last executing test programs: 2.111860806s ago: executing program 2 (id=1064): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.935608711s ago: executing program 2 (id=1074): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000010}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x50, 0x0, &(0x7f0000000880)=[@exit_looper, @reply_sg={0x40486312, {0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x649}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x67701ee}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) 1.524778931s ago: executing program 3 (id=1077): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_setup(0xffff, &(0x7f0000000340)) 1.524678201s ago: executing program 2 (id=1078): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000300)=0x6, 0x4) 1.524502711s ago: executing program 2 (id=1080): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='wg2\x00') r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x11) bind$inet(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='vers\x00', &(0x7f0000000480)='\xbb\x8c@\xaa\x06i\xe0.\xa8\xbaM\xd2(\xad\xe5*>(j\xcf\xc1\x86C\x10pg\xe8\x00DV\xb3\xb0\xe9\x15\x89>\xdc\'!\xbd\x9c\xaa\xcb\xffk\x11\x9d\xb2\xf5tp\x8518\xa9\xbd\x8bv\xec\xc8\x17\x9a\xd5\xdcO`\xc9\\{p\xd2\x91n,', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='mountproto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='timeo\x00', &(0x7f0000000380)='10\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='retrans\x00', &(0x7f0000000440)='2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000640)='.\x00', 0x80000001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r6, 0x0, 0x8e14, 0x8ffff) 1.238088318s ago: executing program 3 (id=1082): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xe8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 962.036565ms ago: executing program 3 (id=1091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0902, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xeeef0000, 0xeeef0000, {0x3}, 0x0, 0x9}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000094d40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200"}}) 960.628295ms ago: executing program 2 (id=1092): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x100000000003, 0x161341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000440)={0x0, 0xb, 0x8, 0x0, 0x4, 0xffff, &(0x7f00000002c0)="b4a9b41a"}) 930.552866ms ago: executing program 3 (id=1093): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001640)="a9050000000074640006000000803552bd078064", 0x14}], 0x2}}], 0x1, 0x0) 860.051398ms ago: executing program 1 (id=1095): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x1, 0x80000001, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x80, 0x40, 0x2, 0x4f}}) 859.952068ms ago: executing program 3 (id=1096): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/vlan0\x00') lseek(r0, 0x9, 0x3) 576.187615ms ago: executing program 3 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107}) 570.824875ms ago: executing program 1 (id=1098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x21, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x400, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x4000000, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xff, 0x0, 0x400, 0xfffffffe}, {{@in6=@private2, 0x0, 0x32}, 0xa, @in=@multicast1, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffff}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0x17c}}, 0x0) 507.888997ms ago: executing program 1 (id=1099): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x3, 0x2}, 0xe) 507.709217ms ago: executing program 1 (id=1100): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000010c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2508000000100004800900010073797a3000000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000700000001"], 0x18}}], 0x1, 0x50008000) write$binfmt_misc(r3, &(0x7f0000000300), 0xfdef) pread64(r2, 0x0, 0x0, 0x8) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r5, r5, 0x0) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) 507.599646ms ago: executing program 1 (id=1101): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x4, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, &(0x7f0000000040)={0x4, 0x3}) 495.564027ms ago: executing program 1 (id=1102): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x2, 0x1) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/175, 0xaf}], 0x1, 0xffff, 0x2) 120.888876ms ago: executing program 0 (id=1103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x44, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x2100) 58.786858ms ago: executing program 0 (id=1104): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2}, 0x24008894) 58.278178ms ago: executing program 2 (id=1105): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000210)="01", 0x1) read(r1, &(0x7f0000800000)=""/8, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x11, 0x10, r4, 0x1, 0x0, 0x0, @multicast}, 0x14) 6.82891ms ago: executing program 0 (id=1106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000010401f007000000000000b0e64cc30506000640000000000a000200fffffffe08000000050001"], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x24004000) 6.676279ms ago: executing program 0 (id=1107): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 6.61757ms ago: executing program 0 (id=1108): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="840100001000330629bd700000000000fc020000000000000000000000000000ac1e00010000000000000000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fffffffd3c000000fc02000000000000000000000000000000000000000000000000000000000000000000000000ff030000000000000000030000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000007000000000000000000000000000000000000000200000000000000020004000000000000000000880002"], 0x184}}, 0x0) 0s ago: executing program 0 (id=1109): r0 = socket(0x840000000002, 0x3, 0xfa) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) kernel console output (not intermixed with test programs): r_driver returned -16 [ 42.464380][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 42.504425][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 42.615545][ T31] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 42.623799][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 42.633232][ T31] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 42.642332][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.651002][ T31] usb 3-1: config 0 descriptor?? [ 42.657180][ T31] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 42.664094][ T31] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 42.665540][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.672372][ T31] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 42.683824][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 42.702028][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.711025][ T10] usb 2-1: config 0 descriptor?? [ 42.814193][ T36] audit: type=1400 audit(1786169674.580:227): avc: denied { connect } for pid=941 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.867887][ T36] audit: type=1400 audit(1786169674.640:228): avc: denied { read } for pid=932 comm="syz.2.243" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.870294][ T933] bridge0: port 3(erspan0) entered blocking state [ 42.893036][ T36] audit: type=1400 audit(1786169674.640:229): avc: denied { open } for pid=932 comm="syz.2.243" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.899616][ T46] tipc: Subscription rejected, illegal request [ 42.923042][ T36] audit: type=1400 audit(1786169674.640:230): avc: denied { ioctl } for pid=932 comm="syz.2.243" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.929874][ T933] bridge0: port 3(erspan0) entered disabled state [ 42.956337][ T36] audit: type=1400 audit(1786169674.670:231): avc: denied { read } for pid=941 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.961907][ T933] erspan0: entered allmulticast mode [ 42.979923][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 42.984951][ T933] erspan0: entered promiscuous mode [ 42.991516][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 42.995990][ T933] bridge0: port 3(erspan0) entered blocking state [ 43.006442][ T10] usb 2-1: USB disconnect, device number 12 [ 43.010150][ T933] bridge0: port 3(erspan0) entered forwarding state [ 43.464383][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 43.517282][ T36] audit: type=1400 audit(1786169675.290:232): avc: denied { setopt } for pid=950 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.518085][ T951] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=951 comm=syz.0.250 [ 43.579761][ T958] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 43.587621][ T958] netlink: 17 bytes leftover after parsing attributes in process `syz.0.253'. [ 43.607751][ T31] usb 3-1: USB disconnect, device number 13 [ 43.625423][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.637077][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 43.646740][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.659913][ T10] usb 2-1: config 0 descriptor?? [ 43.679392][ T966] tipc: Started in network mode [ 43.684490][ T966] tipc: Node identity , cluster identity 1 [ 43.690447][ T966] tipc: Failed to obtain node identity [ 43.696019][ T966] tipc: Enabling of bearer rejected, failed to enable media [ 43.728036][ T970] syz.2.258 (970): /proc/969/oom_adj is deprecated, please use /proc/969/oom_score_adj instead. [ 43.744585][ T970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=970 comm=syz.2.258 [ 43.827042][ T975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.260'. [ 44.234332][ T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 44.364353][ T31] usb 3-1: device descriptor read/64, error -71 [ 44.604417][ T31] usb 3-1: device descriptor read/64, error -71 [ 44.844356][ T31] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 44.974337][ T31] usb 3-1: device descriptor read/64, error -71 [ 45.153882][ T1010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 45.178881][ T1014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.188937][ T1014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.204109][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 45.214409][ T31] usb 3-1: device descriptor read/64, error -71 [ 45.215242][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 45.229902][ T1042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.277'. [ 45.233787][ T10] usb 2-1: USB disconnect, device number 13 [ 45.334541][ T31] usb usb3-port1: attempt power cycle [ 45.674393][ T31] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 45.694405][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 45.695445][ T31] usb 3-1: device descriptor read/8, error -71 [ 45.837820][ T31] usb 3-1: device descriptor read/8, error -71 [ 45.844312][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 45.851649][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.862650][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 45.875965][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 45.880029][ T1055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.886794][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 45.896773][ T1055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.912783][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice= 0.40 [ 45.926256][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.934955][ T10] usb 2-1: Product: syz [ 45.939335][ T10] usb 2-1: Manufacturer: syz [ 45.944364][ T10] usb 2-1: SerialNumber: syz [ 46.084371][ T31] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 46.105454][ T31] usb 3-1: device descriptor read/8, error -71 [ 46.235580][ T31] usb 3-1: device descriptor read/8, error -71 [ 46.344413][ T31] usb usb3-port1: unable to enumerate USB device [ 46.662920][ T10] usb 2-1: invalid MIDI out EP 0 [ 46.684935][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 46.698883][ T10] usb 2-1: USB disconnect, device number 14 [ 46.699095][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.726110][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 46.726128][ T36] audit: type=1400 audit(1786169678.500:241): avc: denied { write } for pid=1070 comm="syz.1.289" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.019045][ T1075] tipc: Started in network mode [ 47.024035][ T1075] tipc: Node identity , cluster identity 4711 [ 47.030548][ T1075] tipc: Failed to obtain node identity [ 47.036291][ T1075] tipc: Enabling of bearer rejected, failed to enable media [ 47.056330][ T1077] netlink: 132 bytes leftover after parsing attributes in process `syz.2.292'. [ 47.204361][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 47.354750][ T10] usb 2-1: no configurations [ 47.359405][ T10] usb 2-1: can't read configurations, error -22 [ 47.394377][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 47.494367][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 47.524349][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.644707][ T10] usb 2-1: no configurations [ 47.649556][ T10] usb 2-1: can't read configurations, error -22 [ 47.657549][ T10] usb usb2-port1: attempt power cycle [ 47.774374][ T9] usb 3-1: device descriptor read/64, error -71 [ 47.966615][ T1094] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 47.983785][ T36] audit: type=1400 audit(1786169679.750:242): avc: denied { bind } for pid=1095 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.994352][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 48.003070][ T36] audit: type=1400 audit(1786169679.750:243): avc: denied { read } for pid=1095 comm="syz.0.300" path="socket:[7522]" dev="sockfs" ino=7522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.014314][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 48.042148][ T10] usb 2-1: no configurations [ 48.045459][ T1097] Zero length message leads to an empty skb [ 48.047102][ T10] usb 2-1: can't read configurations, error -22 [ 48.184398][ T9] usb 3-1: device descriptor read/64, error -71 [ 48.191191][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 48.215259][ T10] usb 2-1: no configurations [ 48.220012][ T10] usb 2-1: can't read configurations, error -22 [ 48.226619][ T10] usb usb2-port1: unable to enumerate USB device [ 48.434360][ T9] usb 3-1: device descriptor read/64, error -71 [ 48.544475][ T9] usb usb3-port1: attempt power cycle [ 48.884868][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 48.897923][ T1109] tipc: Started in network mode [ 48.903475][ T1109] tipc: Node identity , cluster identity 4711 [ 48.906157][ T9] usb 3-1: device descriptor read/8, error -71 [ 48.909929][ T1109] tipc: Failed to obtain node identity [ 48.921752][ T1109] tipc: Enabling of bearer rejected, failed to enable media [ 49.045459][ T9] usb 3-1: device descriptor read/8, error -71 [ 49.102990][ T1120] netlink: 64 bytes leftover after parsing attributes in process `syz.0.307'. [ 49.138580][ T1124] netlink: 132 bytes leftover after parsing attributes in process `syz.0.309'. [ 49.163808][ T36] audit: type=1400 audit(1786169680.930:244): avc: denied { create } for pid=1125 comm="syz.0.310" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 49.211406][ T36] audit: type=1400 audit(1786169680.930:245): avc: denied { link } for pid=1125 comm="syz.0.310" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=7653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 49.284358][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 49.305435][ T9] usb 3-1: device descriptor read/8, error -71 [ 49.445467][ T9] usb 3-1: device descriptor read/8, error -71 [ 49.564439][ T9] usb usb3-port1: unable to enumerate USB device [ 49.848685][ T1141] tipc: Started in network mode [ 49.853761][ T1141] tipc: Node identity , cluster identity 1 [ 49.863048][ T1141] tipc: Failed to obtain node identity [ 49.871757][ T1141] tipc: Enabling of bearer rejected, failed to enable media [ 50.088603][ T36] audit: type=1400 audit(1786169681.860:246): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 50.164381][ T31] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 50.315968][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 50.324449][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 50.332988][ T31] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 50.343382][ T31] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 50.354030][ T31] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 50.363335][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.371408][ T31] usb 2-1: Product: syz [ 50.375722][ T31] usb 2-1: Manufacturer: syz [ 50.380352][ T31] usb 2-1: SerialNumber: syz [ 50.475277][ T1157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.323'. [ 50.494452][ T1159] .N: renamed from veth0_to_bond (while UP) [ 50.532631][ T1165] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 50.542361][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 50.594492][ T31] usb 2-1: USB disconnect, device number 19 [ 50.602062][ T1171] tipc: Started in network mode [ 50.607471][ T1171] tipc: Node identity , cluster identity 1 [ 50.613507][ T1171] tipc: Failed to obtain node identity [ 50.619639][ T1171] tipc: Enabling of bearer rejected, failed to enable media [ 50.694859][ T9] usb 3-1: no configurations [ 50.699612][ T9] usb 3-1: can't read configurations, error -22 [ 50.834381][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 50.984824][ T9] usb 3-1: no configurations [ 50.989564][ T9] usb 3-1: can't read configurations, error -22 [ 50.996113][ T9] usb usb3-port1: attempt power cycle [ 51.103242][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 51.123650][ T36] audit: type=1400 audit(1786169682.890:247): avc: denied { ioctl } for pid=1176 comm="syz.1.333" path="socket:[6924]" dev="sockfs" ino=6924 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.334360][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 51.372812][ T31] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 51.384999][ T9] usb 3-1: no configurations [ 51.389628][ T9] usb 3-1: can't read configurations, error -22 [ 51.514434][ T31] usb 2-1: device descriptor read/64, error -71 [ 51.534348][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 51.565126][ T9] usb 3-1: no configurations [ 51.569842][ T9] usb 3-1: can't read configurations, error -22 [ 51.576303][ T9] usb usb3-port1: unable to enumerate USB device [ 51.754389][ T31] usb 2-1: device descriptor read/64, error -71 [ 51.994365][ T31] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 52.134358][ T31] usb 2-1: device descriptor read/64, error -71 [ 52.156191][ T36] audit: type=1400 audit(1786169683.930:248): avc: denied { map } for pid=1198 comm="syz.0.343" path="socket:[7753]" dev="sockfs" ino=7753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.180202][ T36] audit: type=1400 audit(1786169683.930:249): avc: denied { read } for pid=1198 comm="syz.0.343" path="socket:[7753]" dev="sockfs" ino=7753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.374365][ T31] usb 2-1: device descriptor read/64, error -71 [ 52.484485][ T31] usb usb2-port1: attempt power cycle [ 52.698538][ T1204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 52.825406][ T31] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 52.845439][ T31] usb 2-1: device descriptor read/8, error -71 [ 52.972828][ T36] audit: type=1400 audit(1786169684.740:250): avc: denied { bind } for pid=1219 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 52.992356][ T36] audit: type=1400 audit(1786169684.740:251): avc: denied { ioctl } for pid=1219 comm="syz.3.351" path="socket:[7777]" dev="sockfs" ino=7777 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.004865][ T1223] netlink: 132 bytes leftover after parsing attributes in process `syz.3.352'. [ 53.018280][ T31] usb 2-1: device descriptor read/8, error -71 [ 53.065202][ T1232] tipc: Started in network mode [ 53.070257][ T1232] tipc: Node identity , cluster identity 4711 [ 53.076421][ T1232] tipc: Failed to obtain node identity [ 53.081988][ T1232] tipc: Enabling of bearer rejected, failed to enable media [ 53.245162][ T1241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.253937][ T1241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.262860][ T1241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.272383][ T1241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.274314][ T31] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 53.281835][ T1241] incfs: Error accessing: ./file0. [ 53.294438][ T1241] incfs: mount failed -2 [ 53.305611][ T31] usb 2-1: device descriptor read/8, error -71 [ 53.370649][ T1246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 53.435386][ T31] usb 2-1: device descriptor read/8, error -71 [ 53.455982][ T1260] netlink: 132 bytes leftover after parsing attributes in process `syz.0.365'. [ 53.544795][ T31] usb usb2-port1: unable to enumerate USB device [ 53.575915][ T1270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.584519][ T1270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.719300][ T1272] tipc: Started in network mode [ 53.724361][ T1272] tipc: Node identity , cluster identity 4711 [ 53.730686][ T1272] tipc: Failed to obtain node identity [ 53.736745][ T1272] tipc: Enabling of bearer rejected, failed to enable media [ 53.762851][ T1274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 54.024867][ T65] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 54.173745][ T1287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.376'. [ 54.184403][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 54.195066][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.213568][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.233428][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.242930][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.252423][ T65] usb 3-1: config 0 descriptor?? [ 54.258502][ T65] hub 3-1:0.0: USB hub found [ 54.353302][ T1304] tipc: Started in network mode [ 54.374381][ T1304] tipc: Node identity , cluster identity 4711 [ 54.374430][ T1306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 54.380587][ T1304] tipc: Failed to obtain node identity [ 54.396420][ T1304] tipc: Enabling of bearer rejected, failed to enable media [ 54.432138][ T36] audit: type=1400 audit(1786169686.200:252): avc: denied { cmd } for pid=1308 comm="syz.3.384" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 54.462238][ T1309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.464360][ T65] hub 3-1:0.0: 1 port detected [ 54.474192][ T1309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.744344][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 54.862492][ T1276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.871461][ T1276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.874361][ T9] usb 2-1: device descriptor read/64, error -71 [ 54.887167][ T1276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.896644][ T1276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.907465][ T65] usb 3-1: USB disconnect, device number 26 [ 54.996439][ T1317] syz.0.387 (1317): attempted to duplicate a private mapping with mremap. This is not supported. [ 55.020437][ T1321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.388'. [ 55.095819][ T1326] netlink: 'syz.3.390': attribute type 64 has an invalid length. [ 55.124552][ T9] usb 2-1: device descriptor read/64, error -71 [ 55.159841][ T1332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.168475][ T1332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.374364][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 55.441255][ T1337] overlay: ./bus is not a directory [ 55.504361][ T9] usb 2-1: device descriptor read/64, error -71 [ 55.684396][ T65] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 55.744354][ T9] usb 2-1: device descriptor read/64, error -71 [ 55.837366][ T65] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 55.845839][ T65] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 55.856283][ T9] usb usb2-port1: attempt power cycle [ 55.861772][ T65] usb 3-1: config 220 has no interface number 2 [ 55.868372][ T65] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 55.881650][ T65] usb 3-1: config 220 interface 0 has no altsetting 0 [ 55.884847][ T1346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.399'. [ 55.888487][ T65] usb 3-1: config 220 interface 76 has no altsetting 0 [ 55.904562][ T65] usb 3-1: config 220 interface 1 has no altsetting 0 [ 55.913082][ T65] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 55.922584][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.930672][ T65] usb 3-1: Product: syz [ 55.935363][ T65] usb 3-1: Manufacturer: syz [ 55.948333][ T65] usb 3-1: SerialNumber: syz [ 56.155105][ T1337] overlay: ./bus is not a directory [ 56.163807][ T65] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 56.170321][ T65] usb 3-1: No valid video chain found. [ 56.175876][ T65] usb 3-1: selecting invalid altsetting 0 [ 56.184723][ T65] usb 3-1: USB disconnect, device number 27 [ 56.204408][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 56.225508][ T9] usb 2-1: device descriptor read/8, error -71 [ 56.355404][ T9] usb 2-1: device descriptor read/8, error -71 [ 56.594384][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 56.615605][ T9] usb 2-1: device descriptor read/8, error -71 [ 56.745429][ T9] usb 2-1: device descriptor read/8, error -71 [ 56.854477][ T9] usb usb2-port1: unable to enumerate USB device [ 57.014384][ T65] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 57.045178][ T1375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.411'. [ 57.164366][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 57.170507][ T65] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 57.178752][ T65] usb 3-1: config 0 has no interface number 0 [ 57.186437][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 57.195714][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.203871][ T65] usb 3-1: Product: syz [ 57.208159][ T65] usb 3-1: Manufacturer: syz [ 57.212774][ T65] usb 3-1: SerialNumber: syz [ 57.218032][ T65] usb 3-1: config 0 descriptor?? [ 57.476735][ T1378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.486425][ T1378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.498929][ T65] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 57.505591][ T65] usb 3-1: No valid video chain found. [ 57.512097][ T65] usb 3-1: USB disconnect, device number 28 [ 57.864647][ T347] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 57.994379][ T347] usb 2-1: device descriptor read/64, error -71 [ 58.108948][ T1399] tipc: Started in network mode [ 58.113915][ T1399] tipc: Node identity , cluster identity 1 [ 58.120817][ T1399] tipc: Failed to obtain node identity [ 58.126410][ T1399] tipc: Enabling of bearer rejected, failed to enable media [ 58.143777][ T1401] __nla_validate_parse: 1 callbacks suppressed [ 58.143793][ T1401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 58.183968][ T1407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.193206][ T1407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.202234][ T1407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.211313][ T1407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.234378][ T347] usb 2-1: device descriptor read/64, error -71 [ 58.284372][ T310] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 58.414386][ T310] usb 3-1: device descriptor read/64, error -71 [ 58.474366][ T347] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 58.604338][ T347] usb 2-1: device descriptor read/64, error -71 [ 58.664383][ T310] usb 3-1: device descriptor read/64, error -71 [ 58.731504][ T1413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 58.762386][ T1417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.772019][ T1417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.854329][ T347] usb 2-1: device descriptor read/64, error -71 [ 58.914367][ T310] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 58.964484][ T347] usb usb2-port1: attempt power cycle [ 59.044327][ T310] usb 3-1: device descriptor read/64, error -71 [ 59.217764][ T36] audit: type=1400 audit(1786169690.990:253): avc: denied { read } for pid=1421 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.232387][ T1427] tipc: Started in network mode [ 59.243091][ T1427] tipc: Node identity , cluster identity 1 [ 59.249161][ T1427] tipc: Failed to obtain node identity [ 59.254686][ T1427] tipc: Enabling of bearer rejected, failed to enable media [ 59.290439][ T1434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 59.299671][ T310] usb 3-1: device descriptor read/64, error -71 [ 59.306328][ T347] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 59.335512][ T347] usb 2-1: device descriptor read/8, error -71 [ 59.424455][ T310] usb usb3-port1: attempt power cycle [ 59.465482][ T347] usb 2-1: device descriptor read/8, error -71 [ 59.704357][ T347] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 59.725395][ T347] usb 2-1: device descriptor read/8, error -71 [ 59.764376][ T310] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 59.795485][ T310] usb 3-1: device descriptor read/8, error -71 [ 59.829567][ T1440] netlink: 56 bytes leftover after parsing attributes in process `syz.0.438'. [ 59.865485][ T347] usb 2-1: device descriptor read/8, error -71 [ 59.883835][ T1451] tipc: Started in network mode [ 59.888817][ T1451] tipc: Node identity , cluster identity 1 [ 59.894979][ T1451] tipc: Failed to obtain node identity [ 59.900643][ T1451] tipc: Enabling of bearer rejected, failed to enable media [ 59.918351][ T36] audit: type=1400 audit(1786169691.690:254): avc: denied { create } for pid=1452 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 59.945385][ T310] usb 3-1: device descriptor read/8, error -71 [ 59.974459][ T347] usb usb2-port1: unable to enumerate USB device [ 60.184358][ T310] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 60.205544][ T310] usb 3-1: device descriptor read/8, error -71 [ 60.335462][ T310] usb 3-1: device descriptor read/8, error -71 [ 60.444435][ T310] usb usb3-port1: unable to enumerate USB device [ 60.464805][ T1459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.447'. [ 60.696261][ T1476] tipc: Started in network mode [ 60.701343][ T1476] tipc: Node identity , cluster identity 4711 [ 60.707690][ T1476] tipc: Failed to obtain node identity [ 60.713365][ T1476] tipc: Enabling of bearer rejected, failed to enable media [ 61.069011][ T36] audit: type=1400 audit(1786169692.840:255): avc: denied { write } for pid=1483 comm="syz.2.457" name="icmp" dev="proc" ino=4026532573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.106436][ T1486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.458'. [ 61.140415][ T1490] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.154369][ T310] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 61.304370][ T310] usb 2-1: device descriptor read/64, error -71 [ 61.454354][ T347] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 61.544321][ T310] usb 2-1: device descriptor read/64, error -71 [ 61.605575][ T347] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 61.614503][ T347] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.624672][ T347] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 61.633657][ T347] usb 3-1: config 1 has no interface number 1 [ 61.639806][ T347] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 61.652743][ T347] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.667567][ T347] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.677108][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.685126][ T347] usb 3-1: Product: syz [ 61.689315][ T347] usb 3-1: Manufacturer: syz [ 61.694016][ T347] usb 3-1: SerialNumber: syz [ 61.794435][ T310] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 61.845385][ T1507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 61.854448][ T1507] bridge_slave_1: left allmulticast mode [ 61.860249][ T1507] bridge_slave_1: left promiscuous mode [ 61.866511][ T1507] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.874239][ T1507] bridge_slave_0: left allmulticast mode [ 61.880150][ T1507] bridge_slave_0: left promiscuous mode [ 61.886001][ T1507] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.897380][ T1508] fuse: Bad value for 'fd' [ 61.924353][ T310] usb 2-1: device descriptor read/64, error -71 [ 61.934545][ T36] audit: type=1400 audit(1786169693.710:256): avc: denied { bind } for pid=1495 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.999737][ T347] usb 3-1: MIDIStreaming interface descriptor not found [ 62.032724][ T347] usb 3-1: USB disconnect, device number 33 [ 62.035113][ T36] audit: type=1400 audit(1786169693.800:257): avc: denied { create } for pid=1513 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.061404][ T36] audit: type=1400 audit(1786169693.800:258): avc: denied { ioctl } for pid=1513 comm="syz.3.469" path="socket:[10040]" dev="sockfs" ino=10040 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.113797][ T1519] netlink: 132 bytes leftover after parsing attributes in process `syz.0.471'. [ 62.165922][ T1530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.175406][ T1530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.204303][ T310] usb 2-1: device descriptor read/64, error -71 [ 62.314456][ T310] usb usb2-port1: attempt power cycle [ 62.610745][ T1535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 62.654421][ T310] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 62.675692][ T310] usb 2-1: device descriptor read/8, error -71 [ 62.805714][ T310] usb 2-1: device descriptor read/8, error -71 [ 62.874332][ T347] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 63.025521][ T347] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.035765][ T347] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 63.044946][ T310] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 63.054798][ T347] usb 3-1: config 1 has no interface number 0 [ 63.060960][ T347] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.075729][ T347] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.084834][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.093267][ T347] usb 3-1: Product: syz [ 63.097619][ T347] usb 3-1: Manufacturer: syz [ 63.102294][ T347] usb 3-1: SerialNumber: syz [ 63.107686][ T310] usb 2-1: device descriptor read/8, error -71 [ 63.116243][ T347] usb 3-1: selecting invalid altsetting 1 [ 63.255506][ T310] usb 2-1: device descriptor read/8, error -71 [ 63.316463][ T347] cdc_ncm 3-1:1.1: bind() failure [ 63.323595][ T347] usb 3-1: USB disconnect, device number 34 [ 63.364487][ T310] usb usb2-port1: unable to enumerate USB device [ 63.884911][ T36] audit: type=1400 audit(1786169695.660:259): avc: denied { create } for pid=1545 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.947002][ T1551] netlink: 132 bytes leftover after parsing attributes in process `syz.1.483'. [ 64.022007][ T36] audit: type=1400 audit(1786169695.790:260): avc: denied { write } for pid=1558 comm="syz.2.487" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.058312][ T36] audit: type=1400 audit(1786169695.790:261): avc: denied { open } for pid=1558 comm="syz.2.487" path="/64/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.086410][ T36] audit: type=1400 audit(1786169695.820:262): avc: denied { ioctl } for pid=1558 comm="syz.2.487" path="/64/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.344363][ T65] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 64.474334][ T65] usb 3-1: device descriptor read/64, error -71 [ 64.714371][ T65] usb 3-1: device descriptor read/64, error -71 [ 64.954317][ T65] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 65.084317][ T65] usb 3-1: device descriptor read/64, error -71 [ 65.244381][ T1582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.244537][ T1582] rust_binder: Error in use_page_slow: ESRCH [ 65.251383][ T1582] rust_binder: use_range failure ESRCH [ 65.257576][ T1582] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 65.263196][ T1582] rust_binder: Failure in copy_transaction_data: ESRCH [ 65.271499][ T1582] rust_binder: 1581:1582 transaction call to 468:0 failed ESRCH, code 0 size 0-0 [ 65.291967][ T1582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.302612][ T1582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.312772][ T347] rust_binder: 1581: undelivered TRANSACTION_ERROR: 29201 [ 65.344331][ T65] usb 3-1: device descriptor read/64, error -71 [ 65.454421][ T65] usb usb3-port1: attempt power cycle [ 65.642654][ T1586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.498'. [ 65.665342][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 65.665372][ T36] audit: type=1400 audit(1786169697.440:265): avc: denied { read write } for pid=1587 comm="syz.1.499" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.696656][ T36] audit: type=1400 audit(1786169697.440:266): avc: denied { open } for pid=1587 comm="syz.1.499" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.776856][ T1593] FAULT_INJECTION: forcing a failure. [ 65.776856][ T1593] name failslab, interval 1, probability 0, space 0, times 1 [ 65.789979][ T1593] CPU: 1 UID: 0 PID: 1593 Comm: syz.1.501 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 65.790011][ T1593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.790019][ T1593] Call Trace: [ 65.790024][ T1593] [ 65.790030][ T1593] __dump_stack+0x21/0x30 [ 65.790051][ T1593] dump_stack_lvl+0x140/0x1c0 [ 65.790066][ T1593] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.790082][ T1593] dump_stack+0x19/0x20 [ 65.790096][ T1593] should_fail_ex+0x3c2/0x510 [ 65.790108][ T1593] should_failslab+0xac/0x100 [ 65.790122][ T1593] kmem_cache_alloc_node_noprof+0x45/0x420 [ 65.790134][ T1593] ? dup_task_struct+0xc1/0xd80 [ 65.790149][ T1593] ? kasan_save_alloc_info+0x3a/0x50 [ 65.790164][ T1593] ? __kasan_kmalloc+0x96/0xb0 [ 65.790176][ T1593] ? __kmalloc_cache_noprof+0x23c/0x470 [ 65.790189][ T1593] dup_task_struct+0xc1/0xd80 [ 65.790202][ T1593] ? __kasan_check_write+0x18/0x20 [ 65.790213][ T1593] ? _raw_spin_lock_irq+0x93/0x120 [ 65.790226][ T1593] ? copy_process+0x3350/0x3350 [ 65.790239][ T1593] ? __kasan_check_write+0x18/0x20 [ 65.790250][ T1593] copy_process+0x57c/0x3350 [ 65.790264][ T1593] ? kasan_save_alloc_info+0x3a/0x50 [ 65.790280][ T1593] ? __cfi_copy_process+0x10/0x10 [ 65.790293][ T1593] ? __kmalloc_cache_noprof+0x23c/0x470 [ 65.790305][ T1593] ? __kasan_check_write+0x18/0x20 [ 65.790316][ T1593] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 65.790330][ T1593] vhost_task_create+0x1f7/0x3f0 [ 65.790342][ T1593] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 65.790356][ T1593] ? __cfi_vhost_task_create+0x10/0x10 [ 65.790368][ T1593] ? __cfi_vhost_task_fn+0x10/0x10 [ 65.790379][ T1593] ? __kasan_check_write+0x18/0x20 [ 65.790390][ T1593] ? mutex_lock+0x97/0x1d0 [ 65.790404][ T1593] ? __cfi_mutex_lock+0x10/0x10 [ 65.790418][ T1593] ? kernel_text_address+0xa9/0xe0 [ 65.790433][ T1593] kvm_mmu_post_init_vm+0x161/0x300 [ 65.790448][ T1593] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 65.790463][ T1593] ? _parse_integer_limit+0x195/0x1e0 [ 65.790475][ T1593] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 65.790490][ T1593] ? kstrtoull+0x13b/0x1e0 [ 65.790508][ T1593] ? kstrtouint+0x78/0xf0 [ 65.790519][ T1593] ? ioctl_has_perm+0x1bc/0x500 [ 65.790530][ T1593] ? __asan_memcpy+0x5a/0x80 [ 65.790541][ T1593] ? ioctl_has_perm+0x408/0x500 [ 65.790552][ T1593] ? has_cap_mac_admin+0xd0/0xd0 [ 65.790562][ T1593] ? __kasan_check_write+0x18/0x20 [ 65.790573][ T1593] ? mutex_lock_killable+0x97/0x1d0 [ 65.790588][ T1593] ? __cfi_mutex_lock_killable+0x10/0x10 [ 65.790603][ T1593] ? proc_fail_nth_write+0x184/0x220 [ 65.790620][ T1593] kvm_vcpu_ioctl+0xa43/0x1000 [ 65.790631][ T1593] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 65.790642][ T1593] ? __cfi_vfs_write+0x10/0x10 [ 65.790655][ T1593] ? __kasan_check_write+0x18/0x20 [ 65.790665][ T1593] ? mutex_unlock+0x90/0x240 [ 65.790679][ T1593] ? __cfi_mutex_unlock+0x10/0x10 [ 65.790695][ T1593] ? bpf_lsm_file_ioctl+0xd/0x20 [ 65.790709][ T1593] ? security_file_ioctl+0x3e/0x110 [ 65.790725][ T1593] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 65.790735][ T1593] __se_sys_ioctl+0x135/0x1b0 [ 65.790749][ T1593] __x64_sys_ioctl+0x7f/0xa0 [ 65.790761][ T1593] x64_sys_call+0x1878/0x2ee0 [ 65.790772][ T1593] do_syscall_64+0x57/0xf0 [ 65.790784][ T1593] ? clear_bhb_loop+0x50/0xa0 [ 65.790808][ T1593] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.790830][ T1593] RIP: 0033:0x7feda399e0d9 [ 65.790847][ T1593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.790861][ T1593] RSP: 002b:00007feda47b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.790876][ T1593] RAX: ffffffffffffffda RBX: 00007feda3c25fa0 RCX: 00007feda399e0d9 [ 65.790886][ T1593] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 65.790893][ T1593] RBP: 00007feda47b9090 R08: 0000000000000000 R09: 0000000000000000 [ 65.790901][ T1593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.790909][ T1593] R13: 00007feda3c26038 R14: 00007feda3c25fa0 R15: 00007ffc5dfab178 [ 65.790918][ T1593] [ 66.209555][ T65] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 66.234030][ T1597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.234761][ T1598] mmap: syz.0.502 (1598) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.242866][ T1597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.271316][ T65] usb 3-1: device descriptor read/8, error -71 [ 66.367249][ T1608] kvm: MWAIT instruction emulated as NOP! [ 66.395712][ T1615] ======================================================= [ 66.395712][ T1615] WARNING: The mand mount option has been deprecated and [ 66.395712][ T1615] and is ignored by this kernel. Remove the mand [ 66.395712][ T1615] option from the mount to silence this warning. [ 66.395712][ T1615] ======================================================= [ 66.432779][ T65] usb 3-1: device descriptor read/8, error -71 [ 66.487186][ T1621] netlink: 132 bytes leftover after parsing attributes in process `syz.0.512'. [ 66.674303][ T65] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 66.706117][ T65] usb 3-1: device descriptor read/8, error -71 [ 66.845455][ T65] usb 3-1: device descriptor read/8, error -71 [ 66.964479][ T65] usb usb3-port1: unable to enumerate USB device [ 67.144484][ T1657] FAULT_INJECTION: forcing a failure. [ 67.144484][ T1657] name failslab, interval 1, probability 0, space 0, times 0 [ 67.157537][ T1657] CPU: 0 UID: 0 PID: 1657 Comm: syz.2.520 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 67.157562][ T1657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.157570][ T1657] Call Trace: [ 67.157575][ T1657] [ 67.157581][ T1657] __dump_stack+0x21/0x30 [ 67.157603][ T1657] dump_stack_lvl+0x140/0x1c0 [ 67.157617][ T1657] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.157632][ T1657] ? __kasan_check_write+0x18/0x20 [ 67.157645][ T1657] ? copy_mm+0x307/0x1da0 [ 67.157659][ T1657] dump_stack+0x19/0x20 [ 67.157673][ T1657] should_fail_ex+0x3c2/0x510 [ 67.157686][ T1657] should_failslab+0xac/0x100 [ 67.157699][ T1657] kmem_cache_alloc_noprof+0x42/0x410 [ 67.157711][ T1657] ? alloc_pid+0xa5/0xb80 [ 67.157723][ T1657] ? __asan_memcpy+0x5a/0x80 [ 67.157734][ T1657] alloc_pid+0xa5/0xb80 [ 67.157747][ T1657] copy_process+0x1467/0x3350 [ 67.157761][ T1657] ? __cfi_copy_process+0x10/0x10 [ 67.157774][ T1657] ? __kmalloc_cache_noprof+0x23c/0x470 [ 67.157786][ T1657] ? __kasan_check_write+0x18/0x20 [ 67.157797][ T1657] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 67.157811][ T1657] vhost_task_create+0x1f7/0x3f0 [ 67.157823][ T1657] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 67.157836][ T1657] ? __cfi_vhost_task_create+0x10/0x10 [ 67.157849][ T1657] ? __cfi_vhost_task_fn+0x10/0x10 [ 67.157860][ T1657] ? __kasan_check_write+0x18/0x20 [ 67.157880][ T1657] ? mutex_lock+0x97/0x1d0 [ 67.157894][ T1657] ? __cfi_mutex_lock+0x10/0x10 [ 67.157908][ T1657] ? kernel_text_address+0xa9/0xe0 [ 67.157923][ T1657] kvm_mmu_post_init_vm+0x161/0x300 [ 67.157938][ T1657] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 67.157953][ T1657] ? _parse_integer_limit+0x195/0x1e0 [ 67.157966][ T1657] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 67.157980][ T1657] ? kstrtoull+0x13b/0x1e0 [ 67.157992][ T1657] ? kstrtouint+0x78/0xf0 [ 67.158003][ T1657] ? ioctl_has_perm+0x1bc/0x500 [ 67.158013][ T1657] ? __asan_memcpy+0x5a/0x80 [ 67.158024][ T1657] ? ioctl_has_perm+0x408/0x500 [ 67.158035][ T1657] ? has_cap_mac_admin+0xd0/0xd0 [ 67.158046][ T1657] ? __kasan_check_write+0x18/0x20 [ 67.158056][ T1657] ? mutex_lock_killable+0x97/0x1d0 [ 67.158071][ T1657] ? __cfi_mutex_lock_killable+0x10/0x10 [ 67.158086][ T1657] ? proc_fail_nth_write+0x184/0x220 [ 67.158102][ T1657] kvm_vcpu_ioctl+0xa43/0x1000 [ 67.158114][ T1657] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 67.158125][ T1657] ? __cfi_vfs_write+0x10/0x10 [ 67.158144][ T1657] ? __kasan_check_write+0x18/0x20 [ 67.158163][ T1657] ? mutex_unlock+0x90/0x240 [ 67.158187][ T1657] ? __cfi_mutex_unlock+0x10/0x10 [ 67.158214][ T1657] ? bpf_lsm_file_ioctl+0xd/0x20 [ 67.158231][ T1657] ? security_file_ioctl+0x3e/0x110 [ 67.158247][ T1657] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 67.158257][ T1657] __se_sys_ioctl+0x135/0x1b0 [ 67.158270][ T1657] __x64_sys_ioctl+0x7f/0xa0 [ 67.158283][ T1657] x64_sys_call+0x1878/0x2ee0 [ 67.158293][ T1657] do_syscall_64+0x57/0xf0 [ 67.158306][ T1657] ? clear_bhb_loop+0x50/0xa0 [ 67.158321][ T1657] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.158335][ T1657] RIP: 0033:0x7f783819e0d9 [ 67.158355][ T1657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.158365][ T1657] RSP: 002b:00007f78390f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.158383][ T1657] RAX: ffffffffffffffda RBX: 00007f7838425fa0 RCX: 00007f783819e0d9 [ 67.158392][ T1657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 67.158400][ T1657] RBP: 00007f78390f2090 R08: 0000000000000000 R09: 0000000000000000 [ 67.158407][ T1657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.158415][ T1657] R13: 00007f7838426038 R14: 00007f7838425fa0 R15: 00007ffc7846ba58 [ 67.158424][ T1657] [ 67.685441][ T1670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.525'. [ 67.808137][ T36] audit: type=1400 audit(1786169699.580:267): avc: denied { getopt } for pid=1685 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.827740][ T36] audit: type=1400 audit(1786169699.580:268): avc: denied { getopt } for pid=1685 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.864355][ T65] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 68.015895][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.024476][ T65] usb 3-1: config 3 has an invalid interface number: 8 but max is 0 [ 68.032533][ T65] usb 3-1: config 3 has no interface number 0 [ 68.038775][ T65] usb 3-1: config 3 interface 8 has no altsetting 0 [ 68.313675][ T1692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 68.366938][ T1696] FAULT_INJECTION: forcing a failure. [ 68.366938][ T1696] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.380400][ T1696] CPU: 0 UID: 0 PID: 1696 Comm: syz.1.535 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 68.380443][ T1696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.380454][ T1696] Call Trace: [ 68.380461][ T1696] [ 68.380468][ T1696] __dump_stack+0x21/0x30 [ 68.380501][ T1696] dump_stack_lvl+0x140/0x1c0 [ 68.380522][ T1696] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.380538][ T1696] dump_stack+0x19/0x20 [ 68.380551][ T1696] should_fail_ex+0x3c2/0x510 [ 68.380565][ T1696] should_fail_alloc_page+0xec/0x110 [ 68.380579][ T1696] __alloc_pages_noprof+0x1c0/0x7e0 [ 68.380595][ T1696] ? kernel_text_address+0xa9/0xe0 [ 68.380610][ T1696] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 68.380625][ T1696] ? unwind_get_return_address+0x51/0x90 [ 68.380639][ T1696] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 68.380654][ T1696] get_free_pages_noprof+0x14/0x40 [ 68.380669][ T1696] kasan_populate_vmalloc_pte+0x4c/0x170 [ 68.380681][ T1696] __apply_to_page_range+0x7c2/0xd00 [ 68.380694][ T1696] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 68.380706][ T1696] ? __x64_sys_ioctl+0x7f/0xa0 [ 68.380720][ T1696] ? apply_to_page_range+0x60/0x60 [ 68.380732][ T1696] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 68.380744][ T1696] apply_to_page_range+0x3f/0x60 [ 68.380756][ T1696] kasan_populate_vmalloc+0x64/0x80 [ 68.380769][ T1696] alloc_vmap_area+0x1e8e/0x26f0 [ 68.380797][ T1696] ? kasan_save_alloc_info+0x3a/0x50 [ 68.380824][ T1696] ? vm_map_ram+0xdd0/0xdd0 [ 68.380841][ T1696] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 68.380853][ T1696] ? __get_vm_area_node+0x150/0x390 [ 68.380868][ T1696] __get_vm_area_node+0x1f8/0x390 [ 68.380891][ T1696] __vmalloc_node_range_noprof+0x340/0x1300 [ 68.380907][ T1696] ? copy_process+0x57c/0x3350 [ 68.380922][ T1696] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 68.380939][ T1696] ? kasan_save_alloc_info+0x3a/0x50 [ 68.380954][ T1696] ? __kasan_slab_alloc+0x73/0x90 [ 68.380967][ T1696] ? arch_dup_task_struct+0x5b/0xe0 [ 68.380983][ T1696] ? __asan_memcpy+0x5a/0x80 [ 68.380995][ T1696] dup_task_struct+0x5d6/0xd80 [ 68.381009][ T1696] ? copy_process+0x57c/0x3350 [ 68.381022][ T1696] ? _raw_spin_lock_irq+0x93/0x120 [ 68.381035][ T1696] ? copy_process+0x3350/0x3350 [ 68.381049][ T1696] ? __kasan_check_write+0x18/0x20 [ 68.381060][ T1696] copy_process+0x57c/0x3350 [ 68.381075][ T1696] ? kasan_save_alloc_info+0x3a/0x50 [ 68.381090][ T1696] ? __cfi_copy_process+0x10/0x10 [ 68.381103][ T1696] ? __kmalloc_cache_noprof+0x23c/0x470 [ 68.381116][ T1696] ? __kasan_check_write+0x18/0x20 [ 68.381130][ T1696] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 68.381143][ T1696] vhost_task_create+0x1f7/0x3f0 [ 68.381155][ T1696] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 68.381169][ T1696] ? __cfi_vhost_task_create+0x10/0x10 [ 68.381181][ T1696] ? __cfi_vhost_task_fn+0x10/0x10 [ 68.381193][ T1696] ? __kasan_check_write+0x18/0x20 [ 68.381203][ T1696] ? mutex_lock+0x97/0x1d0 [ 68.381217][ T1696] ? __cfi_mutex_lock+0x10/0x10 [ 68.381232][ T1696] ? kernel_text_address+0xa9/0xe0 [ 68.381247][ T1696] kvm_mmu_post_init_vm+0x161/0x300 [ 68.381262][ T1696] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 68.381277][ T1696] ? _parse_integer_limit+0x195/0x1e0 [ 68.381290][ T1696] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 68.381305][ T1696] ? kstrtoull+0x13b/0x1e0 [ 68.381315][ T1696] ? kstrtouint+0x78/0xf0 [ 68.381327][ T1696] ? ioctl_has_perm+0x1bc/0x500 [ 68.381338][ T1696] ? __asan_memcpy+0x5a/0x80 [ 68.381349][ T1696] ? ioctl_has_perm+0x408/0x500 [ 68.381360][ T1696] ? has_cap_mac_admin+0xd0/0xd0 [ 68.381371][ T1696] ? __kasan_check_write+0x18/0x20 [ 68.381384][ T1696] ? mutex_lock_killable+0x97/0x1d0 [ 68.381399][ T1696] ? __cfi_mutex_lock_killable+0x10/0x10 [ 68.381414][ T1696] ? proc_fail_nth_write+0x184/0x220 [ 68.381431][ T1696] kvm_vcpu_ioctl+0xa43/0x1000 [ 68.381442][ T1696] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 68.381453][ T1696] ? __cfi_vfs_write+0x10/0x10 [ 68.381465][ T1696] ? __kasan_check_write+0x18/0x20 [ 68.381475][ T1696] ? mutex_unlock+0x90/0x240 [ 68.381495][ T1696] ? __cfi_mutex_unlock+0x10/0x10 [ 68.381511][ T1696] ? bpf_lsm_file_ioctl+0xd/0x20 [ 68.381525][ T1696] ? security_file_ioctl+0x3e/0x110 [ 68.381542][ T1696] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 68.381552][ T1696] __se_sys_ioctl+0x135/0x1b0 [ 68.381565][ T1696] __x64_sys_ioctl+0x7f/0xa0 [ 68.381578][ T1696] x64_sys_call+0x1878/0x2ee0 [ 68.381589][ T1696] do_syscall_64+0x57/0xf0 [ 68.381601][ T1696] ? clear_bhb_loop+0x50/0xa0 [ 68.381616][ T1696] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.381630][ T1696] RIP: 0033:0x7feda399e0d9 [ 68.381641][ T1696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.381652][ T1696] RSP: 002b:00007feda47b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.381666][ T1696] RAX: ffffffffffffffda RBX: 00007feda3c25fa0 RCX: 00007feda399e0d9 [ 68.381675][ T1696] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 68.381683][ T1696] RBP: 00007feda47b9090 R08: 0000000000000000 R09: 0000000000000000 [ 68.381691][ T1696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.381698][ T1696] R13: 00007feda3c26038 R14: 00007feda3c25fa0 R15: 00007ffc5dfab178 [ 68.381708][ T1696] [ 68.381756][ T1696] syz.1.535: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 68.927397][ T1696] CPU: 0 UID: 0 PID: 1696 Comm: syz.1.535 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 68.927428][ T1696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.927440][ T1696] Call Trace: [ 68.927447][ T1696] [ 68.927455][ T1696] __dump_stack+0x21/0x30 [ 68.927491][ T1696] dump_stack_lvl+0x140/0x1c0 [ 68.927518][ T1696] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.927547][ T1696] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 68.927573][ T1696] dump_stack+0x19/0x20 [ 68.927596][ T1696] warn_alloc+0x1e7/0x2c0 [ 68.927623][ T1696] ? kasan_save_track+0x3e/0x80 [ 68.927645][ T1696] ? __cfi_warn_alloc+0x10/0x10 [ 68.927671][ T1696] ? __get_vm_area_node+0x211/0x390 [ 68.927701][ T1696] ? __get_vm_area_node+0x211/0x390 [ 68.927728][ T1696] __vmalloc_node_range_noprof+0x365/0x1300 [ 68.927762][ T1696] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 68.927792][ T1696] ? kasan_save_alloc_info+0x3a/0x50 [ 68.927820][ T1696] ? __kasan_slab_alloc+0x73/0x90 [ 68.927853][ T1696] ? arch_dup_task_struct+0x5b/0xe0 [ 68.927882][ T1696] ? __asan_memcpy+0x5a/0x80 [ 68.927902][ T1696] dup_task_struct+0x5d6/0xd80 [ 68.927926][ T1696] ? copy_process+0x57c/0x3350 [ 68.927950][ T1696] ? _raw_spin_lock_irq+0x93/0x120 [ 68.927972][ T1696] ? copy_process+0x3350/0x3350 [ 68.927996][ T1696] ? __kasan_check_write+0x18/0x20 [ 68.928016][ T1696] copy_process+0x57c/0x3350 [ 68.928043][ T1696] ? kasan_save_alloc_info+0x3a/0x50 [ 68.928071][ T1696] ? __cfi_copy_process+0x10/0x10 [ 68.928095][ T1696] ? __kmalloc_cache_noprof+0x23c/0x470 [ 68.928118][ T1696] ? __kasan_check_write+0x18/0x20 [ 68.928137][ T1696] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 68.928161][ T1696] vhost_task_create+0x1f7/0x3f0 [ 68.928182][ T1696] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 68.928207][ T1696] ? __cfi_vhost_task_create+0x10/0x10 [ 68.928229][ T1696] ? __cfi_vhost_task_fn+0x10/0x10 [ 68.928250][ T1696] ? __kasan_check_write+0x18/0x20 [ 68.928269][ T1696] ? mutex_lock+0x97/0x1d0 [ 68.928295][ T1696] ? __cfi_mutex_lock+0x10/0x10 [ 68.928327][ T1696] ? kernel_text_address+0xa9/0xe0 [ 68.928353][ T1696] kvm_mmu_post_init_vm+0x161/0x300 [ 68.928381][ T1696] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 68.928406][ T1696] ? _parse_integer_limit+0x195/0x1e0 [ 68.928428][ T1696] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 68.928453][ T1696] ? kstrtoull+0x13b/0x1e0 [ 68.928472][ T1696] ? kstrtouint+0x78/0xf0 [ 68.928490][ T1696] ? ioctl_has_perm+0x1bc/0x500 [ 68.928508][ T1696] ? __asan_memcpy+0x5a/0x80 [ 68.928527][ T1696] ? ioctl_has_perm+0x408/0x500 [ 68.928545][ T1696] ? has_cap_mac_admin+0xd0/0xd0 [ 68.928563][ T1696] ? __kasan_check_write+0x18/0x20 [ 68.928582][ T1696] ? mutex_lock_killable+0x97/0x1d0 [ 68.928608][ T1696] ? __cfi_mutex_lock_killable+0x10/0x10 [ 68.928634][ T1696] ? proc_fail_nth_write+0x184/0x220 [ 68.928663][ T1696] kvm_vcpu_ioctl+0xa43/0x1000 [ 68.928682][ T1696] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 68.928700][ T1696] ? __cfi_vfs_write+0x10/0x10 [ 68.928720][ T1696] ? __kasan_check_write+0x18/0x20 [ 68.928738][ T1696] ? mutex_unlock+0x90/0x240 [ 68.928763][ T1696] ? __cfi_mutex_unlock+0x10/0x10 [ 68.928791][ T1696] ? bpf_lsm_file_ioctl+0xd/0x20 [ 68.928816][ T1696] ? security_file_ioctl+0x3e/0x110 [ 68.928852][ T1696] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 68.928871][ T1696] __se_sys_ioctl+0x135/0x1b0 [ 68.928895][ T1696] __x64_sys_ioctl+0x7f/0xa0 [ 68.928919][ T1696] x64_sys_call+0x1878/0x2ee0 [ 68.928938][ T1696] do_syscall_64+0x57/0xf0 [ 68.928960][ T1696] ? clear_bhb_loop+0x50/0xa0 [ 68.928996][ T1696] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.929021][ T1696] RIP: 0033:0x7feda399e0d9 [ 68.929039][ T1696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.929056][ T1696] RSP: 002b:00007feda47b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.929079][ T1696] RAX: ffffffffffffffda RBX: 00007feda3c25fa0 RCX: 00007feda399e0d9 [ 68.929095][ T1696] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 68.929109][ T1696] RBP: 00007feda47b9090 R08: 0000000000000000 R09: 0000000000000000 [ 68.929123][ T1696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.929135][ T1696] R13: 00007feda3c26038 R14: 00007feda3c25fa0 R15: 00007ffc5dfab178 [ 68.929153][ T1696] [ 68.929223][ T1696] Mem-Info: [ 69.256147][ T1701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.258833][ T1696] active_anon:7395 inactive_anon:0 isolated_anon:0 [ 69.258833][ T1696] active_file:5976 inactive_file:2631 isolated_file:0 [ 69.258833][ T1696] unevictable:0 dirty:221 writeback:0 [ 69.258833][ T1696] slab_reclaimable:5015 slab_unreclaimable:71852 [ 69.258833][ T1696] mapped:24721 shmem:185 pagetables:1263 [ 69.258833][ T1696] sec_pagetables:3 bounce:0 [ 69.258833][ T1696] kernel_misc_reclaimable:0 [ 69.258833][ T1696] free:1537244 free_pcp:1690 free_cma:0 [ 69.272337][ T1701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.277127][ T1696] Node 0 active_anon:29652kB inactive_anon:0kB active_file:23904kB inactive_file:10524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98904kB dirty:884kB writeback:0kB shmem:740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:4736kB pagetables:5084kB sec_pagetables:0kB all_unreclaimable? no [ 69.289758][ T1701] batadv_slave_1: entered promiscuous mode [ 69.294988][ T1696] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963408kB mlocked:0kB bounce:0kB free_pcp:5244kB local_pcp:5244kB free_cma:0kB [ 69.509737][ T1696] lowmem_reserve[]: 0 3921 3921 [ 69.516047][ T1696] Normal free:3190296kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29672kB inactive_anon:0kB active_file:23904kB inactive_file:10524kB unevictable:0kB writepending:884kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:2208kB local_pcp:836kB free_cma:0kB [ 69.527750][ T1705] netlink: 132 bytes leftover after parsing attributes in process `syz.0.539'. [ 69.548050][ T1696] lowmem_reserve[]: 0 0 0 [ 69.566340][ T1696] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 69.582243][ T1696] Normal: 5*4kB (UE) 137*8kB (UME) 60*16kB (UME) 56*32kB (UME) 86*64kB (UME) 53*128kB (UME) 36*256kB (UME) 13*512kB (UME) 6*1024kB (UME) 3*2048kB (M) 768*4096kB (UM) = 3190044kB [ 69.600756][ T1696] 8788 total pagecache pages [ 69.605895][ T1696] 0 pages in swap cache [ 69.610107][ T1696] Free swap = 124544kB [ 69.614361][ T36] audit: type=1400 audit(1786169701.380:269): avc: denied { getopt } for pid=1706 comm="syz.0.540" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.634500][ T1696] Total swap = 124996kB [ 69.639599][ T1696] 2097051 pages RAM [ 69.643604][ T1696] 0 pages HighMem/MovableOnly [ 69.648501][ T1696] 352233 pages reserved [ 69.652846][ T1696] 0 pages cma reserved [ 69.659724][ T1696] Memory allocations: [ 69.663935][ T1696] 0 B 0 init/main.c:1477 func:do_initcalls [ 69.672005][ T1696] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 69.680334][ T1696] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 69.688956][ T1696] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 69.697874][ T1700] batadv_slave_1: left promiscuous mode [ 69.703127][ T1696] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 69.713863][ T1696] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 69.723826][ T1696] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 69.732016][ T1696] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 69.740231][ T1696] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 69.748198][ T1696] 0 B 0 init/initramfs.c:101 func:find_link [ 69.775726][ T1712] »»»»»»: renamed from vlan0 (while UP) [ 70.184348][ T420] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 70.321332][ T1725] tipc: Started in network mode [ 70.326362][ T1725] tipc: Node identity , cluster identity 4711 [ 70.332546][ T1725] tipc: Failed to obtain node identity [ 70.334328][ T420] usb 2-1: Using ep0 maxpacket: 8 [ 70.338303][ T1725] tipc: Enabling of bearer rejected, failed to enable media [ 70.344897][ T420] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 70.360646][ T420] usb 2-1: config 179 has no interface number 0 [ 70.367261][ T420] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 70.379472][ T420] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 70.391620][ T36] audit: type=1400 audit(1786169702.160:270): avc: denied { read write } for pid=1728 comm="syz.3.550" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.415431][ T420] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 70.424337][ T36] audit: type=1400 audit(1786169702.160:271): avc: denied { open } for pid=1728 comm="syz.3.550" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.425756][ T420] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 70.449205][ T36] audit: type=1400 audit(1786169702.160:272): avc: denied { ioctl } for pid=1728 comm="syz.3.550" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.462834][ T420] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 70.496538][ T420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.514740][ T1719] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 70.630273][ T36] audit: type=1400 audit(1786169702.400:273): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 70.651380][ T36] audit: type=1400 audit(1786169702.400:274): avc: denied { getopt } for pid=1739 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.661133][ T65] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=59.ed [ 70.671197][ T1741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.686937][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.703849][ T1741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.713740][ T65] usb 3-1: can't set config #3, error -71 [ 70.738362][ T65] usb 3-1: USB disconnect, device number 39 [ 70.783767][ T1754] tipc: Started in network mode [ 70.788745][ T1754] tipc: Node identity , cluster identity 1 [ 70.794655][ T1754] tipc: Failed to obtain node identity [ 70.800239][ T1754] tipc: Enabling of bearer rejected, failed to enable media [ 70.818739][ T1757] overlayfs: failed to resolve './cgroup': -2 [ 71.044378][ T65] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 71.194319][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 71.201479][ T65] usb 3-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 71.211971][ T65] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 71.221193][ T65] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.236609][ T65] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.243848][ T36] audit: type=1400 audit(1786169703.010:275): avc: denied { create } for pid=1758 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.246076][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.275346][ T65] usb 3-1: Product: syz [ 71.279706][ T65] usb 3-1: Manufacturer: syz [ 71.284405][ T65] usb 3-1: SerialNumber: syz [ 71.342934][ T1763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.351916][ T1763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.497258][ T65] usb 3-1: 0:2 : does not exist [ 71.505297][ T65] usb 3-1: USB disconnect, device number 40 [ 71.516025][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.984833][ T36] audit: type=1400 audit(1786169703.760:276): avc: denied { bind } for pid=1768 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.092421][ T1782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 72.101842][ T1785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 72.166738][ T1790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.577'. [ 72.197463][ T1792] 9pnet_fd: Insufficient options for proto=fd [ 72.295601][ T36] audit: type=1400 audit(1786169704.070:277): avc: denied { bind } for pid=1801 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.514305][ T65] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 72.522938][ T36] audit: type=1326 audit(1786169704.290:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1811 comm="syz.3.586" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbe9f9e0d9 code=0x0 [ 72.665590][ T65] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 72.674374][ T65] usb 3-1: config 179 has no interface number 0 [ 72.681424][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 72.692742][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 72.704082][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 72.715924][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 72.727247][ T65] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 72.740829][ T65] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 72.749966][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.759414][ T1798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.766730][ T1798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.946285][ T65] usb 2-1: USB disconnect, device number 36 [ 72.984763][ T310] usb 3-1: USB disconnect, device number 41 [ 72.984801][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 73.000205][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 73.081705][ T1826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 73.112027][ T1833] netlink: 132 bytes leftover after parsing attributes in process `syz.1.593'. [ 73.614441][ T396] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.749421][ T1850] input: syz1 as /devices/virtual/input/input12 [ 73.784302][ T65] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 73.806048][ T1850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.814844][ T1850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.954285][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 73.969940][ T65] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 73.984295][ T65] usb 3-1: config 179 has no interface number 0 [ 73.990645][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 74.024361][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 74.036249][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 74.049397][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 74.059488][ T65] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 74.073011][ T65] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 74.082088][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.097440][ T1848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.124396][ T65] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 74.210631][ T1869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 74.307496][ T1877] netlink: 132 bytes leftover after parsing attributes in process `syz.3.609'. [ 75.351448][ T36] audit: type=1400 audit(1786169707.120:279): avc: denied { name_bind } for pid=1892 comm="syz.3.615" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 75.427730][ T36] audit: type=1400 audit(1786169707.200:280): avc: denied { cmd } for pid=1892 comm="syz.3.615" path="socket:[11832]" dev="sockfs" ino=11832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.496302][ T1899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 75.624310][ T1853] Bluetooth: hci0: command 0x1003 tx timeout [ 75.630451][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.752404][ T36] audit: type=1400 audit(1786169707.520:281): avc: denied { mount } for pid=1906 comm="syz.1.621" name="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 75.760130][ T1907] netlink: 'syz.1.621': attribute type 28 has an invalid length. [ 75.775482][ T36] audit: type=1400 audit(1786169707.520:282): avc: denied { search } for pid=1906 comm="syz.1.621" name="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.807284][ T36] audit: type=1400 audit(1786169707.570:283): avc: denied { listen } for pid=1906 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.124348][ T65] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 76.242289][ T1913] netlink: 37 bytes leftover after parsing attributes in process `syz.3.624'. [ 76.275825][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.284088][ T65] usb 2-1: not running at top speed; connect to a high speed hub [ 76.293183][ T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.303737][ T65] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.314592][ T65] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 76.324071][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.332434][ T65] usb 2-1: Product: syz [ 76.336907][ T65] usb 2-1: Manufacturer: syz [ 76.341680][ T65] usb 2-1: SerialNumber: syz [ 76.555744][ T65] usb 2-1: unit 14 not found! [ 76.569000][ T420] usb 3-1: USB disconnect, device number 42 [ 76.586424][ T65] usb 2-1: USB disconnect, device number 38 [ 76.605917][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.778045][ T1932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 76.807006][ T36] audit: type=1400 audit(1786169708.580:284): avc: denied { read } for pid=1933 comm="syz.0.632" path="socket:[12959]" dev="sockfs" ino=12959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.014321][ T420] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 77.164301][ T420] usb 3-1: Using ep0 maxpacket: 8 [ 77.170755][ T420] usb 3-1: config 0 interface 0 has no altsetting 0 [ 77.177474][ T420] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 77.191260][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.198183][ T1941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.200343][ T420] usb 3-1: config 0 descriptor?? [ 77.210937][ T1941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.428185][ T420] logitech-djreceiver 0003:046D:C534.0001: unknown main item tag 0x4 [ 77.436544][ T420] logitech-djreceiver 0003:046D:C534.0001: item 0 1 0 8 parsing failed [ 77.445052][ T420] logitech-djreceiver 0003:046D:C534.0001: logi_dj_probe: parse failed [ 77.453414][ T420] logitech-djreceiver 0003:046D:C534.0001: probe with driver logitech-djreceiver failed with error -22 [ 77.544360][ T310] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 77.694750][ T310] usb 2-1: no configurations [ 77.699432][ T310] usb 2-1: can't read configurations, error -22 [ 77.734906][ T1945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.744126][ T1945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.834321][ T310] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 77.984800][ T310] usb 2-1: no configurations [ 77.989523][ T310] usb 2-1: can't read configurations, error -22 [ 77.996293][ T310] usb usb2-port1: attempt power cycle [ 78.334358][ T310] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 78.355776][ T310] usb 2-1: no configurations [ 78.360847][ T310] usb 2-1: can't read configurations, error -22 [ 78.494374][ T310] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 78.515137][ T310] usb 2-1: no configurations [ 78.519984][ T310] usb 2-1: can't read configurations, error -22 [ 78.526516][ T310] usb usb2-port1: unable to enumerate USB device [ 79.710685][ T420] usb 3-1: USB disconnect, device number 43 [ 79.887038][ T1960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 79.920194][ T1966] netlink: 132 bytes leftover after parsing attributes in process `syz.0.645'. [ 79.959066][ T1972] raw_sendmsg: syz.0.648 forgot to set AF_INET. Fix it! [ 79.977561][ T1974] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.064359][ T420] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 80.084724][ T1981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 80.166361][ T36] audit: type=1400 audit(1786169711.940:285): avc: denied { bind } for pid=1998 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.195891][ T420] usb 3-1: device descriptor read/64, error -71 [ 80.444314][ T420] usb 3-1: device descriptor read/64, error -71 [ 80.684334][ T420] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 80.700653][ T2015] tipc: Started in network mode [ 80.705858][ T2015] tipc: Node identity 1, cluster identity 1 [ 80.711860][ T2015] tipc: Node number set to 1 [ 80.717523][ T2015] tipc: New replicast peer: 127.0.0.2 [ 80.723333][ T2015] tipc: Enabled bearer , priority 10 [ 80.730073][ T2015] tipc: Disabling bearer [ 80.786561][ T2021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.795358][ T2021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.824361][ T420] usb 3-1: device descriptor read/64, error -71 [ 80.974337][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 81.064384][ T420] usb 3-1: device descriptor read/64, error -71 [ 81.124873][ T9] usb 2-1: no configurations [ 81.129798][ T9] usb 2-1: can't read configurations, error -22 [ 81.174416][ T420] usb usb3-port1: attempt power cycle [ 81.264356][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 81.397956][ T2038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.407714][ T2038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.424680][ T9] usb 2-1: no configurations [ 81.429332][ T9] usb 2-1: can't read configurations, error -22 [ 81.441328][ T9] usb usb2-port1: attempt power cycle [ 81.514364][ T420] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 81.535598][ T420] usb 3-1: device descriptor read/8, error -71 [ 81.665366][ T420] usb 3-1: device descriptor read/8, error -71 [ 81.784413][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 81.805069][ T9] usb 2-1: no configurations [ 81.809831][ T9] usb 2-1: can't read configurations, error -22 [ 81.904328][ T420] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 81.925485][ T420] usb 3-1: device descriptor read/8, error -71 [ 81.944352][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 81.965326][ T9] usb 2-1: no configurations [ 81.970100][ T9] usb 2-1: can't read configurations, error -22 [ 81.977151][ T9] usb usb2-port1: unable to enumerate USB device [ 82.055636][ T420] usb 3-1: device descriptor read/8, error -71 [ 82.164465][ T420] usb usb3-port1: unable to enumerate USB device [ 82.297758][ T2046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.676'. [ 82.324143][ T36] audit: type=1400 audit(1786169714.090:286): avc: denied { read } for pid=2052 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.378204][ T2054] overlayfs: failed to clone upperpath [ 82.384399][ T2054] overlayfs: failed to resolve '/ô|': -2 [ 83.047614][ T2077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.687'. [ 83.564364][ T420] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 83.718813][ T420] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.720356][ T2099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'. [ 83.730819][ T420] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 83.738702][ T2098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'. [ 83.747802][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.764703][ T420] usb 3-1: Product: syz [ 83.769023][ T420] usb 3-1: Manufacturer: syz [ 83.771134][ T2098] overlayfs: failed to clone upperpath [ 83.773874][ T420] usb 3-1: SerialNumber: syz [ 83.785224][ T420] usb 3-1: config 0 descriptor?? [ 83.791462][ T420] CoreChips 3-1:0.0: probe with driver CoreChips failed with error -22 [ 83.995736][ T310] usb 3-1: USB disconnect, device number 48 [ 84.302849][ T2104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.697'. [ 84.312113][ T2104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.697'. [ 84.409808][ T2110] netlink: 1 bytes leftover after parsing attributes in process `syz.3.699'. [ 84.482581][ T2116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 84.520095][ T2121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.529853][ T2121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.664131][ T36] audit: type=1400 audit(1786169716.430:287): avc: denied { associate } for pid=2127 comm="syz.2.705" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.667052][ T2128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2128 comm=syz.2.705 [ 84.712916][ T2130] tipc: Started in network mode [ 84.717916][ T2130] tipc: Node identity , cluster identity 4711 [ 84.724075][ T2130] tipc: Failed to obtain node identity [ 84.729633][ T2130] tipc: Enabling of bearer rejected, failed to enable media [ 84.740395][ T2121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.751707][ T2121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.762304][ T2121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.770931][ T2121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.779961][ T2121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.788641][ T2121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.994345][ T310] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 85.144328][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 85.150714][ T310] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 85.159659][ T310] usb 3-1: config 179 has no interface number 0 [ 85.166517][ T310] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 85.179008][ T310] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 85.190808][ T310] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 85.202064][ T310] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 85.214878][ T310] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 85.229187][ T310] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 85.238636][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.248011][ T2132] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 85.663394][ T420] usb 3-1: USB disconnect, device number 49 [ 85.663535][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 85.678042][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 85.947004][ T2155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.956499][ T2155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.166145][ T2155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.174843][ T2155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.188979][ T2155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.197752][ T2155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.434366][ T420] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 86.585847][ T420] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.596667][ T420] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.610243][ T420] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.620159][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.629090][ T420] usb 3-1: config 0 descriptor?? [ 86.635122][ T420] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 86.679880][ T2162] netlink: 165 bytes leftover after parsing attributes in process `syz.0.718'. [ 86.691140][ T2162] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 86.700966][ T2162] overlayfs: conflicting options: metacopy=off,verity=on [ 86.744413][ T2170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.722'. [ 86.776267][ T2174] overlayfs: missing 'workdir' [ 86.784574][ T36] audit: type=1400 audit(1786169718.550:288): avc: denied { block_suspend } for pid=2173 comm="syz.0.724" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.840998][ T420] usb 3-1: USB disconnect, device number 50 [ 86.944352][ T310] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 87.095583][ T310] usb 2-1: config index 0 descriptor too short (expected 50798, got 27) [ 87.104369][ T310] usb 2-1: config 116 has too many interfaces: 151, using maximum allowed: 32 [ 87.113246][ T310] usb 2-1: config 116 has an invalid descriptor of length 122, skipping remainder of the config [ 87.124050][ T310] usb 2-1: config 116 has 0 interfaces, different from the descriptor's value: 151 [ 87.133932][ T310] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 87.142990][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.284312][ T420] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 87.358009][ T310] usb 2-1: string descriptor 0 read error: -71 [ 87.368014][ T310] usb 2-1: USB disconnect, device number 47 [ 87.435566][ T420] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.446097][ T420] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.459947][ T420] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 87.469546][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.478503][ T420] usb 3-1: config 0 descriptor?? [ 87.484509][ T420] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 87.493598][ T420] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 87.685662][ T2160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.694457][ T2160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.903158][ T2188] netlink: 165 bytes leftover after parsing attributes in process `syz.1.730'. [ 87.913943][ T36] audit: type=1400 audit(1786169719.680:289): avc: denied { write } for pid=2187 comm="syz.1.730" name="nf_conntrack" dev="proc" ino=4026532419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 87.929751][ T2188] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 87.947237][ T2188] overlayfs: conflicting options: metacopy=off,verity=on [ 87.969223][ T2190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 88.077329][ T2195] netlink: 132 bytes leftover after parsing attributes in process `syz.0.733'. [ 88.224322][ T420] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 88.354335][ T420] usb 2-1: device descriptor read/64, error -71 [ 88.594377][ T420] usb 2-1: device descriptor read/64, error -71 [ 88.756654][ T2217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.765280][ T2217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.834337][ T420] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 88.964366][ T420] usb 2-1: device descriptor read/64, error -71 [ 89.204345][ T420] usb 2-1: device descriptor read/64, error -71 [ 89.314433][ T420] usb usb2-port1: attempt power cycle [ 89.398407][ T2224] netlink: 132 bytes leftover after parsing attributes in process `syz.0.744'. [ 89.654324][ T420] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 89.675525][ T420] usb 2-1: device descriptor read/8, error -71 [ 89.788357][ T9] usb 3-1: USB disconnect, device number 51 [ 89.806324][ T420] usb 2-1: device descriptor read/8, error -71 [ 89.985964][ T36] audit: type=1400 audit(1786169721.760:290): avc: denied { ioctl } for pid=2244 comm="syz.2.753" path="socket:[14467]" dev="sockfs" ino=14467 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.011370][ T2245] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.018744][ T2245] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 90.026715][ T2245] netlink: 9 bytes leftover after parsing attributes in process `syz.2.753'. [ 90.044346][ T420] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 90.075273][ T420] usb 2-1: device descriptor read/8, error -71 [ 90.165577][ T2254] netlink: 132 bytes leftover after parsing attributes in process `syz.3.756'. [ 90.185464][ T2256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.194454][ T2256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.225713][ T420] usb 2-1: device descriptor read/8, error -71 [ 90.334410][ T420] usb usb2-port1: unable to enumerate USB device [ 90.364326][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 90.403885][ T2256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.412501][ T2256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.421202][ T2256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.430435][ T2256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.438942][ T2256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.447588][ T2256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.514345][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 90.520743][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 90.533642][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 90.542817][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.551521][ T9] usb 3-1: config 0 descriptor?? [ 90.961853][ T9] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 90.974335][ T9] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 90.981793][ T9] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 90.989356][ T9] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 90.996837][ T9] logitech 0003:046D:CA04.0002: unknown main item tag 0x1 [ 91.004024][ T9] logitech 0003:046D:CA04.0002: unknown global tag 0xc [ 91.011047][ T36] audit: type=1400 audit(1786169722.780:291): avc: denied { listen } for pid=2267 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 91.011135][ T9] logitech 0003:046D:CA04.0002: item 0 1 1 12 parsing failed [ 91.039286][ T9] logitech 0003:046D:CA04.0002: parse failed [ 91.047446][ T9] logitech 0003:046D:CA04.0002: probe with driver logitech failed with error -22 [ 91.056240][ T36] audit: type=1400 audit(1786169722.820:292): avc: denied { setattr } for pid=2267 comm="syz.1.763" name="" dev="pipefs" ino=2959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 91.105066][ T2273] netlink: 132 bytes leftover after parsing attributes in process `syz.0.765'. [ 91.157370][ T2281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 91.166779][ T2281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 91.241204][ T2285] batadv_slave_0: entered allmulticast mode [ 91.248176][ T2285] netlink: 148 bytes leftover after parsing attributes in process `syz.1.769'. [ 91.264057][ T2285] batadv_slave_0 (unregistering): left allmulticast mode [ 91.328566][ T36] audit: type=1400 audit(1786169723.100:293): avc: denied { write } for pid=2288 comm="syz.1.771" name="usb_gadget" dev="configfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.351510][ T36] audit: type=1400 audit(1786169723.100:294): avc: denied { add_name } for pid=2288 comm="syz.1.771" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.372194][ T36] audit: type=1400 audit(1786169723.100:295): avc: denied { create } for pid=2288 comm="syz.1.771" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 91.392203][ T36] audit: type=1400 audit(1786169723.110:296): avc: denied { mounton } for pid=2288 comm="syz.1.771" path="/135/configfs" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.574353][ T420] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 91.725336][ T420] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.735190][ T420] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 91.746573][ T420] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 91.756046][ T420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.764130][ T420] usb 2-1: Product: syz [ 91.768444][ T420] usb 2-1: Manufacturer: syz [ 91.773219][ T420] usb 2-1: SerialNumber: syz [ 91.981683][ T420] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 92.182826][ T36] audit: type=1400 audit(1786169723.950:297): avc: denied { read write } for pid=2288 comm="syz.1.771" name="lp0" dev="devtmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 92.184598][ T420] usb 2-1: USB disconnect, device number 52 [ 92.207902][ T36] audit: type=1400 audit(1786169723.950:298): avc: denied { open } for pid=2288 comm="syz.1.771" path="/dev/usb/lp0" dev="devtmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 92.216034][ T420] usblp0: removed [ 92.925761][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 92.925779][ T36] audit: type=1400 audit(1786169724.700:304): avc: denied { map } for pid=2314 comm="syz.1.783" path="socket:[13720]" dev="sockfs" ino=13720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 93.063313][ T310] usb 3-1: USB disconnect, device number 52 [ 93.414344][ T310] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 93.465187][ T2321] __nla_validate_parse: 3 callbacks suppressed [ 93.465203][ T2321] netlink: 132 bytes leftover after parsing attributes in process `syz.1.785'. [ 93.489581][ T36] audit: type=1400 audit(1786169725.260:305): avc: denied { search } for pid=2322 comm="syz.1.786" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.574314][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.585526][ T310] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.595211][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.605358][ T310] usb 3-1: config 0 descriptor?? [ 93.679902][ T36] audit: type=1400 audit(1786169725.450:306): avc: denied { create } for pid=2330 comm="syz.0.789" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.726934][ T2337] x_tables: duplicate underflow at hook 1 [ 93.753407][ T2341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.794'. [ 93.814725][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 93.824135][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 93.835332][ T310] usb 3-1: USB disconnect, device number 53 [ 93.854322][ T420] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 93.984328][ T420] usb 2-1: device descriptor read/64, error -71 [ 94.032947][ T36] audit: type=1400 audit(1786169725.800:307): avc: denied { getopt } for pid=2354 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.127542][ T36] audit: type=1400 audit(1786169725.900:308): avc: denied { accept } for pid=2360 comm="syz.3.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.180782][ T2369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.191087][ T2369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.224339][ T420] usb 2-1: device descriptor read/64, error -71 [ 94.254370][ T310] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 94.415410][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.426794][ T310] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 94.435860][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.444934][ T310] usb 3-1: config 0 descriptor?? [ 94.464347][ T420] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 94.594327][ T420] usb 2-1: device descriptor read/64, error -71 [ 94.831002][ T2380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.840438][ T2380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.848307][ T420] usb 2-1: device descriptor read/64, error -71 [ 94.893589][ T2393] netlink: 'syz.0.813': attribute type 19 has an invalid length. [ 94.917638][ T2397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 94.964729][ T420] usb usb2-port1: attempt power cycle [ 95.264748][ T310] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 95.268364][ T2319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.272409][ T310] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 95.288067][ T2319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.305210][ T420] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 95.325413][ T420] usb 2-1: device descriptor read/8, error -71 [ 95.455304][ T420] usb 2-1: device descriptor read/8, error -71 [ 95.537695][ T36] audit: type=1400 audit(1786169727.310:309): avc: denied { append } for pid=2408 comm="syz.3.819" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.540061][ T2409] process 'syz.3.819' launched './file0' with NULL argv: empty string added [ 95.570395][ T2409] Invalid argument reading file caps for ./file0 [ 95.570524][ T36] audit: type=1400 audit(1786169727.340:310): avc: denied { execute_no_trans } for pid=2408 comm="syz.3.819" path="/181/file0" dev="tmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.619227][ T9] usb 3-1: USB disconnect, device number 54 [ 95.619231][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 95.688988][ T2422] netlink: 132 bytes leftover after parsing attributes in process `syz.0.825'. [ 95.734327][ T420] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 95.769023][ T420] usb 2-1: device descriptor read/8, error -71 [ 95.915574][ T420] usb 2-1: device descriptor read/8, error -71 [ 95.982978][ T2434] tipc: Failed to remove unknown binding: 66,0,0/0:2681425557/2681425559 [ 95.991584][ T2434] tipc: Failed to remove unknown binding: 66,0,0/0:2681425557/2681425558 [ 96.000609][ T2434] tipc: Failed to remove unknown binding: 66,0,0/0:2681425557/2681425559 [ 96.009219][ T2434] tipc: Failed to remove unknown binding: 66,0,0/0:2681425557/2681425558 [ 96.025722][ T420] usb usb2-port1: unable to enumerate USB device [ 96.039666][ T36] audit: type=1400 audit(1786169727.810:311): avc: denied { accept } for pid=2437 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 96.090681][ T36] audit: type=1400 audit(1786169727.860:312): avc: denied { ioctl } for pid=2437 comm="syz.0.831" path="socket:[14747]" dev="sockfs" ino=14747 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.349096][ T36] audit: type=1400 audit(1786169728.120:313): avc: denied { sqpoll } for pid=2451 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.351153][ T2453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 96.404291][ T45] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 96.422793][ T2456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.838'. [ 96.449670][ T2460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 96.555998][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.565080][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.575626][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.586234][ T45] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 96.595740][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.607621][ T45] usb 3-1: Product: syz [ 96.611850][ T45] usb 3-1: Manufacturer: syz [ 96.616700][ T45] usb 3-1: SerialNumber: syz [ 96.630455][ T45] usb 3-1: selecting invalid altsetting 1 [ 96.641390][ T45] usb 3-1: unit 6 not found! [ 96.647135][ T2470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.660767][ T2470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.825126][ T2446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.833700][ T2446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.379203][ T2487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 97.409176][ T2489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.418205][ T2489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.449100][ T45] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 97.460076][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 97.470161][ T45] usb 3-1: USB disconnect, device number 55 [ 97.478611][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.627786][ T2489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.636903][ T2489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.645478][ T2489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.654689][ T2489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.059517][ T36] audit: type=1400 audit(1786169729.830:314): avc: denied { read } for pid=2501 comm="syz.0.857" path="socket:[14080]" dev="sockfs" ino=14080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.224332][ T45] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 98.316653][ T36] audit: type=1400 audit(1786169730.090:315): avc: denied { write } for pid=2533 comm="syz.3.869" name="events" dev="tracefs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 98.324489][ T2534] ±ÿ: renamed from lo [ 98.339056][ T36] audit: type=1400 audit(1786169730.090:316): avc: denied { add_name } for pid=2533 comm="syz.3.869" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 98.363597][ T36] audit: type=1400 audit(1786169730.090:317): avc: denied { create } for pid=2533 comm="syz.3.869" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 98.370734][ T2534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.392593][ T2534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.406003][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.417113][ T45] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.426318][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.435322][ T45] usb 3-1: config 0 descriptor?? [ 98.643755][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 98.649779][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 98.658474][ T45] usb 3-1: USB disconnect, device number 56 [ 98.916452][ T36] audit: type=1400 audit(1786169730.690:318): avc: denied { execute } for pid=2539 comm="syz.3.872" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.916992][ T2540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.872'. [ 99.044790][ T2553] FAULT_INJECTION: forcing a failure. [ 99.044790][ T2553] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.058449][ T2553] CPU: 0 UID: 0 PID: 2553 Comm: syz.3.877 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 99.058482][ T2553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.058493][ T2553] Call Trace: [ 99.058501][ T2553] [ 99.058509][ T2553] __dump_stack+0x21/0x30 [ 99.058536][ T2553] dump_stack_lvl+0x140/0x1c0 [ 99.058551][ T2553] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.058566][ T2553] ? check_stack_object+0x138/0x150 [ 99.058579][ T2553] dump_stack+0x19/0x20 [ 99.058592][ T2553] should_fail_ex+0x3c2/0x510 [ 99.058604][ T2553] should_fail+0xf/0x20 [ 99.058615][ T2553] should_fail_usercopy+0x1e/0x30 [ 99.058628][ T2553] _copy_to_user+0x24/0xa0 [ 99.058654][ T2553] simple_read_from_buffer+0xed/0x160 [ 99.058670][ T2553] proc_fail_nth_read+0x1aa/0x220 [ 99.058686][ T2553] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 99.058704][ T2553] ? do_splice+0x149d/0x1cc0 [ 99.058719][ T2553] ? bpf_lsm_file_permission+0xd/0x20 [ 99.058733][ T2553] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 99.058749][ T2553] vfs_read+0x288/0xc70 [ 99.058772][ T2553] ? __cfi_vfs_read+0x10/0x10 [ 99.058782][ T2553] ? __kasan_check_write+0x18/0x20 [ 99.058794][ T2553] ? mutex_lock+0x97/0x1d0 [ 99.058808][ T2553] ? __cfi_mutex_lock+0x10/0x10 [ 99.058823][ T2553] ksys_read+0x145/0x260 [ 99.058834][ T2553] ? __cfi_ksys_read+0x10/0x10 [ 99.058846][ T2553] ? __kasan_check_read+0x15/0x20 [ 99.058856][ T2553] __x64_sys_read+0x7f/0x90 [ 99.058867][ T2553] x64_sys_call+0x2638/0x2ee0 [ 99.058878][ T2553] do_syscall_64+0x57/0xf0 [ 99.058890][ T2553] ? clear_bhb_loop+0x50/0xa0 [ 99.058911][ T2553] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.058925][ T2553] RIP: 0033:0x7ffbe9f5e90e [ 99.058937][ T2553] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.058947][ T2553] RSP: 002b:00007ffbeae09fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.058966][ T2553] RAX: ffffffffffffffda RBX: 00007ffbeae0a6c0 RCX: 00007ffbe9f5e90e [ 99.058975][ T2553] RDX: 000000000000000f RSI: 00007ffbeae0a0a0 RDI: 0000000000000006 [ 99.058983][ T2553] RBP: 00007ffbeae0a090 R08: 0000000000000000 R09: 0000000000000000 [ 99.058990][ T2553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.058998][ T2553] R13: 00007ffbea226038 R14: 00007ffbea225fa0 R15: 00007fff64d4ff58 [ 99.059007][ T2553] [ 99.084326][ T45] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 99.354593][ T2559] tipc: Started in network mode [ 99.359618][ T2559] tipc: Node identity ce0337332586, cluster identity 4711 [ 99.367098][ T2559] tipc: Enabled bearer , priority 0 [ 99.374957][ T2559] +: renamed from syzkaller0 [ 99.380507][ T2559] tipc: Disabling bearer [ 99.468712][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.489418][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 99.499569][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.510944][ T2562] netlink: 26148 bytes leftover after parsing attributes in process `syz.0.880'. [ 99.513063][ T45] usb 3-1: config 0 descriptor?? [ 99.525606][ T2562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 99.553454][ T2564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 99.634784][ T2567] fuse: Bad value for 'fd' [ 99.743144][ T2569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.751750][ T2569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.320460][ T2589] netlink: 132 bytes leftover after parsing attributes in process `syz.3.890'. [ 100.344807][ T45] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 100.361721][ T45] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 100.481283][ T2603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 100.558022][ T2607] fuse: Bad value for 'fd' [ 100.662139][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 100.672326][ T45] usb 3-1: USB disconnect, device number 57 [ 100.924294][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 101.084293][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 101.095346][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.105224][ T10] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 101.124274][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.132461][ T10] usb 2-1: Product: syz [ 101.144320][ T10] usb 2-1: Manufacturer: syz [ 101.148976][ T10] usb 2-1: SerialNumber: syz [ 101.211007][ T2630] netlink: 132 bytes leftover after parsing attributes in process `syz.2.907'. [ 101.314536][ T2634] netlink: 'syz.2.909': attribute type 5 has an invalid length. [ 101.322250][ T2634] netlink: 'syz.2.909': attribute type 32 has an invalid length. [ 102.134348][ T45] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 102.322675][ T2683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.331662][ T2683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.541808][ T2683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.550421][ T2683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.559266][ T2683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.567876][ T2683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.880128][ T2687] netlink: 132 bytes leftover after parsing attributes in process `syz.0.927'. [ 103.111540][ T2696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.931'. [ 103.122213][ T2696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.131114][ T2696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.512522][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 103.520143][ T10] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.531872][ T10] usb 2-1: USB disconnect, device number 57 [ 103.554916][ T2700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 104.004304][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 104.155594][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.166386][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.179393][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 104.188710][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.197576][ T10] usb 2-1: config 0 descriptor?? [ 104.207083][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 104.315221][ T2722] incfs: Backing dir is not set, filesystem can't be mounted. [ 104.323159][ T2722] incfs: mount failed -2 [ 104.342465][ T2724] netlink: 68 bytes leftover after parsing attributes in process `syz.0.943'. [ 104.384213][ T2733] netlink: 44 bytes leftover after parsing attributes in process `syz.0.946'. [ 104.393822][ T2733] netlink: 43 bytes leftover after parsing attributes in process `syz.0.946'. [ 104.402961][ T2733] netlink: 'syz.0.946': attribute type 5 has an invalid length. [ 104.406939][ T695] usb 2-1: USB disconnect, device number 58 [ 104.410768][ T2733] netlink: 43 bytes leftover after parsing attributes in process `syz.0.946'. [ 104.529550][ T2738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.540784][ T2738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.750301][ T2738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.758997][ T2738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.851302][ T2740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.949'. [ 104.864416][ T695] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 104.880923][ T2742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 104.900529][ T2744] incfs: Backing dir is not set, filesystem can't be mounted. [ 104.908187][ T2744] incfs: mount failed -2 [ 105.016803][ T695] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.031451][ T695] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.044674][ T695] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 105.053744][ T695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.062703][ T695] usb 2-1: config 0 descriptor?? [ 105.069349][ T695] aiptek 2-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 105.078834][ T695] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 105.123659][ T2769] incfs: Backing dir is not set, filesystem can't be mounted. [ 105.131889][ T2769] incfs: mount failed -2 [ 105.162375][ T2775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.963'. [ 105.189068][ T2781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'. [ 105.284370][ T2788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.292933][ T2788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.604386][ T45] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 105.754329][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 105.760685][ T45] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 105.769042][ T45] usb 3-1: config 179 has no interface number 0 [ 105.775369][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 105.786641][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 105.798470][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.809926][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 105.829073][ T45] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 105.848671][ T45] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 105.858695][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.869728][ T2756] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.910659][ T2800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.973'. [ 105.916097][ T2806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 106.291854][ T45] usb 3-1: USB disconnect, device number 59 [ 106.291900][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 106.306143][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 106.325706][ T2812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.344405][ T2812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.810475][ T36] audit: type=1400 audit(1786169738.580:319): avc: denied { read write } for pid=2815 comm="syz.3.979" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 106.835535][ T36] audit: type=1400 audit(1786169738.580:320): avc: denied { open } for pid=2815 comm="syz.3.979" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 106.859876][ T36] audit: type=1400 audit(1786169738.590:321): avc: denied { ioctl } for pid=2815 comm="syz.3.979" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.284300][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 107.376562][ T420] usb 2-1: USB disconnect, device number 59 [ 107.435483][ T10] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 107.448225][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.458751][ T10] usb 3-1: config 0 has no interfaces? [ 107.464797][ T10] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 107.474098][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.483704][ T10] usb 3-1: config 0 descriptor?? [ 107.694634][ T2824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.703352][ T2824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.713208][ T45] usb 3-1: USB disconnect, device number 60 [ 107.735447][ T2862] tipc: Enabled bearer , priority 10 [ 107.844290][ T420] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 107.994305][ T420] usb 2-1: Using ep0 maxpacket: 8 [ 108.000567][ T420] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 108.009160][ T420] usb 2-1: config 179 has no interface number 0 [ 108.015668][ T420] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 108.026832][ T420] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 108.038093][ T420] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.049245][ T420] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 108.060879][ T420] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 108.074358][ T420] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 108.083721][ T420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.092729][ T2848] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.378836][ T420] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input17 [ 108.885799][ T2887] Invalid argument reading file caps for ./file0 [ 108.921627][ T36] audit: type=1400 audit(1786169740.690:322): avc: denied { accept } for pid=2890 comm="syz.2.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.030488][ T2901] tipc: Enabling of bearer rejected, already enabled [ 110.522189][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 110.530515][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 110.538912][ T420] usb 2-1: USB disconnect, device number 60 [ 110.547643][ T420] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 110.911002][ T2928] __nla_validate_parse: 4 callbacks suppressed [ 110.911025][ T2928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'. [ 111.123063][ T36] audit: type=1400 audit(1786169742.890:323): avc: denied { remount } for pid=2944 comm="syz.0.1027" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.252198][ T2957] overlayfs: failed to clone lowerpath [ 111.793253][ T2988] fuse: Unknown parameter '' [ 111.800502][ T36] audit: type=1400 audit(1786169743.570:324): avc: denied { unmount } for pid=2987 comm="syz.3.1048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.833897][ T2990] fuse: Bad value for 'fd' [ 111.855496][ T36] audit: type=1400 audit(1786169743.630:325): avc: denied { watch watch_reads } for pid=2993 comm="syz.3.1051" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 111.895186][ T36] audit: type=1400 audit(1786169743.670:326): avc: denied { bind } for pid=2997 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.373418][ T36] audit: type=1400 audit(1786169744.140:327): avc: denied { load_policy } for pid=3009 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 112.476333][ T36] audit: type=1400 audit(1786169744.250:328): avc: denied { getopt } for pid=3032 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.521827][ T36] audit: type=1400 audit(1786169744.280:329): avc: denied { bind } for pid=3036 comm="syz.1.1071" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.542157][ T36] audit: type=1400 audit(1786169744.280:330): avc: denied { name_bind } for pid=3036 comm="syz.1.1071" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 112.574457][ T36] audit: type=1400 audit(1786169744.280:331): avc: denied { node_bind } for pid=3036 comm="syz.1.1071" saddr=ff01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 112.597335][ T3043] rust_binder: 3040:3043 got reply transaction with no transaction stack [ 112.606359][ T3043] rust_binder: 3040:3043 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 112.622833][ T45] rust_binder: 3040: undelivered TRANSACTION_ERROR: 29201 [ 113.025783][ T36] audit: type=1400 audit(1786169744.800:332): avc: denied { read } for pid=3056 comm="syz.2.1080" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 113.048978][ T36] audit: type=1400 audit(1786169744.800:333): avc: denied { open } for pid=3056 comm="syz.2.1080" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 113.678425][ T3090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 114.441891][ T36] audit: type=1400 audit(1786169746.210:334): avc: denied { write } for pid=3113 comm="syz.2.1092" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 114.507375][ T3120] ------------[ cut here ]------------ [ 114.512901][ T3120] skb_assert_len [ 114.515995][ T3124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1108'. [ 114.516813][ T3120] WARNING: CPU: 0 PID: 3120 at include/linux/skbuff.h:2720 __dev_queue_xmit+0x1e1d/0x3780 [ 114.535880][ T3120] Modules linked in: [ 114.539849][ T3120] CPU: 0 UID: 0 PID: 3120 Comm: syz.2.1105 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 114.555447][ T3120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.565660][ T3120] RIP: 0010:__dev_queue_xmit+0x1e1d/0x3780 [ 114.571727][ T3120] Code: 00 00 00 fc ff df e9 ea e6 ff ff e8 bd ba 05 fd c6 05 e5 95 63 03 01 48 c7 c7 60 16 8b 86 48 c7 c6 15 62 19 87 e8 d3 92 82 fc <0f> 0b 80 3d ca 95 63 03 01 0f 84 af e3 ff ff e8 8f ba 05 fd c6 05 [ 114.591797][ T3120] RSP: 0018:ffffc9000f8ef6a0 EFLAGS: 00010246 [ 114.598015][ T3120] RAX: 884e52ccdcbce300 RBX: ffff8881306927f0 RCX: 0000000000080000 [ 114.606029][ T3120] RDX: ffffc90002635000 RSI: 0000000000001d99 RDI: 0000000000001d9a [ 114.614033][ T3120] RBP: ffffc9000f8ef980 R08: 0000000000000003 R09: 0000000000000004 [ 114.622191][ T3120] R10: dffffc0000000000 R11: fffff52001f1de38 R12: 1ffff110260d24f2 [ 114.630532][ T3120] R13: ffff888130692780 R14: 0000000000000000 R15: dffffc0000000000 [ 114.638634][ T3120] FS: 00007f78390f26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 114.647797][ T3120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.654441][ T3120] CR2: 000000110c30a92e CR3: 0000000117f4a000 CR4: 00000000003526b0 [ 114.662452][ T3120] Call Trace: [ 114.665820][ T3120] [ 114.668867][ T3120] ? __kasan_check_write+0x18/0x20 [ 114.674000][ T3120] ? __cfi___switch_to+0x10/0x10 [ 114.679089][ T3120] ? alloc_skb_with_frags+0x80b/0x8b0 [ 114.685018][ T3120] ? __cfi___dev_queue_xmit+0x10/0x10 [ 114.690442][ T3120] ? __kasan_check_write+0x18/0x20 [ 114.697123][ T3120] ? skb_set_owner_w+0x280/0x3d0 [ 114.702093][ T3120] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 114.707510][ T3120] ? __kasan_check_write+0x18/0x20 [ 114.712653][ T3120] ? packet_parse_headers+0x7f0/0xb10 [ 114.718113][ T3120] ? packet_parse_headers+0x883/0xb10 [ 114.723526][ T3120] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 114.729328][ T3120] ? skb_setup_tx_timestamp+0x210/0x210 [ 114.735008][ T3120] ? mutex_lock+0x97/0x1d0 [ 114.739471][ T3120] packet_xmit+0x76/0x360 [ 114.743821][ T3120] packet_sendmsg+0x228b/0x56b0 [ 114.748753][ T3120] ? avc_has_perm_noaudit+0x26b/0x360 [ 114.754169][ T3120] ? __cfi_packet_sendmsg+0x10/0x10 [ 114.759413][ T3120] ? check_stack_object+0x10f/0x150 [ 114.764937][ T3120] ? __check_object_size+0xdc/0x870 [ 114.770185][ T3120] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 114.775546][ T3120] ? security_socket_sendmsg+0x3d/0x100 [ 114.781194][ T3120] ? __cfi_packet_sendmsg+0x10/0x10 [ 114.786590][ T3120] __sys_sendto+0x68a/0x700 [ 114.791153][ T3120] ? __cfi___sys_sendto+0x10/0x10 [ 114.796337][ T3120] ? __se_sys_futex+0x13c/0x320 [ 114.801232][ T3120] ? __kasan_check_write+0x18/0x20 [ 114.806386][ T3120] __x64_sys_sendto+0xe9/0x100 [ 114.811175][ T3120] x64_sys_call+0x2c2c/0x2ee0 [ 114.815915][ T3120] do_syscall_64+0x57/0xf0 [ 114.820452][ T3120] ? clear_bhb_loop+0x50/0xa0 [ 114.825162][ T3120] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.831360][ T3120] RIP: 0033:0x7f783819e0d9 [ 114.835883][ T3120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.855754][ T3120] RSP: 002b:00007f78390f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 114.864202][ T3120] RAX: ffffffffffffffda RBX: 00007f7838425fa0 RCX: 00007f783819e0d9 [ 114.872255][ T3120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 114.880290][ T3120] RBP: 00007f7838235024 R08: 0000200000000000 R09: 0000000000000014 [ 114.888302][ T3120] R10: 0000000004000010 R11: 0000000000000246 R12: 0000000000000000 [ 114.896336][ T3120] R13: 00007f7838426038 R14: 00007f7838425fa0 R15: 00007ffc7846ba58 [ 114.904387][ T3120] [ 114.907457][ T3120] ---[ end trace 0000000000000000 ]--- [ 114.912973][ T3120] skb len=0 headroom=144 headlen=0 tailroom=240 [ 114.912973][ T3120] mac=(144,0) mac_len=0 net=(144,-1) trans=-1 [ 114.912973][ T3120] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 114.912973][ T3120] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 114.912973][ T3120] hash(0x0 sw=0 l4=0) proto=0x0010 pkttype=0 iif=0 [ 114.912973][ T3120] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 114.912973][ T3120] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 114.960653][ T3120] dev name=wg0 feat=0x00000106401d4829 [ 114.966416][ T3120] sk family=17 type=3 proto=0