.034615][ T351] usb 4-1: config 1 interface 154 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 98.045378][ T351] usb 4-1: config 1 interface 154 altsetting 1 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 98.058775][ T9] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 98.066960][ T9] usb 1-1: config 4 has an invalid descriptor of length 102, skipping remainder of the config [ 98.077439][ T351] usb 4-1: config 1 interface 107 has no altsetting 0 [ 98.084239][ T351] usb 4-1: config 1 interface 154 has no altsetting 0 [ 98.091066][ T9] usb 1-1: config 4 has no interface number 0 [ 98.098758][ T351] usb 4-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=cd.f1 [ 98.107880][ T9] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 98.116901][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.125025][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.133050][ T351] usb 4-1: Product: Ñ„ [ 98.137124][ T351] usb 4-1: Manufacturer: 鱗姃脢è¿ç·â†­á ‡æ¥£ä¿˜âº»âÝ¢ë¾ç®¹ê†‘英䬸æ¡äŽŒë‰€ë²žé´¥çŒ‰ä ³ç¼æ•„낦ۼ鄊悦衛ᑔ૵௩볺舴é´ë‡²ï‡§ì³¹ã¾™ìµ”鮈髅᪢ï¸ï®«ã­·æ°®å‹®íŠ‹í° [ 98.155423][ T316] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 98.163300][ T9] usb 1-1: Product: syz [ 98.167711][ T9] usb 1-1: Manufacturer: syz [ 98.172332][ T9] usb 1-1: SerialNumber: syz [ 98.177412][ T351] usb 4-1: SerialNumber: à Œ [ 98.318871][ T316] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.326977][ T316] usb 5-1: not running at top speed; connect to a high speed hub [ 98.335606][ T316] usb 5-1: config 3 has an invalid interface number: 155 but max is 0 [ 98.343846][ T316] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 98.353953][ T316] usb 5-1: config 3 has no interface number 0 [ 98.360103][ T316] usb 5-1: config 3 interface 155 altsetting 15 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 98.371073][ T316] usb 5-1: config 3 interface 155 altsetting 15 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 98.382319][ T316] usb 5-1: config 3 interface 155 altsetting 15 endpoint 0x87 has invalid maxpacket 61627, setting to 64 [ 98.386815][ T1750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.393665][ T316] usb 5-1: config 3 interface 155 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 98.403951][ T1750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.415666][ T316] usb 5-1: config 3 interface 155 has no altsetting 0 [ 98.424714][ T1750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.431790][ T316] usb 5-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice=8e.39 [ 98.439669][ T1751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.447299][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.456516][ T1750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.463689][ T316] usb 5-1: Product: syz [ 98.472341][ T1751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.475583][ T316] usb 5-1: Manufacturer: syz [ 98.487942][ T9] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 98.494358][ T9] usb 1-1: No valid video chain found. [ 98.502890][ T9] usb 1-1: USB disconnect, device number 45 [ 98.507751][ T1750] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 98.510561][ T316] usb 5-1: SerialNumber: syz [ 98.527698][ T351] ftdi_sio 4-1:1.107: FTDI USB Serial Device converter detected [ 98.537766][ T1767] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 98.545781][ T351] ftdi_sio ttyUSB0: unknown device type: 0xcdf1 [ 98.553562][ T351] ftdi_sio 4-1:1.232: FTDI USB Serial Device converter detected [ 98.561668][ T351] ftdi_sio ttyUSB1: unknown device type: 0xcdf1 [ 98.571142][ T351] ftdi_sio 4-1:1.154: FTDI USB Serial Device converter detected [ 98.579176][ T351] ftdi_sio ttyUSB2: unknown device type: 0xcdf1 [ 98.593059][ T351] usb 4-1: USB disconnect, device number 44 [ 98.599909][ T351] ftdi_sio 4-1:1.107: device disconnected [ 98.606774][ T351] ftdi_sio 4-1:1.232: device disconnected [ 98.616962][ T351] ftdi_sio 4-1:1.154: device disconnected [ 98.691823][ T1781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.701626][ T1781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.748496][ T36] audit: type=1400 audit(98.723:388): avc: denied { create } for pid=1766 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 98.821605][ T1782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.830186][ T1782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.983440][ T316] usb 5-1: USB disconnect, device number 43 [ 99.194562][ T1791] netlink: 'syz.3.492': attribute type 11 has an invalid length. [ 99.233509][ T1796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.242577][ T1796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.254302][ T1796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.263642][ T1796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.337392][ T65] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 99.498563][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.527426][ T65] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.536512][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.556141][ T65] usb 1-1: config 0 descriptor?? [ 99.797473][ T316] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 99.933259][ T1805] : renamed from bridge0 (while UP) [ 99.950754][ T316] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 99.969462][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.977995][ T1789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.986496][ T1789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.996080][ T316] usb 5-1: Product: syz [ 100.000459][ T316] usb 5-1: Manufacturer: syz [ 100.005756][ T316] usb 5-1: SerialNumber: syz [ 100.006540][ T65] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 100.036586][ T65] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000F/input/input18 [ 100.103333][ T1812] loop5: detected capacity change from 0 to 7 [ 100.113177][ T65] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 100.127457][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.136774][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.147376][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.156573][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.164453][ T1812] loop5: unable to read partition table [ 100.179817][ T1812] loop_reread_partitions: partition scan of loop5 (õùƒWå¡™‰ü¾) failed (rc=-5) [ 100.179882][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.198308][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.206911][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.216108][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.224385][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.233750][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.234172][ T316] usb 5-1: USB disconnect, device number 44 [ 100.243693][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.256673][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.265054][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.274234][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.448158][ T1810] netlink: 26148 bytes leftover after parsing attributes in process `syz.3.499'. [ 100.457316][ T1810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.499'. [ 100.472331][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.481637][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.501940][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.511163][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.519672][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.528891][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 100.695643][ T36] audit: type=1400 audit(100.663:389): avc: denied { read } for pid=1826 comm="syz.2.503" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 100.720141][ T36] audit: type=1400 audit(100.663:390): avc: denied { open } for pid=1826 comm="syz.2.503" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 100.753820][ T36] audit: type=1400 audit(100.663:391): avc: denied { ioctl } for pid=1826 comm="syz.2.503" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 100.779326][ T36] audit: type=1400 audit(100.663:392): avc: denied { execute } for pid=1826 comm="syz.2.503" path="/selinux/avc/cache_threshold" dev="selinuxfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 100.816507][ T316] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 100.882244][ T1835] netlink: 'syz.4.506': attribute type 27 has an invalid length. [ 100.934332][ T36] audit: type=1400 audit(100.903:393): avc: denied { setopt } for pid=1840 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.977430][ T316] usb 4-1: Using ep0 maxpacket: 32 [ 100.983976][ T316] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 100.992292][ T316] usb 4-1: config 0 has no interface number 0 [ 100.999008][ T316] usb 4-1: config 0 interface 184 has no altsetting 0 [ 101.007318][ T316] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.016508][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.024619][ T316] usb 4-1: Product: syz [ 101.028871][ T316] usb 4-1: Manufacturer: syz [ 101.033487][ T316] usb 4-1: SerialNumber: syz [ 101.039461][ T316] usb 4-1: config 0 descriptor?? [ 101.046194][ T316] smsc75xx v1.0.0 [ 101.102422][ T36] audit: type=1400 audit(101.073:394): avc: denied { read } for pid=1844 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.122048][ T1845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.130744][ T1845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.190187][ T1846] netlink: 84 bytes leftover after parsing attributes in process `syz.2.510'. [ 101.533737][ T1850] netlink: 'syz.4.511': attribute type 4 has an invalid length. [ 101.547455][ T1850] netlink: 17 bytes leftover after parsing attributes in process `syz.4.511'. [ 101.566370][ T1850] input: syz1 as /devices/virtual/input/input19 [ 101.609141][ T36] audit: type=1400 audit(101.583:395): avc: denied { unmount } for pid=682 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.648367][ T316] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 101.660500][ T316] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 102.007419][ T351] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 102.075080][ T316] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 102.086162][ T316] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 102.096000][ T316] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 102.105496][ T316] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 102.114816][ T316] usb 4-1: USB disconnect, device number 45 [ 102.125807][ T65] usb 1-1: USB disconnect, device number 46 [ 102.168539][ T351] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 102.183742][ T351] usb 5-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 102.194076][ T351] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.207080][ T351] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 102.216204][ T351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.227508][ T351] usb 5-1: config 0 descriptor?? [ 102.233640][ T351] usb-storage 5-1:0.0: USB Mass Storage device detected [ 102.243175][ T351] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 102.285859][ T1866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.516'. [ 102.296206][ T1866] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.307671][ T1866] IPv6: NLM_F_REPLACE set, but no existing node found! [ 102.322061][ T1868] rust_binder: Write failure EINVAL in pid:496 [ 102.388936][ T36] audit: type=1400 audit(102.363:396): avc: denied { read } for pid=1875 comm="syz.2.519" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 102.434336][ T65] usb 5-1: USB disconnect, device number 45 [ 102.470335][ T1877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.479990][ T1877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.488675][ T36] audit: type=1400 audit(102.463:397): avc: denied { mount } for pid=1875 comm="syz.2.519" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 102.510837][ T36] audit: type=1400 audit(102.483:398): avc: denied { mounton } for pid=1875 comm="syz.2.519" path="/174/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 102.606400][ T1888] overlayfs: failed to resolve './bus': -2 [ 102.632324][ T1895] veth1: entered allmulticast mode [ 102.640081][ T1894] veth1: left allmulticast mode [ 103.379087][ T1910] netlink: 868 bytes leftover after parsing attributes in process `syz.4.528'. [ 103.448232][ T1919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.477108][ T1919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.492976][ T110] loop5: unable to read partition table [ 103.549584][ T1924] veth1: entered allmulticast mode [ 103.556714][ T1923] veth1: left allmulticast mode [ 103.583377][ T1926] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.627419][ T351] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 103.667429][ T316] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 103.777422][ T351] usb 1-1: Using ep0 maxpacket: 32 [ 103.783982][ T351] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 103.792407][ T351] usb 1-1: config 0 has no interface number 0 [ 103.798698][ T351] usb 1-1: config 0 interface 184 has no altsetting 0 [ 103.807123][ T351] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 103.816242][ T351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.824298][ T351] usb 1-1: Product: syz [ 103.828549][ T351] usb 1-1: Manufacturer: syz [ 103.833378][ T351] usb 1-1: SerialNumber: syz [ 103.837394][ T65] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 103.838921][ T351] usb 1-1: config 0 descriptor?? [ 103.851691][ T351] smsc75xx v1.0.0 [ 103.856168][ T316] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 103.865380][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.873430][ T316] usb 5-1: Product: syz [ 103.877669][ T316] usb 5-1: Manufacturer: syz [ 103.882288][ T316] usb 5-1: SerialNumber: syz [ 103.887615][ T316] usb 5-1: config 0 descriptor?? [ 103.893570][ T316] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG [ 103.997414][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 104.004096][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.012617][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 104.025062][ T65] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 104.034503][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.042699][ T65] usb 4-1: Product: syz [ 104.046893][ T65] usb 4-1: Manufacturer: syz [ 104.051546][ T65] usb 4-1: SerialNumber: syz [ 104.141087][ T316] usb 5-1: USB disconnect, device number 46 [ 104.266828][ T65] usb 4-1: USB disconnect, device number 46 [ 104.282621][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.458795][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 104.469706][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 104.656047][ T1929] netlink: 'syz.4.535': attribute type 1 has an invalid length. [ 105.510966][ T1964] netlink: 'syz.2.543': attribute type 29 has an invalid length. [ 105.518802][ T1964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 105.528558][ T1965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.537407][ T1964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.546006][ T1965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.554202][ T1964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.566053][ T1964] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 105.566074][ T1964] rust_binder: Read failure Err(EFAULT) in pid:519 [ 105.574372][ T1965] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 105.580953][ T1965] rust_binder: Read failure Err(EFAULT) in pid:519 [ 106.127399][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 106.297388][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 106.304160][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.314550][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 106.323804][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.332102][ T9] usb 4-1: Product: syz [ 106.336447][ T9] usb 4-1: Manufacturer: syz [ 106.341320][ T9] usb 4-1: SerialNumber: syz [ 106.393870][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 106.422591][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 106.432904][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 106.442815][ T351] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 106.460422][ T351] usb 1-1: USB disconnect, device number 47 [ 106.563109][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 106.586777][ T9] usb 4-1: USB disconnect, device number 47 [ 106.777480][ T351] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 106.927399][ T351] usb 1-1: Using ep0 maxpacket: 32 [ 106.935330][ T351] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 106.944698][ T351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.952963][ T351] usb 1-1: Product: syz [ 106.957206][ T351] usb 1-1: Manufacturer: syz [ 106.962029][ T351] usb 1-1: SerialNumber: syz [ 107.057429][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 107.207480][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 107.216122][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 107.226448][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 107.237102][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 107.249220][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.257258][ T9] usb 4-1: Product: syz [ 107.261509][ T9] usb 4-1: Manufacturer: syz [ 107.268881][ T1992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:533 [ 107.269190][ T9] usb 4-1: SerialNumber: syz [ 107.320658][ T1995] netlink: 'syz.2.553': attribute type 21 has an invalid length. [ 107.328500][ T1995] netlink: 388 bytes leftover after parsing attributes in process `syz.2.553'. [ 107.411351][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 107.411370][ T36] audit: type=1400 audit(107.383:404): avc: denied { create } for pid=1999 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 107.446749][ T36] audit: type=1400 audit(107.393:405): avc: denied { sys_admin } for pid=1999 comm="syz.2.554" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 107.497851][ T9] usb 4-1: USB disconnect, device number 48 [ 107.692285][ T351] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 107.713611][ T351] usb 1-1: USB disconnect, device number 48 [ 107.721725][ T2015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.555'. [ 108.027417][ T351] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 108.067432][ T36] audit: type=1400 audit(108.033:406): avc: denied { write } for pid=2019 comm="syz.3.557" path="socket:[17516]" dev="sockfs" ino=17516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.197391][ T351] usb 1-1: Using ep0 maxpacket: 32 [ 108.207084][ T351] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 108.219802][ T351] usb 1-1: config 0 has no interface number 0 [ 108.229293][ T351] usb 1-1: config 0 interface 184 has no altsetting 0 [ 108.241550][ T351] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 108.255106][ T351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.267393][ T351] usb 1-1: Product: syz [ 108.271591][ T351] usb 1-1: Manufacturer: syz [ 108.286416][ T351] usb 1-1: SerialNumber: syz [ 108.291910][ T351] usb 1-1: config 0 descriptor?? [ 108.299819][ T351] smsc75xx v1.0.0 [ 108.908002][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 108.923409][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 109.017457][ T792] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 109.123177][ T2040] netlink: 88 bytes leftover after parsing attributes in process `syz.2.563'. [ 109.150358][ T2040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.178469][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 109.188385][ T2040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.197410][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 7 [ 109.208417][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 9272, setting to 1024 [ 109.228845][ T792] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.238038][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.246055][ T792] usb 4-1: Product: syz [ 109.250339][ T792] usb 4-1: Manufacturer: syz [ 109.254955][ T792] usb 4-1: SerialNumber: syz [ 109.267661][ T792] usb 4-1: config 0 descriptor?? [ 109.274147][ T792] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37 [ 109.492965][ T792] usb 4-1: USB disconnect, device number 49 [ 109.506225][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.829864][ T36] audit: type=1400 audit(109.803:407): avc: denied { execute_no_trans } for pid=2042 comm="syz.2.564" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.245927][ T36] audit: type=1400 audit(110.213:408): avc: denied { bpf } for pid=2051 comm="syz.3.567" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.537401][ T792] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 110.687415][ T792] usb 4-1: Using ep0 maxpacket: 8 [ 110.693817][ T792] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 110.702255][ T792] usb 4-1: config 179 has no interface number 0 [ 110.710823][ T792] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 110.714905][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 110.728577][ T792] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 110.743548][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 110.757378][ T351] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 110.768670][ T792] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 110.785192][ T792] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 110.787127][ T351] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 110.808128][ T792] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.827383][ T792] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 110.845679][ T351] usb 1-1: USB disconnect, device number 49 [ 110.846708][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.908755][ T2053] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 111.017372][ T2046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.565'. [ 111.246480][ T65] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input20 [ 111.447567][ T2052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.456142][ T2052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.547909][ T2060] syz.2.569 uses obsolete (PF_INET,SOCK_PACKET) [ 111.695759][ T2052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.715124][ T2052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.777440][ T792] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 111.810910][ T319] usb 4-1: USB disconnect, device number 50 [ 111.810964][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 111.811001][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 111.848403][ T319] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 111.927388][ T792] usb 5-1: Using ep0 maxpacket: 16 [ 111.935313][ T792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.945806][ T792] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.958889][ T792] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.968168][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.976199][ T792] usb 5-1: Product: syz [ 111.987376][ T792] usb 5-1: Manufacturer: syz [ 111.992043][ T792] usb 5-1: SerialNumber: syz [ 112.017302][ T36] audit: type=1400 audit(111.983:409): avc: denied { setcurrent } for pid=2072 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 112.044960][ T2073] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.059636][ T2073] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 112.071167][ T2073] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 112.145580][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.154608][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.163725][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.173121][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.184477][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.198825][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.211568][ T792] usb 5-1: 0:2 : does not exist [ 112.218051][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.231112][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.239070][ T792] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 112.250579][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.264577][ T792] usb 5-1: USB disconnect, device number 47 [ 112.290867][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.327388][ T319] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 112.361376][ T36] audit: type=1401 audit(112.333:410): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 112.582839][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.605709][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.776326][ T2097] kernel read not supported for file /policy (pid: 2097 comm: syz.4.579) [ 112.784923][ T36] audit: type=1400 audit(112.743:411): avc: denied { module_load } for pid=2096 comm="syz.4.579" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 113.159358][ T2097] netlink: 'syz.4.579': attribute type 4 has an invalid length. [ 113.167304][ T2097] netlink: 3681 bytes leftover after parsing attributes in process `syz.4.579'. [ 113.216428][ T2103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.243714][ T2103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.477404][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 113.627403][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 113.633698][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.644671][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.654474][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.663544][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.672147][ T9] usb 5-1: config 0 descriptor?? [ 113.678388][ T9] hub 5-1:0.0: USB hub found [ 113.767912][ T36] audit: type=1400 audit(113.743:412): avc: denied { write } for pid=2113 comm="syz.2.585" name="usbmon1" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.859648][ T2120] netlink: 'syz.2.587': attribute type 1 has an invalid length. [ 113.881287][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 113.939179][ T2123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.949135][ T2123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.077468][ T316] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 114.091303][ T9] hid-generic 0003:046D:C31C.0010: item fetching failed at offset 0/1 [ 114.099735][ T9] hid-generic 0003:046D:C31C.0010: probe with driver hid-generic failed with error -22 [ 114.230800][ T316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.239512][ T316] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 114.254311][ T316] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 114.263481][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.271587][ T316] usb 4-1: Product: syz [ 114.275850][ T316] usb 4-1: Manufacturer: syz [ 114.280485][ T316] usb 4-1: SerialNumber: syz [ 114.397509][ T65] usb 5-1: USB disconnect, device number 48 [ 114.487420][ T792] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 114.491372][ T316] usb 4-1: unit 4 not found! [ 114.516907][ T316] usb 4-1: USB disconnect, device number 51 [ 114.540928][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.637399][ T792] usb 1-1: Using ep0 maxpacket: 8 [ 114.645985][ T792] usb 1-1: string descriptor 0 read error: -22 [ 114.652245][ T792] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 114.661343][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.887649][ T792] usb 1-1: USB disconnect, device number 51 [ 115.047433][ T316] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 115.197421][ T316] usb 5-1: Using ep0 maxpacket: 32 [ 115.203926][ T316] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.212445][ T316] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 115.221179][ T316] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.231297][ T316] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.242408][ T316] usb 5-1: string descriptor 0 read error: -22 [ 115.248688][ T316] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.257759][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.268159][ T316] usb 5-1: 0:2 : does not exist [ 115.470023][ T316] usb 5-1: USB disconnect, device number 49 [ 115.917422][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.917432][ T1033] Bluetooth: hci0: command 0x1003 tx timeout [ 116.009077][ T2136] netlink: 140 bytes leftover after parsing attributes in process `syz.4.594'. [ 116.018639][ T2136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.594'. [ 116.097427][ T316] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 116.267383][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 116.273742][ T316] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.281809][ T316] usb 4-1: config 0 has no interface number 0 [ 116.287980][ T316] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.297793][ T316] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 116.306892][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.315913][ T316] usb 4-1: config 0 descriptor?? [ 116.322082][ T316] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 116.452546][ T36] audit: type=1400 audit(116.423:413): avc: denied { write } for pid=2140 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 116.463671][ T2147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.479596][ T2147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.587459][ T792] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 116.737412][ T792] usb 1-1: Using ep0 maxpacket: 16 [ 116.743708][ T792] usb 1-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.754903][ T792] usb 1-1: config 0 interface 0 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 116.767976][ T792] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.775262][ T792] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 116.784355][ T792] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 116.792449][ T792] usb 1-1: Product: syz [ 116.797132][ T792] usb 1-1: config 0 descriptor?? [ 116.843234][ T2152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2152 comm=syz.4.598 [ 116.973296][ T36] audit: type=1400 audit(116.943:414): avc: denied { remount } for pid=2155 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 116.993257][ T2156] overlay: filesystem on ./bus not supported as upperdir [ 117.004417][ T2139] netlink: 72 bytes leftover after parsing attributes in process `syz.0.595'. [ 117.013506][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 117.024993][ T792] usbhid 1-1:0.0: can't add hid device: -71 [ 117.032475][ T792] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 117.041920][ T792] usb 1-1: USB disconnect, device number 52 [ 117.069333][ T665] bridge_slave_1: left allmulticast mode [ 117.075048][ T665] bridge_slave_1: left promiscuous mode [ 117.080998][ T665] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.089149][ T665] bridge_slave_0: left allmulticast mode [ 117.094888][ T665] bridge_slave_0: left promiscuous mode [ 117.100823][ T665] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.253041][ T665] veth1_macvtap: left promiscuous mode [ 117.258694][ T665] veth0_vlan: left promiscuous mode [ 117.342523][ T2164] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.349658][ T2164] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.361336][ T2164] bridge_slave_0: entered allmulticast mode [ 117.367867][ T2164] bridge_slave_0: entered promiscuous mode [ 117.378697][ T2164] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.385771][ T2164] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.393343][ T2164] bridge_slave_1: entered allmulticast mode [ 117.399756][ T2164] bridge_slave_1: entered promiscuous mode [ 117.468168][ T2164] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.475267][ T2164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.482646][ T2164] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.489724][ T2164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.517649][ T674] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.525391][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.550839][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.557948][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.580254][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.587385][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.632234][ T2164] veth0_vlan: entered promiscuous mode [ 117.647961][ T36] audit: type=1400 audit(117.613:415): avc: denied { write } for pid=2170 comm="syz.0.605" name="rt6_stats" dev="proc" ino=4026532364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 117.678636][ T2164] veth1_macvtap: entered promiscuous mode [ 117.707666][ T36] audit: type=1400 audit(117.683:416): avc: denied { mount } for pid=2164 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.987401][ T65] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 118.017471][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 118.147392][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 118.153748][ T65] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.177428][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 118.177965][ T65] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.186087][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 118.189342][ T65] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 118.198944][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.217412][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.220699][ T9] usb 6-1: Product: syz [ 118.230071][ T9] usb 6-1: Manufacturer: syz [ 118.234838][ T9] usb 6-1: SerialNumber: syz [ 118.237873][ T65] usb 1-1: config 0 descriptor?? [ 118.451136][ T9] usb 6-1: selecting invalid altsetting 1 [ 118.460417][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 118.473735][ T9] usb 6-1: USB disconnect, device number 2 [ 118.485183][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.648438][ T65] hid-generic 0003:1E71:2009.0011: unknown main item tag 0x0 [ 118.655932][ T65] hid-generic 0003:1E71:2009.0011: unknown main item tag 0x0 [ 118.677532][ T65] hid-generic 0003:1E71:2009.0011: unknown main item tag 0x0 [ 118.684984][ T65] hid-generic 0003:1E71:2009.0011: unknown main item tag 0x0 [ 118.692423][ T65] hid-generic 0003:1E71:2009.0011: unknown main item tag 0x0 [ 118.700717][ T65] hid-generic 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 118.863149][ T9] usb 4-1: USB disconnect, device number 52 [ 118.905929][ C0] usb 1-1: input irq status -75 received [ 119.106594][ T2177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.116285][ T2177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.125782][ T319] usb 1-1: USB disconnect, device number 53 [ 119.155245][ T2205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.164423][ T2205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.217715][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 119.227571][ T316] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 119.368453][ T9] usb 4-1: config index 0 descriptor too short (expected 108, got 68) [ 119.376656][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 119.386529][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 119.400379][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.409478][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.417559][ T9] usb 4-1: SerialNumber: syz [ 119.422458][ T316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.433862][ T316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.443722][ T316] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 119.444025][ T2187] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.452914][ T316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.469373][ T316] usb 6-1: config 0 descriptor?? [ 119.677691][ T2187] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.688247][ T316] usbhid 6-1:0.0: can't add hid device: -71 [ 119.694283][ T316] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 119.711319][ T316] usb 6-1: USB disconnect, device number 3 [ 119.908245][ T2230] netlink: 'syz.0.624': attribute type 25 has an invalid length. [ 120.019113][ T2238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.041296][ T2238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.187410][ T316] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 120.297393][ T319] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 120.317411][ T316] usb 6-1: device descriptor read/64, error -71 [ 120.468574][ T319] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.479798][ T319] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 120.492803][ T319] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.499463][ T319] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 120.508550][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.517417][ T319] usb 1-1: config 0 descriptor?? [ 120.557449][ T316] usb 6-1: device descriptor read/64, error -71 [ 120.680412][ T2244] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 120.804797][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 120.818415][ T316] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 120.837638][ T9] usb 4-1: USB disconnect, device number 53 [ 120.924092][ T319] hid (null): invalid report_size 26545 [ 120.939801][ T319] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.0012/input/input21 [ 120.964403][ T319] uclogic 0003:28BD:0909.0012: input,hidraw0: USB HID vff.fb Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 120.977584][ T316] usb 6-1: device descriptor read/64, error -71 [ 121.147530][ T351] usb 1-1: USB disconnect, device number 54 [ 121.247401][ T316] usb 6-1: device descriptor read/64, error -71 [ 121.367500][ T316] usb usb6-port1: attempt power cycle [ 121.475261][ T2254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.486119][ T2255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.495504][ T2254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.504106][ T2255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.717438][ T316] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 121.746014][ T316] usb 6-1: device descriptor read/8, error -71 [ 121.878768][ T316] usb 6-1: device descriptor read/8, error -71 [ 122.140078][ T2277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.157412][ T319] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 122.177613][ T2277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.197900][ T2277] tmpfs: Bad value for 'size' [ 122.204860][ T2277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.214746][ T2277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.317381][ T319] usb 1-1: Using ep0 maxpacket: 16 [ 122.328121][ T319] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 122.336138][ T319] usb 1-1: config 0 has no interface number 0 [ 122.342533][ T319] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.348158][ T316] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 122.353690][ T319] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.370880][ T319] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 122.380118][ T319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.389213][ T319] usb 1-1: config 0 descriptor?? [ 122.399238][ T316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 122.412211][ T316] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 122.421723][ T316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.429972][ T316] usb 6-1: Product: syz [ 122.434281][ T316] usb 6-1: Manufacturer: syz [ 122.440882][ T316] usb 6-1: SerialNumber: syz [ 122.447849][ T316] usb 6-1: config 0 descriptor?? [ 122.454121][ T2272] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 122.462698][ T316] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 122.469350][ T316] usb 6-1: No valid video chain found. [ 122.666536][ T316] usb 6-1: USB disconnect, device number 7 [ 122.796900][ T319] usbhid 1-1:0.1: can't add hid device: -71 [ 122.807423][ T319] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 122.827490][ T319] usb 1-1: USB disconnect, device number 55 [ 122.863282][ T2285] 8021q: VLANs not supported on ip6tnl0 [ 122.886637][ T2287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.895535][ T2287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.903946][ T2287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.913699][ T2287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.922732][ T2287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 122.927445][ T9] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 123.088458][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.100070][ T9] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 123.109201][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.117201][ T9] usb 4-1: Product: syz [ 123.121677][ T9] usb 4-1: Manufacturer: syz [ 123.126637][ T9] usb 4-1: SerialNumber: syz [ 123.132269][ T9] usb 4-1: config 0 descriptor?? [ 123.138177][ T9] plusb 4-1:0.0: probe with driver plusb failed with error -22 [ 123.186555][ T36] audit: type=1400 audit(123.153:417): avc: denied { setattr } for pid=2288 comm="syz.5.646" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 123.217813][ T36] audit: type=1400 audit(123.193:418): avc: denied { execute } for pid=2290 comm="syz.5.647" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.218459][ T2291] binder: Unknown parameter 'vø [ 123.218459][ T2291] «²‰Êç [ 123.218459][ T2291] ' [ 123.238164][ T36] audit: type=1400 audit(123.193:419): avc: denied { execute_no_trans } for pid=2290 comm="syz.5.647" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.344467][ T2279] syz.3.642: attempt to access beyond end of device [ 123.344467][ T2279] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 123.358218][ T2279] EXT4-fs (loop3): unable to read superblock [ 123.418914][ T2280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.429283][ T2280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.439595][ T36] audit: type=1400 audit(123.413:420): avc: denied { map } for pid=2278 comm="syz.3.642" path="socket:[20517]" dev="sockfs" ino=20517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.607398][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 123.652081][ T316] usb 4-1: USB disconnect, device number 54 [ 123.767414][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 123.773909][ T9] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 123.782243][ T9] usb 6-1: config 0 has no interface number 0 [ 123.790465][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 123.799854][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.808054][ T9] usb 6-1: Product: syz [ 123.812384][ T9] usb 6-1: Manufacturer: syz [ 123.817035][ T9] usb 6-1: SerialNumber: syz [ 123.827381][ T9] usb 6-1: config 0 descriptor?? [ 123.991653][ T36] audit: type=1400 audit(123.963:421): avc: denied { mount } for pid=2308 comm="syz.0.653" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 124.359721][ T36] audit: type=1400 audit(124.333:422): avc: denied { bind } for pid=2327 comm="syz.0.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.386874][ T2328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 124.477584][ T65] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 124.511902][ T2332] tmpfs: Unknown parameter 'nr_b' [ 124.518410][ T2332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.527009][ T2332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.562125][ T36] audit: type=1400 audit(124.533:423): avc: denied { append } for pid=2333 comm="syz.0.661" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.647405][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 124.653676][ T65] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.661840][ T65] usb 4-1: config 0 has no interface number 0 [ 124.668281][ T65] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.679269][ T65] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.689197][ T65] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 124.698385][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.707425][ T65] usb 4-1: config 0 descriptor?? [ 124.797473][ T792] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 124.947397][ T792] usb 1-1: Using ep0 maxpacket: 32 [ 124.955971][ T792] usb 1-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 124.965106][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.973259][ T792] usb 1-1: Product: syz [ 124.977510][ T792] usb 1-1: Manufacturer: syz [ 124.982199][ T792] usb 1-1: SerialNumber: syz [ 125.098792][ T2336] kvm: pic: non byte write [ 125.116734][ T65] usbhid 4-1:0.1: can't add hid device: -71 [ 125.123057][ T65] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 125.137484][ T65] usb 4-1: USB disconnect, device number 55 [ 125.153859][ T36] audit: type=1400 audit(125.123:424): avc: denied { setopt } for pid=2338 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.154419][ T2339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.182386][ T2339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.195919][ T792] usb 1-1: MIDIStreaming interface descriptor not found [ 125.207011][ T792] usb 1-1: USB disconnect, device number 56 [ 125.221902][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.630073][ T2341] rust_binder: Error while translating object. [ 125.630144][ C1] BUG: TASK stack guard page was hit at ffffc9000b677ed8 (stack is ffffc9000b678000..ffffc9000b680000) [ 125.630172][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 125.630197][ C1] CPU: 1 UID: 0 PID: 2341 Comm: syz.3.664 Not tainted syzkaller #0 ac2a27d768ff058c41d327a0fd721d48eec9ad0c [ 125.630218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.630225][ C1] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 125.630245][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 125.630254][ C1] RSP: 0018:ffffc9000b677ee0 EFLAGS: 00010282 [ 125.630265][ C1] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc9000b678250 [ 125.630278][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 125.630290][ C1] RBP: ffffc9000b6781b0 R08: ffffffff876aae23 R09: 1ffffffff0ed55c4 [ 125.630304][ C1] R10: dffffc0000000000 R11: fffffbfff0ed55c5 R12: 0000000000000680 [ 125.630317][ C1] R13: dffffc0000000000 R14: 1ffff920016cf03c R15: ffffc9000b678250 [ 125.630331][ C1] FS: 00007f34a96d46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 125.630348][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.630362][ C1] CR2: ffffc9000b677ed8 CR3: 00000001430bc000 CR4: 00000000003526b0 [ 125.630376][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 125.630383][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 125.630391][ C1] Call Trace: [ 125.630396][ C1] [ 125.630402][ C1] ? __kasan_check_read+0x15/0x20 [ 125.630418][ C1] ? static_key_count+0x45/0x70 [ 125.630444][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 125.630468][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 125.630494][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 125.630514][ C1] ? unwind_next_frame+0x3c1/0x750 [ 125.630527][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 125.630539][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 125.630558][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 125.630571][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 125.630597][ C1] ? stack_depot_save_flags+0x672/0x800 [ 125.630623][ C1] ? stack_depot_save+0x12/0x20 [ 125.630645][ C1] ? save_stack+0x133/0x240 [ 125.630662][ C1] ? free_contig_range+0x260/0x260 [ 125.630676][ C1] ? __reset_page_owner+0x450/0x450 [ 125.630689][ C1] ? zone_page_state_add+0x43/0x90 [ 125.630703][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 125.630714][ C1] ? prep_new_page+0x20/0x120 [ 125.630728][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 125.630747][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 125.630768][ C1] ? stack_depot_save_flags+0x672/0x800 [ 125.630790][ C1] ? kasan_save_track+0x4f/0x80 [ 125.630813][ C1] ? kasan_save_free_info+0x4a/0x60 [ 125.630826][ C1] ? __kasan_slab_free+0x5f/0x80 [ 125.630835][ C1] ? kfree+0x158/0x440 [ 125.630848][ C1] ? krealloc_noprof+0xfa/0x130 [ 125.630862][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 125.630898][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 125.630932][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 125.630964][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 125.630980][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 125.631001][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 125.631016][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 125.631038][ C1] ? sched_clock_noinstr+0xd/0x30 [ 125.631059][ C1] ? __set_page_owner+0x8e/0x600 [ 125.631076][ C1] ? __zone_watermark_ok+0x134/0x630 [ 125.631096][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 125.631114][ C1] ? kasan_unpoison+0x4a/0x70 [ 125.631128][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 125.631138][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 125.631149][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 125.631163][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 125.631175][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 125.631194][ C1] ? prep_new_page+0x20/0x120 [ 125.631212][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 125.631239][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 125.631259][ C1] ? static_key_count+0x45/0x70 [ 125.631271][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 125.631284][ C1] ? __cfi_gfp_zone+0x1/0x10 [ 125.631299][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 125.631311][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 125.631324][ C1] ? unwind_get_return_address+0x51/0x90 [ 125.631344][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 125.631362][ C1] ? arch_stack_walk+0x10a/0x170 [ 125.631388][ C1] ? stack_trace_save+0xaa/0x100 [ 125.631406][ C1] ? stack_depot_save_flags+0x672/0x800 [ 125.631422][ C1] ? kasan_save_track+0x4f/0x80 [ 125.631443][ C1] ? kasan_save_track+0x3e/0x80 [ 125.631457][ C1] ? kasan_save_free_info+0x4a/0x60 [ 125.631469][ C1] ? __kasan_slab_free+0x5f/0x80 [ 125.631486][ C1] ? kfree+0x158/0x440 [ 125.631507][ C1] ? krealloc_noprof+0xfa/0x130 [ 125.631530][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 125.631566][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 125.631585][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 125.631606][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 125.631623][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 125.631654][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 125.631679][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 125.631712][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 125.631728][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 125.631742][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 125.631752][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 125.631762][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 125.631783][ C1] ? do_syscall_64+0x57/0xf0 [ 125.631800][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.631824][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 125.631850][ C1] ? kasan_save_free_info+0x4a/0x60 [ 125.631867][ C1] ? __kasan_slab_free+0x5f/0x80 [ 125.631876][ C1] ? kfree+0x158/0x440 [ 125.631888][ C1] ? krealloc_noprof+0xfa/0x130 [ 125.631902][ C1] ? krealloc_noprof+0xfa/0x130 [ 125.631916][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 125.631953][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 125.631993][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 125.632022][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 125.632049][ C1] ? __kasan_check_write+0x18/0x20 [ 125.632062][ C1] ? _raw_spin_lock+0x92/0x120 [ 125.632075][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.632094][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 125.632128][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 125.632164][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 125.632183][ C1] ? __asan_memcpy+0x5a/0x80 [ 125.632196][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 125.632214][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 125.632242][ C1] ? __kasan_check_write+0x18/0x20 [ 125.632264][ C1] ? _raw_spin_lock+0x92/0x120 [ 125.632281][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.632298][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 125.632325][ C1] ? __asan_memcpy+0x5a/0x80 [ 125.632338][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 125.632360][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 125.632392][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 125.632422][ C1] ? __asan_memcpy+0x5a/0x80 [ 125.632451][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 125.632471][ C1] ? __kasan_check_write+0x18/0x20 [ 125.632484][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 125.632502][ C1] ? __kasan_check_write+0x18/0x20 [ 125.632516][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.632534][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 125.632568][ C1] ? __asan_memcpy+0x5a/0x80 [ 125.632590][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 125.632621][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 125.632634][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 125.632648][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 125.632671][ C1] ? __kasan_check_write+0x18/0x20 [ 125.632693][ C1] ? mutex_unlock+0x90/0x240 [ 125.632714][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 125.632737][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 125.632756][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 125.632775][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 125.632789][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 125.632799][ C1] ? prep_new_page+0x20/0x120 [ 125.632809][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 125.632824][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 125.632843][ C1] ? pte_alloc_one+0x92/0x530 [ 125.632859][ C1] ? __pte_alloc+0x79/0x440 [ 125.632881][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 125.632911][ C1] ? __asan_memcpy+0x5a/0x80 [ 125.632924][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 125.632943][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 125.632961][ C1] ? __set_page_owner+0x3fe/0x600 [ 125.632974][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 125.633003][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 125.633035][ C1] ? desc_read+0x202/0x3e0 [ 125.633052][ C1] ? __kasan_check_write+0x18/0x20 [ 125.633068][ C1] ? desc_read+0x1ab/0x3e0 [ 125.633077][ C1] ? prb_first_seq+0x109/0x1d0 [ 125.633087][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 125.633097][ C1] ? __kasan_check_write+0x18/0x20 [ 125.633110][ C1] ? desc_read+0x1ab/0x3e0 [ 125.633124][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 125.633146][ C1] ? kernel_text_address+0xa9/0xe0 [ 125.633168][ C1] ? __kernel_text_address+0x11/0x40 [ 125.633189][ C1] ? __kasan_check_write+0x18/0x20 [ 125.633210][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 125.633221][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 125.633232][ C1] ? stack_trace_save+0xaa/0x100 [ 125.633242][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 125.633253][ C1] ? stack_depot_save_flags+0x399/0x800 [ 125.633268][ C1] ? kasan_save_track+0x4f/0x80 [ 125.633291][ C1] ? kasan_save_track+0x3e/0x80 [ 125.633315][ C1] ? kasan_save_free_info+0x4a/0x60 [ 125.633336][ C1] ? __kasan_slab_free+0x5f/0x80 [ 125.633351][ C1] ? kfree+0x158/0x440 [ 125.633367][ C1] ? krealloc_noprof+0xfa/0x130 [ 125.633380][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x371/0x820 [ 125.633405][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a19/0x9130 [ 125.633436][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 125.633461][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 125.633495][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 125.633517][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 125.633531][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 125.633540][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 125.633549][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 125.633563][ C1] ? do_syscall_64+0x57/0xf0 [ 125.633579][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.633604][ C1] ? __kasan_slab_free+0x6a/0x80 [ 125.633621][ C1] ? kfree+0x158/0x440 [ 125.633642][ C1] ? krealloc_noprof+0xfa/0x130 [ 125.633662][ C1] ? __cfi_console_unlock+0x10/0x10 [ 125.633673][ C1] ? krealloc_noprof+0xfa/0x130 [ 125.633690][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 125.633703][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 125.633735][ C1] ? irq_work_queue+0xc2/0x160 [ 125.633755][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 125.633795][ C1] ? vprintk_emit+0x3e3/0x650 [ 125.633811][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 125.633822][ C1] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 125.633836][ C1] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 125.633851][ C1] ? vprintk_default+0x2a/0x40 [ 125.633862][ C1] ? vprintk+0x93/0xa0 [ 125.633883][ C1] ? _printk+0xde/0x140 [ 125.633901][ C1] ? __cfi___check_object_size+0x10/0x10 [ 125.633926][ C1] ? __cfi__printk+0x10/0x10 [ 125.633944][ C1] ? _copy_from_user+0x87/0xa0 [ 125.633959][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 125.633974][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 125.633994][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 125.634022][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 125.634084][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 125.634105][ C1] ? kernel_text_address+0xa9/0xe0 [ 125.634118][ C1] ? __kernel_text_address+0x11/0x40 [ 125.634129][ C1] ? unwind_get_return_address+0x51/0x90 [ 125.634141][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 125.634151][ C1] ? arch_stack_walk+0x10a/0x170 [ 125.634171][ C1] ? stack_depot_save_flags+0x38/0x800 [ 125.634194][ C1] ? kasan_save_track+0x4f/0x80 [ 125.634218][ C1] ? kasan_save_track+0x3e/0x80 [ 125.634242][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 125.634260][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 125.634269][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 125.634283][ C1] ? krealloc_noprof+0x8d/0x130 [ 125.634297][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x57f/0x32e0 [ 125.634311][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x7c0/0x2660 [ 125.634341][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x220e/0xaf80 [ 125.634369][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 125.634392][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 125.634406][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 125.634415][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 125.634434][ C1] ? do_syscall_64+0x57/0xf0 [ 125.634445][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.634458][ C1] ? __kasan_check_write+0x18/0x20 [ 125.634479][ C1] ? _raw_spin_lock+0x92/0x120 [ 125.634496][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.634514][ C1] ? __kasan_check_write+0x18/0x20 [ 125.634536][ C1] ? _RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0xc1/0x260 [ 125.634555][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 125.634568][ C1] ? _raw_spin_unlock+0x45/0x60 [ 125.634578][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 125.634592][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 125.634624][ C1] ? __kasan_check_write+0x18/0x20 [ 125.634646][ C1] ? mutex_unlock+0x90/0x240 [ 125.634667][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 125.634690][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 125.634706][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 125.634722][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 125.634750][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 125.634766][ C1] ? kernel_text_address+0xa9/0xe0 [ 125.634785][ C1] ? core_kernel_text+0x20/0xa0 [ 125.634805][ C1] ? unwind_get_return_address+0x51/0x90 [ 125.634825][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 125.634847][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 125.634865][ C1] ? krealloc_noprof+0x8d/0x130 [ 125.634878][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 125.634908][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xa2f/0x1290 [ 125.634945][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 125.634974][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 125.634995][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 125.635007][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 125.635022][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 125.635053][ C1] ? __asan_memset+0x39/0x50 [ 125.635073][ C1] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x2ff/0x850 [ 125.635122][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.635140][ C1] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10 [ 125.635174][ C1] ? __kasan_check_write+0x18/0x20 [ 125.635188][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 125.635203][ C1] ? __asan_memcpy+0x5a/0x80 [ 125.635223][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 125.635248][ C1] ? avc_has_perm+0x155/0x240 [ 125.635274][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 125.635296][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 125.635311][ C1] ? __kasan_check_write+0x18/0x20 [ 125.635325][ C1] ? _raw_spin_lock+0x92/0x120 [ 125.635335][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 125.635346][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 125.635375][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 125.635413][ C1] ? __kasan_check_write+0x18/0x20 [ 125.635442][ C1] ? _raw_spin_lock+0x92/0x120 [ 125.635455][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.635466][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x155c/0xaf80 [ 125.635483][ C1] ? __asan_memcpy+0x5a/0x80 [ 125.635497][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 125.635529][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 125.635599][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 125.635613][ C1] ? kernel_text_address+0xa9/0xe0 [ 125.635625][ C1] ? __kernel_text_address+0x11/0x40 [ 125.635638][ C1] ? unwind_get_return_address+0x51/0x90 [ 125.635650][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 125.635665][ C1] ? arch_stack_walk+0x10a/0x170 [ 125.635690][ C1] ? stack_depot_save_flags+0x38/0x800 [ 125.635713][ C1] ? dev_kfree_skb_any_reason+0x127/0x130 [ 125.635736][ C1] ? napi_consume_skb+0x16e/0x2b0 [ 125.635758][ C1] ? dev_hard_start_xmit+0x218/0x760 [ 125.635772][ C1] ? kasan_save_track+0x4f/0x80 [ 125.635786][ C1] ? kasan_save_track+0x3e/0x80 [ 125.635800][ C1] ? kasan_save_free_info+0x4a/0x60 [ 125.635815][ C1] ? __kasan_slab_free+0x5f/0x80 [ 125.635831][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 125.635855][ C1] ? __kfree_skb+0x18f/0x210 [ 125.635878][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 125.635902][ C1] ? dev_kfree_skb_any_reason+0x127/0x130 [ 125.635915][ C1] ? napi_consume_skb+0x16e/0x2b0 [ 125.635929][ C1] ? __free_old_xmit+0x2cd/0x610 [ 125.635940][ C1] ? start_xmit+0x193/0x1fa0 [ 125.635954][ C1] ? dev_hard_start_xmit+0x218/0x760 [ 125.635972][ C1] ? sch_direct_xmit+0x265/0x910 [ 125.635992][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 125.636016][ C1] ? kernel_text_address+0xa9/0xe0 [ 125.636037][ C1] ? __kernel_text_address+0x11/0x40 [ 125.636056][ C1] ? unwind_get_return_address+0x51/0x90 [ 125.636067][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 125.636078][ C1] ? arch_stack_walk+0x10a/0x170 [ 125.636094][ C1] ? stack_depot_save_flags+0x38/0x800 [ 125.636108][ C1] ? kasan_save_track+0x4f/0x80 [ 125.636131][ C1] ? kasan_save_track+0x3e/0x80 [ 125.636155][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 125.636177][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 125.636193][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 125.636211][ C1] ? krealloc_noprof+0x8d/0x130 [ 125.636225][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x914/0x1bb0 [ 125.636239][ C1] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 125.636264][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 125.636281][ C1] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 125.636317][ C1] ? __kasan_check_write+0x18/0x20 [ 125.636340][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x502/0xee0 [ 125.636361][ C1] ? __kasan_check_write+0x18/0x20 [ 125.636374][ C1] ? _raw_spin_lock+0x92/0x120 [ 125.636385][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.636396][ C1] ? _raw_spin_unlock+0x45/0x60 [ 125.636406][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x5ec/0x950 [ 125.636439][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 125.636467][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 125.636504][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 125.636528][ C1] ? __kasan_check_write+0x18/0x20 [ 125.636542][ C1] ? _raw_spin_lock+0x92/0x120 [ 125.636552][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.636566][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x125c/0x1bb0 [ 125.636589][ C1] ? __asan_memcpy+0x5a/0x80 [ 125.636612][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 125.636633][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x12e9/0x1bb0 [ 125.636655][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x10/0x10 [ 125.636669][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 125.636694][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 125.636722][ C1] ? __kasan_check_write+0x18/0x20 [ 125.636744][ C1] ? _raw_spin_lock+0x92/0x120 [ 125.636762][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.636781][ C1] ? _raw_spin_unlock+0x45/0x60 [ 125.636798][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 125.636810][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 125.636828][ C1] ? __cfi___dev_queue_xmit+0x10/0x10 [ 125.636843][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 125.636865][ C1] ? __cfi_selinux_ip_postroute+0x10/0x10 [ 125.636889][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 125.636913][ C1] ? __kasan_check_write+0x18/0x20 [ 125.636936][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 125.636964][ C1] ? avc_has_perm+0x155/0x240 [ 125.636979][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 125.636992][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 125.637008][ C1] ? __kasan_check_write+0x18/0x20 [ 125.637029][ C1] ? _raw_spin_lock+0x92/0x120 [ 125.637047][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.637065][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0xb14/0x1030 [ 125.637094][ C1] ? __asan_memcpy+0x5a/0x80 [ 125.637108][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0xd14/0x1030 [ 125.637126][ C1] ? __kernel_text_address+0x11/0x40 [ 125.637139][ C1] ? stack_trace_save+0xaa/0x100 [ 125.637150][ C1] ? __kasan_check_write+0x18/0x20 [ 125.637171][ C1] ? _raw_spin_lock+0x92/0x120 [ 125.637189][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 125.637214][ C1] ? __asan_memcpy+0x5a/0x80 [ 125.637238][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 125.637256][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 125.637267][ C1] ? _raw_spin_unlock+0x45/0x60 [ 125.637277][ C1] ? call_rcu_nocb+0x6d7/0xc80 [ 125.637290][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 125.637307][ C1] ? swake_up_one_online_ipi+0x30/0x30 [ 125.637331][ C1] ? __cfi_mt_free_rcu+0x10/0x10 [ 125.637352][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 125.637375][ C1] ? kernel_text_address+0xa9/0xe0 [ 125.637395][ C1] ? __kernel_text_address+0x11/0x40 [ 125.637407][ C1] ? unwind_get_return_address+0x51/0x90 [ 125.637419][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 125.637447][ C1] ? arch_stack_walk+0x10a/0x170 [ 125.637469][ C1] ? stack_trace_save+0xaa/0x100 [ 125.637487][ C1] ? stack_depot_save_flags+0x38/0x800 [ 125.637511][ C1] ? kasan_save_track+0x4f/0x80 [ 125.637536][ C1] ? kasan_save_track+0x3e/0x80 [ 125.637558][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 125.637571][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 125.637581][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 125.637595][ C1] ? krealloc_noprof+0x8d/0x130 [ 125.637610][ C1] ? kvrealloc_noprof+0x59/0x120 [ 125.637632][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_mmap+0x78b/0x11f0 [ 125.637655][ C1] ? mmap_region+0x1579/0x1d60 [ 125.637678][ C1] ? do_mmap+0xb85/0x13c0 [ 125.637700][ C1] ? vm_mmap_pgoff+0x36e/0x4b0 [ 125.637717][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 125.637728][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 125.637738][ C1] ? __kernel_text_address+0x11/0x40 [ 125.637751][ C1] ? unwind_get_return_address+0x51/0x90 [ 125.637764][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 125.637784][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 125.637812][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 125.637834][ C1] ? update_curr+0x6c1/0x9e0 [ 125.637856][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 125.637872][ C1] ? __calc_delta+0x280/0x280 [ 125.637886][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 125.637899][ C1] ? update_entity_lag+0x28f/0x2c0 [ 125.637918][ C1] ? dequeue_entity+0x809/0x1380 [ 125.637939][ C1] ? tg_unthrottle_up+0x9a0/0x9a0 [ 125.637961][ C1] ? __cfi_update_misfit_status+0x10/0x10 [ 125.637982][ C1] ? dequeue_entities+0x1d7/0x1400 [ 125.638005][ C1] ? sched_balance_newidle+0x31a/0xab0 [ 125.638018][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 125.638032][ C1] ? sched_clock_noinstr+0xd/0x30 [ 125.638045][ C1] ? __kasan_check_write+0x18/0x20 [ 125.638058][ C1] ? __switch_to+0xc4f/0x1300 [ 125.638082][ C1] ? __cfi___switch_to+0x10/0x10 [ 125.638112][ C1] ? psi_task_switch+0x4f2/0xa10 [ 125.638133][ C1] ? __kasan_check_write+0x18/0x20 [ 125.638162][ C1] ? finish_task_switch+0x1d9/0x760 [ 125.638174][ C1] ? __switch_to_asm+0x3d/0x70 [ 125.638188][ C1] ? __schedule+0x13a1/0x1fa0 [ 125.638200][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 125.638220][ C1] ? __asan_memcpy+0x5a/0x80 [ 125.638243][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 125.638271][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 125.638292][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 125.638306][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 125.638317][ C1] ? schedule+0xc5/0x240 [ 125.638328][ C1] ? futex_unqueue+0x136/0x160 [ 125.638343][ C1] ? ioctl_has_perm+0x39a/0x500 [ 125.638356][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 125.638377][ C1] ? futex_wait+0x2ac/0x7b0 [ 125.638401][ C1] ? __cfi_futex_wait+0x10/0x10 [ 125.638425][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 125.638452][ C1] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 125.638469][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 125.638482][ C1] ? do_futex+0x32a/0x510 [ 125.638494][ C1] ? __cfi_do_futex+0x10/0x10 [ 125.638506][ C1] ? vm_mmap_pgoff+0x153/0x4b0 [ 125.638529][ C1] ? __fget_files+0x2c5/0x340 [ 125.638547][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 125.638566][ C1] ? security_file_ioctl+0x3e/0x110 [ 125.638587][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 125.638607][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 125.638617][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 125.638628][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 125.638642][ C1] ? do_syscall_64+0x57/0xf0 [ 125.638652][ C1] ? clear_bhb_loop+0x50/0xa0 [ 125.638671][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.638692][ C1] [ 125.638699][ C1] Modules linked in: [ 125.638712][ C1] ---[ end trace 0000000000000000 ]--- [ 125.638721][ C1] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 125.638745][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 125.638758][ C1] RSP: 0018:ffffc9000b677ee0 EFLAGS: 00010282 [ 125.638768][ C1] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc9000b678250 [ 125.638776][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 125.638783][ C1] RBP: ffffc9000b6781b0 R08: ffffffff876aae23 R09: 1ffffffff0ed55c4 [ 125.638791][ C1] R10: dffffc0000000000 R11: fffffbfff0ed55c5 R12: 0000000000000680 [ 125.638799][ C1] R13: dffffc0000000000 R14: 1ffff920016cf03c R15: ffffc9000b678250 [ 125.638808][ C1] FS: 00007f34a96d46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 125.638823][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.638837][ C1] CR2: ffffc9000b677ed8 CR3: 00000001430bc000 CR4: 00000000003526b0 [ 125.638855][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 125.638868][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 125.638893][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 125.639048][ C1] Kernel Offset: disabled