last executing test programs: 58.99921504s ago: executing program 3 (id=550): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000003c0)={0xfffffffffffffffd, 0x8}) 58.418251043s ago: executing program 3 (id=551): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x55c, 0x20100) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0xb, 0x0, 0x0, 0xfffffffe, "00207d2000002000201b14700c1e0ac74f000000001200000000000900"}) (async) r1 = syz_usb_connect(0x0, 0x59, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0502030109024700010000000009046900da26010000182403010202"], 0x0) r2 = timerfd_create(0x7, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) timerfd_settime(r2, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000004700)=@vmx={0x5, 0x0, 0x2080, {0xdddd1000, 0x60000, {0x5}, 0x0, 0x4}, {"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", "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"}}) (async) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000004c0)='devices.allow\x00', 0x2, 0x0) ioctl$XFS_IOC_GETPARENTS(r6, 0xc028583e, &(0x7f0000000580)={{[0x4, 0x9, 0x5, 0xa764]}, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)=[{{@_ha_fsid={[0x4, 0x7fff]}, {0x5, 0xb, 0x7, 0x4}}, 0x10, 0x0, '/dev/input/event#\x00'}, {{@align=0x1, {0xb91, 0x1, 0x1, 0x40}}, 0x3, 0x0, '/dev/kvm\x00'}]}) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000440)={{0x0, 0x989680}}, &(0x7f0000000480)) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x46, 0x1}, 0x10) bind$tipc(r7, 0x0, 0x0) close(r7) (async) syz_usb_control_io$printer(r1, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x21, 0x1d, {0x1d, 0x21, "211f42c458efe3eb4be2921c148363a3d52f0137aefe7ff2eadc59"}}, &(0x7f0000000080)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "55e04bb697780c4e970cdd3400d80b096bc5eab9534fdb2cc7ef7a7eee041472284359b1950695f5380352a928acd9190d4a1eb10ae39ba73bb11623df3394557fc7096c733d3a59d714d234225acc030bc132909a193053bd2a6405550ea5ab37bd826bba825542c7cfc8e70099f5d2179e299d350f99fb523d30ea3964d46b28371497c3240c7d7535625b9f54698e3438e3c6c7ce4c88b0aec77c5d8d8d02e5a5e45cf74be34313a1c51e59409ed69416fd192846b8d36ac286fc131906d599ecb39dd6ac"}}}, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x20, 0x8, 0x1b, "89f0ab30754bf8d3b4a8f42eb6ce272f8fbf2d6359fcc7da3dab41"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000280)=ANY=[@ANYBLOB="20006c000000006a147db3ecccf072068b62b709615a1c63db032e3bf49b6a24e6075d0bb80b69c1b64f0e70202851dc190279a8795c2485ca47c6d4d9f1b88c00e8f32a3d078e6b165421872fe565fe71f8b22aa22c6830b0faea1685bc2b035e5e00"/114], &(0x7f0000000300)={0x20, 0x1, 0x1, 0x8c}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x4}}) 56.362673369s ago: executing program 1 (id=558): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f000016e000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000000)={0x3, 0x0, [{0x48d, 0x0, 0x8}, {0x267, 0x0, 0x5}, {0x660, 0x0, 0xffffffffffffff1a}]}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0xb, 0x0, &(0x7f0000000040)) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x29c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfb, 0x60, 0x40, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0xff, {0x9, 0x21, 0x4, 0xad, 0x1, {0x22, 0x772}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x9, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x9, 0x1}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x1, 0x9, 0x7, 0x64, 0x83}, 0xb5, &(0x7f0000000100)={0x5, 0xf, 0xb5, 0x5, [@generic={0x67, 0x10, 0xa, "4400a0d2514d7fd347747bb5feb47a695c06a5a7140e57760245adcad87dc4bfac4380a3124bba6fe81aa35a912dbcfc18ab523608060b033f9e89c9511775f17f2ca6d7c8a1deb8a98d765b9a227a39966cb9b6089e955964e58a1d40aa08634af52220"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0x6, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x3, 0xf00, 0x8, [0xffc000, 0xc000, 0xff3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0xf, 0xedd}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x6, 0xf, 0x1, [0xc000, 0xc00f, 0xffc030, 0x3f30, 0xff0000]}]}, 0x2, [{0x1a, &(0x7f00000001c0)=@string={0x1a, 0x3, "9a58ed2b06613e32fcfcac53d51ee63a7b9c7593a27a2b9b"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x240a}}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x167002) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e00)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x20, 0x1, 0x3, "c5aba8"}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000040)={0x20, 0x14, 0x3, "66ef9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 55.403570049s ago: executing program 3 (id=562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000480)={0x2, 0x110000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x80000000, 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x4, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000110000000200000000000000000000000000003200"], 0xb8}}, 0x2c000010) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x20005) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x1, 0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x0, 0x7f, 0x29, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x3, 0x3b}]}}}}}) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x330, 0x0, 0x0, 0x0, 0xe14b, &(0x7f00000000c0)='xfrm0\x00', 0xa0, 0xffffffffffffffff, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002"], 0x128}}, 0x0) 55.075891324s ago: executing program 3 (id=563): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x45, 0x201, 0x0, 0x0, 0x0, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='sessionid\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r1]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) read$FUSE(r2, &(0x7f0000000d40)={0x2020}, 0x2020) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r3, &(0x7f0000000000)=[{&(0x7f0000000500)="452e4500000000f9d8c1a2", 0xb}], 0x1, 0x3, 0x8080400, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x3a, 0x0, 0x0, &(0x7f0000000040)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/201, 0xc9}, 0x9}], 0x1, 0x45833af92e4b39ff, 0x0) 55.05209063s ago: executing program 3 (id=564): socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x1e, 0x101, 0x0, 0x0, "", [@nested={0x4, 0x12}]}, 0x14}], 0x1}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7ff, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x80000001, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001a400)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) syz_open_dev$loop(&(0x7f0000000000), 0xd5d1, 0x186a83) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xfff) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 54.99432896s ago: executing program 3 (id=565): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ef17676000000000000109022400010000009d75f192129193830200092106000001220500090581030400000700c90dd00320de86288f5e5b9d0209fad0d06df0da8688bf90c0f2f79e1a096a6357c0b842c25f9b78c64bb975e80be9a3155ca2d3763e00f2244cf1f5ef5a9db91cda22112694384b3d58ba1476d191dad7a3598d0cf13e76030499d19c906a3e977f179fb61e9c4ca36e8e5e45c4a28dd76448a896adf6870187daf86f89282cefa3d643d56500565b26d849c206a5a524fc4e497c883c98edc43bb2acad65f0123dc5fb7c1458d9cb"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x1, 0x0) 54.99413226s ago: executing program 32 (id=565): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ef17676000000000000109022400010000009d75f192129193830200092106000001220500090581030400000700c90dd00320de86288f5e5b9d0209fad0d06df0da8688bf90c0f2f79e1a096a6357c0b842c25f9b78c64bb975e80be9a3155ca2d3763e00f2244cf1f5ef5a9db91cda22112694384b3d58ba1476d191dad7a3598d0cf13e76030499d19c906a3e977f179fb61e9c4ca36e8e5e45c4a28dd76448a896adf6870187daf86f89282cefa3d643d56500565b26d849c206a5a524fc4e497c883c98edc43bb2acad65f0123dc5fb7c1458d9cb"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="002214"], 0x0}, 0x0) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x1, 0x0) 53.343472665s ago: executing program 1 (id=582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) r1 = add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000180)={0x0, "76aacf84d24f1de20825459379ef4fbe350366772d079f7763c043c2702411bb453b95a1d9f06cc6a8c7b7e1b9d54501debf1e555cbfda73068157f557bd1a54", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, r1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x9, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000880)="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", 0x4b4}], 0x2}}], 0x1, 0x119e75c40673edef) 53.070726039s ago: executing program 1 (id=583): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x56, 0x0) r0 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$invalidate(0x15, r0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xaee44000) madvise(&(0x7f000047d000/0x1000)=nil, 0x1000, 0x3) ioctl$BLKRRPART(r1, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x81, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_ot|e2,\x00']) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffffffffe4b) 52.943513518s ago: executing program 1 (id=584): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x45, 0x201, 0x0, 0x0, 0x0, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='sessionid\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r1]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) read$FUSE(r2, &(0x7f0000000d40)={0x2020}, 0x2020) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r3, &(0x7f0000000000)=[{&(0x7f0000000500)="452e4500000000f9d8c1a2", 0xb}], 0x1, 0x3, 0x8080400, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x3a, 0x0, 0x0, &(0x7f0000000040)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 52.922865084s ago: executing program 1 (id=585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000480)={0x2, 0x110000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x80000000, 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x4, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000110000000200000000000000000000000000003200"], 0xb8}}, 0x2c000010) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x20005) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40000001b"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x1, 0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x0, 0x7f, 0x29, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x3, 0x3b}]}}}}}) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x330, 0x0, 0x0, 0x0, 0xe14b, &(0x7f00000000c0)='xfrm0\x00', 0xa0, 0xffffffffffffffff, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002"], 0x128}}, 0x0) 52.748666275s ago: executing program 1 (id=587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000100)={0x6, 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000100)={0x2, 0x0, 0xb}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0xc0011022, 0x3ff}}, @cpuid={0x64, 0x18, {0x81, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0xaa3}}, @enable_nested={0x12c, 0x18}], 0x90}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000280)=0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) 52.721694171s ago: executing program 33 (id=587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000100)={0x6, 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000100)={0x2, 0x0, 0xb}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0xc0011022, 0x3ff}}, @cpuid={0x64, 0x18, {0x81, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0xaa3}}, @enable_nested={0x12c, 0x18}], 0x90}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000280)=0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) 44.390221578s ago: executing program 5 (id=631): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x5, 0x80000000002}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) syz_clone3(&(0x7f00000005c0)={0xc2140000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0xfffffffffffffffa}) r2 = epoll_create1(0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000140)=[{{0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1}}], 0x10) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1000000, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRESHEX=r5, @ANYRES8=r5, @ANYRES8=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r0, @ANYBLOB="2c626c6b73697a653d307830a05bf83cc344ebbd2c00a400000000000000efc628c65eff47569c1fe6a12f4ebf211973182b88b391e5a7dccbb3cdc6eda64b30eacf241901952aab4fbd96df6a85cc9937b8df0d93bcfb1ca79ab5974846abf79104ac6d02d2c08b26b37a456f4853f2c73f328ca99e2b8ecd6e62d5edb9f246618daddc49515395911d9e7c14ebe10e56246658a8cfcbf26a500b3164431043cc7b3ed88b4f8407944440f3fff10d8c06eb793b5e5d09ac0f2712bf4da8a7fbe74419c6343d074d9a9c4f7332234eefc7251a00c3d4b778b9a2c09bfc3afe4c00f3e8766d8114c8cbef46"]) 44.375832506s ago: executing program 5 (id=632): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x8001, 0x7}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)) syz_usb_connect$uac1(0x5, 0xbb, &(0x7f00000013c0)=ANY=[@ANYBLOB="12011003000000086b1d01014000010203010800000000000000000904000000010100000a2401030070020102052404020209240304070304010109240302000005060b0824040603316182062405040206150904010000010200000904010101010200000c2402020200070002c9b9540724013a9301100824020108020380090501090002090101072501830103000904020000010200000904020101010200000a240201090404066ca8090582092000000605072501830802"], &(0x7f00000019c0)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x200, 0x7, 0x6, 0xe, 0x10, 0x4}, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x3801}}]}) 43.429395908s ago: executing program 4 (id=638): syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x4, 0x94, 0x5f, 0x20, 0x1b3d, 0x197, 0x3cd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x2, 0x3, 0x40, 0x5, [{{0x9, 0x4, 0x84, 0x9, 0x0, 0x8b, 0x30, 0x84, 0xb3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8ed7"}, {0x5, 0x24, 0x0, 0xd571}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x3ff, 0x10}}]}}]}}]}}, 0x0) 42.258377302s ago: executing program 4 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x153943, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x2, 0x5, 0x0, 0x0, @irqchip={0x59e, 0x8}}]}) 42.257761932s ago: executing program 4 (id=641): unshare(0x60000600) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = socket(0x6, 0x1, 0x100000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40000160) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000500)={0x103, {{0x2, 0xfffc, @local}}}, 0xfffffffffffffda8) socket$key(0xf, 0x3, 0x2) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) 42.231057288s ago: executing program 4 (id=642): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x45, 0x201, 0x0, 0x0, 0x0, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='sessionid\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r1]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) read$FUSE(r2, &(0x7f0000000d40)={0x2020}, 0x2020) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r3, &(0x7f0000000000)=[{&(0x7f0000000500)="452e4500000000f9d8c1a2", 0xb}], 0x1, 0x3, 0x8080400, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x3a, 0x0, 0x0, &(0x7f0000000040)) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 42.206688804s ago: executing program 4 (id=643): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x1, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0) read(r3, &(0x7f0000000140)=""/59, 0x3b) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x2, 0x7b, 0x0, "9cedf305e60400f5b7ff01fe04000000ffffff0800ff00"}) 42.094310285s ago: executing program 4 (id=644): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) getcwd(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)="301487d5", 0x4}], 0x1}}], 0x1, 0x20044888) 42.094152715s ago: executing program 34 (id=644): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) getcwd(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)="301487d5", 0x4}], 0x1}}], 0x1, 0x20044888) 41.307998103s ago: executing program 5 (id=648): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0x15cc, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x2baf, 0x400, 0x3, 0x6, 0x8, 0xb9, 0x9, 0x667, 0x8, 0xb0, 0x9, 0x7fff, 0x1, 0xffffffffffffffff, 0x2, 0x5818], 0x60000, 0x101400}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000200)=@arm64_fp={0x60400000001000bd, &(0x7f00000001c0)=0x7}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0xffffffff) timer_create(0x1, &(0x7f0000001340)={0x0, 0x1c, 0x4, @thr={&(0x7f0000000240)="c583e157ecb32c1e15e76364b0e2019bd10642b85b681390f364c2b8699ef219bb7feed6924a2f03130dc88bbac8b9320e5231f29d36346eb4df46ac071e4ab5d59b121a48237f33fb095276f345dd60a62b77cb39b855c596b100e446cec571293c40863adf1311ba37c2a8946df57d114444ddd74f27fd15d5ca14ede35bb3e4933444e8d76d2ce9d0ab7d7966735a750ce7c927806a4bfaba391fd152bc9dc42f76a0b541551e841364e31207773e5afc71af397906949d57fc9e173b3a2932b4cacca9b3024a1c1ff68afd3b6d0d098cac23a3c4015a5ba62bcbfce07f7e84454b985b23c37b71ac69db2a40f0f1268be0f3d14704aee73f2924b7c717c3cf0be28a95a6727e897c727fc0a493903a0c401394ac128b9aa3b968e88b0ac1531af689f1bdeac9e0674c1d0c6e4cf66c5e39fe5f850eefd2e30a902919f6b85af8c3b0e2ef78084881b720475bbe21984d90cc7a826cf0f64be03d6515ef25126eb07e8088a1d9b79ad0065faeb596f64017da343990557881161346177967d8e193bacefc1b1df356d96bf83cd207b82bb8f38d50b663ff7bba64f1c9406262ed045e237f09751db4e8673e842130335e87460179fbb34e05081d08eabcfbefa85cdbb8d85ad317bce732746522dd5c3499d758b6acd85ac9e7ea38ff92ef7fc10cd09e13b12c4b811186001867ec11f28e740116dfbcddcbd9d4ad7507e3629e69de218a741b2c5b28dcab9b6cb3348decc2f8374bbe46e26eb312c79d45d82feec5c0ca052f57e2b62fa99e15fdbd9b3bbf26e9544e8df680ee60ea27c4d9396fecba7309efdd10b9d160fb66a31f07e5b87dd78bcf2356aafe61ddd383a479a57c7fa6a181d75aaf912067b0c02b55270be69418943d795239a452c87015e517a924643ca462410dd1db004987ba09d431f1026bcffc3a02e18a42f1a7a3ca4500160d83b26d51f1aeaacf29e78ddab93d177845a0271d992e3504f54a6d74e5c125148bb6ea11ae9d8bfe68cd3f3386342ae0d56fa9e1d1d416cf190770917881afc6e295a906476150ac5a08fc678b3351085fabe784a0e2d8bdb52b1b879244b6563564cf41afecdc24b461dfd44da358271f127328fa4017e6c59f67fe599675fa8268de3c6c6bee7fd4a6d185529189c12460d682aeb30f281c9942083397e2e965c5fbf7d1ab2f51dc4e4fba2c4134bf22f12e0635719878bf35af02917a5eef56144c96d66ba3f46d0e90e58c3a2992323b2591c3981c2b2904db21de19c8d05df8fc8a965ea7f14834ce4fe3762e32530f886dd137ead2b9a4807eb9b7216a0bb451b45a4a3c48648af53397c08382fd7afe4d8f56c499f43c553d5839c5b852fc3af724f8ddea9aec8a844e1afab66903370124f5b4056540afd3ee543145fdc9c5834cc911e8d7d132288406d2662ae210636b392a900ebcf500c5aeb35a7e7c60cfebdf67f9ede98aa2ce93bdb20a836ad85fb7d79820a30a3caf057bb2fb36cf5a5b6fa53ac321d401d6b24c22d3dc31c626a56b816f5468de55f1a53aee70e2e708afcb77142e8bd17d35aec2a64291d4cb7e2136343eecb9984ecca9db4e4d56e3e00c052bf3c29cc48ab2a9ad9cf6ba4ae832403a463d7eaa4c042ec1891edcc06d363128e69f17e104021d1febee7c79f649cfb6226e3e3c9ee938223120423f31325175d8ab6536368eac392e0afcb2bc270fcc09039baf16672504d5d5aedeb0be755a1f927c493fcede4c8f758c31c94aa55bb0d1a22e737e375bcc4545d200f5fe8d1f498305e0579c15fa04c864d70c03907a9c78299a13551897340212160854779c97ae3edd27f8faa699f9fe21e45c445a5d7064f4a84868f4951875ebb63f6560d79071dae65022a518a02f713fbf4134b34d8286792fb77ce379277752c58a6bbbf312a7f904e6d5f483cae16c81a330b61e15338ce326758440c0a7a3d59814133a5cf175ebbb4e774796fbc7d2a593f11c323a8534128cd86326396807e70ccb8f10330e298f980bcd8fd09553cb6befd3aec3ee68e21ae2c028a848251e05dc9b80705e0c29503855b3d7aaf18625da3de09526e4c185c5e16756b0951d5dee90d5d8a899612a669946fadbe7793541719612102bd648190bebd9ba93da2a00b5185da6d246e33a167cbdd2afa30d9d033a264a625067ae5e13a020708d86ae3339ad1d11d017e5c358d7b0fc90cddaefe8049579f4349ebdf2db0c7f49cfdfac8a5eaa114ca0f6ba0d2af01b7f1533c6e5a220e41ae828656a405a1791745d375354eca311c8e04fb252086081806b81a1c501788147a5e06331db596a2dd384b2d3e69667904ee4f8973fc378a351c340d8a471218ba8d2b73c358af37a94c8cf7f5c58114352ff0892bad75c4fea2181b56efc99727f147c5b47aa81563c6c085d8694aa74efad3f49de7c640bbf75e94c19395a76a61b36c0ddd5e549c19ec7933ed480b84010ca9a96ebdb5adc98ddda076a227f0626067d2c04cd194c2275982f2f16c5c5920234a870b649683c540295c80367267948ae0e48874e72d439c9d283915b63611a3bb0ed7991215e4aa0d221e6a6c5c374174c0a1c224a232fb6e2e2086ac1cf863c80672f1a710d20099606de91e5c8ba03297e3ac99838a63d3f36de1eb08d3c7744eb922dec87d267aa053a46caf365baa680fd182fa95ec8bdfc1e1b40a301478e1fb4c89e37785a1b4e8bfca8c3cfaed7a5245034c29d2628c616392bd844f6fb77bfa7c7174f48af14d5f5bd7a775a5745421842fdc87bba55d28ef54af5e8dceadb387552a09440ac0a2fb5af55e21f779177451c675f37d587d1be3d16fd928369d766f4d94cc75160591b674932a27ef7a7eaeccceb0497022e4c96f69cd1f76fbcecfbe66400124af985ee3a4a5ac77693e4e8adb20ebe183bbcd951f2a0956e628c53695fad9409573dcbb7cbd0ce4a6721f737f33a344b4c3f0cbe4ffec6405d93e0363fe2b82b2275aca841d05b9130d0896bc7dbddea18a861858db2cc8bd8ccd35ff1a0909d8d7dc42d5ce7d27240612635ef787b1d1f0923ca15b7374dd70817adf441b231bcd9327e0dc6d7ee94752896236c68ee81b6b6eec0ca56bb58161a65be0b43ae3e9e96199f0e8ceb1cde1b6c3becc1ddb5446fcc7fbbd9c5ad99e4c2caf33c9c776f587cd1414718aebc2825862aa73d5814ae4795a6981ae23a85f40bd0596030a475794c8886fdfe9f367335a4d994b25924f90409fecde1c96ca23ae89d0a8242c8f23e47534eab29f4586cf8ab8639a6c43819c7bed23509ce35c7eb6834bf57f3992ec885de2f0153e6a7332e4c496707664eb6ab292600fed23f5e5db45272468aeb53cbdf8d7f0979666ef97ef1b478e151b187a4f96d248b0090df441091f11094d6391bfeac069c317532ec00ef98ffde496163949eacc608115e21e2e37e3a1720d35a98fb37ce8fd64a1cf28c606fff75f6f25fa296322c294afad34971b9173e05205490bd57a5f4e9625fcbda0d5d8ba0bad7a4b18317412707a8a9a92a73ffb8f2f457f8ad80c71257dd1b719f0af0f610b6e5358241d4b6a4e61ce45d1e3bcae84ea5d8ac1dd1e6928c08e86c75c3472dc516ee7f224a7ace512dd07e50494b1610df92e75c90bb2cffcd37b1cf29228bc3fec989991903db3be9fca7579058351852702d6c9d733af3fc6df02cb2325d4523da9faef8948867b1b13908ccae531413ccead6d6608b00e969e35be2c388cb89656e7a78b9f203dfefc23b19281a89e21ad699bea91a00e9e2e4b129449ca75115664ac67e8a29cca664cfac93c9858cd5a0013c5dab61efa2ce39dd6130ed783176b048026c929f35a1405a0626c3e80d5d0d091363a234cffe6be4caddec27efaef8369277df23f936f52ffde01cfdd9a1fb925f4611cc73bfe1aa4d8ffb0c04ecef33f8cf31109a7f66e2df8b85df7b58efa9c3375a9c0aa42775f622ff680b97b7608025312222887a02ae640ce1822a6be3273013c1f94f39290ff9b0f5a15cda992d339b584908f21641d148eb234fb440565befea30914df0ab3a709d467bfec6fda3de6876ba79b2af31fc7b971044878d47e18baab543079a8f1c80b507d374e0e3cdc9dba72aae306eb1c0e2d16725fff299c818088afaeb5d245718e2c202f36871f48311ad3608739dfa38bd9a7812c8f13132f51b7bd5bac9845e14fe5ef0b01da8798e2105bceeb0f7f198e5aac7f3210a818753c7ff0093e7740dedec4d23f5944464d5a5ffc88af3c421232a2292667722d8805693917fc9c4e1b25ab4422a8f068be0b504e58b32db94c3394feb5b917f99f45cd53f2d1b11a8823aa39681cb5622e32c954ab3bcc0b08ca1c2dff10c2f7f131abc8609bd64996c92ebd0d9bdeb6d4ff21c0350a9a22223edf00a4e0cf854f9e926f8b67d6e64246ae43d77d3474ecd18d8fae04949634de45889acc7d5eb7dc1e07447ebfab95bbf56df74b20afbfe8e1eaa6eae6712978ea1e0b0057aaad14d3af46d7b497bea6a013bdb956f7099e23003af9484847f353ce665dfe4afc3df944e97789ae6b62e007a79a36b3ac1c9cee9cd956e35eb5eeaf199878bd570e48d887815656c109f9dcad311cdbda07be288e2adbe0dcc96074e0dd878f58e1942a61a9f590ee7a2b44c5e0ddcf284131f181d5569c61d10051631cd5d406842e6f25dbda98cddc5a6e28a9133c0f4fa8298273a791fb2969d46cb50cac206ae0a8272a36bb9e61e18a203eb4324af10fbd984e25e602ccbd9fc9c4d7ccd179c821710559691551cbc211ae88b5e36d974acd832d65d0ee7a13fda82786fc4c33bd863ebe001c4cd0a8aacce5050ed2c26ec56c916669d83ef69a16e0144240e88cea0100b42abc4c13c38f90e6dc1121e82e090cbfdbb41c5f0250c27bd60451da0a1f610824a7dd81b4fdb995e62731190c92e88df6e4475e2062458ae425b59eb69839c42a9cc42b8ba752fb683a1533f485ae7cd9110923693eb1a57b78cd907dffa908010c0ff784290e9262c968ddfa1525df487fa6aa67e9102f76d5acee99d7c6a67250dc123beab5b7f45243196ea4f558f36a4b9c7ed0c188788f3fa157f9c48670cffba92db0fb5a0670576947537c58fe409b17f1a26c3c37b42a27ba249c311bae10d048ba3d85d831c810d49ebe959cba50718b39a827fba0c18a1c8eadb5897b27e220b30a45c9c590eee95249b6ca287adfc96dc4e636baab32fa9ba6383f88853c8268ddb51364012d87742332f2f9ccf0f49304d0857e80bd5ff4ef5ef67a07e3dc46c5bf4d53940fde9eb595d67a30784e324c7171f42e8587cc4e8e49ec424ea94101f573d6006c89ad19534d04aadf2bd35200003bd95c0ba92d5d237924b6ecc035cb33ae790899b647f0fb54da664582740ad06c0e524573b3913228874e449e9ccc3c03c449b7e0cb156c60fff5baa4a80cc64d2ada9ac50bb662fd36f8cd9bac9b8036b7cddc33eaa14fd134ec76a540543b9a9ab9134cf45ad319956108cf61847d79b5bbfd00c10e121bff73fd1e8e3409f690edfcaf378c71f718792aae65a767a3ca440dc420a8def35f84973d6f2aa0aa6db819200dd828bbb29b0e7d901fd7466843711081a8f4ed285ef15a35af2edb957222d0ed4894becbde9f8d58f84e1cb95e308d5ac03d709e059bf3cdb1fb81011a3e9caec1e2b722eb3533374b544452e3e21932a86678d2dc55896554465c52fa6d9a51341f89187e5ebcba3e2132240765185909114fd83707af4c0bcf957883180", &(0x7f0000001240)="ca8d8d68f640f186a2211751af53e01aa758986a7a08a2980e1f1928ae1f1b4e5a2208c8bad0da00046db812f603941d4d76c10a0378f3128044dd725cd853bebad4fd8c9158547a32da47894ce391c3cda79c3fd4a18fee86a2a584f83b3b7435eee2e3b6ea2d682865d0fff92f2083ae6bd939759ec26de26a745224dc24a9168ca9c7d35928765ab0803b51b85790c18c3c3a43d6aa9d7c4016e22781d419d4715cd61092ee00dd0f6fc7a10e17679f2e530570837a554990f96d5dcee32e43b5552ceb8963987778c7ffa6c784378fa5d86ec490a196e060f774d8f88516230eba55535233"}}, &(0x7f0000001380)=0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000001400)={{0x0, 0x3938700}, {r3, r4+60000000}}, &(0x7f0000001440)) timer_getoverrun(r2) iopl(0x40) ioperm(0x100000001, 0x3, 0xc) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000001480)=0x1) timer_create(0x6, &(0x7f00000014c0)={0x0, 0x14, 0x2}, &(0x7f0000001500)=0x0) ioctl(r0, 0xfffffffb, &(0x7f0000001540)="6ce1881ca5e6551c8189be6d53aec3e6410304ec913a45ee3d8d006af9ccfb1279ac49eb86b282db661230687b704de75115628639a729db7132285e6c30045c127020fe05c15ae34cc73aeef275189bd5b23391b63b94689ba8f9752ea0461d4e919586de8711b6e5af57def1cf8535394aa0d8701d78ae9fa0c17c0ea21e544992a7a407c24ace89559e919e0a46e42f86e0131564f594a96bf7ad26d545dd9accb5bd9521309ab199a6a5bdb5c65f02011570494c0112ecfa83b9f4a1a7") timer_create(0x0, &(0x7f0000001600)={0x0, 0x11, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000001640)=0x0) clock_gettime(0x0, &(0x7f0000001680)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f00000016c0)={{0x77359400}, {r7, r8+60000000}}, &(0x7f0000001700)) socket$inet6(0xa, 0x6, 0x5) timer_getoverrun(r5) timer_gettime(0x0, &(0x7f0000001740)) r9 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) socket$nl_audit(0x10, 0x3, 0x9) timer_settime(r6, 0x1, &(0x7f0000001780)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(r2, 0x0, &(0x7f00000017c0)={{}, {0x0, 0x989680}}, &(0x7f0000001800)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) ioctl$TIOCGWINSZ(r9, 0x5413, &(0x7f0000001840)) timer_settime(r5, 0x0, &(0x7f00000018c0)={{0x77359400}}, &(0x7f0000001900)) 41.293949921s ago: executing program 5 (id=649): r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa1) (async, rerun: 32) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc44, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pread64(r0, &(0x7f0000000140)=""/14, 0xe, 0x1ff) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') (async, rerun: 64) r1 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000380)={0x3, 0x7, 0x3, 0x1, 0xa, 0xfffffffffffffffc, 0x5300000000000002, 0x7fffffffffffffff}, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0x700000000, 0x5, 0x0, 0x2, 0x8, 0x1, 0xe}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f00000001c0)={[0x1]}, 0x8}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0xfffffd45, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'erspan0\x00', r3, 0x7800, 0x10, 0x1, 0x7, {{0x9, 0x4, 0x3, 0x1, 0x24, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x82, 0x6, "5d009b00"}, @timestamp={0x44, 0x8, 0xf1, 0x0, 0x7, [0xbb]}, @end]}}}}}) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x102, 0x0) (async, rerun: 32) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 32) syz_clone(0x20048200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) stat(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f00000006c0)=0xe8) (rerun: 32) getgroups(0x1, &(0x7f0000000700)=[0xffffffffffffffff, r8, r8, 0xee01, 0x0, 0xee01, 0x0]) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=r7, @ANYRESHEX=r2, @ANYRES32=r9, @ANYBLOB="076d3a5b18a086348a1c1900d94208e2f7742b5bcd4efa0a5800877f8ffa390300a6439dc0224d18f7b83619b899f8fcd1409f40575b64b80ce0e245ef57fa544b38d115ea98038b333dbf2119a5de0e71cefa7faa1f8d45bea0afdba4cec6f66dcd", @ANYRES32=0xee01, @ANYRES16, @ANYRES32=r11, @ANYRESDEC=r10], 0x4c, 0x1) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 41.234271451s ago: executing program 5 (id=650): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f07090000002a942183"], 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r1, &(0x7f0000000d40)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b800da4173b9e63544ee1f32fd585dab49f06f4e7e92a867080b7b83c0a31253633", 0x4a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffc0}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0x0) 41.22654333s ago: executing program 5 (id=651): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x45, 0x201, 0x0, 0x0, 0x0, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='sessionid\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r1]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) read$FUSE(r2, &(0x7f0000000d40)={0x2020}, 0x2020) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r3, &(0x7f0000000000)=[{&(0x7f0000000500)="452e4500000000f9d8c1a2", 0xb}], 0x1, 0x3, 0x8080400, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x3a, 0x0, 0x0, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 41.194027574s ago: executing program 35 (id=651): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x45, 0x201, 0x0, 0x0, 0x0, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='sessionid\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r1]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) read$FUSE(r2, &(0x7f0000000d40)={0x2020}, 0x2020) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r3, &(0x7f0000000000)=[{&(0x7f0000000500)="452e4500000000f9d8c1a2", 0xb}], 0x1, 0x3, 0x8080400, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x3a, 0x0, 0x0, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 3.253759344s ago: executing program 6 (id=935): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001940)={0x1, 0x0, [{0x4, 0xcf, &(0x7f00000003c0)=""/207}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=""/57, 0x0, &(0x7f0000000500)=""/4096}) 3.162429939s ago: executing program 0 (id=937): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000400)=""/223, 0xdf, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3.162197169s ago: executing program 0 (id=938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff8}, {0x0, 0x0, 0x200000000000000, 0x1}, 0x5}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) 3.084647306s ago: executing program 0 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) 2.344889492s ago: executing program 6 (id=941): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 2.282380882s ago: executing program 7 (id=942): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2711, 0x0, &(0x7f00000000c0)) 2.282266272s ago: executing program 7 (id=943): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f00000025c0)) 2.26959322s ago: executing program 0 (id=944): pipe2$9p(0x0, 0x80800) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = open(0x0, 0x143142, 0x80) ftruncate(r0, 0x2007ffb) recvfrom$unix(r0, &(0x7f00000001c0)=""/153, 0x99, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 2.168175033s ago: executing program 7 (id=945): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @mss, @window={0x3, 0xfffe}, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24048015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.102368672s ago: executing program 7 (id=946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs], 0x0, 0x0, 0x0}) 2.101992592s ago: executing program 7 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x99fe, 0x11, ')\x00'}) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES8], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x3, 0xffffffb9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.479738168s ago: executing program 6 (id=949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) 1.469419716s ago: executing program 6 (id=950): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) 1.343724505s ago: executing program 0 (id=951): r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x20179e01}) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)) 373.770513ms ago: executing program 7 (id=953): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 266.311595ms ago: executing program 6 (id=954): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/170, 0xaa}], 0x2, 0x0, 0x0, 0x3f}}], 0x1, 0x2, 0x0) 240.651461ms ago: executing program 2 (id=955): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @mcast1, 0x1}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xe, @empty, 0x20000004}, 0x1c) 101.769898ms ago: executing program 2 (id=956): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x439, 0x20, 0xffdffffd}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f00000062c0)={0x2020}, 0x2020) 101.627248ms ago: executing program 6 (id=957): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.969051ms ago: executing program 0 (id=958): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xfffffffa, 0x407, 0x8, 0x8010041, 0x80, "0baa301fa951e8a4603c811200", 0x81ed, 0xfffffff5}) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="e31489bfa5c1c11c9a3678d0533823c721d6c8a49e1801", 0x17}], 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) r2 = dup(r1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x7, 0x80, 0xffffffff, 0x1ff, 0x4, "7ed0a5fcd108eb66ca00a1a85793c418f1dab1", 0x1, 0xd3bf}) read$FUSE(r2, &(0x7f0000001b80)={0x2020}, 0x2020) 3.762841ms ago: executing program 2 (id=959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48840}, 0x0) 3.653751ms ago: executing program 2 (id=960): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x60a, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x11, 0x4) recvmmsg(r0, &(0x7f0000007040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/97, 0x61}, 0x1}], 0x1, 0x0, 0x0) 3.616511ms ago: executing program 2 (id=961): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000080)) 0s ago: executing program 2 (id=962): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat, @flat=@weak_binder={0x77622a85, 0x1100}, @flat=@handle={0x73682a85, 0x180a}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 9 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.045662][ T36] audit: type=1400 audit(1772079490.079:407): avc: denied { accept } for pid=1502 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 86.143204][ T337] usb 4-1: USB disconnect, device number 43 [ 86.170184][ T517] usb_ehset_test 2-1:0.16: probe with driver usb_ehset_test failed with error -32 [ 86.182360][ T517] usb 2-1: USB disconnect, device number 38 [ 86.361838][ T67] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 86.511812][ T67] usb 3-1: Using ep0 maxpacket: 32 [ 86.518004][ T67] usb 3-1: config 4 has an invalid interface number: 30 but max is 2 [ 86.526267][ T67] usb 3-1: config 4 has an invalid interface number: 171 but max is 2 [ 86.534552][ T67] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 86.543272][ T67] usb 3-1: config 4 has an invalid interface number: 55 but max is 2 [ 86.551359][ T67] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 86.560074][ T67] usb 3-1: config 4 has no interface number 0 [ 86.566191][ T67] usb 3-1: config 4 has no interface number 1 [ 86.572739][ T67] usb 3-1: config 4 has no interface number 2 [ 86.578830][ T67] usb 3-1: config 4 interface 30 altsetting 98 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 86.589821][ T67] usb 3-1: config 4 interface 55 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 86.600725][ T67] usb 3-1: config 4 interface 55 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 86.611345][ T67] usb 3-1: config 4 interface 55 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 86.621990][ T67] usb 3-1: config 4 interface 55 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 86.632975][ T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 86.640635][ T67] usb 3-1: config 4 interface 55 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 86.652209][ T67] usb 3-1: config 4 interface 55 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 86.663542][ T67] usb 3-1: config 4 interface 55 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 86.674415][ T67] usb 3-1: config 4 interface 55 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 86.685157][ T67] usb 3-1: config 4 interface 55 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 86.695881][ T67] usb 3-1: config 4 interface 55 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 86.706709][ T67] usb 3-1: config 4 interface 55 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 86.718069][ T67] usb 3-1: config 4 interface 30 has no altsetting 0 [ 86.724854][ T67] usb 3-1: config 4 interface 171 has no altsetting 0 [ 86.731752][ T67] usb 3-1: config 4 interface 55 has no altsetting 0 [ 86.740265][ T67] usb 3-1: New USB device found, idVendor=04bb, idProduct=0904, bcdDevice=a8.05 [ 86.749453][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.757659][ T67] usb 3-1: Product: 丬虓꿻이ḭ耈핁͆奇湀觚猫श仜탦⌆鼇ǜ꠨孷裈秝夌ﺎΩ눪墈鉩Ȥ嶜㩁ﴙ⋣솘ꮷ趁溸瞅⍻焮鄓厱﾿꙱͊俚㮝랹忾ꫩ⚩ʕ囯 [ 86.776303][ T67] usb 3-1: Manufacturer: ᐇ [ 86.781272][ T67] usb 3-1: SerialNumber: ữ̈́⫵怺쮄ꄷᷮ皺쳖벣悤塤ꇢ鸁㬧ᧁࣈ畗㽛⑱Ꭱ뫀ࡱ彻㞨正췜欧ᄔ鵘ꆅ搾㕢⺗㵓석꒾膳覉㿁⛹ж덧垭ሯ⑔鷔宽냎ꔹꜨ弔ꓓ㵸랓됼僮ᖞ䷻蛌潨电҈똓卦쥗 [ 86.821814][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 86.828158][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 86.837345][ T31] usb 1-1: config 1 has no interface number 1 [ 86.843538][ T31] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.854333][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 86.867306][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.879787][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.888951][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.896999][ T31] usb 1-1: Product: syz [ 86.901325][ T31] usb 1-1: Manufacturer: syz [ 86.906147][ T31] usb 1-1: SerialNumber: syz [ 87.016022][ T67] usb 3-1: USB disconnect, device number 34 [ 87.041778][ T436] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 87.171812][ T436] usb 2-1: device descriptor read/64, error -71 [ 87.314787][ T31] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 87.411789][ T436] usb 2-1: device descriptor read/64, error -71 [ 87.661810][ T436] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 87.791797][ T436] usb 2-1: device descriptor read/64, error -71 [ 87.821916][ T517] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 87.972919][ T517] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 87.981051][ T517] usb 3-1: config 0 has no interface number 0 [ 87.987204][ T517] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.998309][ T517] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 88.007380][ T517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.016123][ T517] usb 3-1: config 0 descriptor?? [ 88.031773][ T436] usb 2-1: device descriptor read/64, error -71 [ 88.117142][ T31] usb 1-1: current rate 10536300 is different from the runtime rate 9310208 [ 88.141895][ T436] usb usb2-port1: attempt power cycle [ 88.324312][ T31] usb 1-1: USB disconnect, device number 33 [ 88.424600][ T517] logitech-djreceiver 0003:046D:C517.000F: hidraw0: USB HID v10.00 Device [HID 046d:c517] on usb-dummy_hcd.2-1/input34 [ 88.481842][ T436] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 88.502867][ T436] usb 2-1: device descriptor read/8, error -71 [ 88.632993][ T436] usb 2-1: device descriptor read/8, error -71 [ 88.694759][ T31] usb 3-1: USB disconnect, device number 35 [ 88.846853][ T36] audit: type=1400 audit(1772079492.889:408): avc: denied { getopt } for pid=1527 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.871946][ T436] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 88.892752][ T436] usb 2-1: device descriptor read/8, error -71 [ 89.022978][ T436] usb 2-1: device descriptor read/8, error -71 [ 89.131865][ T436] usb usb2-port1: unable to enumerate USB device [ 89.171800][ T517] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 89.226415][ T36] audit: type=1400 audit(1772079493.269:409): avc: denied { read } for pid=1535 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.321803][ T517] usb 1-1: Using ep0 maxpacket: 32 [ 89.328087][ T517] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.340132][ T517] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 89.349506][ T517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.366885][ T517] usb 1-1: Product: syz [ 89.371256][ T517] usb 1-1: Manufacturer: syz [ 89.376228][ T517] usb 1-1: SerialNumber: syz [ 89.377555][ T1540] netlink: 'syz.3.379': attribute type 6 has an invalid length. [ 89.382262][ T517] usb 1-1: config 0 descriptor?? [ 89.397702][ T517] usb 1-1: bad CDC descriptors [ 89.403257][ T517] usb 1-1: unsupported MDLM descriptors [ 89.597603][ T436] usb 1-1: USB disconnect, device number 34 [ 89.603847][ T67] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 89.631843][ T31] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 89.762858][ T67] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.773196][ T67] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.786557][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 89.793045][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.804308][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.814647][ T67] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 89.823917][ T31] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 89.834068][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.842699][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.850982][ T67] usb 3-1: Product: syz [ 89.855200][ T67] usb 3-1: Manufacturer: syz [ 89.859797][ T67] usb 3-1: SerialNumber: syz [ 89.865074][ T31] usb 4-1: config 0 descriptor?? [ 89.870968][ T67] usb 3-1: config 0 descriptor?? [ 89.876556][ T31] usbhid 4-1:0.0: can't add hid device: -22 [ 89.882616][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 89.890935][ T67] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 90.076342][ T67] usb 4-1: USB disconnect, device number 44 [ 90.191834][ T517] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 90.222973][ T31] usb 3-1: USB disconnect, device number 36 [ 90.341757][ T517] usb 2-1: Using ep0 maxpacket: 16 [ 90.348190][ T517] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 90.357184][ T517] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.367550][ T337] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 90.375146][ T517] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.385994][ T517] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.395167][ T517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.403219][ T517] usb 2-1: Product: syz [ 90.407400][ T517] usb 2-1: Manufacturer: syz [ 90.412062][ T517] usb 2-1: SerialNumber: syz [ 90.511823][ T337] usb 1-1: device descriptor read/64, error -71 [ 90.596649][ T36] audit: type=1400 audit(1772079494.639:410): avc: denied { read } for pid=1555 comm="syz.3.383" path="socket:[13966]" dev="sockfs" ino=13966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.621417][ T36] audit: type=1400 audit(1772079494.659:411): avc: denied { ioctl } for pid=1547 comm="syz.1.381" path="socket:[14482]" dev="sockfs" ino=14482 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.757849][ T1565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 90.772525][ T337] usb 1-1: device descriptor read/64, error -71 [ 90.783698][ T1567] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.792986][ T1567] bridge_slave_0 (unregistering): left allmulticast mode [ 90.800076][ T1567] bridge_slave_0 (unregistering): left promiscuous mode [ 90.807374][ T1567] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.849896][ T517] usb 2-1: 0:2 : does not exist [ 90.909985][ T1575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.390'. [ 90.971252][ T1588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 91.021753][ T337] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 91.029821][ T36] audit: type=1400 audit(1772079495.069:412): avc: denied { create } for pid=1594 comm="syz.3.397" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.056526][ T36] audit: type=1400 audit(1772079495.099:413): avc: denied { mounton } for pid=1594 comm="syz.3.397" path="/85/file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.151784][ T337] usb 1-1: device descriptor read/64, error -71 [ 91.181758][ T344] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 91.352890][ T344] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.363257][ T344] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.378205][ T344] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 91.387779][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.396005][ T337] usb 1-1: device descriptor read/64, error -71 [ 91.402557][ T344] usb 3-1: Product: syz [ 91.406812][ T344] usb 3-1: Manufacturer: syz [ 91.411454][ T344] usb 3-1: SerialNumber: syz [ 91.417622][ T344] usb 3-1: config 0 descriptor?? [ 91.424013][ T344] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 91.462381][ T517] usb 2-1: USB disconnect, device number 43 [ 91.511893][ T337] usb usb1-port1: attempt power cycle [ 91.712966][ T31] usb 3-1: USB disconnect, device number 37 [ 91.851813][ T337] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 91.869539][ T36] audit: type=1400 audit(1772079495.909:414): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.893323][ T337] usb 1-1: device descriptor read/8, error -71 [ 92.023110][ T337] usb 1-1: device descriptor read/8, error -71 [ 92.131960][ T67] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 92.261850][ T337] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 92.282988][ T337] usb 1-1: device descriptor read/8, error -71 [ 92.283044][ T67] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.300214][ T67] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.313062][ T31] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 92.320630][ T67] usb 4-1: config 0 interface 0 has no altsetting 0 [ 92.327355][ T67] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 92.336575][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.345574][ T67] usb 4-1: config 0 descriptor?? [ 92.412933][ T337] usb 1-1: device descriptor read/8, error -71 [ 92.461837][ T517] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 92.481804][ T31] usb 2-1: device descriptor read/64, error -71 [ 92.522017][ T337] usb usb1-port1: unable to enumerate USB device [ 92.611802][ T517] usb 3-1: Using ep0 maxpacket: 8 [ 92.618044][ T517] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 92.626387][ T517] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 92.634944][ T517] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 92.644037][ T517] usb 3-1: config 250 has no interface number 0 [ 92.650306][ T517] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 92.661888][ T517] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 92.672450][ T517] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.682743][ T517] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.693028][ T517] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 92.706536][ T517] usb 3-1: config 250 interface 228 has no altsetting 0 [ 92.714691][ T517] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 92.723893][ T517] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 92.731772][ T31] usb 2-1: device descriptor read/64, error -71 [ 92.732188][ T517] usb 3-1: Product: syz [ 92.742631][ T517] usb 3-1: SerialNumber: syz [ 92.749370][ T517] hub 3-1:250.228: bad descriptor, ignoring hub [ 92.755747][ T517] hub 3-1:250.228: probe with driver hub failed with error -5 [ 92.757719][ T1602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.772057][ T1602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.783660][ T67] lenovo 0003:17EF:6009.0010: item fetching failed at offset 1/5 [ 92.791777][ T67] lenovo 0003:17EF:6009.0010: hid_parse failed [ 92.798042][ T67] lenovo 0003:17EF:6009.0010: probe with driver lenovo failed with error -22 [ 92.949594][ T1612] sock: sock_set_timeout: `syz.2.402' (pid 1612) tries to set negative timeout [ 92.959881][ T517] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 92.971801][ T31] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 92.985535][ T67] usb 4-1: USB disconnect, device number 45 [ 93.101859][ T31] usb 2-1: device descriptor read/64, error -71 [ 93.136196][ T1616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 93.170718][ T36] audit: type=1400 audit(1772079497.209:415): avc: denied { read } for pid=1617 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.251889][ T36] audit: type=1400 audit(1772079497.299:416): avc: denied { setopt } for pid=1617 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.341827][ T31] usb 2-1: device descriptor read/64, error -71 [ 93.451896][ T31] usb usb2-port1: attempt power cycle [ 93.731813][ T337] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 93.791812][ T31] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 93.812985][ T31] usb 2-1: device descriptor read/8, error -71 [ 93.852059][ T1612] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 93.871811][ T337] usb 4-1: device descriptor read/64, error -71 [ 93.942987][ T31] usb 2-1: device descriptor read/8, error -71 [ 93.981875][ T1612] usb 3-1: device descriptor read/64, error -71 [ 94.022294][ T1624] netlink: 'syz.0.407': attribute type 27 has an invalid length. [ 94.121793][ T337] usb 4-1: device descriptor read/64, error -71 [ 94.181778][ T31] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 94.202919][ T31] usb 2-1: device descriptor read/8, error -71 [ 94.231880][ T1612] usb 3-1: device descriptor read/64, error -71 [ 94.291802][ T344] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 94.332843][ T31] usb 2-1: device descriptor read/8, error -71 [ 94.361805][ T337] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 94.442617][ T344] usb 1-1: not running at top speed; connect to a high speed hub [ 94.451311][ T344] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.451906][ T31] usb usb2-port1: unable to enumerate USB device [ 94.461490][ T344] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.472333][ T1612] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 94.478961][ T344] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.493896][ T337] usb 4-1: device descriptor read/64, error -71 [ 94.500273][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.508398][ T344] usb 1-1: Product: syz [ 94.512634][ T344] usb 1-1: Manufacturer: syz [ 94.517296][ T344] usb 1-1: SerialNumber: syz [ 94.611874][ T1612] usb 3-1: device descriptor read/64, error -71 [ 94.731766][ T337] usb 4-1: device descriptor read/64, error -71 [ 94.841932][ T337] usb usb4-port1: attempt power cycle [ 94.851817][ T1612] usb 3-1: device descriptor read/64, error -71 [ 95.091844][ T1612] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 95.113296][ T1612] usb 3-1: device descriptor read/8, error -71 [ 95.181799][ T337] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 95.202843][ T337] usb 4-1: device descriptor read/8, error -71 [ 95.332827][ T337] usb 4-1: device descriptor read/8, error -71 [ 95.441808][ T31] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 95.571807][ T337] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 95.592731][ T337] usb 4-1: device descriptor read/8, error -71 [ 95.601928][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 95.608619][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 95.616522][ T31] usb 2-1: can't read configurations, error -61 [ 95.722836][ T337] usb 4-1: device descriptor read/8, error -71 [ 95.752077][ T31] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 95.831933][ T337] usb usb4-port1: unable to enumerate USB device [ 95.901913][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 95.908666][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 95.916320][ T31] usb 2-1: can't read configurations, error -61 [ 95.922763][ T31] usb usb2-port1: attempt power cycle [ 96.261833][ T31] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 96.282176][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 96.288858][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 96.296610][ T31] usb 2-1: can't read configurations, error -61 [ 96.431816][ T31] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 96.452159][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 96.459139][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 96.466960][ T31] usb 2-1: can't read configurations, error -61 [ 96.473388][ T31] usb usb2-port1: unable to enumerate USB device [ 96.911811][ T31] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 97.052398][ T344] usb 1-1: 0:2 : does not exist [ 97.061787][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 97.067133][ T344] usb 1-1: USB disconnect, device number 39 [ 97.076863][ T31] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 97.089226][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.099545][ T31] usb 4-1: config 0 has no interface number 0 [ 97.107091][ T31] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 97.117025][ T31] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 97.125076][ T31] usb 4-1: Product: syz [ 97.129244][ T31] usb 4-1: Manufacturer: syz [ 97.133879][ T31] usb 4-1: SerialNumber: syz [ 97.139286][ T31] usb 4-1: config 0 descriptor?? [ 97.145386][ T31] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 97.151884][ T31] uvcvideo 4-1:0.105: Entity type for entity Output 1 was not initialized! [ 97.160623][ T31] usb 4-1: Failed to create links for entity 1 [ 97.166849][ T31] usb 4-1: Failed to register entities (-22). [ 97.347020][ T31] usb 4-1: USB disconnect, device number 50 [ 97.371819][ T344] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 97.521889][ T344] usb 1-1: Using ep0 maxpacket: 32 [ 97.529055][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.541339][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.551307][ T344] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 97.564344][ T344] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 97.573461][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.582289][ T344] usb 1-1: config 0 descriptor?? [ 97.790035][ T1638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.798764][ T1638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.874346][ T1640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.883459][ T1640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.010199][ T344] hid (null): invalid report_count 81325945 [ 98.016287][ T344] hid (null): report_id 15357 is invalid [ 98.022086][ T344] hid (null): unknown global tag 0xe [ 98.027549][ T344] hid (null): unknown global tag 0xe [ 98.039256][ T1647] usb usb8: usbfs: process 1647 (syz.3.415) did not claim interface 0 before use [ 98.039630][ T344] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0011/input/input18 [ 98.083030][ T344] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0011/input/input19 [ 98.421795][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 98.581772][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 98.588026][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.599051][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.608832][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.618100][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.626835][ T9] usb 4-1: config 0 descriptor?? [ 98.632870][ T9] hub 4-1:0.0: USB hub found [ 98.835316][ T9] hub 4-1:0.0: 19 ports detected [ 98.840509][ T9] hub 4-1:0.0: insufficient power available to use all downstream ports [ 98.882165][ T1672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 99.040887][ T9] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 99.047332][ T9] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 99.056350][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 99.062363][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 99.082327][ T9] usb 4-1: USB disconnect, device number 51 [ 99.556100][ T1679] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 99.580741][ T1681] SELinux: failed to load policy [ 99.851000][ T36] audit: type=1400 audit(1772079503.889:417): avc: denied { transition } for pid=1687 comm="syz.3.430" path="/97/file1" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 99.874339][ T36] audit: type=1400 audit(1772079503.889:418): avc: denied { entrypoint } for pid=1687 comm="syz.3.430" path="/97/file1" dev="tmpfs" ino=533 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.897723][ T36] audit: type=1400 audit(1772079503.889:419): avc: denied { noatsecure } for pid=1687 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 100.312524][ T1612] usb 3-1: device descriptor read/8, error -32 [ 100.401837][ T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 100.551849][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 100.551885][ T1612] usb 3-1: reset high-speed USB device number 38 using dummy_hcd [ 100.558123][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.574969][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.585135][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.592376][ T1612] usb 3-1: device descriptor read/8, error -32 [ 100.594197][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.608625][ T31] usb 4-1: Product: syz [ 100.612835][ T31] usb 4-1: Manufacturer: syz [ 100.617502][ T31] usb 4-1: SerialNumber: syz [ 100.722466][ T1612] usb 3-1: device descriptor read/8, error -32 [ 100.832074][ T517] usb 3-1: USB disconnect, device number 38 [ 100.840808][ T517] usblp0: removed [ 100.844846][ T344] kye 0003:0458:5011.0011: input,hiddev96,hidraw0: USB HID v0.04 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 100.869950][ T344] usb 1-1: USB disconnect, device number 40 [ 100.930428][ T31] usb 4-1: 0:2 : does not exist [ 100.935446][ T31] usb 4-1: unit 9 not found! [ 100.942806][ T31] usb 4-1: USB disconnect, device number 52 [ 101.171794][ T344] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 101.191863][ T517] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 101.323013][ T344] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.333329][ T344] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 101.346555][ T517] usb 3-1: Using ep0 maxpacket: 32 [ 101.353034][ T517] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 101.363662][ T344] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 101.372853][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.380877][ T344] usb 1-1: Product: syz [ 101.385164][ T344] usb 1-1: Manufacturer: syz [ 101.389945][ T344] usb 1-1: SerialNumber: syz [ 101.394952][ T517] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 101.404125][ T517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.412377][ T344] usb 1-1: config 0 descriptor?? [ 101.417385][ T517] usb 3-1: Product: syz [ 101.421553][ T517] usb 3-1: Manufacturer: syz [ 101.426682][ T344] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 101.433598][ T517] usb 3-1: SerialNumber: syz [ 101.442105][ T517] usb 3-1: config 0 descriptor?? [ 101.447991][ T517] usb 3-1: bad CDC descriptors [ 101.459308][ T517] usb 3-1: unsupported MDLM descriptors [ 101.538466][ T1713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 101.676569][ T517] usb 3-1: USB disconnect, device number 39 [ 101.683463][ T36] audit: type=1400 audit(1772079505.709:420): avc: denied { ioctl } for pid=1704 comm="syz.2.434" path="socket:[16558]" dev="sockfs" ino=16558 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.732212][ T1727] netlink: 56 bytes leftover after parsing attributes in process `syz.1.439'. [ 101.741316][ T1727] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=1727 comm=syz.1.439 [ 101.755941][ T1730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37892 sclass=netlink_route_socket pid=1730 comm=syz.1.439 [ 101.877316][ T31] usb 1-1: USB disconnect, device number 41 [ 102.112942][ T1761] netlink: 'syz.1.449': attribute type 4 has an invalid length. [ 102.123055][ T1761] netlink: 'syz.1.449': attribute type 4 has an invalid length. [ 102.171897][ T67] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 102.200235][ T1764] 9pnet_fd: Insufficient options for proto=fd [ 102.280844][ T1775] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 102.300716][ T1775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 102.327152][ T36] audit: type=1400 audit(1772079506.369:421): avc: denied { listen } for pid=1779 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.366890][ T67] usb 4-1: Using ep0 maxpacket: 32 [ 102.382263][ T36] audit: type=1400 audit(1772079506.389:422): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 102.417370][ T67] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 102.434826][ T67] usb 4-1: config 0 has no interface number 0 [ 102.444759][ T1791] capability: warning: `syz.0.460' uses 32-bit capabilities (legacy support in use) [ 102.452610][ T36] audit: type=1400 audit(1772079506.409:423): avc: denied { connect } for pid=1785 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.474565][ T36] audit: type=1400 audit(1772079506.409:424): avc: denied { setopt } for pid=1785 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.494206][ T67] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 102.504874][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.513264][ T67] usb 4-1: Product: syz [ 102.517535][ T67] usb 4-1: Manufacturer: syz [ 102.522644][ T67] usb 4-1: SerialNumber: syz [ 102.528170][ T67] usb 4-1: config 0 descriptor?? [ 102.535592][ T67] smsc95xx v2.0.0 [ 102.681824][ T517] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 102.841773][ T1416] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 102.841773][ T517] usb 3-1: Using ep0 maxpacket: 32 [ 102.855824][ T517] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.865853][ T517] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.872627][ T517] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 102.881871][ T517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.891166][ T517] usb 3-1: config 0 descriptor?? [ 102.936886][ T67] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 102.947798][ T67] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 102.994421][ T1416] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.004755][ T1416] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.019646][ T1416] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 103.029179][ T1416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.037638][ T1416] usb 1-1: Product: syz [ 103.042232][ T1416] usb 1-1: Manufacturer: syz [ 103.046890][ T1416] usb 1-1: SerialNumber: syz [ 103.052756][ T1416] usb 1-1: config 0 descriptor?? [ 103.061332][ T1416] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 103.301864][ T517] logitech-djreceiver 0003:046D:C534.0012: unknown main item tag 0x0 [ 103.310363][ T517] logitech-djreceiver 0003:046D:C534.0012: unknown main item tag 0x0 [ 103.318594][ T517] logitech-djreceiver 0003:046D:C534.0012: unknown main item tag 0x0 [ 103.327035][ T517] logitech-djreceiver 0003:046D:C534.0012: unknown main item tag 0x0 [ 103.335293][ T517] logitech-djreceiver 0003:046D:C534.0012: unknown main item tag 0x0 [ 103.502823][ T517] usb 3-1: USB disconnect, device number 40 [ 103.532421][ T337] usb 1-1: USB disconnect, device number 42 [ 103.536583][ T36] audit: type=1326 audit(1772079507.579:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.1.465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2bb19c629 code=0x0 [ 103.962595][ T67] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 103.973674][ T67] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 103.984652][ T67] usb 4-1: USB disconnect, device number 53 [ 104.051933][ T36] audit: type=1400 audit(1772079508.099:426): avc: denied { bind } for pid=1812 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.331802][ T1416] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 104.371799][ T517] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 104.481772][ T1416] usb 3-1: Invalid ep0 maxpacket: 64 [ 104.532948][ T517] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.548851][ T517] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.573119][ T517] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.582728][ T517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.590834][ T517] usb 1-1: Product: syz [ 104.609662][ T517] usb 1-1: Manufacturer: syz [ 104.620381][ T517] usb 1-1: SerialNumber: syz [ 104.631765][ T1416] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 104.705093][ T1841] fuse: Bad value for 'user_id' [ 104.710023][ T1841] fuse: Bad value for 'user_id' [ 104.784852][ T1416] usb 3-1: Invalid ep0 maxpacket: 64 [ 104.786436][ T1843] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 104.790241][ T1843] rust_binder: Read failure Err(EFAULT) in pid:341 [ 104.795842][ T1416] usb usb3-port1: attempt power cycle [ 104.809683][ T9] hid-generic 0004:076F:00A7.0013: hidraw0: HID v0.07 Device [syz1] on syz0 [ 104.857924][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 104.857957][ T36] audit: type=1400 audit(1772079508.899:430): avc: denied { mount } for pid=1844 comm="syz.1.477" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 104.886104][ T36] audit: type=1400 audit(1772079508.899:431): avc: denied { mounton } for pid=1844 comm="syz.1.477" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 104.955404][ T517] usb 1-1: 0:2 : does not exist [ 104.967765][ T517] usb 1-1: USB disconnect, device number 43 [ 104.982166][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.002970][ T1849] kvm: user requested TSC rate below hardware speed [ 105.010128][ T1849] kvm: user requested TSC rate below hardware speed [ 105.123806][ T1851] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 105.131630][ T490] Bluetooth: hci0: Frame reassembly failed (-84) [ 105.151826][ T1416] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 105.172222][ T1416] usb 3-1: Invalid ep0 maxpacket: 64 [ 105.301803][ T1416] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 105.322152][ T1416] usb 3-1: Invalid ep0 maxpacket: 64 [ 105.327598][ T1416] usb usb3-port1: unable to enumerate USB device [ 105.679048][ T36] audit: type=1400 audit(1772079509.719:432): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 105.941803][ T1416] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 106.093009][ T1416] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.103220][ T1416] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.112108][ T1416] usb 2-1: config 1 has no interface number 0 [ 106.118226][ T1416] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.129199][ T1416] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 106.140014][ T1416] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 106.150503][ T1416] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.159685][ T1416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.168411][ T1416] usb 2-1: Product: syz [ 106.172669][ T1416] usb 2-1: Manufacturer: syz [ 106.177261][ T1416] usb 2-1: SerialNumber: syz [ 106.182843][ T1862] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.592200][ T1862] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.000684][ T1862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.009702][ T1862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.018278][ T1416] cdc_ncm 2-1:1.1: bind() failure [ 107.191748][ T1853] Bluetooth: hci0: command 0x1003 tx timeout [ 107.191749][ T1852] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.220596][ T9] usb 2-1: USB disconnect, device number 52 [ 107.250522][ T1867] incfs: Options parsing error. -22 [ 107.255933][ T1867] incfs: mount failed -22 [ 107.261950][ T36] audit: type=1400 audit(1772079511.299:433): avc: denied { map } for pid=1866 comm="syz.3.485" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.303761][ T1869] syzkaller1: entered promiscuous mode [ 107.309294][ T1869] syzkaller1: entered allmulticast mode [ 107.407510][ T36] audit: type=1400 audit(1772079511.449:434): avc: denied { shutdown } for pid=1871 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.438817][ T36] audit: type=1400 audit(1772079511.479:435): avc: denied { map } for pid=1873 comm="syz.2.488" path="socket:[17182]" dev="sockfs" ino=17182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.462224][ T36] audit: type=1400 audit(1772079511.479:436): avc: denied { accept } for pid=1873 comm="syz.2.488" path="socket:[17182]" dev="sockfs" ino=17182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.734083][ T436] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 107.756349][ T1890] lo: entered promiscuous mode [ 107.841798][ T1416] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 107.891761][ T436] usb 4-1: Using ep0 maxpacket: 8 [ 107.897928][ T436] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.906300][ T436] usb 4-1: config 179 has no interface number 0 [ 107.912874][ T436] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 107.918227][ T1891] lo: left promiscuous mode [ 107.924026][ T436] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 107.939710][ T436] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.950894][ T436] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 107.962323][ T436] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.975657][ T436] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.984853][ T436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.993839][ T1877] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.003999][ T1416] usb 3-1: Using ep0 maxpacket: 16 [ 108.010613][ T1416] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.018986][ T1416] usb 3-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 108.029320][ T1416] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.038354][ T1416] usb 3-1: config 1 has no interface number 1 [ 108.044503][ T1416] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 108.058796][ T1416] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.067904][ T1416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.076179][ T1416] usb 3-1: Product: syz [ 108.080408][ T1416] usb 3-1: Manufacturer: syz [ 108.085102][ T1416] usb 3-1: SerialNumber: syz [ 108.207236][ T67] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input20 [ 108.408145][ T9] usb 4-1: USB disconnect, device number 54 [ 108.408170][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 108.422718][ T9] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 108.422740][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 108.496803][ T1886] cgroup: fork rejected by pids controller in /syz2 [ 108.514272][ T1416] usb 3-1: USB disconnect, device number 45 [ 108.522992][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 108.772321][ T36] audit: type=1400 audit(1772079512.819:437): avc: denied { setopt } for pid=1897 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.799740][ T36] audit: type=1400 audit(1772079512.839:438): avc: denied { setopt } for pid=1901 comm="syz.0.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.894053][ T1912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 109.158013][ T36] audit: type=1400 audit(1772079513.199:439): avc: denied { mounton } for pid=1919 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 109.181768][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 109.197425][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.204720][ T1919] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.211861][ T517] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 109.212379][ T1919] bridge_slave_0: entered allmulticast mode [ 109.225737][ T1919] bridge_slave_0: entered promiscuous mode [ 109.239188][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.246339][ T1919] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.253576][ T1919] bridge_slave_1: entered allmulticast mode [ 109.259826][ T1919] bridge_slave_1: entered promiscuous mode [ 109.300327][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.307472][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.314825][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.321886][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.333157][ T9] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 109.342133][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 109.351264][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.362305][ T517] usb 1-1: Using ep0 maxpacket: 16 [ 109.368994][ T392] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.376678][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.386834][ T517] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 109.391314][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.395767][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.402752][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.415568][ T517] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.433427][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 109.442594][ T517] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.451577][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.461185][ T517] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.470321][ T517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.478652][ T9] usb 4-1: config 0 descriptor?? [ 109.483835][ T517] usb 1-1: Product: syz [ 109.488147][ T517] usb 1-1: Manufacturer: syz [ 109.488967][ T1919] veth0_vlan: entered promiscuous mode [ 109.499199][ T517] usb 1-1: SerialNumber: syz [ 109.502102][ T1919] veth1_macvtap: entered promiscuous mode [ 109.831845][ T1853] Bluetooth: hci0: command 0x1003 tx timeout [ 109.831876][ T1852] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.893844][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 109.899952][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 109.909746][ T9] usb 4-1: USB disconnect, device number 55 [ 109.916579][ T517] usb 1-1: 0:2 : does not exist [ 110.087829][ T337] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 110.117352][ T1916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.128157][ T1916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.241777][ T337] usb 3-1: Using ep0 maxpacket: 16 [ 110.248114][ T337] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 110.258930][ T337] usb 3-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 110.268125][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.276388][ T337] usb 3-1: Product: syz [ 110.280845][ T337] usb 3-1: Manufacturer: syz [ 110.285672][ T337] usb 3-1: SerialNumber: syz [ 110.331801][ T436] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 110.413796][ T1956] 9pnet_fd: Insufficient options for proto=fd [ 110.481813][ T436] usb 2-1: Using ep0 maxpacket: 16 [ 110.488160][ T436] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.498896][ T436] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 110.501425][ T337] usb 3-1: USB disconnect, device number 46 [ 110.509757][ T436] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.528274][ T436] usb 2-1: New USB device found, idVendor=1d6b, idProduct=1101, bcdDevice= 0.40 [ 110.537695][ T436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.545831][ T436] usb 2-1: Product: syz [ 110.550000][ T436] usb 2-1: Manufacturer: syz [ 110.555282][ T436] usb 2-1: SerialNumber: syz [ 110.560413][ T517] usb 1-1: USB disconnect, device number 44 [ 111.211819][ T517] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 111.383097][ T517] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.394493][ T517] usb 4-1: not running at top speed; connect to a high speed hub [ 111.407594][ T517] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.416897][ T517] usb 4-1: config 1 has no interface number 1 [ 111.424679][ T517] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.437758][ T517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.452048][ T517] usb 4-1: Product: syz [ 111.458620][ T517] usb 4-1: Manufacturer: syz [ 111.465820][ T517] usb 4-1: SerialNumber: syz [ 111.669364][ T1978] netlink: 188 bytes leftover after parsing attributes in process `syz.2.516'. [ 111.695591][ T1963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.708646][ T1963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.742138][ T67] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 111.891841][ T67] usb 1-1: Using ep0 maxpacket: 16 [ 111.899055][ T67] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.909613][ T67] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 13 [ 111.922058][ T67] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.931203][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.939443][ T67] usb 1-1: Product: syz [ 111.943762][ T67] usb 1-1: Manufacturer: syz [ 111.948473][ T67] usb 1-1: SerialNumber: syz [ 111.958337][ T1972] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 112.571636][ T1972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.580559][ T1972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.691834][ T337] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 112.790377][ T67] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 112.796461][ T67] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 112.816711][ T67] cdc_ncm 1-1:1.0: bind() failure [ 112.823066][ T67] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 112.823173][ T337] usb 3-1: device descriptor read/64, error -71 [ 112.830541][ T67] cdc_ncm 1-1:1.1: bind() failure [ 112.843876][ T67] usb 1-1: USB disconnect, device number 45 [ 112.937869][ T436] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 112.948289][ T517] usb 4-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 112.955023][ T436] usb 2-1: USB disconnect, device number 53 [ 112.959401][ T517] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 112.974837][ T517] usb 4-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 112.984712][ T517] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 112.996035][ T517] usb 4-1: failed to enable PITCH for EP 0x82 [ 113.012847][ T517] usb 4-1: USB disconnect, device number 56 [ 113.026674][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 113.111812][ T337] usb 3-1: device descriptor read/64, error -71 [ 113.321863][ T517] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 113.352124][ T337] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 113.437540][ T2012] kvm: kvm [2011]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 113.481888][ T337] usb 3-1: device descriptor read/64, error -71 [ 113.489328][ T517] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.493361][ T2017] overlayfs: failed to resolve './file1': -2 [ 113.503557][ T517] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.521187][ T517] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 113.530378][ T517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.538596][ T517] usb 4-1: Product: syz [ 113.542814][ T517] usb 4-1: Manufacturer: syz [ 113.547406][ T517] usb 4-1: SerialNumber: syz [ 113.552650][ T517] usb 4-1: config 0 descriptor?? [ 113.558375][ T517] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 113.591823][ T344] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 113.721948][ T337] usb 3-1: device descriptor read/64, error -71 [ 113.743505][ T344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.752696][ T67] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 113.753960][ T344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.771873][ T344] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.773249][ T1982] netlink: 68 bytes leftover after parsing attributes in process `syz.3.518'. [ 113.781049][ T344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.798209][ T344] usb 2-1: SerialNumber: syz [ 113.832185][ T337] usb usb3-port1: attempt power cycle [ 113.911962][ T67] usb 1-1: Using ep0 maxpacket: 16 [ 113.918602][ T67] usb 1-1: config 4 has an invalid interface number: 175 but max is 0 [ 113.927088][ T67] usb 1-1: config 4 has no interface number 0 [ 113.933545][ T67] usb 1-1: config 4 interface 175 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 113.943670][ T67] usb 1-1: config 4 interface 175 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 113.953936][ T67] usb 1-1: config 4 interface 175 has no altsetting 0 [ 113.962348][ T67] usb 1-1: New USB device found, idVendor=044f, idProduct=6a5a, bcdDevice=bb.b3 [ 113.971755][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.979830][ T67] usb 1-1: Product: syz [ 113.984510][ T67] usb 1-1: Manufacturer: syz [ 113.989193][ T67] usb 1-1: SerialNumber: syz [ 114.000771][ T2017] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.006130][ T344] usb 2-1: 0:2 : does not exist [ 114.010492][ T2017] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.031842][ T344] usb 2-1: unit 5: unexpected type 0x0a [ 114.045930][ T344] usb 2-1: USB disconnect, device number 54 [ 114.181885][ T337] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 114.212560][ T337] usb 3-1: device descriptor read/8, error -71 [ 114.237180][ T344] usb 1-1: USB disconnect, device number 46 [ 114.310692][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 114.310714][ T36] audit: type=1400 audit(1772079518.349:442): avc: denied { create } for pid=2031 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 114.342921][ T337] usb 3-1: device descriptor read/8, error -71 [ 114.379807][ T2035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 114.593235][ T337] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 114.622862][ T337] usb 3-1: device descriptor read/8, error -71 [ 114.752824][ T337] usb 3-1: device descriptor read/8, error -71 [ 114.841775][ T344] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 114.862506][ T337] usb usb3-port1: unable to enumerate USB device [ 114.992894][ T344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.011753][ T344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.020658][ T344] usb 2-1: config 1 has no interface number 0 [ 115.042285][ T344] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.057868][ T344] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 115.075032][ T344] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 115.090308][ T344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.099791][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.108211][ T344] usb 2-1: Product: syz [ 115.115148][ T344] usb 2-1: Manufacturer: syz [ 115.123006][ T344] usb 2-1: SerialNumber: syz [ 115.132571][ T2039] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.255515][ T36] audit: type=1400 audit(1772079519.299:443): avc: denied { create } for pid=2040 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 115.534880][ T9] usb 4-1: USB disconnect, device number 57 [ 115.548575][ T2050] tipc: Can't bind to reserved service type 3 [ 115.552117][ T2039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.566697][ T337] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 115.572625][ T2039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.611387][ T2039] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.701801][ T337] usb 1-1: device descriptor read/64, error -71 [ 115.753050][ T2058] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.820658][ T344] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 115.839415][ T344] cdc_ncm 2-1:1.1: bind() failure [ 115.849934][ T344] usb 2-1: USB disconnect, device number 55 [ 115.909338][ T2066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 115.991763][ T337] usb 1-1: device descriptor read/64, error -71 [ 116.011791][ T436] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 116.172834][ T436] usb 4-1: config 9 has an invalid interface number: 81 but max is 0 [ 116.180949][ T436] usb 4-1: config 9 has no interface number 0 [ 116.187739][ T436] usb 4-1: config 9 interface 81 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 116.198763][ T436] usb 4-1: config 9 interface 81 has no altsetting 0 [ 116.217553][ T436] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 116.226727][ T436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.242826][ T337] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 116.248985][ T436] usb 4-1: Product: syz [ 116.254867][ T436] usb 4-1: Manufacturer: syz [ 116.259492][ T436] usb 4-1: SerialNumber: syz [ 116.274269][ T2062] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 116.331621][ T36] audit: type=1400 audit(1772079520.369:444): avc: denied { associate } for pid=2079 comm="syz.2.545" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 116.371786][ T337] usb 1-1: device descriptor read/64, error -71 [ 116.485353][ T436] usbserial_generic 4-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 116.496720][ T436] usbserial_generic 4-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 116.507638][ T436] usbserial_generic 4-1:9.81: generic converter detected [ 116.515682][ T436] usb 4-1: generic converter now attached to ttyUSB0 [ 116.523638][ T436] usb 4-1: generic converter now attached to ttyUSB1 [ 116.533659][ T436] usb 4-1: USB disconnect, device number 58 [ 116.541044][ T436] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 116.549878][ T436] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 116.558103][ T436] usbserial_generic 4-1:9.81: device disconnected [ 116.611850][ T337] usb 1-1: device descriptor read/64, error -71 [ 116.661837][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 116.671810][ T67] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 116.721951][ T337] usb usb1-port1: attempt power cycle [ 116.812953][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.821806][ T67] usb 2-1: Using ep0 maxpacket: 16 [ 116.823231][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.829448][ T67] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.843095][ T9] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 116.852086][ T67] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.861289][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.867759][ T67] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 116.876251][ T9] usb 3-1: Product: syz [ 116.885812][ T67] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.889408][ T9] usb 3-1: Manufacturer: syz [ 116.898452][ T67] usb 2-1: config 0 descriptor?? [ 116.905097][ T9] usb 3-1: SerialNumber: syz [ 116.912477][ T9] usb 3-1: config 0 descriptor?? [ 116.918453][ T9] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 117.021189][ T36] audit: type=1400 audit(1772079521.059:445): avc: granted { setsecparam } for pid=2091 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 117.021344][ T2092] random: crng reseeded on system resumption [ 117.061778][ T337] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 117.083041][ T337] usb 1-1: device descriptor read/8, error -71 [ 117.202857][ T1416] usb 3-1: USB disconnect, device number 51 [ 117.212921][ T337] usb 1-1: device descriptor read/8, error -71 [ 117.309636][ T2086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.318275][ T2086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.451874][ T337] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 117.473553][ T337] usb 1-1: device descriptor read/8, error -71 [ 117.528773][ T67] usbhid 2-1:0.0: can't add hid device: -71 [ 117.534900][ T67] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 117.545795][ T67] usb 2-1: USB disconnect, device number 56 [ 117.602858][ T337] usb 1-1: device descriptor read/8, error -71 [ 117.721881][ T337] usb usb1-port1: unable to enumerate USB device [ 117.791781][ T45] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 117.941762][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 117.948201][ T45] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 117.956881][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.967462][ T45] usb 4-1: config 0 has no interface number 0 [ 117.973799][ T45] usb 4-1: too many endpoints for config 0 interface 105 altsetting 0: 218, using maximum allowed: 30 [ 117.985143][ T45] usb 4-1: config 0 interface 105 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 118.000436][ T45] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 118.009863][ T45] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 118.019187][ T45] usb 4-1: Product: syz [ 118.028444][ T45] usb 4-1: Manufacturer: syz [ 118.037414][ T45] usb 4-1: SerialNumber: syz [ 118.045548][ T45] usb 4-1: config 0 descriptor?? [ 118.281762][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 118.441796][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 118.448126][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.459081][ T9] usb 2-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 118.468385][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.477077][ T9] usb 2-1: config 0 descriptor?? [ 118.591778][ T517] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 118.661812][ T45] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 118.741803][ T517] usb 3-1: Using ep0 maxpacket: 32 [ 118.747968][ T517] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 118.757295][ T517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.766094][ T517] usb 3-1: config 0 descriptor?? [ 118.811778][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 118.818240][ T45] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 118.826634][ T45] usb 1-1: config 0 has no interface number 0 [ 118.832903][ T45] usb 1-1: config 0 interface 230 has no altsetting 0 [ 118.841204][ T45] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 118.850317][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.858347][ T45] usb 1-1: Product: syz [ 118.862553][ T45] usb 1-1: Manufacturer: syz [ 118.867150][ T45] usb 1-1: SerialNumber: syz [ 118.872738][ T45] usb 1-1: config 0 descriptor?? [ 118.878803][ T45] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 118.886680][ T9] hid (null): unknown global tag 0xd [ 118.886767][ T45] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 118.892266][ T9] hid (null): unknown global tag 0xd [ 118.905956][ T9] hid-generic 0003:0B05:1A30.0014: unexpected long global item [ 118.913890][ T9] hid-generic 0003:0B05:1A30.0014: probe with driver hid-generic failed with error -22 [ 119.130232][ T1416] usb 2-1: USB disconnect, device number 57 [ 119.173112][ T517] kye 0003:0458:5015.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 119.183799][ T517] kye 0003:0458:5015.0015: unknown main item tag 0x0 [ 119.190484][ T517] kye 0003:0458:5015.0015: unknown main item tag 0x0 [ 119.197224][ T517] kye 0003:0458:5015.0015: unknown main item tag 0x0 [ 119.203942][ T517] kye 0003:0458:5015.0015: unknown main item tag 0x0 [ 119.210713][ T517] kye 0003:0458:5015.0015: unknown main item tag 0x0 [ 119.217440][ T517] kye 0003:0458:5015.0015: unknown main item tag 0x0 [ 119.224169][ T517] kye 0003:0458:5015.0015: unknown main item tag 0x0 [ 119.231493][ T517] kye 0003:0458:5015.0015: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 119.242614][ T517] kye 0003:0458:5015.0015: tablet-enabling feature report not found [ 119.250619][ T517] kye 0003:0458:5015.0015: tablet enabling failed [ 119.375214][ T2113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.383883][ T2113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.392274][ T517] usb 3-1: USB disconnect, device number 52 [ 119.891798][ T1416] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 120.021771][ T1416] usb 2-1: device descriptor read/64, error -71 [ 120.089844][ T2127] random: crng reseeded on system resumption [ 120.174221][ T2128] kvm: pic: single mode not supported [ 120.174234][ T2128] kvm: pic: level sensitive irq not supported [ 120.179755][ T2128] kvm: pic: non byte read [ 120.190473][ T2128] kvm: pic: single mode not supported [ 120.190482][ T2128] kvm: pic: level sensitive irq not supported [ 120.195951][ T2128] kvm: pic: non byte read [ 120.261786][ T1416] usb 2-1: device descriptor read/64, error -71 [ 120.501787][ T1416] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 120.602520][ T436] usb 4-1: USB disconnect, device number 59 [ 120.631812][ T1416] usb 2-1: device descriptor read/64, error -71 [ 120.891778][ T1416] usb 2-1: device descriptor read/64, error -71 [ 121.002058][ T1416] usb usb2-port1: attempt power cycle [ 121.092111][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.099263][ T2138] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.106445][ T2138] bridge_slave_0: entered allmulticast mode [ 121.112923][ T2138] bridge_slave_0: entered promiscuous mode [ 121.120993][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.128488][ T2138] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.135699][ T2138] bridge_slave_1: entered allmulticast mode [ 121.142207][ T2138] bridge_slave_1: entered promiscuous mode [ 121.151828][ T45] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 121.169316][ T46] bridge_slave_1: left allmulticast mode [ 121.177334][ T46] bridge_slave_1: left promiscuous mode [ 121.183492][ T45] usb 1-1: USB disconnect, device number 51 [ 121.189691][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.201387][ T46] bridge_slave_0: left allmulticast mode [ 121.209608][ T36] audit: type=1400 audit(1772079525.249:446): avc: denied { map } for pid=2144 comm="syz.2.568" path="socket:[19362]" dev="sockfs" ino=19362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 121.235052][ T46] bridge_slave_0: left promiscuous mode [ 121.240716][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.322898][ T2152] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 121.334547][ T46] veth1_macvtap: left promiscuous mode [ 121.341769][ T1416] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 121.373037][ T1416] usb 2-1: device descriptor read/8, error -71 [ 121.407177][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.414321][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.421663][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.428746][ T2138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.485921][ T392] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.493305][ T392] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.503536][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.510716][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.519601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.526687][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.538088][ T1416] usb 2-1: device descriptor read/8, error -71 [ 121.562241][ T2138] veth0_vlan: entered promiscuous mode [ 121.578057][ T2138] veth1_macvtap: entered promiscuous mode [ 121.696272][ T2164] cgroup: fork rejected by pids controller in /syz4 [ 121.781818][ T1416] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 121.908142][ T1416] usb 2-1: device descriptor read/8, error -71 [ 122.055373][ T1416] usb 2-1: device descriptor read/8, error -71 [ 122.181911][ T1416] usb usb2-port1: unable to enumerate USB device [ 122.207922][ T2312] usb usb1: check_ctrlrecip: process 2312 (syz.4.576) requesting ep 01 but needs 81 [ 122.211823][ T517] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 122.383162][ T517] usb 3-1: not running at top speed; connect to a high speed hub [ 122.392036][ T517] usb 3-1: config 7 has an invalid interface number: 247 but max is 3 [ 122.400242][ T517] usb 3-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 122.409456][ T517] usb 3-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 122.418281][ T517] usb 3-1: config 7 has an invalid interface number: 68 but max is 3 [ 122.426436][ T517] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 122.435171][ T517] usb 3-1: config 7 has an invalid interface number: 213 but max is 3 [ 122.443358][ T517] usb 3-1: config 7 has no interface number 0 [ 122.449430][ T517] usb 3-1: config 7 has no interface number 1 [ 122.455540][ T517] usb 3-1: config 7 has no interface number 2 [ 122.461639][ T517] usb 3-1: config 7 interface 247 altsetting 128 endpoint 0x7 has an invalid bInterval 128, changing to 4 [ 122.473615][ T517] usb 3-1: config 7 interface 247 altsetting 128 endpoint 0x1 has an invalid bInterval 129, changing to 4 [ 122.484991][ T517] usb 3-1: config 7 interface 247 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 122.496003][ T517] usb 3-1: config 7 interface 247 altsetting 128 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 122.507232][ T517] usb 3-1: config 7 interface 247 altsetting 128 has a duplicate endpoint with address 0x2, skipping [ 122.518294][ T517] usb 3-1: config 7 interface 247 altsetting 128 endpoint 0x3 has invalid maxpacket 1015, setting to 64 [ 122.529589][ T517] usb 3-1: config 7 interface 68 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 122.540675][ T517] usb 3-1: config 7 interface 68 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 122.551551][ T517] usb 3-1: config 7 interface 68 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 122.562961][ T517] usb 3-1: config 7 interface 68 altsetting 250 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 122.574010][ T517] usb 3-1: config 7 interface 3 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 122.584587][ T517] usb 3-1: config 7 interface 3 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 122.595134][ T517] usb 3-1: config 7 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 122.605882][ T517] usb 3-1: config 7 interface 3 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 122.616457][ T517] usb 3-1: config 7 interface 3 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 122.627008][ T517] usb 3-1: config 7 interface 3 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 122.638048][ T517] usb 3-1: config 7 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 122.648881][ T517] usb 3-1: config 7 interface 3 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 122.659442][ T517] usb 3-1: config 7 interface 213 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 122.670199][ T517] usb 3-1: config 7 interface 213 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 122.681014][ T517] usb 3-1: config 7 interface 213 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 122.691781][ T517] usb 3-1: config 7 interface 213 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 122.702495][ T517] usb 3-1: config 7 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.713398][ T517] usb 3-1: config 7 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.724332][ T517] usb 3-1: config 7 interface 213 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 122.741773][ T517] usb 3-1: config 7 interface 247 has no altsetting 0 [ 122.748579][ T517] usb 3-1: config 7 interface 68 has no altsetting 0 [ 122.761786][ T517] usb 3-1: config 7 interface 3 has no altsetting 0 [ 122.985710][ T36] audit: type=1326 audit(1772079527.029:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2310 comm="syz.4.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3ed9c629 code=0x7fc00000 [ 123.005551][ T2330] fuse: Unknown parameter 'allow_ot|e2' [ 123.009154][ T36] audit: type=1326 audit(1772079527.029:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2310 comm="syz.4.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca3ed9c629 code=0x7fc00000 [ 123.041974][ T36] audit: type=1326 audit(1772079527.029:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2310 comm="syz.4.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3ed9c629 code=0x7fc00000 [ 123.065967][ T36] audit: type=1326 audit(1772079527.039:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2310 comm="syz.4.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3ed9c629 code=0x7fc00000 [ 123.089740][ T36] audit: type=1326 audit(1772079527.039:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2310 comm="syz.4.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3ed9c629 code=0x7fc00000 [ 123.114938][ T36] audit: type=1326 audit(1772079527.039:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2310 comm="syz.4.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3ed9c629 code=0x7fc00000 [ 123.138372][ T36] audit: type=1326 audit(1772079527.039:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2310 comm="syz.4.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3ed9c629 code=0x7fc00000 [ 123.161873][ T36] audit: type=1326 audit(1772079527.039:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2310 comm="syz.4.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3ed9c629 code=0x7fc00000 [ 123.185170][ T36] audit: type=1326 audit(1772079527.039:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2310 comm="syz.4.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca3ed9c629 code=0x7fc00000 [ 123.374078][ T2337] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.381133][ T2337] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.388267][ T2337] bridge_slave_0: entered allmulticast mode [ 123.394808][ T2337] bridge_slave_0: entered promiscuous mode [ 123.401279][ T2337] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.408403][ T2337] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.415696][ T2337] bridge_slave_1: entered allmulticast mode [ 123.422230][ T2337] bridge_slave_1: entered promiscuous mode [ 123.451844][ T1416] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 123.475216][ T2337] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.482307][ T2337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.489643][ T2337] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.496694][ T2337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.518157][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.525632][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.534978][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.542046][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.551310][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.558390][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.584522][ T2337] veth0_vlan: entered promiscuous mode [ 123.596380][ T2337] veth1_macvtap: entered promiscuous mode [ 123.605048][ T1416] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 123.616476][ T1416] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.627639][ T1416] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 123.640266][ T1416] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 123.655382][ T1416] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.664546][ T1416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.673990][ T1416] usb 5-1: SerialNumber: syz [ 123.681509][ T2335] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 123.896515][ T1416] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 123.906842][ T1416] usb 5-1: USB disconnect, device number 2 [ 124.066707][ T2362] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.312119][ T436] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.461799][ T436] usb 6-1: Using ep0 maxpacket: 8 [ 124.469270][ T436] usb 6-1: config 5 has an invalid interface number: 14 but max is 0 [ 124.481398][ T436] usb 6-1: config 5 has no interface number 0 [ 124.489916][ T436] usb 6-1: config 5 interface 14 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 124.501903][ T436] usb 6-1: config 5 interface 14 altsetting 9 endpoint 0x7 has an invalid bInterval 196, changing to 7 [ 124.513530][ T436] usb 6-1: config 5 interface 14 has no altsetting 0 [ 124.522919][ T436] usb 6-1: New USB device found, idVendor=12d1, idProduct=141b, bcdDevice= 0.00 [ 124.532768][ T436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.541666][ T436] usb 6-1: Product: syz [ 124.546358][ T436] usb 6-1: Manufacturer: syz [ 124.551695][ T436] usb 6-1: SerialNumber: syz [ 124.775802][ T436] usb-storage 6-1:5.14: USB Mass Storage device detected [ 124.810472][ T2383] fuse: Unknown parameter 'f0x0000000000000004' [ 124.837755][ T436] usb 6-1: USB disconnect, device number 2 [ 124.986411][ T517] usb 3-1: string descriptor 0 read error: -71 [ 124.993387][ T517] usb 3-1: New USB device found, idVendor=0506, idProduct=0a01, bcdDevice=99.7e [ 125.002690][ T517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.020758][ T517] usb 3-1: can't set config #7, error -71 [ 125.037751][ T517] usb 3-1: USB disconnect, device number 53 [ 125.121955][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.272906][ T9] usb 5-1: config 1 has an invalid interface number: 188 but max is 0 [ 125.281088][ T9] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 125.292049][ T9] usb 5-1: config 1 has no interface number 0 [ 125.298185][ T9] usb 5-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.312055][ T9] usb 5-1: config 1 interface 188 has no altsetting 0 [ 125.320397][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 125.329759][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.338021][ T9] usb 5-1: Product: syz [ 125.342485][ T9] usb 5-1: Manufacturer: syz [ 125.355007][ T9] usb 5-1: SerialNumber: syz [ 125.361327][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 125.371269][ T9] snd-usb-audio 5-1:1.188: probe with driver snd-usb-audio failed with error -22 [ 125.385276][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.188/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.432037][ T337] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 125.441789][ T517] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 125.561827][ T337] usb 6-1: device descriptor read/64, error -71 [ 125.593345][ T517] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.603238][ T517] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.609856][ T517] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 125.618945][ T517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.627468][ T517] usb 3-1: config 0 descriptor?? [ 125.801755][ T337] usb 6-1: device descriptor read/64, error -71 [ 126.035120][ T2405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.041777][ T337] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 126.043801][ T2405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.061314][ T2405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.068802][ T45] usb 5-1: USB disconnect, device number 3 [ 126.070123][ T2405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.088823][ T2405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.097634][ T2405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.110236][ T517] usbhid 3-1:0.0: can't add hid device: -71 [ 126.116312][ T517] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 126.128624][ T517] usb 3-1: USB disconnect, device number 54 [ 126.181769][ T337] usb 6-1: device descriptor read/64, error -71 [ 126.421796][ T337] usb 6-1: device descriptor read/64, error -71 [ 126.531925][ T337] usb usb6-port1: attempt power cycle [ 126.601812][ T517] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 126.751816][ T517] usb 5-1: Invalid ep0 maxpacket: 64 [ 126.871803][ T337] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 126.881794][ T517] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 126.892879][ T337] usb 6-1: device descriptor read/8, error -71 [ 126.911818][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 127.022837][ T337] usb 6-1: device descriptor read/8, error -71 [ 127.032293][ T517] usb 5-1: Invalid ep0 maxpacket: 64 [ 127.037718][ T517] usb usb5-port1: attempt power cycle [ 127.062893][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.074077][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 127.086683][ T9] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 127.095768][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.103855][ T9] usb 3-1: Product: syz [ 127.108020][ T9] usb 3-1: Manufacturer: syz [ 127.121997][ T9] usb 3-1: SerialNumber: syz [ 127.127212][ T9] usb 3-1: config 0 descriptor?? [ 127.134280][ T2429] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 127.142298][ T9] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 127.148659][ T9] usb 3-1: No valid video chain found. [ 127.261827][ T337] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 127.282926][ T337] usb 6-1: device descriptor read/8, error -71 [ 127.346610][ T45] usb 3-1: USB disconnect, device number 55 [ 127.391842][ T517] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 127.412255][ T517] usb 5-1: Invalid ep0 maxpacket: 64 [ 127.418418][ T337] usb 6-1: device descriptor read/8, error -71 [ 127.531915][ T337] usb usb6-port1: unable to enumerate USB device [ 127.541799][ T517] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 127.562206][ T517] usb 5-1: Invalid ep0 maxpacket: 64 [ 127.567660][ T517] usb usb5-port1: unable to enumerate USB device [ 128.091792][ T436] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 128.221814][ T436] usb 3-1: device descriptor read/64, error -71 [ 128.461881][ T436] usb 3-1: device descriptor read/64, error -71 [ 128.581817][ T45] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 128.701768][ T436] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 128.731824][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 128.738338][ T45] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 128.746791][ T45] usb 6-1: config 0 has no interface number 0 [ 128.753008][ T45] usb 6-1: config 0 interface 230 has no altsetting 0 [ 128.761368][ T45] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 128.770492][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.778625][ T45] usb 6-1: Product: syz [ 128.782925][ T45] usb 6-1: Manufacturer: syz [ 128.787514][ T45] usb 6-1: SerialNumber: syz [ 128.792989][ T45] usb 6-1: config 0 descriptor?? [ 128.798777][ T45] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 128.806566][ T45] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 128.841791][ T436] usb 3-1: device descriptor read/64, error -71 [ 129.081781][ T436] usb 3-1: device descriptor read/64, error -71 [ 129.192003][ T436] usb usb3-port1: attempt power cycle [ 129.531783][ T436] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 129.552833][ T436] usb 3-1: device descriptor read/8, error -71 [ 129.682996][ T436] usb 3-1: device descriptor read/8, error -71 [ 129.751812][ T517] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.921792][ T436] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 129.942823][ T436] usb 3-1: device descriptor read/8, error -71 [ 130.072900][ T436] usb 3-1: device descriptor read/8, error -71 [ 130.181943][ T436] usb usb3-port1: unable to enumerate USB device [ 131.077139][ T45] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5 [ 131.089322][ T45] usb 6-1: USB disconnect, device number 7 [ 131.624306][ T2477] fuse: Unknown parameter '' [ 131.891805][ T45] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 132.011804][ T436] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 132.041769][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 132.048256][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 132.057192][ T45] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 132.064905][ T45] usb 6-1: can't read configurations, error -61 [ 132.162972][ T436] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 132.174011][ T436] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.180723][ T436] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 132.189847][ T436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.197910][ T45] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 132.206329][ T436] usb 3-1: config 0 descriptor?? [ 132.211815][ T2485] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 132.351765][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 132.358370][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 132.367214][ T45] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 132.374876][ T45] usb 6-1: can't read configurations, error -61 [ 132.381320][ T45] usb usb6-port1: attempt power cycle [ 132.623338][ T436] wacom 0003:056A:0317.0016: unknown main item tag 0x0 [ 132.630246][ T436] wacom 0003:056A:0317.0016: unknown main item tag 0x0 [ 132.637156][ T436] wacom 0003:056A:0317.0016: unknown main item tag 0x0 [ 132.644140][ T436] wacom 0003:056A:0317.0016: unknown main item tag 0x0 [ 132.651051][ T436] wacom 0003:056A:0317.0016: unknown main item tag 0x0 [ 132.657970][ T436] wacom 0003:056A:0317.0016: unknown main item tag 0x0 [ 132.664942][ T436] wacom 0003:056A:0317.0016: unknown main item tag 0x0 [ 132.671981][ T436] wacom 0003:056A:0317.0016: unknown main item tag 0x0 [ 132.678853][ T436] wacom 0003:056A:0317.0016: unknown main item tag 0x0 [ 132.686161][ T436] wacom 0003:056A:0317.0016: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 132.696787][ T436] wacom 0003:056A:0317.0016: hidraw0: USB HID vff.fe Device [HID 056a:0317] on usb-dummy_hcd.2-1/input0 [ 132.709036][ T436] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0317.0016/input/input21 [ 132.731787][ T45] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 132.752179][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 132.758635][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 132.767478][ T45] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 132.775105][ T45] usb 6-1: can't read configurations, error -61 [ 132.823782][ T9] usb 3-1: USB disconnect, device number 60 [ 132.901804][ T45] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 132.922211][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 132.928726][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 132.937617][ T45] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 132.945351][ T45] usb 6-1: can't read configurations, error -61 [ 132.951820][ T45] usb usb6-port1: unable to enumerate USB device [ 133.051852][ T517] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 133.203729][ T517] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.212550][ T517] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 133.220119][ T517] usb 5-1: can't read configurations, error -71 [ 133.227904][ T517] usb usb5-port1: attempt power cycle [ 133.571785][ T9] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 133.723531][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 133.731879][ T9] usb 3-1: config 0 has no interface number 0 [ 133.738070][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 133.744843][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 133.744859][ T36] audit: type=1400 audit(1772079537.799:519): avc: denied { create } for pid=2503 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.746506][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 133.779723][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.787825][ T9] usb 3-1: Product: syz [ 133.792076][ T9] usb 3-1: Manufacturer: syz [ 133.796684][ T9] usb 3-1: SerialNumber: syz [ 133.802368][ T9] usb 3-1: config 0 descriptor?? [ 133.985445][ T2509] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.992738][ T2509] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.999850][ T2509] bridge_slave_0: entered allmulticast mode [ 134.009827][ T2509] bridge_slave_0: entered promiscuous mode [ 134.017045][ T2509] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.024205][ T2509] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.031275][ T2509] bridge_slave_1: entered allmulticast mode [ 134.037565][ T2509] bridge_slave_1: entered promiscuous mode [ 134.043751][ T13] bridge_slave_1: left allmulticast mode [ 134.049459][ T13] bridge_slave_1: left promiscuous mode [ 134.055167][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.062583][ T13] bridge_slave_0: left allmulticast mode [ 134.068300][ T13] bridge_slave_0: left promiscuous mode [ 134.073991][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.165298][ T13] veth1_macvtap: left promiscuous mode [ 134.170854][ T13] veth0_vlan: left promiscuous mode [ 134.226624][ T2509] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.233800][ T2509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.241061][ T2509] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.248117][ T2509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.269187][ T490] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.276483][ T490] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.288154][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.295220][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.302755][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.309779][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.336919][ T2509] veth0_vlan: entered promiscuous mode [ 134.347565][ T2509] veth1_macvtap: entered promiscuous mode [ 134.403437][ T2524] x_tables: unsorted underflow at hook 4 [ 134.916639][ T2533] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.923770][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.930851][ T2533] bridge_slave_0: entered allmulticast mode [ 134.937824][ T2533] bridge_slave_0: entered promiscuous mode [ 134.946332][ T2533] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.956179][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.963516][ T2533] bridge_slave_1: entered allmulticast mode [ 134.969885][ T2533] bridge_slave_1: entered promiscuous mode [ 135.018147][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 135.041826][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 135.042348][ T2533] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.058895][ T2533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.065355][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 135.066229][ T2533] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.081582][ T2533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.084915][ T9] usb 3-1: USB disconnect, device number 61 [ 135.107343][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.128463][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.141668][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.148760][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.170148][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.177324][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.220551][ T2533] veth0_vlan: entered promiscuous mode [ 135.234224][ T2533] veth1_macvtap: entered promiscuous mode [ 135.235803][ T2550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2550 comm=syz.0.655 [ 135.277841][ T2553] netlink: 'syz.7.652': attribute type 14 has an invalid length. [ 135.299896][ T36] audit: type=1400 audit(1772079539.339:520): avc: denied { read } for pid=2554 comm="syz.7.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 135.672186][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 135.771797][ T436] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 135.822096][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 135.828316][ T9] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 135.836625][ T9] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 135.844770][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 135.853688][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 135.864640][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 135.875812][ T9] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 135.884916][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.892985][ T9] usb 8-1: Product: syz [ 135.897152][ T9] usb 8-1: Manufacturer: syz [ 135.901787][ T9] usb 8-1: SerialNumber: syz [ 135.906994][ T9] usb 8-1: config 0 descriptor?? [ 135.913000][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 135.918916][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 135.926768][ T9] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input24 [ 135.943055][ T436] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 135.954236][ T436] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.965218][ T436] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 135.978286][ T436] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 135.987492][ T436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.997099][ T436] usb 3-1: config 0 descriptor?? [ 136.116090][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.124706][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.405469][ T436] elecom 0003:056E:010D.0017: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.2-1/input0 [ 136.605765][ T2563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.614350][ T2563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.622959][ T2563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.631586][ T2563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.641232][ T9] usb 3-1: USB disconnect, device number 62 [ 137.159343][ T2566] netlink: 'syz.2.659': attribute type 6 has an invalid length. [ 137.178942][ T2566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=2566 comm=syz.2.659 [ 137.521822][ T31] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 137.651794][ T31] usb 3-1: device descriptor read/64, error -71 [ 137.891790][ T31] usb 3-1: device descriptor read/64, error -71 [ 137.961113][ T36] audit: type=1326 audit(1772079541.999:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.6.664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87ea19c629 code=0x0 [ 138.131772][ T31] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 138.261886][ T31] usb 3-1: device descriptor read/64, error -71 [ 138.342515][ T436] usb 8-1: USB disconnect, device number 2 [ 138.501765][ T31] usb 3-1: device descriptor read/64, error -71 [ 138.612107][ T31] usb usb3-port1: attempt power cycle [ 138.861788][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 138.952028][ T31] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 138.972787][ T31] usb 3-1: device descriptor read/8, error -71 [ 139.011809][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 139.018039][ T9] usb 8-1: config 6 has an invalid interface number: 94 but max is 3 [ 139.026252][ T9] usb 8-1: config 6 has an invalid interface number: 182 but max is 3 [ 139.034484][ T9] usb 8-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 139.043195][ T9] usb 8-1: config 6 has an invalid interface number: 54 but max is 3 [ 139.051265][ T9] usb 8-1: config 6 has no interface number 0 [ 139.057444][ T9] usb 8-1: config 6 has no interface number 1 [ 139.063626][ T9] usb 8-1: config 6 has no interface number 2 [ 139.069712][ T9] usb 8-1: config 6 interface 3 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 139.080338][ T9] usb 8-1: config 6 interface 3 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 139.091074][ T9] usb 8-1: config 6 interface 94 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 139.100833][ T9] usb 8-1: config 6 interface 94 altsetting 1 bulk endpoint 0xA has invalid maxpacket 0 [ 139.110598][ T9] usb 8-1: config 6 interface 94 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 139.112852][ T31] usb 3-1: device descriptor read/8, error -71 [ 139.121348][ T9] usb 8-1: config 6 interface 182 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 139.138420][ T9] usb 8-1: config 6 interface 182 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 139.149215][ T9] usb 8-1: config 6 interface 182 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 139.160054][ T9] usb 8-1: config 6 interface 54 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 139.170768][ T9] usb 8-1: config 6 interface 54 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 139.181375][ T9] usb 8-1: config 6 interface 54 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 139.192199][ T9] usb 8-1: config 6 interface 54 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 139.202908][ T9] usb 8-1: config 6 interface 54 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 139.213602][ T9] usb 8-1: config 6 interface 54 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 139.224220][ T9] usb 8-1: config 6 interface 54 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 139.234854][ T9] usb 8-1: config 6 interface 54 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 139.245472][ T9] usb 8-1: config 6 interface 54 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 139.256188][ T9] usb 8-1: config 6 interface 54 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 139.266814][ T9] usb 8-1: config 6 interface 3 has no altsetting 0 [ 139.274191][ T9] usb 8-1: config 6 interface 94 has no altsetting 0 [ 139.280893][ T9] usb 8-1: config 6 interface 182 has no altsetting 0 [ 139.287852][ T9] usb 8-1: config 6 interface 54 has no altsetting 0 [ 139.296249][ T9] usb 8-1: Dual-Role OTG device on HNP port [ 139.302442][ T9] usb 8-1: New USB device found, idVendor=05c6, idProduct=7101, bcdDevice=48.3a [ 139.311467][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.319535][ T9] usb 8-1: Product: ч [ 139.323633][ T9] usb 8-1: Manufacturer: 셦桉셱愺筗怒鵾獌抜㔬㗌熓❲鮇꤆졑窐괆悞끋ࡣ粌ꦫﭿ鋵ᆔ덧緫墪렊 [ 139.336337][ T9] usb 8-1: SerialNumber: 좪莏焙웸쮲鞘ワ岔㌂乖䥏ꩺ谛텅⦚㫕騆괣̥⟐䜖饢鞌蟚䷵Ẇ骍騶㠿胮ﮯ꾂繙憴筬荒ೈꝖၓய汢搳㟀 [ 139.361927][ T31] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 139.382860][ T31] usb 3-1: device descriptor read/8, error -71 [ 139.513223][ T31] usb 3-1: device descriptor read/8, error -71 [ 139.564035][ T9] usb 8-1: USB disconnect, device number 3 [ 139.621923][ T31] usb usb3-port1: unable to enumerate USB device [ 140.323277][ T337] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 140.473282][ T337] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.481407][ T337] usb 8-1: config 0 has no interface number 0 [ 140.487557][ T337] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.498746][ T337] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.508765][ T337] usb 8-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.521762][ T337] usb 8-1: config 0 interface 1 has no altsetting 0 [ 140.528370][ T337] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 140.537503][ T337] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.546089][ T337] usb 8-1: config 0 descriptor?? [ 140.585169][ T2603] syzkaller1: entered promiscuous mode [ 140.590778][ T2603] syzkaller1: entered allmulticast mode [ 140.955553][ T337] usbhid 8-1:0.1: can't add hid device: -71 [ 140.961629][ T337] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 140.970510][ T337] usb 8-1: USB disconnect, device number 4 [ 141.011840][ T31] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 141.162906][ T31] usb 3-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 141.172093][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.180604][ T31] usb 3-1: config 0 descriptor?? [ 141.186365][ T31] usb-storage 3-1:0.0: USB Mass Storage device detected [ 141.194880][ T31] usb-storage 3-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 141.194880][ T31] Please send a copy of this message to and [ 141.388118][ T31] usb 3-1: USB disconnect, device number 67 [ 141.477161][ T36] audit: type=1400 audit(1772079545.519:522): avc: denied { ioctl } for pid=2621 comm="syz.7.681" path="socket:[22935]" dev="sockfs" ino=22935 ioctlcmd=0x581e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.776206][ T36] audit: type=1400 audit(1772079545.819:523): avc: denied { getopt } for pid=2636 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.863210][ T36] audit: type=1326 audit(1772079545.909:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2647 comm="syz.6.691" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87ea19c629 code=0x0 [ 142.141775][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 142.291759][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 142.298156][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 142.306899][ T9] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 142.317166][ T9] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 142.328091][ T9] usb 3-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.340976][ T9] usb 3-1: config 12 interface 0 has no altsetting 0 [ 142.349139][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 142.358300][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.366328][ T9] usb 3-1: Product: syz [ 142.370571][ T9] usb 3-1: Manufacturer: syz [ 142.375205][ T9] usb 3-1: SerialNumber: syz [ 142.583168][ T9] usb 3-1: selecting invalid altsetting 0 [ 142.591974][ T9] usb 3-1: USB disconnect, device number 68 [ 142.776661][ T36] audit: type=1400 audit(1772079546.819:525): avc: denied { connect } for pid=2659 comm="syz.6.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.805703][ T2663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.814976][ T2663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.110622][ T36] audit: type=1400 audit(1772079547.149:526): avc: denied { lock } for pid=2665 comm="syz.2.696" path="socket:[23674]" dev="sockfs" ino=23674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.381819][ T436] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 143.533071][ T436] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.541149][ T436] usb 3-1: config 0 has no interface number 0 [ 143.547283][ T436] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.558544][ T436] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.568557][ T436] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.581529][ T436] usb 3-1: config 0 interface 1 has no altsetting 0 [ 143.588153][ T436] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 143.597252][ T436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.606017][ T436] usb 3-1: config 0 descriptor?? [ 144.222516][ T436] uclogic 0003:145F:0212.0018: pen parameters not found [ 144.230991][ T436] uclogic 0003:145F:0212.0018: interface is invalid, ignoring [ 144.243257][ T436] usb 3-1: USB disconnect, device number 69 [ 144.607092][ T2676] FAULT_INJECTION: forcing a failure. [ 144.607092][ T2676] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 144.620303][ T2676] CPU: 1 UID: 0 PID: 2676 Comm: syz.7.700 Not tainted syzkaller #0 37924e2d96e0adc5b49b5912cddbdf0b22b3a5de [ 144.620340][ T2676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.620351][ T2676] Call Trace: [ 144.620358][ T2676] [ 144.620368][ T2676] __dump_stack+0x21/0x30 [ 144.620401][ T2676] dump_stack_lvl+0x140/0x1c0 [ 144.620417][ T2676] ? __cfi_dump_stack_lvl+0x10/0x10 [ 144.620431][ T2676] ? check_stack_object+0x106/0x150 [ 144.620447][ T2676] dump_stack+0x19/0x20 [ 144.620459][ T2676] should_fail_ex+0x3d7/0x530 [ 144.620471][ T2676] should_fail+0xf/0x20 [ 144.620481][ T2676] should_fail_usercopy+0x1e/0x30 [ 144.620493][ T2676] _copy_from_user+0x20/0xa0 [ 144.620508][ T2676] __sys_bind+0x1f4/0x430 [ 144.620523][ T2676] ? putname+0x113/0x150 [ 144.620545][ T2676] ? __cfi___sys_bind+0x10/0x10 [ 144.620558][ T2676] ? __kasan_check_read+0x15/0x20 [ 144.620572][ T2676] ? __kasan_check_read+0x15/0x20 [ 144.620584][ T2676] __x64_sys_bind+0x7e/0x90 [ 144.620597][ T2676] x64_sys_call+0x1ffd/0x2ee0 [ 144.620612][ T2676] do_syscall_64+0x57/0xf0 [ 144.620624][ T2676] ? clear_bhb_loop+0x50/0xa0 [ 144.620637][ T2676] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 144.620654][ T2676] RIP: 0033:0x7f8c0c19c629 [ 144.620670][ T2676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.620680][ T2676] RSP: 002b:00007f8c0d063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 144.620694][ T2676] RAX: ffffffffffffffda RBX: 00007f8c0c415fa0 RCX: 00007f8c0c19c629 [ 144.620703][ T2676] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 144.620710][ T2676] RBP: 00007f8c0d063090 R08: 0000000000000000 R09: 0000000000000000 [ 144.620717][ T2676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.620724][ T2676] R13: 00007f8c0c416038 R14: 00007f8c0c415fa0 R15: 00007ffd04661a78 [ 144.620734][ T2676] [ 144.872878][ T36] audit: type=1400 audit(1772079548.909:527): avc: denied { read } for pid=2686 comm="syz.2.706" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 144.895922][ T36] audit: type=1400 audit(1772079548.909:528): avc: denied { open } for pid=2686 comm="syz.2.706" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 145.783045][ T36] audit: type=1400 audit(1772079549.829:529): avc: denied { getopt } for pid=2709 comm="syz.7.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.843226][ T2719] usb usb8: usbfs: process 2719 (syz.7.717) did not claim interface 0 before use [ 145.991895][ T436] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 146.037206][ T36] audit: type=1400 audit(1772079550.079:530): avc: denied { write } for pid=2734 comm="syz.6.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 146.434418][ T436] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.445482][ T436] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 146.455005][ T436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.476130][ T436] usb 3-1: config 0 descriptor?? [ 147.141435][ T36] audit: type=1400 audit(1772079551.179:531): avc: denied { bind } for pid=2746 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.282501][ T36] audit: type=1400 audit(1772079551.329:532): avc: denied { mounton } for pid=2756 comm="syz.7.730" path="/proc/74/task" dev="proc" ino=23918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 148.783115][ T45] usb 3-1: USB disconnect, device number 70 [ 148.863441][ T2781] netlink: 'syz.2.738': attribute type 4 has an invalid length. [ 149.376597][ T2786] can: request_module (can-proto-6) failed. [ 149.462363][ T36] audit: type=1400 audit(1772079553.509:533): avc: denied { rename } for pid=2789 comm="syz.6.742" name="file0" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.509318][ T36] audit: type=1400 audit(1772079553.549:534): avc: denied { create } for pid=2793 comm="syz.2.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.721782][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 150.904542][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 150.915684][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 150.941478][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 150.959867][ T36] audit: type=1400 audit(1772079554.999:535): avc: denied { create } for pid=2856 comm="syz.0.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.994161][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 151.008418][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.018060][ T9] usb 3-1: Product: syz [ 151.022445][ T9] usb 3-1: Manufacturer: syz [ 151.027184][ T9] usb 3-1: SerialNumber: syz [ 151.037633][ T9] usb 3-1: config 0 descriptor?? [ 151.245597][ T9] usb 3-1: USB disconnect, device number 71 [ 152.205021][ T2869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 154.336944][ T36] audit: type=1326 audit(1772079558.379:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79c629 code=0x7ffc0000 [ 154.394840][ T36] audit: type=1326 audit(1772079558.389:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f394a79c629 code=0x7ffc0000 [ 154.418571][ T36] audit: type=1326 audit(1772079558.389:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79c629 code=0x7ffc0000 [ 154.443192][ T36] audit: type=1326 audit(1772079558.389:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.0.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79c629 code=0x7ffc0000 [ 154.901786][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 155.052861][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.063952][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.073719][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 155.082882][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.091363][ T9] usb 3-1: config 0 descriptor?? [ 155.500286][ T9] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 155.508086][ T9] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 155.699686][ T9] cp2112 0003:10C4:EA90.0019: Part Number: 0x0B Device Version: 0x43 [ 155.900071][ T9] cp2112 0003:10C4:EA90.0019: error requesting SMBus config [ 155.907979][ T9] cp2112 0003:10C4:EA90.0019: probe with driver cp2112 failed with error -71 [ 155.918496][ T9] usb 3-1: USB disconnect, device number 72 [ 157.991899][ T9] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 158.145127][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 158.154456][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 158.162838][ T9] usb 3-1: SerialNumber: syz [ 158.172280][ T9] usb 3-1: config 0 descriptor?? [ 160.830085][ T436] usb 3-1: USB disconnect, device number 73 [ 160.908850][ T36] audit: type=1400 audit(1772079820.952:540): avc: denied { write } for pid=3019 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.641894][ T67] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 161.791823][ T67] usb 3-1: Using ep0 maxpacket: 16 [ 161.798836][ T67] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 161.810876][ T67] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.820211][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.828391][ T67] usb 3-1: Product: syz [ 161.832719][ T67] usb 3-1: Manufacturer: syz [ 161.837466][ T67] usb 3-1: SerialNumber: syz [ 161.845363][ T67] usb 3-1: config 0 descriptor?? [ 164.430704][ T436] usb 3-1: USB disconnect, device number 74 [ 164.941898][ T436] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 165.101791][ T436] usb 3-1: Using ep0 maxpacket: 32 [ 165.110946][ T436] usb 3-1: config 0 has no interfaces? [ 165.116917][ T436] usb 3-1: New USB device found, idVendor=04e8, idProduct=6030, bcdDevice= 0.00 [ 165.126815][ T436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.136848][ T436] usb 3-1: config 0 descriptor?? [ 165.346555][ T9] usb 3-1: USB disconnect, device number 75 [ 165.352908][ T36] audit: type=1400 audit(1772079825.392:541): avc: denied { create } for pid=3067 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 166.101815][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 166.251831][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 166.259961][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 166.269164][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.277333][ T9] usb 3-1: Product: syz [ 166.281612][ T9] usb 3-1: Manufacturer: syz [ 166.286400][ T9] usb 3-1: SerialNumber: syz [ 166.291812][ T9] usb 3-1: config 0 descriptor?? [ 168.485759][ T36] audit: type=1326 audit(1772079828.532:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3141 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79c629 code=0x7ffc0000 [ 168.509293][ T36] audit: type=1326 audit(1772079828.532:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3141 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79c629 code=0x7ffc0000 [ 168.533041][ T36] audit: type=1326 audit(1772079828.532:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3141 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f394a79c629 code=0x7ffc0000 [ 168.557178][ T36] audit: type=1326 audit(1772079828.532:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3141 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79c629 code=0x7ffc0000 [ 168.580920][ T36] audit: type=1326 audit(1772079828.532:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3141 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a79c629 code=0x7ffc0000 [ 168.874932][ T517] usb 3-1: USB disconnect, device number 76 [ 169.777921][ T36] audit: type=1400 audit(1772079829.772:547): avc: denied { bind } for pid=3167 comm="syz.7.888" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.811761][ T36] audit: type=1400 audit(1772079829.772:548): avc: denied { name_bind } for pid=3167 comm="syz.7.888" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 169.842736][ T36] audit: type=1400 audit(1772079829.772:549): avc: denied { node_bind } for pid=3167 comm="syz.7.888" saddr=ffff:ffff:fe5e::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 171.097325][ T3214] netlink: 164 bytes leftover after parsing attributes in process `syz.7.905'. [ 171.260314][ T36] audit: type=1326 audit(1772079831.302:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3232 comm="syz.7.914" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c0c19c629 code=0x0 [ 172.482232][ T3262] netlink: 104 bytes leftover after parsing attributes in process `syz.7.925'. [ 172.642871][ T3267] syzkaller0: entered promiscuous mode [ 172.654861][ T3267] syzkaller0: entered allmulticast mode [ 172.753170][ T3283] rust_binder: 203: no such ref 0 [ 172.801169][ T3289] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 172.801200][ T3289] rust_binder: Read failure Err(EFAULT) in pid:644 [ 172.829276][ T3292] netlink: 104 bytes leftover after parsing attributes in process `syz.0.938'. [ 174.685691][ T3336] overlay: Unknown parameter '/' [ 175.739519][ T36] audit: type=1400 audit(1772079835.782:551): avc: denied { mounton } for pid=3343 comm="syz.2.952" path="/108/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 175.921531][ T36] audit: type=1400 audit(1772079835.962:552): avc: denied { map } for pid=3351 comm="syz.2.956" path="socket:[24987]" dev="sockfs" ino=24987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.015705][ T3365] rust_binder: Error while translating object. [ 176.015753][ C1] BUG: TASK stack guard page was hit at ffffc9000dc1ffe8 (stack is ffffc9000dc20000..ffffc9000dc28000) [ 176.015778][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 176.015795][ C1] CPU: 1 UID: 0 PID: 3365 Comm: syz.2.962 Not tainted syzkaller #0 37924e2d96e0adc5b49b5912cddbdf0b22b3a5de [ 176.015810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.015817][ C1] RIP: 0010:__unwind_start+0x33/0x410 [ 176.015836][ C1] Code: 57 41 56 41 55 41 54 53 48 83 ec 40 48 89 4d c8 49 89 d4 49 89 f7 48 89 fb 49 be 00 00 00 00 00 fc ff df ba 60 00 00 00 31 f6 38 af 9a 00 48 8d 7b 28 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 [ 176.015845][ C1] RSP: 0018:ffffc9000dc1fff0 EFLAGS: 00010246 [ 176.015856][ C1] RAX: ffff8881198d9300 RBX: ffffc9000dc20068 RCX: ffffc9000dc200f0 [ 176.015863][ C1] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc9000dc20068 [ 176.015870][ C1] RBP: ffffc9000dc20058 R08: dffffc0000000000 R09: 0000000000000000 [ 176.015877][ C1] R10: ffffc9000dc201b0 R11: 0000000000000002 R12: 0000000000000000 [ 176.015884][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8881198d9300 [ 176.015891][ C1] FS: 00007fa2105ec6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 176.015899][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.015906][ C1] CR2: ffffc9000dc1ffe8 CR3: 00000001306d8000 CR4: 00000000003526b0 [ 176.015916][ C1] Call Trace: [ 176.015920][ C1] [ 176.015924][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 176.015937][ C1] ? arch_stack_walk+0xf2/0x170 [ 176.015952][ C1] ? stack_trace_save+0xaa/0x100 [ 176.015960][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 176.015969][ C1] ? kasan_save_track+0x3e/0x80 [ 176.015986][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 176.016010][ C1] ? kasan_save_free_info+0x4a/0x60 [ 176.016021][ C1] ? __kasan_slab_free+0x5f/0x80 [ 176.016033][ C1] ? kfree+0x158/0x440 [ 176.016044][ C1] ? krealloc_noprof+0xfa/0x130 [ 176.016058][ C1] ? krealloc_noprof+0xfa/0x130 [ 176.016070][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xc6/0x200 [ 176.016088][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 176.016107][ C1] ? __kasan_check_write+0x18/0x20 [ 176.016118][ C1] ? _raw_spin_lock+0x92/0x120 [ 176.016129][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x1378/0x22f0 [ 176.016157][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 176.016180][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 176.016195][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.016206][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 176.016221][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 176.016236][ C1] ? __kasan_check_write+0x18/0x20 [ 176.016247][ C1] ? _raw_spin_lock+0x92/0x120 [ 176.016256][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 176.016265][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6cd/0xc90 [ 176.016284][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.016295][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x61e/0xc90 [ 176.016315][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 176.016334][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 176.016348][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.016359][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ea/0x3d0 [ 176.016373][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 176.016388][ C1] ? __kasan_check_write+0x18/0x20 [ 176.016399][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 176.016414][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x343/0x5680 [ 176.016433][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.016444][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1744/0x5680 [ 176.016463][ C1] ? kernel_text_address+0xa9/0xe0 [ 176.016477][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 176.016487][ C1] ? stack_depot_save_flags+0x399/0x800 [ 176.016500][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 176.016515][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 176.016532][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.016550][ C1] ? kasan_save_track+0x4f/0x80 [ 176.016562][ C1] ? kasan_save_track+0x3e/0x80 [ 176.016573][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 176.016583][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 176.016596][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 176.016609][ C1] ? krealloc_noprof+0x8d/0x130 [ 176.016620][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 176.016639][ C1] ? __asan_memset+0x39/0x50 [ 176.016650][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 176.016661][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEBK_+0x3e2/0x4f0 [ 176.016680][ C1] ? __cfi__RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x10/0x10 [ 176.016713][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEBK_+0x10/0x10 [ 176.016731][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_7NodeRef6absorb+0x7d2/0xa40 [ 176.016748][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_7NodeRef6absorb+0x10/0x10 [ 176.016766][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 176.016787][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.016798][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 176.016814][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 176.016829][ C1] ? mutex_unlock+0x90/0x240 [ 176.016842][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 176.016853][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 176.016869][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 176.016884][ C1] ? desc_read+0x202/0x3e0 [ 176.016900][ C1] ? __kasan_check_write+0x18/0x20 [ 176.016911][ C1] ? desc_read+0x1ab/0x3e0 [ 176.016924][ C1] ? prb_first_seq+0x109/0x1d0 [ 176.016938][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 176.016952][ C1] ? __kasan_check_write+0x18/0x20 [ 176.016963][ C1] ? desc_read+0x1ab/0x3e0 [ 176.016976][ C1] ? __kasan_check_read+0x15/0x20 [ 176.016986][ C1] ? this_cpu_in_panic+0x56/0x90 [ 176.016996][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 176.017010][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.017021][ C1] ? prb_read_valid+0x80/0x80 [ 176.017034][ C1] ? data_alloc+0x4d0/0x7e0 [ 176.017047][ C1] ? desc_read+0x202/0x3e0 [ 176.017061][ C1] ? __kasan_check_write+0x18/0x20 [ 176.017072][ C1] ? desc_read+0x1ab/0x3e0 [ 176.017085][ C1] ? prb_first_seq+0x109/0x1d0 [ 176.017098][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 176.017112][ C1] ? __kasan_check_write+0x18/0x20 [ 176.017123][ C1] ? desc_read+0x1ab/0x3e0 [ 176.017136][ C1] ? __kasan_check_read+0x15/0x20 [ 176.017147][ C1] ? this_cpu_in_panic+0x56/0x90 [ 176.017156][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 176.017170][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 176.017180][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 176.017198][ C1] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 176.017215][ C1] ? prb_read_valid+0x80/0x80 [ 176.017228][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 176.017238][ C1] ? up+0x10a/0x1b0 [ 176.017249][ C1] ? __cfi_up+0x10/0x10 [ 176.017261][ C1] ? krealloc_noprof+0xfa/0x130 [ 176.017272][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 176.017289][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0xed/0x200 [ 176.017304][ C1] ? __cfi_llist_add_batch+0x10/0x10 [ 176.017314][ C1] ? __cfi__RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator4freeCskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 176.017330][ C1] ? __cfi_console_unlock+0x10/0x10 [ 176.017340][ C1] ? tick_nohz_tick_stopped+0x4c/0x60 [ 176.017353][ C1] ? __irq_work_queue_local+0xc4/0x260 [ 176.017365][ C1] ? irq_work_queue+0xc2/0x160 [ 176.017375][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x3a3/0x660 [ 176.017400][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 176.017416][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 176.017438][ C1] ? vprintk_default+0x2a/0x40 [ 176.017448][ C1] ? vprintk+0x93/0xa0 [ 176.017460][ C1] ? _printk+0xde/0x140 [ 176.017471][ C1] ? __cfi___check_object_size+0x10/0x10 [ 176.017483][ C1] ? __cfi__printk+0x10/0x10 [ 176.017493][ C1] ? _copy_from_user+0x87/0xa0 [ 176.017506][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x26/0x1a0 [ 176.017523][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation13NewAllocationEBK_+0x5b/0x80 [ 176.017544][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x6e44/0x8520 [ 176.017567][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 176.017603][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 176.017615][ C1] ? kernel_text_address+0xa9/0xe0 [ 176.017626][ C1] ? __kernel_text_address+0x11/0x40 [ 176.017637][ C1] ? unwind_get_return_address+0x51/0x90 [ 176.017647][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 176.017657][ C1] ? arch_stack_walk+0x10a/0x170 [ 176.017670][ C1] ? stack_depot_save_flags+0x38/0x800 [ 176.017682][ C1] ? kasan_save_track+0x4f/0x80 [ 176.017693][ C1] ? kasan_save_track+0x3e/0x80 [ 176.017705][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 176.017715][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 176.017728][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 176.017740][ C1] ? krealloc_noprof+0x8d/0x130 [ 176.017751][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 176.017770][ C1] ? __asan_memset+0x39/0x50 [ 176.017780][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 176.017790][ C1] ? _RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x3bd/0x990 [ 176.017823][ C1] ? __cfi__RINvMsj_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB6_9UniqueArcINtNtNtCsb7ts3l0a5c3_4core3mem12maybe_uninit11MaybeUninitNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoEE13pin_init_withNtNtB11_7convert10InfallibleINtNtNtBa_4init10___internal11InitClosureNCNvMs1_B1R_B1P_3news_0B1P_B31_EEB1T_+0x10/0x10 [ 176.017857][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 176.017868][ C1] ? __kasan_check_write+0x18/0x20 [ 176.017879][ C1] ? _raw_spin_lock+0x92/0x120 [ 176.017888][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 176.017897][ C1] ? _RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0xa7/0x250 [ 176.017913][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 176.017929][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x470/0x540 [ 176.017947][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionINtNtCs1ewLyjEZ7Le_6kernel6rbtree10RBTreeNodejmEEECskDQVOo9v79Q_16rust_binder_main+0xd8/0x1b0 [ 176.017969][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionINtNtCs1ewLyjEZ7Le_6kernel6rbtree10RBTreeNodejmEEECskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 176.017992][ C1] ? __kasan_check_write+0x18/0x20 [ 176.018003][ C1] ? mutex_unlock+0x90/0x240 [ 176.018013][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 176.018025][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 176.018034][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x11ed/0x1e70 [ 176.018054][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 176.018084][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8a0 [ 176.018099][ C1] ? _raw_spin_lock+0x92/0x120 [ 176.018108][ C1] ? __kasan_check_write+0x18/0x20 [ 176.018119][ C1] ? mutex_unlock+0x90/0x240 [ 176.018130][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 176.018142][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3a2/0x2150 [ 176.018158][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 176.018173][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 176.018190][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8a0 [ 176.018204][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 176.018218][ C1] ? __kasan_check_write+0x18/0x20 [ 176.018228][ C1] ? _raw_spin_lock+0x92/0x120 [ 176.018237][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 176.018246][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 176.018270][ C1] ? _raw_spin_unlock+0x45/0x60 [ 176.018279][ C1] ? __kasan_check_write+0x18/0x20 [ 176.018290][ C1] ? mutex_unlock+0x90/0x240 [ 176.018300][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 176.018312][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process20get_node_from_handle+0x1c5/0x310 [ 176.018332][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 176.018344][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.018355][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 176.018367][ C1] ? avc_has_perm+0x155/0x240 [ 176.018378][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 176.018394][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process20get_transaction_node+0x209/0x620 [ 176.018414][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 176.018426][ C1] ? bpf_lsm_binder_transaction+0xd/0x20 [ 176.018438][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x30d/0xc20 [ 176.018459][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x10/0x10 [ 176.018480][ C1] ? __kasan_check_write+0x18/0x20 [ 176.018490][ C1] ? _raw_spin_lock+0x92/0x120 [ 176.018503][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 176.018512][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1790/0xa690 [ 176.018527][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.018538][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1bf7/0xa690 [ 176.018561][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 176.018604][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 176.018617][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 176.018628][ C1] ? kernel_text_address+0xa9/0xe0 [ 176.018639][ C1] ? __kernel_text_address+0x11/0x40 [ 176.018649][ C1] ? unwind_get_return_address+0x51/0x90 [ 176.018659][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 176.018669][ C1] ? arch_stack_walk+0x10a/0x170 [ 176.018683][ C1] ? stack_depot_save_flags+0x38/0x800 [ 176.018694][ C1] ? kasan_save_track+0x4f/0x80 [ 176.018706][ C1] ? kasan_save_track+0x3e/0x80 [ 176.018717][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 176.018727][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 176.018740][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 176.018752][ C1] ? krealloc_noprof+0x8d/0x130 [ 176.018764][ C1] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 176.018782][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x89e/0x1820 [ 176.018800][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x1b8/0xa50 [ 176.018815][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x183b/0x5da0 [ 176.018827][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 176.018840][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 176.018852][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 176.018867][ C1] ? do_syscall_64+0x57/0xf0 [ 176.018877][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.018896][ C1] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 176.018921][ C1] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 176.018943][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x4d4/0xe50 [ 176.018957][ C1] ? __kasan_check_write+0x18/0x20 [ 176.018968][ C1] ? _raw_spin_lock+0x92/0x120 [ 176.018977][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 176.018986][ C1] ? _raw_spin_unlock+0x45/0x60 [ 176.018995][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x62d/0xa50 [ 176.019010][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 176.019025][ C1] ? krealloc_noprof+0xfa/0x130 [ 176.019037][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 176.019056][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 176.019076][ C1] ? __kasan_check_write+0x18/0x20 [ 176.019087][ C1] ? _raw_spin_lock+0x92/0x120 [ 176.019096][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 176.019104][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 176.019125][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0xfa9/0x1820 [ 176.019143][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.019154][ C1] ? __kasan_check_write+0x18/0x20 [ 176.019165][ C1] ? _raw_spin_lock+0x92/0x120 [ 176.019173][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 176.019183][ C1] ? _raw_spin_unlock+0x45/0x60 [ 176.019192][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 176.019201][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9e6/0x1cf0 [ 176.019217][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x10/0x10 [ 176.019235][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 176.019255][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 176.019267][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.019278][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 176.019289][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEEB16_+0xf6/0x490 [ 176.019307][ C1] ? avc_has_perm+0x155/0x240 [ 176.019318][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main4node7NodeRefEEB16_+0x10/0x10 [ 176.019336][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0xf9/0x1f0 [ 176.019355][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 176.019374][ C1] ? __kasan_check_write+0x18/0x20 [ 176.019385][ C1] ? _raw_spin_lock+0x92/0x120 [ 176.019393][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 176.019402][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x54c/0xa50 [ 176.019422][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.019433][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x794/0xa50 [ 176.019450][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x10/0x10 [ 176.019466][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 176.019478][ C1] ? __kasan_check_write+0x18/0x20 [ 176.019489][ C1] ? _raw_spin_lock+0x92/0x120 [ 176.019498][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1019/0x5da0 [ 176.019510][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.019521][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1077/0x5da0 [ 176.019533][ C1] ? stack_trace_save+0xaa/0x100 [ 176.019542][ C1] ? stack_depot_save_flags+0x38/0x800 [ 176.019554][ C1] ? kasan_save_stack+0x4d/0x60 [ 176.019565][ C1] ? kasan_save_stack+0x3e/0x60 [ 176.019577][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 176.019587][ C1] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 176.019598][ C1] ? __call_rcu_common+0xd7/0x720 [ 176.019614][ C1] ? call_rcu+0x14/0x20 [ 176.019627][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 176.019641][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 176.019651][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 176.019660][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.019675][ C1] ? _raw_spin_unlock+0x45/0x60 [ 176.019684][ C1] ? call_rcu_nocb+0x6d7/0xc80 [ 176.019696][ C1] ? swake_up_one_online_ipi+0x30/0x30 [ 176.019709][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 176.019721][ C1] ? kernel_text_address+0xa9/0xe0 [ 176.019731][ C1] ? __kernel_text_address+0x11/0x40 [ 176.019742][ C1] ? unwind_get_return_address+0x51/0x90 [ 176.019752][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 176.019761][ C1] ? arch_stack_walk+0x10a/0x170 [ 176.019775][ C1] ? stack_trace_save+0xaa/0x100 [ 176.019784][ C1] ? stack_depot_save_flags+0x38/0x800 [ 176.019795][ C1] ? kasan_save_track+0x4f/0x80 [ 176.019807][ C1] ? kasan_save_track+0x3e/0x80 [ 176.019818][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 176.019828][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 176.019840][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 176.019852][ C1] ? krealloc_noprof+0x8d/0x130 [ 176.019864][ C1] ? kvrealloc_noprof+0x59/0x120 [ 176.019876][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_mmap+0x7a1/0x1210 [ 176.019888][ C1] ? mmap_region+0x157c/0x1d60 [ 176.019900][ C1] ? do_mmap+0xb85/0x13c0 [ 176.019917][ C1] ? vm_mmap_pgoff+0x36e/0x4b0 [ 176.019934][ C1] ? ksys_mmap_pgoff+0x165/0x1e0 [ 176.019952][ C1] ? __x64_sys_mmap+0x121/0x140 [ 176.019972][ C1] ? x64_sys_call+0x13bf/0x2ee0 [ 176.019992][ C1] ? do_syscall_64+0x57/0xf0 [ 176.020007][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.020025][ C1] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 176.020039][ C1] ? need_active_balance+0x228/0x9a0 [ 176.020056][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 176.020066][ C1] ? sched_balance_rq+0x4636/0x4ce0 [ 176.020080][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 176.020097][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 176.020111][ C1] ? __cgroup_account_cputime+0xa5/0xd0 [ 176.020125][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 176.020137][ C1] ? update_curr+0xf8/0x9e0 [ 176.020150][ C1] ? update_load_avg+0x506/0x1990 [ 176.020161][ C1] ? __calc_delta+0x280/0x280 [ 176.020174][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 176.020187][ C1] ? tg_unthrottle_up+0x9a0/0x9a0 [ 176.020198][ C1] ? sched_clock+0x44/0x60 [ 176.020209][ C1] ? __kasan_check_write+0x18/0x20 [ 176.020220][ C1] ? __cfi_update_misfit_status+0x10/0x10 [ 176.020231][ C1] ? dequeue_entities+0x1d7/0x1400 [ 176.020243][ C1] ? sched_balance_newidle+0x31a/0xab0 [ 176.020254][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 176.020266][ C1] ? sched_clock_noinstr+0xd/0x30 [ 176.020278][ C1] ? __kasan_check_write+0x18/0x20 [ 176.020288][ C1] ? __switch_to+0xc4f/0x1300 [ 176.020302][ C1] ? __cfi___switch_to+0x10/0x10 [ 176.020313][ C1] ? psi_task_switch+0x4f2/0xa10 [ 176.020327][ C1] ? __kasan_check_write+0x18/0x20 [ 176.020337][ C1] ? finish_task_switch+0x1d9/0x760 [ 176.020349][ C1] ? __switch_to_asm+0x3d/0x70 [ 176.020362][ C1] ? __schedule+0x1357/0x1ea0 [ 176.020372][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 176.020384][ C1] ? __asan_memcpy+0x5a/0x80 [ 176.020395][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 176.020413][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 176.020422][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 176.020435][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 176.020449][ C1] ? schedule+0xc5/0x240 [ 176.020458][ C1] ? futex_unqueue+0x136/0x160 [ 176.020471][ C1] ? ioctl_has_perm+0x39a/0x500 [ 176.020482][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 176.020492][ C1] ? futex_wait+0x2ac/0x7b0 [ 176.020504][ C1] ? __cfi_futex_wait+0x10/0x10 [ 176.020516][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 176.020526][ C1] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 176.020541][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 176.020551][ C1] ? do_futex+0x32a/0x510 [ 176.020561][ C1] ? __cfi_do_futex+0x10/0x10 [ 176.020571][ C1] ? vm_mmap_pgoff+0x153/0x4b0 [ 176.020583][ C1] ? __fget_files+0x2c5/0x340 [ 176.020597][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 176.020607][ C1] ? security_file_ioctl+0x3e/0x110 [ 176.020617][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 176.020629][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 176.020642][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 176.020654][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 176.020670][ C1] ? do_syscall_64+0x57/0xf0 [ 176.020679][ C1] ? clear_bhb_loop+0x50/0xa0 [ 176.020688][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.020704][ C1] [ 176.020708][ C1] Modules linked in: [ 176.020723][ C1] ---[ end trace 0000000000000000 ]--- [ 176.020729][ C1] RIP: 0010:__unwind_start+0x33/0x410 [ 176.020741][ C1] Code: 57 41 56 41 55 41 54 53 48 83 ec 40 48 89 4d c8 49 89 d4 49 89 f7 48 89 fb 49 be 00 00 00 00 00 fc ff df ba 60 00 00 00 31 f6 38 af 9a 00 48 8d 7b 28 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 [ 176.020749][ C1] RSP: 0018:ffffc9000dc1fff0 EFLAGS: 00010246 [ 176.020758][ C1] RAX: ffff8881198d9300 RBX: ffffc9000dc20068 RCX: ffffc9000dc200f0 [ 176.020766][ C1] RDX: 0000000000000060 RSI: 0000000000000000 RDI: ffffc9000dc20068 [ 176.020773][ C1] RBP: ffffc9000dc20058 R08: dffffc0000000000 R09: 0000000000000000 [ 176.020780][ C1] R10: ffffc9000dc201b0 R11: 0000000000000002 R12: 0000000000000000 [ 176.020787][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8881198d9300 [ 176.020795][ C1] FS: 00007fa2105ec6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 176.020804][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.020811][ C1] CR2: ffffc9000dc1ffe8 CR3: 00000001306d8000 CR4: 00000000003526b0 [ 176.020822][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 176.021186][ C1] Kernel Offset: disabled