last executing test programs: 6.636378867s ago: executing program 0 (id=260): syz_io_uring_setup(0x5b14, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0, &(0x7f0000000000)) (async) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) flistxattr(r0, &(0x7f0000000100)=""/128, 0x80) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.55784704s ago: executing program 0 (id=261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) getsockname$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) r5 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r5, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003070000000703"]}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, "37a0"}, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="e9ea62"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c00)={0x40, 0xf, 0x2, "41dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="400b02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9a5e34eb17cd1c653a14a45b6e30f88fd46d92f3093c5080beb386085565e423db8f2a25702601973d01af09d68a83250f9ea5a0ebe6839ff1fc0738217b77673274dccd3a118b835b98485910bd88af805515f1ce83d493aad6e0cb49200f263554724ca4c36f37bb07cfab985380c9a894dea9f628b3e60b5174bfeb54997f034cdc121c9fb11d6be1fdb4150d0ea947eea20ac8f0d14a9e94fda266b373302ab3da468b5b6f74a3202a8b4cc1b3bfe57df36ceef16d007f043c652e102400156b389861000000c63400"/212, @ANYRES16=r4, @ANYBLOB="000027bd7000fbdbdf25150000003c00098008000200010000000800020001000080080002000600000008000100fb5b00000800020009000000080001000b000000080001000d000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.164690586s ago: executing program 3 (id=266): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000300)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc0300000047888005", 0xe, 0x4, &(0x7f0000000140)={0x11, 0xc, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.110300665s ago: executing program 3 (id=267): sigaltstack(&(0x7f0000000340)={0x0, 0x80000002, 0xffffffffffffff52}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000340)={{0x26000, 0xffff1000, 0xe, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0x4, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0x1, 0x8000000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0x8, 0x7, 0x7f, 0x7, 0x2, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x80a0000, 0x0, 0xe, 0x2, 0x7, 0x2, 0x5, 0x5, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0xdddd0000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0x2000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x2}, {0xdddd1000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x63, 0x1, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x1, 0x7]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000702, 0xee00, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$tun(r6, &(0x7f0000000080)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x38, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @rand_addr=0x64010102}, @dest_unreach={0x3, 0xd, 0x0, 0x0, 0x0, 0x4, {0x5, 0x4, 0x0, 0x15, 0xe7d5, 0x4, 0x5, 0x6, 0x11, 0x4, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, "120700bf3fc6fcce"}}}}}}, 0x4a) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_test', 0x4006c2, 0x20) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000480)={{0xeeee8000, 0x6000, 0xd, 0x5, 0x2, 0x5, 0x0, 0x48, 0x1, 0x0, 0x2d, 0xf9}, {0xf000, 0x58000, 0x8, 0x8, 0x38, 0xa, 0x4, 0xf, 0x3, 0x8, 0x8, 0x7f}, {0x8000000, 0xdddd1000, 0xa, 0x6c, 0x4, 0x8, 0x6, 0x7, 0x0, 0x5, 0x7f, 0x10}, {0x58000, 0xfec00000, 0x3, 0xd, 0x5, 0x49, 0x0, 0x1, 0x81, 0xc, 0xa, 0x81}, {0xeeee8000, 0xb000, 0x4, 0x6, 0x2, 0x82, 0x2, 0x7f, 0x5, 0x1, 0xa, 0xb1}, {0xdddd1000, 0x7000, 0x7a38405243cb7b6a, 0x1, 0xfe, 0x0, 0x46, 0x9, 0x2, 0x57, 0x9, 0xf}, {0xffff1000, 0xf000, 0xe, 0x1, 0xd, 0x5, 0x3, 0x0, 0xce, 0x8, 0x0, 0x1}, {0x8000000, 0x200000, 0x3, 0x80, 0x15, 0x4, 0x0, 0xfc, 0x3, 0x7f, 0x9, 0xe}, {0x4, 0x7}, {0x1}, 0x4, 0x0, 0x3000, 0x4000a, 0xc, 0x400, 0xdddd0000, [0x5, 0x4, 0xffffffffffff0001, 0x9]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) recvfrom$packet(r2, &(0x7f0000000240)=""/183, 0xb7, 0x40000060, &(0x7f00000005c0)={0x11, 0xf5, r10, 0x1, 0x6, 0x6, @local}, 0x14) 5.780741211s ago: executing program 3 (id=269): unshare(0x60000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x30, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x33, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 4.505822705s ago: executing program 3 (id=286): setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() r3 = socket$key(0xf, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88080) write$P9_RSTAT(r5, &(0x7f0000000100)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0xfff, 0x3, {0x10, 0x3, 0x8}, 0x15a50000, 0x3, 0x2, 0x6, 0x2, ':}', 0x0, '', 0x1, '%', 0xf, '),(^\',)]-\\).%]*'}}, 0x4c) accept$nfc_llcp(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x38}) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x38}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000487000/0x14000)=nil, 0x14000}, 0x2}) fcntl$dupfd(r4, 0x0, r3) (async) r7 = fcntl$dupfd(r4, 0x0, r3) write$UHID_CREATE(r7, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000001c0)=""/238, 0xee, 0x3, 0x6, 0x3, 0x1, 0x2}}, 0x120) (async) write$UHID_CREATE(r7, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000001c0)=""/238, 0xee, 0x3, 0x6, 0x3, 0x1, 0x2}}, 0x120) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r2, 0x7) (async) tkill(r2, 0x7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20802, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000000)={@val={0xa, 0x6003}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @random="c1e08d8a0851", @remote}}}}}, 0x2e) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) 4.289482551s ago: executing program 3 (id=287): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = fsopen(&(0x7f00000002c0)='coda\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r4, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x48, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "6bd94d93e71e361a", "7d92bd43df2ec19bed351a1982103e82", "bbb1b0a4", "9d957e5a86ddeca6"}, 0x28) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000300)={0x80000000, 0x2, 0x4, 0x0, 0x0, [{{r4}, 0x1}, {{r3}, 0x34}, {{r0}, 0x70}, {{r1}, 0x2}]}) write$P9_RLOPEN(r4, &(0x7f0000000280)={0x18, 0xd, 0x2, {{0x0, 0x4, 0x3}, 0x7}}, 0x18) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000240)={0xffffffff, 0x5, 0x0, 0x3}) unlinkat(r2, &(0x7f0000000000)='./bus\x00', 0x200) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000100)={0x4, 0x0, [{0xa, 0x754, 0x6, 0xff, 0xfffffff3, 0x198, 0x3}, {0x40000000, 0x5, 0x1, 0x9, 0x200, 0xfcf, 0x80000001}, {0x7, 0xfffffffd, 0x2, 0x4f, 0x6523, 0x3, 0x6}, {0xc0000001, 0x1, 0x0, 0x9, 0x3ff, 0x2}]}) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100000000002077142410000000000001090224000100008008090400850903000000092100000001222400090581032000000aff51a0beca57523525e637c624479f7089db"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.984845352s ago: executing program 0 (id=289): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f00000002c0)=0xc00082, 0x4) recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone3(&(0x7f0000001540)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0xfffffffffffffe44, 0x0, 0x0, 0xffffffffffffff3f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r3 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fffffff}]}) 3.291596158s ago: executing program 2 (id=293): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES8=r2], 0xfdef) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc0300000047888005", 0xe, 0x4, &(0x7f0000000140)={0x11, 0xc, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.233280978s ago: executing program 2 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='msdos\x00', 0x0, &(0x7f0000000340)='debug') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1b10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x4) 3.200012054s ago: executing program 2 (id=295): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2001020000c6e9"], 0x0}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="5d48305dc91d79d28471536bcaeed6ab84aa900da8900116e9cc844c84387ce5b0a329ef71", @ANYRES8, @ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffbff, 0x7, 0x109e93, 0xfffffdffffffffff, 0x80, 0x9, 0x0, 0x2, 0xcb2b, 0x2, 0x200000010000, 0x6, 0x7, 0x20000001], 0xfec00000, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003de30f3c369197d09647190880"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.120772067s ago: executing program 0 (id=296): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@allocspi={0x148, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d4, 0x1}, 0xa, @in=@local, 0x3500, 0x2, 0x3, 0x4, 0x43b, 0xc, 0x10001}]}, @mark={0xc, 0x15, {0x35075b, 0x7}}]}, 0x148}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'vlan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="02030e00d3fc0385dcb188a888a8", 0xe, 0x4000044, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000100), 0x1, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) r8 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) linkat(r8, &(0x7f0000000440)='./bus\x00', r8, &(0x7f0000000480)='./file0\x00', 0x1000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x82, 0x0) open$dir(&(0x7f0000000a40)='./file0/file0\x00', 0x40000, 0x9) open$dir(&(0x7f0000000ac0)='./file0/file0\x00', 0x401, 0x40) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="0000000076ab17d3f9d07595cfdd0495e8db32f1fe34614b4a689a6ae6186066ddd01f69edc96af1ba9990cc959ead76185a3da6b733961ae87bd8c6ac6e6102f9b92d7e81b44bb9bbd0e69be9e4f290e2c7132ba2d818c2bb19b831022b8bb5b0d8b9590cbc398971cac59b26c435b44f40c17ad2fa8741559455a59a001eb0cac6b4c614c31a7f1c0fa14a24aecfb99094e88b044c0dc8cc2b9f97e9e473c01560f4470fb81898fc53544ee52590ba68111fdcca8ab20847f6774b9147eaa8efffaf0f87c32e727824def8a1", @ANYRESHEX=r9, @ANYBLOB="00082dbd7000fbdbdf25150000001400018008000300010000000800030000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 3.04099015s ago: executing program 0 (id=297): openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) (async) socket(0x2c, 0x1, 0x7) 2.991493258s ago: executing program 0 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket(0xf, 0x5, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"}) syz_usb_connect$uac1(0x2, 0x9c, &(0x7f0000002440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x2, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x3c, 0x8, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x4, 0xe, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xac, 0x3, 0x7, {0x7, 0x25, 0x1, 0x0, 0xd3, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x3, 0x7, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x8, 0x70, 0x2b, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x9, 0x5}}}}}}}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x201, 0x1, 0x2, 0x78, 0x20, 0x1}, 0x35, &(0x7f0000002540)={0x5, 0xf, 0x35, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x7, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x81, 0xf, 0x2, [0x30, 0xc000, 0xff00ff]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x22, 0x5, 0x3, 0x200, 0x4}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000002580)=@lang_id={0x4, 0x3, 0x140c}}]}) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r4 = syz_open_pts(r3, 0x200) r5 = dup3(r4, r3, 0x0) syz_usb_connect$uac1(0x3, 0x81, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x9, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x40, 0x4, 0x9, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf7, 0xd, {0x7, 0x25, 0x1, 0xc, 0xc, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0x6, 0x6}}}}}}}}]}}, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="66b80b0000000f23d00f21f86635300000030f23f8baa100b832d0ef0fc77be7f20fe625bad004b80080ef66b8090000000f23c80f21f866350400b0000f23f866b92e0300000f32b806008ee03ef2260f01df66b8008000000f23c00f21f8663501000f000f23f8", 0x68}], 0x1, 0x20, &(0x7f0000000380)=[@flags={0x3, 0x151002}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0xc, 0xca, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="06002a00dd9b"], 0x24}}, 0x0) r6 = dup2(r0, r0) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000080)={0x4c795, 0xc}) read$FUSE(r6, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r6, &(0x7f0000002400)={0x28, 0xffffffffffffffda, r7, {{0x6, 0x50}}}, 0x28) 1.232662374s ago: executing program 3 (id=299): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = gettid() ptrace$cont(0x7, r1, 0x200, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000800)={@flat=@weak_binder={0x77622a85, 0x10a}, @flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1040}], 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0x2e, 0x0, &(0x7f00000001c0)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r6 = syz_usb_connect$midi(0x1, 0x7a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x5, 0x20, 0x5c, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x75eec35cc7fff5f6, 0x50, [@midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x10, 0x2, [{0x4, 0x5}, {0x81, 0xcd}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0xfb, 0x6, [{0x9, 0x2}, {0x9, 0xd}, {0x0, 0x5}, {0x9, 0x9}, {0x4, 0x4}, {0x0, 0x8}]}, @ms_header={0x7, 0x24, 0x1, 0x81, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x0, 0x3}, @ms_header={0x7, 0x24, 0x1, 0x35, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xfa, 0x7}], [{{0x9, 0x5, 0x5, 0x8, 0x400, 0x5, 0x5d, 0xfa, {0x7, 0x25, 0x1, 0x3, "26d19c"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7f, 0x1f, 0x8, 0x20, 0x6}, 0x60, &(0x7f0000000100)={0x5, 0xf, 0x60, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0xfa, 0x0, 0x6d2, 0xff00, 0x8}, @generic={0x29, 0x10, 0x1, "23ea41163dbc1a10a3790fee8e90a8f39a6d18b37c4fd112dd127806d4f11750829fb9ad749d"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7ffff28, 0x0, 0x1, [0xffc0c0, 0xc000, 0xc000, 0x18]}]}, 0x6, [{0x30, &(0x7f0000000180)=@string={0x30, 0x3, "a6cd52707fad52a02fafa713832af730458189916d3fdd529dfdc2f94569b1e8f5491a768c9556f0cbd8146d897b"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x2, &(0x7f0000000200)=@string={0x2}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x810}}, {0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="050705d5cc"]}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x20, 0xc, 0x4, "265aa114"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, &(0x7f0000000640)={0x24, &(0x7f0000000380)={0x20, 0xf, 0xf8, {0xf8, 0x22, "6e69bed74c994da172a43d09ecb980fb0d628427c63e39119ee68f30d7daf371ccee3ffc8ecb084a1abd239dffb2ba3129d30bf9457545b3329f3058ef143485fce097c06f58ed04a0e531d779e5ca173d8567bd0b16e63725c75add0a37962ca36bda65fd11d6bbf5f58df4cbbcc21d54c0240050d71e84f9793563eafd12c5058d682d3a0fc926ba1fb13e893bae33dcc17f1ac52f1ed223f82da4a80e237ac37c2546d5972261c3be9744243ac96a0e9558aec7e44b39e18093a2aaeefd8065c1e80988fb1c2cedca4cdf0d2a1a1e2e6ab1470b253a1345087ae0f2ce8030da16f38b294c328b197ae8f6a3082eb740062ba4b6a1"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}, &(0x7f00000005c0)={0x0, 0x22, 0xb, {[@global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0x3, "579b56f7"}, @local=@item_012={0x1, 0x2, 0x0, "dd"}, @local=@item_012={0x2, 0x2, 0x4, ')M'}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd, 0x5, 0x1, {0x22, 0x57b}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000680)={0x0, 0x5, 0x5a, "eedcf63b3552c4055226f6ac7e5cca4c4f92f7b5616962af07186a6c0cdb335516a73d4f8cbdb0d92f43f3a8c3e8320dbee11a367a1c8e630eb9785ab374c15f9b37354f738d7622b3931d1021d57ce1da376e8250664e263ab1"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x74}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000800)={0x20, 0x1, 0xf9, "67b768c310cf9e6578e81a0001e2c598adca84018fd5f959103ed00a6c01ba0df9bb7f564c153cf108472dcb7ec8a96d6b639c142e611aa089d6fd500a79610b5c1f9a3abf483a6623b680576fb5d2b739cccc1a5dd313939d849e22d2231247f0242094817299363be8522922736b650837c7ae51de99c068db0594ac77cbde87e52b8ff4d2bccb44df785dde1175bd95932689bdb999d12ecf679f88a9f3ee5a26153f0767807c71cd336f11fd4245cbfe3df08c9ce36ee2646f128c4030aa45edd13ca5d7142a802f7cc86f3f8174cb334dcae27f1ae8344eb8371ab2bdcff828f4ffcb8f2563a81373024a548c690eda1dc70b0ee8681b"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x4}}) 799.689396ms ago: executing program 1 (id=303): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) fcntl$setstatus(r0, 0x4, 0x2c00) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x20}], 0x1, 0x0, 0x0, 0x4044080}, 0x40) (async) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x3, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x20000d728, 0x0, 0x3b, 0x7, 0x0, 0x58, 0x4c}) syz_usb_connect$cdc_ncm(0x0, 0xd1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0558af393f3bf89daec306cb8617b60d771092390706f9afcd1b0d5ae982e6360d33eea72b54d54205cf25c92e34a2510fb16887643554e1135aaa2a79731b24d98048c0ed3028b8efc5dcf87d87891e72caa34f95e9ee21ebf1b679bea6dc0b6483296692934c3808eb3e966c21a90e8e4cb4020791bfed712303bb1a1a8c6f2a5b9ed2845e765e48fb712cd2d63deafd475cdbc97d43c9899218b433a3a741ff45a77171e5205ba77606ed2b8655f82fbba5872d2fc0a3b8d96d6bbb12ef9f29e8c881e0a4dc21ecd8983f300406c34e1fb74c1c00779ab7b838af5f2363a52063806bf4e20e23557e7aa7db7f88beb44ff3"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) ioperm(0x8, 0x1, 0x10001) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f00000002c0)={0xa, 0x4e24, 0x3, @local, 0x7}, 0x1c) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) r5 = eventfd(0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r6 = open(&(0x7f0000000380)='./file0\x00', 0xe6242, 0x4ebfac6bbaf7949) fcntl$lock(r6, 0xa, &(0x7f00000019c0)={0x1, 0x0, 0x2000000000000001, 0x2}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) (async) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x20, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xaa, 0x1, 0x2}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x250, 0x1, 0x1, 0x9, 0x40, 0x1}, 0xb9, &(0x7f0000000840)={0x5, 0xf, 0xb9, 0x3, [@generic={0xaa, 0x10, 0x1, "2cb20fa1f8b1caa66f10a1381c7f90a9088c1e36928ff7a9f38f619710e10193b388ffbbbb4832d7bd757ad6164c69c339eaacf40d9f82033fda77ad5373f212fbd936daaaebe49f88060ff1d20e355dadcfd708f64eccaec793d38a98e78f79e83ee106bdf10a468b008d4a81b8c9206d9c40cde55eb087d0cb0cf2ee4d9e7d8943e932b58f3ed508dff16331453d07a7bcff7b784c091fcc7b5a01eff032d5dd59f5ce6fee13"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x5, 0x1}]}, 0x1, [{0x8f, &(0x7f0000000900)=ANY=[@ANYBLOB="8f03d9ba7139be68819750ba6b0f6f0f6cbc9655542e2ec2186cfdca5cd7f93625664afd1bcad324d0f0d11c470500c22a316bb86aeadc3e7a66e9686b20d5d0602f69ac2986806c71b299c9db73b1919c22023b8fca8a6abb0e6bcbf23ed00f37506236a2dcd0261ad7dadb49bbb7195541667e2e044664c19e3fdb14a74db71dea5bb0f64fabc37a7fb56f143c58"]}]}) 240.74618ms ago: executing program 1 (id=304): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002abd70200000000008000000", @ANYRES32=r1, @ANYBLOB="0c0000800800090064010101"], 0x24}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x112, 0x1, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1) syz_io_uring_setup(0x2565, &(0x7f0000000000)={0x0, 0x45, 0x1, 0x1, 0x38b}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000000)) 240.02594ms ago: executing program 1 (id=305): prlimit64(0x0, 0x8, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) unshare(0x20000000) (async) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x4e20, 0xfd95, 0x4e24, 0x394, 0xa, 0xa0, 0x80, 0x64}, {0x4, 0x53, 0xffff, 0x8000000000000000, 0x1, 0x800c5c4, 0x8000, 0xfffffffffffffffe}, {0x100000000003, 0x5, 0xc, 0x9}, 0x3, 0x6e6bb1, 0x2, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3504, 0x2, 0xf8a3eceea9e5829a, 0x2, 0x2, 0xfffffffe}}, 0xe8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x14, 0xffffffffffffffff, 0x1}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060"], 0xfdef) r4 = syz_clone(0x80001200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r4], 0x1}, 0x58) (async) wait4(0x0, 0x0, 0x40000000, 0x0) 220.337334ms ago: executing program 1 (id=306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xcc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async, rerun: 64) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x40000000, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x100000001, 0x4) (async) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902340001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x17, 0x6, "7b2c746f0e7d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) (async, rerun: 32) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x0, 0x15, 0x86, "639e87c67b88f0596e92bb8e983b168dbed23752adc20adaf6a888eead5de68bc75fdfd4c9a7c7e010cef4e8d20c30817aac19a4b5e38f9eb93c40c9232bfe74012690d312f87dbc3ef40876ffdcd0833cacfcf5eb331f86e17350ac5b171094d21490f8ded6b3f833463d41f134d61cd8bea29afd3f585ae99bdc2507ae8576c7ece43c0bf0"}, 0x0, 0x0}) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x47) cachestat(r6, &(0x7f0000000040)={0xfffffffffffffffe, 0x8}, 0x0, 0x20) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x18) (async, rerun: 32) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async, rerun: 32) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x2, 0x3, 0x0, 0x0, "61bcf34b016813cf"}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) (async) syz_usb_control_io$printer(r4, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x11, @string={0x11, 0x3, "0da491f04fcb950fe84742f762d80f"}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x20, 0x1c, 0xb3, "097df1872dcb8cdf3162371717daecf2f484f051331fc4e67ee7680b3b542896565c3c594e795d5b25d9ba126a5a5dac8a8214710f0ee6cfefd1d87f98219f6314ec06d8121f4192039cc2058af448a696ef91ce48d5364bda783bf08060dba1d22f408aa498b9d439127e96ea29e600f0b581afb1dab55b685e0a3a8d74cae5fcd45eb5e4bd6e89e58794061eac13ef0677dcb91b9a573fce949386c61f4c24548c4bc662ca48e59c440ba8004cc21d4e7e81"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 206.663396ms ago: executing program 1 (id=307): r0 = socket$inet_tcp(0x2, 0x1, 0x0) stat(&(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x25, 0x38]}}], [{@euid_eq={'euid', 0x3d, r1}}, {@smackfsdef}, {@obj_role={'obj_role', 0x3d, 'tmp0`\x00'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'tmpfs\x00'}}]}) setsockopt$sock_linger(r0, 0x1, 0x50, &(0x7f0000000100)={0x0, 0x57}, 0x8) 152.877625ms ago: executing program 1 (id=308): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) statx(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x800, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) lsetxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='com.apple.system.Security\x00', &(0x7f0000000140)='overlay\x00', 0x8, 0x1) fsetxattr(r0, &(0x7f0000000480)=@known='system.posix_acl_access\x00', &(0x7f00000004c0)='lowerdir', 0x8, 0x2) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x8, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/resume_offset', 0x1, 0xed) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206"], 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000500)={0x0, 0x0, 0x6, 0x1}) 152.306595ms ago: executing program 2 (id=309): socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RVERSION(r0, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0xc9, 0x8, '9P2000.u'}, 0x15) (async) write$P9_RVERSION(r0, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0xc9, 0x8, '9P2000.u'}, 0x15) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) futex(&(0x7f000000cffc)=0x4, 0x6, 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) (async) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) socketpair(0x6, 0x2, 0xb83e, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x28048010) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x28048010) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0xf63], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) 113.972601ms ago: executing program 2 (id=310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@multicast, @random='\x00\x00\x00\x00\x00@', @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x38, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @dest_unreach={0x3, 0xd, 0x0, 0x0, 0xf3, 0x4, {0x5, 0x4, 0x0, 0x15, 0xe7d5, 0x4, 0x5, 0x6, 0x11, 0x4, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, "b08fd23c515f09ce"}}}}}}, 0x4a) 0s ago: executing program 2 (id=311): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES8=r2], 0xfdef) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc0300000047888005", 0xe, 0x4, &(0x7f0000000140)={0x11, 0xc, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. [ 24.978561][ T36] audit: type=1400 audit(1776034453.030:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.979775][ T282] cgroup: Unknown subsys name 'net' [ 25.001452][ T36] audit: type=1400 audit(1776034453.030:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.029166][ T36] audit: type=1400 audit(1776034453.070:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.029469][ T282] cgroup: Unknown subsys name 'devices' [ 25.214737][ T282] cgroup: Unknown subsys name 'hugetlb' [ 25.220414][ T282] cgroup: Unknown subsys name 'rlimit' [ 25.394462][ T36] audit: type=1400 audit(1776034453.450:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.418136][ T36] audit: type=1400 audit(1776034453.450:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.427354][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.443692][ T36] audit: type=1400 audit(1776034453.450:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.475671][ T36] audit: type=1400 audit(1776034453.500:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.502162][ T36] audit: type=1400 audit(1776034453.500:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.537844][ T36] audit: type=1400 audit(1776034453.590:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.564107][ T36] audit: type=1400 audit(1776034453.590:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.564358][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.409728][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.416953][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.424548][ T292] bridge_slave_0: entered allmulticast mode [ 26.430828][ T292] bridge_slave_0: entered promiscuous mode [ 26.438227][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.445401][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.453003][ T292] bridge_slave_1: entered allmulticast mode [ 26.459470][ T292] bridge_slave_1: entered promiscuous mode [ 26.485847][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.493000][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.500171][ T291] bridge_slave_0: entered allmulticast mode [ 26.506784][ T291] bridge_slave_0: entered promiscuous mode [ 26.515354][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.522741][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.530036][ T291] bridge_slave_1: entered allmulticast mode [ 26.536480][ T291] bridge_slave_1: entered promiscuous mode [ 26.626492][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.633800][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.641131][ T289] bridge_slave_0: entered allmulticast mode [ 26.647635][ T289] bridge_slave_0: entered promiscuous mode [ 26.654397][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.661591][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.669057][ T289] bridge_slave_1: entered allmulticast mode [ 26.675452][ T289] bridge_slave_1: entered promiscuous mode [ 26.696458][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.703600][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.710759][ T290] bridge_slave_0: entered allmulticast mode [ 26.717358][ T290] bridge_slave_0: entered promiscuous mode [ 26.727467][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.734593][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.741688][ T290] bridge_slave_1: entered allmulticast mode [ 26.748096][ T290] bridge_slave_1: entered promiscuous mode [ 26.836165][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.843559][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.850889][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.858020][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.892291][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.899427][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.906818][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.913918][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.927559][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.934698][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.942106][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.949216][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.991550][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.999326][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.007163][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.015371][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.023477][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.030723][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.047132][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.054245][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.061892][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.069342][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.109224][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.116335][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.127493][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.134805][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.155026][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.162188][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.170165][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.177497][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.215287][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.222659][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.230684][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.237793][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.265619][ T291] veth0_vlan: entered promiscuous mode [ 27.271387][ T292] veth0_vlan: entered promiscuous mode [ 27.296933][ T289] veth0_vlan: entered promiscuous mode [ 27.306508][ T291] veth1_macvtap: entered promiscuous mode [ 27.323080][ T292] veth1_macvtap: entered promiscuous mode [ 27.353385][ T290] veth0_vlan: entered promiscuous mode [ 27.361219][ T289] veth1_macvtap: entered promiscuous mode [ 27.389684][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.392481][ T290] veth1_macvtap: entered promiscuous mode [ 27.503576][ T316] syzkaller1: entered promiscuous mode [ 27.509205][ T316] syzkaller1: entered allmulticast mode [ 27.586251][ T321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 27.597708][ T321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 27.615789][ T321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 27.633099][ T321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 27.642261][ T321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 27.669994][ T327] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.696167][ T321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 27.722563][ T330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6'. [ 27.732040][ T330] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 27.902505][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.992435][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.052490][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 28.060687][ T65] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 28.070722][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.079403][ T65] usb 3-1: Product: syz [ 28.083776][ T65] usb 3-1: Manufacturer: syz [ 28.088467][ T65] usb 3-1: SerialNumber: syz [ 28.144058][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 28.152638][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 28.161544][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 28.171922][ T9] usb 2-1: config 220 has no interface number 2 [ 28.178451][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 28.192133][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 28.199476][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 28.206586][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 28.215129][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 28.224944][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.233336][ T9] usb 2-1: Product: syz [ 28.237589][ T9] usb 2-1: Manufacturer: syz [ 28.242411][ T9] usb 2-1: SerialNumber: syz [ 28.297987][ T65] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 28.319786][ T65] usb 3-1: USB disconnect, device number 2 [ 28.612412][ T335] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.762811][ T335] usb 1-1: device descriptor read/64, error -71 [ 28.835122][ T346] Unsupported ieee802154 address type: 0 [ 28.841517][ T345] SELinux: failed to load policy [ 28.881843][ T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 28.888334][ T9] usb 2-1: No valid video chain found. [ 28.894594][ T9] usb 2-1: selecting invalid altsetting 0 [ 28.903212][ T9] usb 2-1: USB disconnect, device number 2 [ 29.002562][ T335] usb 1-1: device descriptor read/64, error -71 [ 29.112497][ T65] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 29.242472][ T335] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.264007][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.275317][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 29.288288][ T65] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 29.297830][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.306664][ T65] usb 3-1: config 0 descriptor?? [ 29.372461][ T335] usb 1-1: device descriptor read/64, error -71 [ 29.612452][ T335] usb 1-1: device descriptor read/64, error -71 [ 29.713101][ T364] syzkaller1: entered promiscuous mode [ 29.718948][ T364] syzkaller1: entered allmulticast mode [ 29.725060][ T335] usb usb1-port1: attempt power cycle [ 29.725900][ T348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 29.817752][ T366] capability: warning: `syz.1.20' uses 32-bit capabilities (legacy support in use) [ 29.943336][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 29.949660][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 29.958604][ T65] usb 3-1: USB disconnect, device number 3 [ 30.062458][ T335] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.067159][ T370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 30.083518][ T335] usb 1-1: device descriptor read/8, error -71 [ 30.213550][ T335] usb 1-1: device descriptor read/8, error -71 [ 30.452437][ T335] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.487801][ T335] usb 1-1: device descriptor read/8, error -71 [ 30.623872][ T335] usb 1-1: device descriptor read/8, error -71 [ 30.707666][ T65] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.732539][ T335] usb usb1-port1: unable to enumerate USB device [ 30.816406][ T385] syzkaller1: entered promiscuous mode [ 30.822188][ T385] syzkaller1: entered allmulticast mode [ 30.863930][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.875522][ T65] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 30.883164][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 30.883184][ T36] audit: type=1400 audit(1776034458.940:132): avc: denied { accept } for pid=386 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.888412][ T387] process 'syz.1.29' launched './file1' with NULL argv: empty string added [ 30.891817][ T36] audit: type=1400 audit(1776034458.950:133): avc: denied { map } for pid=386 comm="syz.1.29" path="socket:[3385]" dev="sockfs" ino=3385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.921853][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.943137][ T36] audit: type=1400 audit(1776034458.950:134): avc: denied { read } for pid=386 comm="syz.1.29" path="socket:[3385]" dev="sockfs" ino=3385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.952553][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.975197][ T36] audit: type=1400 audit(1776034458.950:135): avc: denied { execute } for pid=386 comm="syz.1.29" name="file1" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.975235][ T36] audit: type=1400 audit(1776034458.970:136): avc: denied { execute_no_trans } for pid=386 comm="syz.1.29" path="/12/file1" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.984123][ T65] usb 3-1: Product: syz [ 31.032894][ T65] usb 3-1: Manufacturer: syz [ 31.037606][ T65] usb 3-1: SerialNumber: syz [ 31.042521][ T335] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.192407][ T335] usb 4-1: Using ep0 maxpacket: 16 [ 31.198929][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.210170][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.220397][ T335] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 31.233436][ T335] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 31.242524][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.251778][ T335] usb 4-1: config 0 descriptor?? [ 31.257916][ T372] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.462369][ T36] audit: type=1400 audit(1776034459.510:137): avc: denied { create } for pid=390 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.482922][ T36] audit: type=1400 audit(1776034459.520:138): avc: denied { setopt } for pid=390 comm="syz.0.30" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.493060][ T372] mmap: syz.2.22 (372) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.705854][ T65] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 31.722679][ T65] cdc_ncm 3-1:1.0: bind() failure [ 31.728715][ T36] audit: type=1400 audit(1776034459.780:139): avc: denied { read append } for pid=395 comm="syz.1.31" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.744106][ T396] input: syz0 as /devices/virtual/input/input4 [ 31.753519][ T65] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 31.766358][ T65] cdc_ncm 3-1:1.1: bind() failure [ 31.776295][ T36] audit: type=1400 audit(1776034459.780:140): avc: denied { ioctl open } for pid=395 comm="syz.1.31" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.776878][ T65] usb 3-1: USB disconnect, device number 4 [ 31.885556][ T335] usbhid 4-1:0.0: can't add hid device: -71 [ 31.891581][ T335] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 31.903999][ T335] usb 4-1: USB disconnect, device number 2 [ 32.192997][ T36] audit: type=1326 audit(1776034460.250:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=390 comm="syz.0.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a9d9c819 code=0x7fc00000 [ 32.216442][ T351] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.382742][ T351] usb 2-1: Using ep0 maxpacket: 32 [ 32.389542][ T351] usb 2-1: unable to get BOS descriptor or descriptor too short [ 32.402400][ T351] usb 2-1: config 6 has an invalid interface number: 191 but max is 1 [ 32.410685][ T351] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 32.421392][ T351] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 32.431332][ T351] usb 2-1: config 6 has no interface number 0 [ 32.437861][ T351] usb 2-1: config 6 interface 191 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 32.451431][ T351] usb 2-1: config 6 interface 191 has no altsetting 0 [ 32.464204][ T351] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 32.473386][ T351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.481627][ T351] usb 2-1: Product: syz [ 32.486346][ T351] usb 2-1: Manufacturer: syz [ 32.491022][ T351] usb 2-1: SerialNumber: syz [ 32.492431][ T335] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.663701][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.674980][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.684834][ T335] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 32.694218][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.704423][ T335] usb 1-1: config 0 descriptor?? [ 32.712451][ T351] ums-jumpshot 2-1:6.191: USB Mass Storage device detected [ 32.722145][ T351] ums-jumpshot 2-1:6.191: Quirks match for vid 05dc pid 0001: 2 [ 32.754941][ T432] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 32.764191][ T433] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 32.785559][ T351] usb 2-1: USB disconnect, device number 3 [ 33.114137][ T335] playstation 0003:054C:0BA0.0001: unknown main item tag 0x0 [ 33.126103][ T335] playstation 0003:054C:0BA0.0001: unknown main item tag 0x0 [ 33.134791][ T335] playstation 0003:054C:0BA0.0001: unknown main item tag 0x0 [ 33.142430][ T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 33.142960][ T335] playstation 0003:054C:0BA0.0001: unknown main item tag 0x0 [ 33.158108][ T335] playstation 0003:054C:0BA0.0001: unknown main item tag 0x0 [ 33.165612][ T335] playstation 0003:054C:0BA0.0001: unknown main item tag 0x0 [ 33.173123][ T335] playstation 0003:054C:0BA0.0001: unknown main item tag 0x0 [ 33.181163][ T335] playstation 0003:054C:0BA0.0001: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 33.293757][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.304953][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.315231][ T31] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 33.322926][ T335] playstation 0003:054C:0BA0.0001: Invalid byte count transferred, expected 16 got 0 [ 33.324645][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.334517][ T335] playstation 0003:054C:0BA0.0001: Failed to retrieve DualShock4 pairing info: -22 [ 33.352268][ T335] playstation 0003:054C:0BA0.0001: Failed to get MAC address from DualShock4 [ 33.356168][ T31] usb 4-1: config 0 descriptor?? [ 33.361502][ T335] playstation 0003:054C:0BA0.0001: Failed to create dualshock4. [ 33.372553][ T351] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.376095][ T335] playstation 0003:054C:0BA0.0001: probe with driver playstation failed with error -22 [ 33.531424][ T306] usb 1-1: USB disconnect, device number 6 [ 33.539338][ T351] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 33.548133][ T351] usb 3-1: config 0 has no interface number 0 [ 33.556547][ T351] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 33.565696][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.574145][ T351] usb 3-1: Product: syz [ 33.578514][ T351] usb 3-1: Manufacturer: syz [ 33.583910][ T351] usb 3-1: SerialNumber: syz [ 33.589404][ T351] usb 3-1: config 0 descriptor?? [ 33.780252][ T31] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 33.787847][ T31] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 33.795458][ T31] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 33.802953][ T31] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 33.810827][ T31] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0 [ 33.819130][ T31] hid-generic 0003:04F3:0755.0002: failed to start in urb: -90 [ 33.831664][ T31] hid-generic 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 33.962460][ T351] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 33.969357][ T351] usb 3-1: No valid video chain found. [ 33.976367][ T351] usb 3-1: USB disconnect, device number 5 [ 34.043666][ T335] usb 4-1: USB disconnect, device number 3 [ 34.402417][ T351] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.553621][ T351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.567355][ T351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.577996][ T351] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 34.589625][ T351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.600347][ T351] usb 1-1: config 0 descriptor?? [ 34.652512][ T335] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.682284][ T476] usb usb8: usbfs: process 476 (syz.1.57) did not claim interface 0 before use [ 34.812436][ T335] usb 3-1: Using ep0 maxpacket: 16 [ 34.819606][ T335] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.830213][ T335] usb 3-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 34.839433][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.847641][ T335] usb 3-1: Product: syz [ 34.852118][ T335] usb 3-1: Manufacturer: syz [ 34.857399][ T335] usb 3-1: SerialNumber: syz [ 34.922411][ T342] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 34.930555][ T480] Zero length message leads to an empty skb [ 35.008204][ T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 35.015142][ T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 35.022053][ T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 35.029005][ T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 35.035939][ T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 35.042779][ T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 35.049700][ T351] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 35.057531][ T351] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 35.072749][ T335] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 35.090412][ T335] usb 3-1: found format II with max.bitrate = 5, frame size=11 [ 35.098950][ T342] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 35.107330][ T335] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 35.113700][ T342] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 35.125992][ T335] usb 3-1: USB disconnect, device number 6 [ 35.132279][ T342] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 35.144408][ T342] usb 2-1: config 220 has no interface number 2 [ 35.151124][ T342] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 35.156067][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.165238][ T342] usb 2-1: config 220 interface 0 has no altsetting 0 [ 35.188666][ T342] usb 2-1: config 220 interface 76 has no altsetting 0 [ 35.195853][ T342] usb 2-1: config 220 interface 1 has no altsetting 0 [ 35.205261][ T342] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 35.214600][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.215756][ T351] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 35.223039][ T342] usb 2-1: Product: syz [ 35.233090][ T351] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 35.235201][ T342] usb 2-1: Manufacturer: syz [ 35.244030][ T351] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 35.247073][ T342] usb 2-1: SerialNumber: syz [ 35.263105][ T351] usb 1-1: USB disconnect, device number 7 [ 35.465209][ T342] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 35.471828][ T342] usb 2-1: No valid video chain found. [ 35.478083][ T342] usb 2-1: selecting invalid altsetting 0 [ 35.488697][ T342] usb 2-1: USB disconnect, device number 4 [ 35.765618][ T489] ======================================================= [ 35.765618][ T489] WARNING: The mand mount option has been deprecated and [ 35.765618][ T489] and is ignored by this kernel. Remove the mand [ 35.765618][ T489] option from the mount to silence this warning. [ 35.765618][ T489] ======================================================= [ 35.803260][ T489] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 35.860308][ T499] capability: warning: `syz.3.65' uses deprecated v2 capabilities in a way that may be insecure [ 35.924512][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 35.924534][ T36] audit: type=1400 audit(1776034463.980:182): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.045255][ T36] audit: type=1400 audit(1776034464.100:183): avc: denied { create } for pid=506 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 36.098804][ T36] audit: type=1400 audit(1776034464.150:184): avc: denied { create } for pid=515 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.118845][ T36] audit: type=1400 audit(1776034464.150:185): avc: denied { write } for pid=515 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.342432][ T335] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.452412][ T351] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.492421][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 36.498654][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.510123][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.520050][ T335] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 36.529553][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.539135][ T335] usb 3-1: config 0 descriptor?? [ 36.545185][ T335] hub 3-1:0.0: USB hub found [ 36.603582][ T351] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 36.612088][ T351] usb 4-1: config 1 has no interface number 0 [ 36.618289][ T351] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 36.629120][ T351] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 36.639984][ T351] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 36.652700][ T351] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 36.662047][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.670269][ T351] usb 4-1: Product: syz [ 36.674615][ T351] usb 4-1: Manufacturer: syz [ 36.680026][ T351] usb 4-1: SerialNumber: syz [ 36.686610][ T518] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 36.694186][ T518] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 36.747710][ T335] hub 3-1:0.0: 30 ports detected [ 36.753285][ T335] hub 3-1:0.0: insufficient power available to use all downstream ports [ 36.779860][ T36] audit: type=1400 audit(1776034464.830:186): avc: denied { setopt } for pid=521 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.842571][ T36] audit: type=1400 audit(1776034464.900:187): avc: denied { getopt } for pid=523 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.894374][ T36] audit: type=1400 audit(1776034464.950:188): avc: denied { setcheckreqprot } for pid=527 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.952024][ T335] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 36.958784][ T335] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 36.967593][ T335] usbhid 3-1:0.0: can't add hid device: -71 [ 36.973627][ T335] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 37.003032][ T335] usb 3-1: USB disconnect, device number 7 [ 37.122551][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.268609][ T535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.277223][ T535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.286237][ T10] usb 2-1: config 1 has an invalid interface number: 29 but max is 0 [ 37.294786][ T10] usb 2-1: config 1 has no interface number 0 [ 37.301152][ T10] usb 2-1: config 1 interface 29 has no altsetting 0 [ 37.312394][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 37.312480][ T10] usb 2-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.14 [ 37.330226][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.338757][ T10] usb 2-1: Product: syz [ 37.343077][ T10] usb 2-1: Manufacturer: syz [ 37.347823][ T10] usb 2-1: SerialNumber: syz [ 37.356195][ T36] audit: type=1400 audit(1776034465.410:189): avc: denied { block_suspend } for pid=517 comm="syz.3.73" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.462442][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 37.469264][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.477872][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.488330][ T45] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 37.498974][ T45] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 37.508100][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.516331][ T45] usb 1-1: Product: syz [ 37.520515][ T45] usb 1-1: Manufacturer: syz [ 37.525169][ T45] usb 1-1: SerialNumber: syz [ 37.546053][ T36] audit: type=1400 audit(1776034465.600:190): avc: denied { ioctl } for pid=537 comm="syz.2.81" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.558674][ T10] ums-datafab 2-1:1.29: USB Mass Storage device detected [ 37.591162][ T36] audit: type=1400 audit(1776034465.640:191): avc: denied { write } for pid=542 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.649798][ T10] usb 2-1: USB disconnect, device number 5 [ 37.736357][ T45] usb 1-1: unit 2 not found! [ 37.744161][ T45] usb 1-1: USB disconnect, device number 8 [ 37.942420][ T342] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 38.092416][ T342] usb 3-1: Using ep0 maxpacket: 32 [ 38.099724][ T342] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.110918][ T342] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 38.130191][ T342] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 38.140105][ T342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.148150][ T342] usb 3-1: Product: syz [ 38.152381][ T342] usb 3-1: Manufacturer: syz [ 38.156999][ T342] usb 3-1: SerialNumber: syz [ 38.299263][ T554] netlink: 312 bytes leftover after parsing attributes in process `syz.0.86'. [ 38.380076][ T342] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 38.401666][ T342] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 38.434746][ T342] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 38.447927][ T342] usb 3-1: USB disconnect, device number 8 [ 38.465512][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.542478][ T351] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 38.713817][ T351] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 38.733123][ T351] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 38.741011][ T351] usb 1-1: can't read configurations, error -61 [ 38.872716][ T351] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 38.932442][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.032840][ T351] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 39.042096][ T351] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 39.049979][ T351] usb 1-1: can't read configurations, error -61 [ 39.056723][ T351] usb usb1-port1: attempt power cycle [ 39.082446][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 39.088903][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.100061][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.109864][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 39.119127][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.128455][ T31] usb 2-1: config 0 descriptor?? [ 39.132402][ T335] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 39.272715][ T335] usb 3-1: device descriptor read/64, error -71 [ 39.278402][ T45] usb 4-1: USB disconnect, device number 4 [ 39.292170][ T569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.302040][ T569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.310708][ T569] fuse: Unknown parameter '00000000000000000000000ÿÿÿÿ00000000000000000000007' [ 39.412451][ T351] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 39.433294][ T351] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 39.442604][ T351] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 39.450954][ T351] usb 1-1: can't read configurations, error -61 [ 39.532443][ T335] usb 3-1: device descriptor read/64, error -71 [ 39.543731][ T31] koneplus 0003:1E7D:2D51.0004: item fetching failed at offset 3/5 [ 39.553676][ T31] koneplus 0003:1E7D:2D51.0004: parse failed [ 39.559839][ T31] koneplus 0003:1E7D:2D51.0004: probe with driver koneplus failed with error -22 [ 39.582591][ T351] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 39.603382][ T351] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 39.612749][ T351] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 39.620889][ T351] usb 1-1: can't read configurations, error -61 [ 39.628064][ T45] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 39.636211][ T351] usb usb1-port1: unable to enumerate USB device [ 39.772456][ T45] usb 4-1: device descriptor read/64, error -71 [ 39.772456][ T335] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 39.863743][ T65] usb 2-1: USB disconnect, device number 6 [ 39.912954][ T335] usb 3-1: device descriptor read/64, error -71 [ 40.022519][ T45] usb 4-1: device descriptor read/64, error -71 [ 40.152442][ T335] usb 3-1: device descriptor read/64, error -71 [ 40.262448][ T45] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 40.262603][ T335] usb usb3-port1: attempt power cycle [ 40.392575][ T45] usb 4-1: device descriptor read/64, error -71 [ 40.612433][ T335] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 40.633699][ T335] usb 3-1: device descriptor read/8, error -71 [ 40.642582][ T45] usb 4-1: device descriptor read/64, error -71 [ 40.752912][ T45] usb usb4-port1: attempt power cycle [ 40.780066][ T335] usb 3-1: device descriptor read/8, error -71 [ 40.992422][ T65] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 41.022455][ T335] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 41.043860][ T335] usb 3-1: device descriptor read/8, error -71 [ 41.092425][ T45] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 41.113574][ T45] usb 4-1: device descriptor read/8, error -71 [ 41.142409][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 41.148818][ T65] usb 2-1: config index 0 descriptor too short (expected 292, got 50) [ 41.157383][ T65] usb 2-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 41.168070][ T65] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 41.177241][ T65] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 41.186438][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.195427][ T335] usb 3-1: device descriptor read/8, error -71 [ 41.201965][ T65] usb 2-1: config 0 descriptor?? [ 41.243698][ T45] usb 4-1: device descriptor read/8, error -71 [ 41.302566][ T335] usb usb3-port1: unable to enumerate USB device [ 41.482454][ T45] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 41.503659][ T45] usb 4-1: device descriptor read/8, error -71 [ 41.633599][ T45] usb 4-1: device descriptor read/8, error -71 [ 41.692433][ T65] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 41.742542][ T45] usb usb4-port1: unable to enumerate USB device [ 41.843772][ T65] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 41.855701][ T65] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.866109][ T65] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 41.879445][ T65] usb 1-1: config 0 interface 0 has no altsetting 0 [ 41.886101][ T65] usb 1-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 41.895534][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.905311][ T65] usb 1-1: config 0 descriptor?? [ 42.302421][ T447] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 42.387117][ T594] 9pnet_virtio: no channels available for device ./cgroup/pids.max [ 42.387933][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 42.387950][ T36] audit: type=1400 audit(1776034470.440:207): avc: denied { mounton } for pid=593 comm="syz.3.99" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 42.452436][ T447] usb 3-1: Using ep0 maxpacket: 16 [ 42.458907][ T447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.470320][ T447] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.483561][ T447] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 42.492760][ T447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.501836][ T447] usb 3-1: config 0 descriptor?? [ 42.521445][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 42.528519][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 42.538190][ T65] usb 1-1: USB disconnect, device number 13 [ 42.662519][ T335] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.812408][ T335] usb 4-1: Using ep0 maxpacket: 8 [ 42.819756][ T594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.828772][ T594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.841258][ T335] usb 4-1: unable to get BOS descriptor or descriptor too short [ 42.850342][ T335] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 42.858319][ T335] usb 4-1: can't read configurations, error -71 [ 42.910169][ T592] random: crng reseeded on system resumption [ 42.985171][ T447] samsung 0003:0419:0600.0005: unknown main item tag 0x0 [ 42.992493][ T447] samsung 0003:0419:0600.0005: unknown main item tag 0x0 [ 42.999811][ T447] samsung 0003:0419:0600.0005: unknown main item tag 0x0 [ 43.006991][ T447] samsung 0003:0419:0600.0005: unknown main item tag 0x0 [ 43.014199][ T447] samsung 0003:0419:0600.0005: unknown main item tag 0x0 [ 43.021548][ T447] samsung 0003:0419:0600.0005: unknown main item tag 0x0 [ 43.029206][ T447] samsung 0003:0419:0600.0005: unexpected long global item [ 43.036871][ T447] samsung 0003:0419:0600.0005: parse failed [ 43.042868][ T447] samsung 0003:0419:0600.0005: probe with driver samsung failed with error -22 [ 43.186527][ T447] usb 3-1: USB disconnect, device number 13 [ 43.302493][ T65] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 43.401132][ T36] audit: type=1400 audit(1776034471.450:208): avc: denied { bind } for pid=598 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.420823][ T36] audit: type=1400 audit(1776034471.450:209): avc: denied { getopt } for pid=598 comm="syz.3.101" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.441066][ T36] audit: type=1400 audit(1776034471.450:210): avc: denied { ioctl } for pid=598 comm="syz.3.101" path="socket:[5317]" dev="sockfs" ino=5317 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.482414][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 43.489170][ T65] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 43.497502][ T65] usb 1-1: config 0 has no interface number 0 [ 43.504048][ T65] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 43.514506][ T65] usb 1-1: config 0 interface 196 has no altsetting 0 [ 43.522914][ T65] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 43.532067][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.540390][ T65] usb 1-1: Product: syz [ 43.544625][ T65] usb 1-1: Manufacturer: syz [ 43.549394][ T65] usb 1-1: SerialNumber: syz [ 43.555970][ T65] usb 1-1: config 0 descriptor?? [ 43.561242][ T597] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.803703][ T447] usb 2-1: USB disconnect, device number 7 [ 43.820920][ T36] audit: type=1400 audit(1776034471.870:211): avc: denied { ioctl } for pid=605 comm="syz.1.104" path="socket:[6289]" dev="sockfs" ino=6289 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.848814][ T36] audit: type=1400 audit(1776034471.880:212): avc: denied { read } for pid=605 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.873943][ T36] audit: type=1400 audit(1776034471.930:213): avc: denied { mount } for pid=608 comm="syz.1.105" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 43.897498][ T36] audit: type=1400 audit(1776034471.960:214): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 43.935727][ T597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.944407][ T597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.950598][ T36] audit: type=1400 audit(1776034472.000:215): avc: denied { read write } for pid=612 comm="syz.1.107" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.977125][ T10] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 43.984786][ T335] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 43.993576][ T65] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 44.001246][ T65] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 44.002453][ T36] audit: type=1400 audit(1776034472.000:216): avc: denied { open } for pid=612 comm="syz.1.107" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.026493][ T65] usb 1-1: USB disconnect, device number 14 [ 44.142424][ T335] usb 4-1: Using ep0 maxpacket: 8 [ 44.148825][ T335] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.157379][ T335] usb 4-1: config 1 has an invalid descriptor of length 113, skipping remainder of the config [ 44.167922][ T335] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 44.177059][ T10] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 44.188183][ T335] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 44.199178][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.206562][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 44.215787][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.225426][ T335] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 44.235098][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.243334][ T10] usb 3-1: config 0 descriptor?? [ 44.248481][ T335] usb 4-1: Product: syz [ 44.252843][ T335] usb 4-1: Manufacturer: syz [ 44.253058][ T603] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 44.257752][ T335] usb 4-1: SerialNumber: syz [ 44.473215][ T335] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.487825][ T335] usb 4-1: USB disconnect, device number 10 [ 44.512041][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.580355][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.589457][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.598646][ T623] overlayfs: workdir and upperdir must reside under the same mount [ 44.659408][ T623] incfs_lookup_dentry err:-111 [ 44.664382][ T623] incfs: Can't find or create .index dir in ./file0 [ 44.671082][ T623] incfs: mount failed -111 [ 44.882430][ T447] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 45.008803][ T655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.017869][ T655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.030494][ T655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.032410][ T447] usb 1-1: Using ep0 maxpacket: 8 [ 45.039206][ T655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.046588][ T447] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.065265][ T447] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 45.074991][ T447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.084963][ T447] usb 1-1: config 0 descriptor?? [ 45.242400][ T351] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 45.394191][ T351] usb 4-1: unable to get BOS descriptor or descriptor too short [ 45.402899][ T351] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.413221][ T351] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 45.422245][ T351] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 45.434944][ T351] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 45.444398][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.452869][ T351] usb 4-1: Product: syz [ 45.457265][ T351] usb 4-1: Manufacturer: syz [ 45.462077][ T351] usb 4-1: SerialNumber: syz [ 45.671662][ T351] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 45.679718][ T351] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 4 [ 45.687064][ T351] usb 4-1: 1:1 : unsupported format bits 0x19050606 [ 45.692384][ T627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=627 comm=syz.0.112 [ 45.693772][ T351] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 45.709714][ T627] netlink: 'syz.0.112': attribute type 11 has an invalid length. [ 45.716503][ T351] usb 4-1: unit 2 not found! [ 45.723933][ T627] netlink: 44 bytes leftover after parsing attributes in process `syz.0.112'. [ 45.728104][ T351] usb 4-1: unit 0 not found! [ 45.750987][ T627] kvm: user requested TSC rate below hardware speed [ 45.756304][ T351] usb 4-1: USB disconnect, device number 11 [ 45.802743][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.824087][ T447] usbhid 1-1:0.0: can't add hid device: -71 [ 45.831090][ T447] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 45.842208][ T447] usb 1-1: USB disconnect, device number 15 [ 45.924103][ T665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 46.185352][ T672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=672 comm=syz.3.128 [ 46.602422][ T447] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 46.717722][ T678] tipc: Started in network mode [ 46.722826][ T678] tipc: Node identity ac14140f, cluster identity 4711 [ 46.729868][ T678] tipc: New replicast peer: 255.255.255.255 [ 46.736487][ T678] tipc: Enabled bearer , priority 10 [ 46.743421][ T678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.131'. [ 46.763291][ T447] usb 1-1: no configurations [ 46.765535][ T10] usb 3-1: string descriptor 0 read error: -71 [ 46.768200][ T447] usb 1-1: can't read configurations, error -22 [ 46.782610][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 46.788620][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 46.821710][ T10] usb 3-1: USB disconnect, device number 14 [ 46.912463][ T447] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 46.986544][ T694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.995429][ T694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.063001][ T447] usb 1-1: no configurations [ 47.067918][ T447] usb 1-1: can't read configurations, error -22 [ 47.074695][ T447] usb usb1-port1: attempt power cycle [ 47.192410][ T65] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 47.212403][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 47.342454][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 47.349462][ T65] usb 4-1: config index 0 descriptor too short (expected 1269, got 202) [ 47.358331][ T65] usb 4-1: config 222 has too many interfaces: 247, using maximum allowed: 32 [ 47.367366][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 47.372715][ T65] usb 4-1: config 222 has an invalid descriptor of length 81, skipping remainder of the config [ 47.383211][ T65] usb 4-1: config 222 has 1 interface, different from the descriptor's value: 247 [ 47.394072][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 47.401157][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 47.401177][ T36] audit: type=1400 audit(1776034475.450:234): avc: denied { mount } for pid=695 comm="syz.1.138" name="/" dev="configfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 47.402429][ T65] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.432501][ T447] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 47.440802][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.456867][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.467286][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.473202][ T447] usb 1-1: no configurations [ 47.476556][ T65] usb 4-1: Product: syz [ 47.482154][ T447] usb 1-1: can't read configurations, error -22 [ 47.486079][ T65] usb 4-1: Manufacturer: syz [ 47.496887][ T65] usb 4-1: SerialNumber: syz [ 47.502271][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 47.511489][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.520907][ T10] usb 3-1: Product: syz [ 47.525209][ T10] usb 3-1: Manufacturer: syz [ 47.530120][ T10] usb 3-1: SerialNumber: syz [ 47.612518][ T447] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 47.633165][ T447] usb 1-1: no configurations [ 47.637847][ T447] usb 1-1: can't read configurations, error -22 [ 47.644309][ T447] usb usb1-port1: unable to enumerate USB device [ 47.739089][ T700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.747975][ T65] usb 4-1: cannot find UAC_HEADER [ 47.748524][ T700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.763869][ T65] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -22 [ 47.765253][ T687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=687 comm=syz.2.135 [ 47.775530][ T65] usb 4-1: USB disconnect, device number 12 [ 47.799024][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.818018][ T10] usb 3-1: 0:1 : does not exist [ 47.825895][ T10] usb 3-1: USB disconnect, device number 15 [ 47.839958][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.855955][ T335] tipc: Node number set to 2886997007 [ 48.337415][ T36] audit: type=1400 audit(1776034476.390:235): avc: denied { map } for pid=705 comm="syz.2.142" path="/28/file0" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 48.369048][ T36] audit: type=1400 audit(1776034476.420:236): avc: denied { setopt } for pid=705 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.570483][ T718] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 48.578289][ T719] netlink: 'syz.1.147': attribute type 3 has an invalid length. [ 48.632499][ T447] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 48.640221][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 48.772446][ T447] usb 4-1: device descriptor read/64, error -71 [ 48.793633][ T45] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 48.805080][ T45] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.815061][ T45] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 48.828060][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 48.834708][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 48.844122][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.853106][ T45] usb 3-1: config 0 descriptor?? [ 49.012463][ T447] usb 4-1: device descriptor read/64, error -71 [ 49.121574][ T726] overlayfs: failed to resolve 'fowner=00000000000000000000': -2 [ 49.141186][ T36] audit: type=1400 audit(1776034477.190:237): avc: denied { connect } for pid=728 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.161082][ T36] audit: type=1400 audit(1776034477.190:238): avc: denied { write } for pid=728 comm="syz.1.151" laddr=fe80::5ce9:c5ff:fe94:87a7 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.205003][ T737] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.217521][ T36] audit: type=1400 audit(1776034477.270:239): avc: denied { bind } for pid=736 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.252436][ T447] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 49.263169][ T714] syzkaller1: entered promiscuous mode [ 49.268764][ T714] syzkaller1: entered allmulticast mode [ 49.277014][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.284319][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.291588][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.299109][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.306333][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.313528][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.320669][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.327891][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.335428][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.342788][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.350235][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.357533][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.365091][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.372377][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.379988][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.387318][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.394712][ T447] usb 4-1: device descriptor read/64, error -71 [ 49.401047][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.408271][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.415571][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.423387][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.431162][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.435026][ T741] netlink: 96 bytes leftover after parsing attributes in process `syz.0.154'. [ 49.438521][ T36] audit: type=1400 audit(1776034477.480:240): avc: denied { connect } for pid=740 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.466976][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.466983][ T36] audit: type=1400 audit(1776034477.480:241): avc: denied { ioctl } for pid=740 comm="syz.0.154" path="socket:[5711]" dev="sockfs" ino=5711 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.468706][ T743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 49.474333][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.500793][ T743] bridge_slave_1: left allmulticast mode [ 49.509022][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.516279][ T743] bridge_slave_1: left promiscuous mode [ 49.521966][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.529563][ T743] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.536907][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.557293][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.557431][ T743] bridge_slave_0: left allmulticast mode [ 49.564578][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.570840][ T743] bridge_slave_0: left promiscuous mode [ 49.578254][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.584115][ T743] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.590839][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.605859][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.613134][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.620466][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.627854][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.635078][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.643169][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.650510][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.658090][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.665311][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.672887][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.680164][ T45] logitech 0003:046D:C216.0006: unknown main item tag 0x0 [ 49.688289][ T45] logitech 0003:046D:C216.0006: hidraw0: USB HID vff.fc Device [HID 046d:c216] on usb-dummy_hcd.2-1/input0 [ 49.703125][ T447] usb 4-1: device descriptor read/64, error -71 [ 49.783068][ T335] usb 3-1: USB disconnect, device number 16 [ 49.812507][ T447] usb usb4-port1: attempt power cycle [ 50.082536][ T65] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 50.152471][ T447] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 50.173470][ T447] usb 4-1: device descriptor read/8, error -71 [ 50.232867][ T65] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 50.246913][ T65] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 50.256243][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.265109][ T65] usb 1-1: config 0 descriptor?? [ 50.271113][ T65] usb 1-1: bad CDC descriptors [ 50.307778][ T447] usb 4-1: device descriptor read/8, error -71 [ 50.324851][ T36] audit: type=1400 audit(1776034478.380:242): avc: denied { mounton } for pid=757 comm="syz.2.159" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.562431][ T447] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 50.583648][ T447] usb 4-1: device descriptor read/8, error -71 [ 50.602407][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 50.625326][ T36] audit: type=1400 audit(1776034478.680:243): avc: denied { getopt } for pid=761 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.645498][ T762] overlayfs: failed to resolve './file1': -2 [ 50.713605][ T447] usb 4-1: device descriptor read/8, error -71 [ 50.753641][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.765283][ T45] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 50.776678][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.786111][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.794339][ T45] usb 3-1: Product: syz [ 50.798524][ T45] usb 3-1: Manufacturer: syz [ 50.803194][ T45] usb 3-1: SerialNumber: syz [ 50.822546][ T447] usb usb4-port1: unable to enumerate USB device [ 51.101537][ T45] cdc_ncm 3-1:1.0: bind() failure [ 51.109114][ T45] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 51.116231][ T45] cdc_ncm 3-1:1.1: bind() failure [ 51.124833][ T45] usb 3-1: USB disconnect, device number 17 [ 51.592439][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 51.743890][ T45] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 51.752307][ T45] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 51.752571][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 51.763283][ T45] usb 3-1: config 0 has no interface number 0 [ 51.779257][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 51.788608][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.796849][ T45] usb 3-1: Product: syz [ 51.801063][ T45] usb 3-1: Manufacturer: syz [ 51.805932][ T45] usb 3-1: SerialNumber: syz [ 51.811467][ T45] usb 3-1: config 0 descriptor?? [ 51.914330][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 51.923623][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 51.935326][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 251, changing to 7 [ 51.948263][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 51.957532][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.965763][ T10] usb 4-1: Product: syz [ 51.970184][ T10] usb 4-1: Manufacturer: syz [ 51.974844][ T10] usb 4-1: SerialNumber: syz [ 52.220485][ T45] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 52.226947][ T45] usb 3-1: No valid video chain found. [ 52.306590][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 52.313596][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 52.341087][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 52.353005][ T10] usb 4-1: USB disconnect, device number 17 [ 52.366545][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.423938][ T45] usb 3-1: USB disconnect, device number 18 [ 52.821440][ T447] usb 1-1: USB disconnect, device number 20 [ 52.861746][ T801] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.953297][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 52.953314][ T36] audit: type=1400 audit(1776034481.010:245): avc: denied { setopt } for pid=807 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.995034][ T811] random: crng reseeded on system resumption [ 53.001305][ T36] audit: type=1400 audit(1776034481.050:246): avc: denied { write } for pid=810 comm="syz.0.177" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.067378][ T36] audit: type=1400 audit(1776034481.090:247): avc: denied { create } for pid=812 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.088102][ T36] audit: type=1400 audit(1776034481.090:248): avc: denied { sys_admin } for pid=812 comm="syz.2.178" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 53.312423][ T447] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 53.352426][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 53.452392][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 53.462382][ T447] usb 3-1: Using ep0 maxpacket: 32 [ 53.468792][ T447] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.480026][ T447] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.493221][ T447] usb 3-1: config 0 interface 0 has no altsetting 0 [ 53.499943][ T447] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 53.509735][ T447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.518577][ T447] usb 3-1: config 0 descriptor?? [ 53.532411][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 53.539221][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.547929][ T10] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 53.556279][ T10] usb 1-1: config 0 has no interface number 0 [ 53.562645][ T10] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 53.574422][ T10] usb 1-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 53.586781][ T10] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 53.598695][ T10] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 53.609314][ T10] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 53.619635][ T10] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 53.622409][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 53.630069][ T10] usb 1-1: config 0 interface 122 has no altsetting 0 [ 53.631751][ T10] usb 1-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 53.636767][ T45] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.642834][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.652365][ T45] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.663886][ T10] usb 1-1: Product: syz [ 53.671971][ T45] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 53.681291][ T10] usb 1-1: Manufacturer: syz [ 53.691694][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 53.698483][ T10] usb 1-1: SerialNumber: syz [ 53.703671][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 53.716908][ T10] usb 1-1: config 0 descriptor?? [ 53.724662][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.732459][ T820] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 53.744664][ T820] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 53.757543][ T45] usb 4-1: config 0 descriptor?? [ 53.949700][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 53.957359][ T10] pl2303 1-1:0.122: pl2303 converter detected [ 53.959973][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 53.965745][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 53.972865][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 53.982821][ T10] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 53.986774][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.002049][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.002580][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 54.009642][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.025429][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.027871][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 54.032738][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.048133][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.050997][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 54.055862][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.071371][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.071559][ T10] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 54.078883][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.094231][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.101441][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.102626][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 54.109236][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.122543][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 54.124608][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.140402][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.142558][ T10] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 54.147771][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.162561][ T10] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 54.163631][ T818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.171450][ T10] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 54.183460][ T822] 8021q: VLANs not supported on ip_vti0 [ 54.192695][ T10] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 54.203986][ T10] usb 1-1: USB disconnect, device number 21 [ 54.211499][ T10] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 54.218707][ T818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.220180][ T10] pl2303 1-1:0.122: device disconnected [ 54.246265][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.259893][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.267199][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.279805][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.287273][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.294626][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.301760][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.308971][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.316098][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.323289][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.330355][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.337609][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.344788][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.352089][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.359359][ T447] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 54.366911][ T447] uclogic 0003:5543:0005.0007: No inputs registered, leaving [ 54.374980][ T447] uclogic 0003:5543:0005.0007: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0 [ 54.390155][ T447] usb 3-1: USB disconnect, device number 19 [ 54.441044][ T45] usb 4-1: USB disconnect, device number 18 [ 54.502024][ T36] audit: type=1400 audit(1776034482.550:249): avc: denied { setopt } for pid=832 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.502680][ T833] netlink: 'syz.0.184': attribute type 2 has an invalid length. [ 54.542446][ T833] pim6reg1: entered promiscuous mode [ 54.548024][ T833] pim6reg1: entered allmulticast mode [ 54.688074][ T839] syzkaller1: entered promiscuous mode [ 54.693728][ T839] syzkaller1: entered allmulticast mode [ 54.745774][ T841] syzkaller1: entered promiscuous mode [ 54.751375][ T841] syzkaller1: entered allmulticast mode [ 54.758150][ T841] FAULT_INJECTION: forcing a failure. [ 54.758150][ T841] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.777545][ T841] CPU: 0 UID: 0 PID: 841 Comm: syz.0.188 Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 54.777584][ T841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 54.777597][ T841] Call Trace: [ 54.777603][ T841] [ 54.777611][ T841] __dump_stack+0x21/0x30 [ 54.777645][ T841] dump_stack_lvl+0x140/0x1c0 [ 54.777668][ T841] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.777693][ T841] ? kasan_save_alloc_info+0x40/0x50 [ 54.777721][ T841] dump_stack+0x19/0x20 [ 54.777756][ T841] should_fail_ex+0x3d7/0x530 [ 54.777783][ T841] should_fail+0xf/0x20 [ 54.777805][ T841] should_fail_usercopy+0x1e/0x30 [ 54.777832][ T841] _copy_from_iter+0x1a9/0x1510 [ 54.777864][ T841] ? __cfi__copy_from_iter+0x10/0x10 [ 54.777895][ T841] tun_get_user+0x235/0x36c0 [ 54.777919][ T841] ? __kernel_text_address+0x11/0x40 [ 54.777945][ T841] ? arch_stack_walk+0x10a/0x170 [ 54.777976][ T841] ? _parse_integer_limit+0x195/0x1e0 [ 54.777999][ T841] ? ptr_ring_consume+0x430/0x430 [ 54.778020][ T841] ? _parse_integer+0x2e/0x40 [ 54.778042][ T841] ? kstrtoull+0x13b/0x1e0 [ 54.778064][ T841] ? __kasan_check_write+0x18/0x20 [ 54.778091][ T841] ? ref_tracker_alloc+0x30d/0x590 [ 54.778119][ T841] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 54.778143][ T841] ? selinux_file_permission+0x318/0xb60 [ 54.778170][ T841] ? __kasan_check_write+0x18/0x20 [ 54.778194][ T841] tun_chr_write_iter+0x1fc/0x310 [ 54.778216][ T841] vfs_write+0x764/0xf90 [ 54.778242][ T841] ? __cfi_vfs_write+0x10/0x10 [ 54.778268][ T841] ksys_write+0x145/0x260 [ 54.778293][ T841] ? __cfi_ksys_write+0x10/0x10 [ 54.778317][ T841] ? __kasan_check_read+0x15/0x20 [ 54.778340][ T841] __x64_sys_write+0x7f/0x90 [ 54.778364][ T841] x64_sys_call+0x271c/0x2ee0 [ 54.778391][ T841] do_syscall_64+0x57/0xf0 [ 54.778418][ T841] ? clear_bhb_loop+0x50/0xa0 [ 54.778437][ T841] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.778465][ T841] RIP: 0033:0x7f52a9d9c819 [ 54.778484][ T841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.778501][ T841] RSP: 002b:00007f52aacab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.778525][ T841] RAX: ffffffffffffffda RBX: 00007f52aa015fa0 RCX: 00007f52a9d9c819 [ 54.778541][ T841] RDX: 000000000000004a RSI: 0000200000000080 RDI: 0000000000000003 [ 54.778557][ T841] RBP: 00007f52aacab090 R08: 0000000000000000 R09: 0000000000000000 [ 54.778570][ T841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.778584][ T841] R13: 00007f52aa016038 R14: 00007f52aa015fa0 R15: 00007fffc10d4638 [ 54.778602][ T841] [ 55.119349][ T36] audit: type=1400 audit(1776034483.160:250): avc: denied { connect } for pid=858 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.157215][ T36] audit: type=1400 audit(1776034483.200:251): avc: denied { create } for pid=867 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 55.179192][ T36] audit: type=1400 audit(1776034483.200:252): avc: denied { write } for pid=867 comm="syz.0.197" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.202552][ T36] audit: type=1400 audit(1776034483.220:253): avc: denied { read } for pid=870 comm="syz.1.198" name="file2" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.224845][ T36] audit: type=1400 audit(1776034483.220:254): avc: denied { open } for pid=870 comm="syz.1.198" path="/71/file2" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.345384][ T342] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 55.503717][ T342] usb 3-1: Using ep0 maxpacket: 8 [ 55.510625][ T342] usb 3-1: unable to get BOS descriptor or descriptor too short [ 55.519472][ T342] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.529828][ T342] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 55.545149][ T342] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 55.556033][ T342] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 55.562476][ T447] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 55.575645][ T342] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 55.591760][ T342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.600068][ T342] usb 3-1: Product: syz [ 55.604454][ T342] usb 3-1: Manufacturer: syz [ 55.609171][ T342] usb 3-1: SerialNumber: syz [ 55.671799][ T919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.722462][ T447] usb 4-1: Using ep0 maxpacket: 16 [ 55.730275][ T447] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 55.739583][ T447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.747760][ T447] usb 4-1: Product: syz [ 55.752016][ T447] usb 4-1: Manufacturer: syz [ 55.757037][ T447] usb 4-1: SerialNumber: syz [ 55.825876][ T342] usb 3-1: USB disconnect, device number 20 [ 55.968225][ T447] usb 4-1: MIDIStreaming interface descriptor not found [ 55.979824][ T447] usb 4-1: USB disconnect, device number 19 [ 56.015472][ T930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 56.024529][ T931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 56.034200][ T930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=930 comm=syz.1.217 [ 56.052413][ T351] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 56.202475][ T351] usb 1-1: Using ep0 maxpacket: 32 [ 56.209301][ T351] usb 1-1: unable to get BOS descriptor or descriptor too short [ 56.217896][ T351] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 56.231062][ T351] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 56.241082][ T351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.249128][ T351] usb 1-1: Product: syz [ 56.253506][ T351] usb 1-1: Manufacturer: syz [ 56.258210][ T351] usb 1-1: SerialNumber: syz [ 56.479659][ T351] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 56.483237][ T937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27425 sclass=netlink_route_socket pid=937 comm=syz.2.220 [ 56.493062][ T941] cgroup: Unknown subsys name 'measure' [ 56.506621][ T351] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 56.514812][ T351] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 56.529145][ T351] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 56.537035][ T351] usb 1-1: 3:0: cannot get min/max values for control 11 (id 3) [ 56.552021][ T351] usb 1-1: USB disconnect, device number 22 [ 56.569659][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.687224][ T955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.696264][ T955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.706151][ T956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.714911][ T956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.724402][ T956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.733010][ T956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.795779][ T958] tipc: Enabling not permitted [ 56.801607][ T958] tipc: Enabling of bearer rejected, failed to enable media [ 56.932424][ T306] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 57.062455][ T306] usb 3-1: device descriptor read/64, error -71 [ 57.302427][ T306] usb 3-1: device descriptor read/64, error -71 [ 57.493112][ T1005] overlayfs: failed to clone upperpath [ 57.500205][ T1005] overlayfs: unescaped trailing colons in lowerdir mount option. [ 57.542436][ T306] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 57.632440][ T351] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 57.672437][ T306] usb 3-1: device descriptor read/64, error -71 [ 57.782483][ T351] usb 4-1: Using ep0 maxpacket: 16 [ 57.789272][ T351] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 57.797857][ T351] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.808000][ T351] usb 4-1: config 0 has no interface number 0 [ 57.816119][ T351] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 57.825328][ T351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.833648][ T351] usb 4-1: Product: syz [ 57.838088][ T351] usb 4-1: Manufacturer: syz [ 57.842766][ T351] usb 4-1: SerialNumber: syz [ 57.848307][ T351] usb 4-1: config 0 descriptor?? [ 57.854850][ T351] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 57.861838][ T351] usb 4-1: No valid video chain found. [ 57.912428][ T306] usb 3-1: device descriptor read/64, error -71 [ 58.019775][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 58.019799][ T36] audit: type=1400 audit(1776034486.070:265): avc: denied { setopt } for pid=1020 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.045631][ T36] audit: type=1400 audit(1776034486.070:266): avc: denied { write } for pid=1020 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.045741][ T306] usb usb3-port1: attempt power cycle [ 58.412415][ T306] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 58.434947][ T306] usb 3-1: device descriptor read/8, error -71 [ 58.568341][ T1029] overlayfs: failed to clone lowerpath [ 58.575103][ T306] usb 3-1: device descriptor read/8, error -71 [ 58.575514][ T1030] overlayfs: failed to resolve './file1': -2 [ 58.587521][ T36] audit: type=1400 audit(1776034486.630:267): avc: denied { watch } for pid=1028 comm="syz.1.249" path="/103" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.626827][ T1033] overlayfs: failed to clone upperpath [ 58.633868][ T36] audit: type=1400 audit(1776034486.690:268): avc: denied { ioctl } for pid=1032 comm="syz.1.250" path="socket:[7559]" dev="sockfs" ino=7559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.812426][ T306] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 58.833534][ T306] usb 3-1: device descriptor read/8, error -71 [ 58.912405][ T447] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 58.963535][ T306] usb 3-1: device descriptor read/8, error -71 [ 59.072391][ T447] usb 1-1: Using ep0 maxpacket: 8 [ 59.077813][ T306] usb usb3-port1: unable to enumerate USB device [ 59.087052][ T447] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.097747][ T447] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 59.107106][ T447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.116842][ T447] usb 1-1: config 0 descriptor?? [ 59.184772][ T36] audit: type=1400 audit(1776034487.240:269): avc: denied { create } for pid=1038 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.326972][ T1037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.337844][ T1037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.348613][ T447] usb 1-1: USB disconnect, device number 23 [ 59.744144][ T1047] incfs: Options parsing error. -22 [ 59.749994][ T1047] incfs: mount failed -22 [ 59.904606][ T36] audit: type=1400 audit(1776034487.960:270): avc: denied { create } for pid=1049 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 60.176218][ T36] audit: type=1400 audit(1776034488.230:271): avc: denied { getattr } for pid=1057 comm="syz.0.260" name="/" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.238384][ T46] tipc: Subscription rejected, illegal request [ 60.242464][ T36] audit: type=1400 audit(1776034488.290:272): avc: denied { connect } for pid=1061 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.279543][ T36] audit: type=1400 audit(1776034488.300:273): avc: denied { read } for pid=1061 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.327777][ T1066] syzkaller1: entered promiscuous mode [ 60.352369][ T1066] syzkaller1: entered allmulticast mode [ 60.502425][ T342] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 60.524038][ T351] usb 4-1: USB disconnect, device number 20 [ 60.672376][ T342] usb 1-1: Using ep0 maxpacket: 16 [ 60.694476][ T342] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 60.703512][ T342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.712503][ T447] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 60.722397][ T342] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.733174][ T342] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.752396][ T342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.760451][ T342] usb 1-1: Product: syz [ 60.761662][ T1080] syzkaller1: entered promiscuous mode [ 60.765587][ T342] usb 1-1: Manufacturer: syz [ 60.772135][ T1080] syzkaller1: entered allmulticast mode [ 60.782369][ T342] usb 1-1: SerialNumber: syz [ 60.875505][ T447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 60.890959][ T447] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 60.901255][ T447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 60.911600][ T447] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 60.923631][ T447] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 60.938920][ T447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.955419][ T447] usb 3-1: Product: syz [ 60.962407][ T447] usb 3-1: Manufacturer: syz [ 60.969991][ T447] usb 3-1: SerialNumber: syz [ 60.981088][ T447] usb 3-1: config 0 descriptor?? [ 60.989463][ T447] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 61.189334][ T342] usb 1-1: 0:2 : does not exist [ 61.262668][ T306] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 61.271825][ T447] scsi host1: usb-storage 3-1:0.0 [ 61.279876][ T447] usb 3-1: USB disconnect, device number 25 [ 61.413978][ T306] usb 4-1: unable to get BOS descriptor or descriptor too short [ 61.424227][ T306] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 61.433391][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.441585][ T306] usb 4-1: Product: syz [ 61.445916][ T306] usb 4-1: Manufacturer: syz [ 61.450686][ T306] usb 4-1: SerialNumber: syz [ 62.083841][ T1111] 9pnet_fd: Insufficient options for proto=fd [ 62.109775][ T36] audit: type=1400 audit(1776034490.160:274): avc: denied { name_bind } for pid=1115 comm="syz.1.281" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 62.132389][ T65] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 62.152259][ T1123] veth0: entered promiscuous mode [ 62.159773][ T1123] overlayfs: failed to clone upperpath [ 62.166894][ T1123] veth0: left promiscuous mode [ 62.199786][ T342] usb 1-1: USB disconnect, device number 24 [ 62.209050][ T306] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 62.222545][ T306] usb 4-1: USB disconnect, device number 21 [ 62.258919][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 62.282381][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 62.295641][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 62.305957][ T65] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 62.315078][ T65] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 62.335525][ T65] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 62.353958][ T65] usb 3-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 62.366697][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.374985][ T65] usb 3-1: Product: syz [ 62.379492][ T65] usb 3-1: Manufacturer: syz [ 62.384713][ T65] usb 3-1: SerialNumber: syz [ 62.679103][ T1107] kvm: pic: non byte write [ 62.687099][ T1107] syzkaller1: entered promiscuous mode [ 62.692733][ T1107] syzkaller1: entered allmulticast mode [ 62.742452][ T306] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 62.760152][ T65] usb 3-1: USB disconnect, device number 26 [ 62.872433][ T306] usb 4-1: device descriptor read/64, error -71 [ 63.112401][ T306] usb 4-1: device descriptor read/64, error -71 [ 63.352390][ T306] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 63.396417][ T1149] syzkaller1: entered promiscuous mode [ 63.402173][ T1149] syzkaller1: entered allmulticast mode [ 63.482500][ T306] usb 4-1: device descriptor read/64, error -71 [ 63.556318][ T1155] syz.2.294: attempt to access beyond end of device [ 63.556318][ T1155] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 63.569305][ T1155] FAT-fs (loop2): unable to read boot sector [ 63.624933][ T1159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 63.722439][ T306] usb 4-1: device descriptor read/64, error -71 [ 63.733783][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 63.733802][ T36] audit: type=1400 audit(1776034491.790:276): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 63.774842][ T1163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 63.822440][ T351] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 63.832605][ T306] usb usb4-port1: attempt power cycle [ 63.952393][ T351] usb 3-1: device descriptor read/64, error -71 [ 64.032441][ T45] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 64.172404][ T306] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 64.184241][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 64.192612][ T351] usb 3-1: device descriptor read/64, error -71 [ 64.199473][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 172, changing to 4 [ 64.210669][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 64.222259][ T306] usb 4-1: device descriptor read/8, error -71 [ 64.230072][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.239414][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.248144][ T45] usb 1-1: Product: syz [ 64.252390][ T45] usb 1-1: Manufacturer: syz [ 64.256996][ T45] usb 1-1: SerialNumber: syz [ 64.353772][ T306] usb 4-1: device descriptor read/8, error -71 [ 64.432388][ T351] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 64.519333][ T1168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.528227][ T1168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.572390][ T351] usb 3-1: device descriptor read/64, error -71 [ 64.602391][ T306] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 64.623640][ T306] usb 4-1: device descriptor read/8, error -71 [ 64.753440][ T306] usb 4-1: device descriptor read/8, error -71 [ 64.812390][ T351] usb 3-1: device descriptor read/64, error -71 [ 64.862694][ T306] usb usb4-port1: unable to enumerate USB device [ 64.922525][ T351] usb usb3-port1: attempt power cycle [ 65.262399][ T351] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 65.283422][ T351] usb 3-1: device descriptor read/8, error -71 [ 65.413489][ T351] usb 3-1: device descriptor read/8, error -71 [ 65.652463][ T351] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 65.673571][ T351] usb 3-1: device descriptor read/8, error -71 [ 65.803474][ T351] usb 3-1: device descriptor read/8, error -71 [ 65.865984][ T1176] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 65.902526][ T306] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 65.912764][ T351] usb usb3-port1: unable to enumerate USB device [ 66.052395][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 66.058907][ T306] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 66.067400][ T306] usb 4-1: config 0 has no interface number 0 [ 66.073744][ T306] usb 4-1: config 0 interface 184 has no altsetting 0 [ 66.082367][ T306] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 66.091737][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.099793][ T306] usb 4-1: Product: syz [ 66.104009][ T306] usb 4-1: Manufacturer: syz [ 66.108656][ T306] usb 4-1: SerialNumber: syz [ 66.114303][ T306] usb 4-1: config 0 descriptor?? [ 66.120183][ T306] smsc75xx v1.0.0 [ 66.505366][ T36] audit: type=1400 audit(1776034494.560:277): avc: denied { write } for pid=1184 comm="syz.1.304" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.591683][ T1199] overlayfs: failed to clone upperpath [ 66.676866][ T1206] syzkaller1: entered promiscuous mode [ 66.682580][ T1206] syzkaller1: entered allmulticast mode [ 66.731399][ T36] audit: type=1400 audit(1776034494.780:278): avc: denied { set_context_mgr } for pid=1169 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 66.731772][ T1170] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 66.754292][ T1170] rust_binder: Read failure Err(EFAULT) in pid:179 [ 66.769885][ T36] audit: type=1400 audit(1776034494.820:279): avc: denied { write } for pid=1169 comm="syz.3.299" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.770373][ T1170] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 66.789358][ T36] audit: type=1400 audit(1776034494.820:280): avc: denied { map } for pid=1169 comm="syz.3.299" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.803257][ T1170] rust_binder: Read failure Err(EFAULT) in pid:179 [ 66.839042][ T1209] rust_binder: Error while translating object. [ 66.841686][ T36] audit: type=1400 audit(1776034494.890:281): avc: denied { call } for pid=1169 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 66.845885][ C0] BUG: TASK stack guard page was hit at ffffc900102dff78 (stack is ffffc900102e0000..ffffc900102e8000) [ 66.845913][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 66.845932][ C0] CPU: 0 UID: 0 PID: 1209 Comm: syz.3.299 Not tainted syzkaller #0 c4f271c1f416af74072d306bc5476bac4a1aadeb [ 66.845955][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 66.845965][ C0] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 66.845995][ C0] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 66.846009][ C0] RSP: 0018:ffffc900102dff80 EFLAGS: 00010a02 [ 66.846026][ C0] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff9200205c02c [ 66.846039][ C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 66.846051][ C0] RBP: ffffc900102e0250 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc [ 66.846063][ C0] R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: dffffc0000000000 [ 66.846076][ C0] R13: dffffc0000000000 R14: 1ffff9200205c050 R15: ffffc900102e02f0 [ 66.846089][ C0] FS: 00007fecd2feb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 66.846104][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.846117][ C0] CR2: ffffc900102dff78 CR3: 0000000120898000 CR4: 00000000003526b0 [ 66.846135][ C0] Call Trace: [ 66.846143][ C0] [ 66.846153][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 66.846174][ C0] ? static_key_count+0x45/0x70 [ 66.846192][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 66.846214][ C0] ? __cfi_gfp_zone+0x10/0x10 [ 66.846238][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 66.846257][ C0] ? unwind_next_frame+0x3c1/0x750 [ 66.846276][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 66.846295][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 66.846319][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 66.846338][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 66.846360][ C0] ? stack_depot_save_flags+0x672/0x800 [ 66.846384][ C0] ? stack_depot_save+0x12/0x20 [ 66.846403][ C0] ? save_stack+0x133/0x240 [ 66.846421][ C0] ? free_contig_range+0x260/0x260 [ 66.846441][ C0] ? __reset_page_owner+0x450/0x450 [ 66.846457][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 66.846474][ C0] ? prep_new_page+0x20/0x120 [ 66.846490][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 66.846509][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 66.846527][ C0] ? stack_depot_save_flags+0x672/0x800 [ 66.846547][ C0] ? kasan_save_track+0x4f/0x80 [ 66.846571][ C0] ? kasan_save_free_info+0x4a/0x60 [ 66.846590][ C0] ? __kasan_slab_free+0x5f/0x80 [ 66.846606][ C0] ? kfree+0x158/0x440 [ 66.846625][ C0] ? krealloc_noprof+0xfa/0x130 [ 66.846654][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 66.846708][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 66.846735][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 66.846765][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 66.846796][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 66.846823][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 66.846845][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 66.846866][ C0] ? sched_clock_noinstr+0xd/0x30 [ 66.846885][ C0] ? __set_page_owner+0x8e/0x600 [ 66.846901][ C0] ? __kasan_check_read+0x15/0x20 [ 66.846920][ C0] ? __zone_watermark_ok+0x134/0x630 [ 66.846939][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 66.846956][ C0] ? __cfi___zone_watermark_ok+0x10/0x10 [ 66.846974][ C0] ? kasan_unpoison+0x4a/0x70 [ 66.846994][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 66.847012][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 66.847029][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 66.847050][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 66.847073][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 66.847096][ C0] ? prep_new_page+0x20/0x120 [ 66.847112][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 66.847137][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 66.847155][ C0] ? static_key_count+0x45/0x70 [ 66.847172][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 66.847193][ C0] ? lruvec_init+0x1a1/0x280 [ 66.847216][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 66.847235][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 66.847253][ C0] ? unwind_get_return_address+0x51/0x90 [ 66.847271][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 66.847288][ C0] ? arch_stack_walk+0x10a/0x170 [ 66.847313][ C0] ? stack_trace_save+0xaa/0x100 [ 66.847329][ C0] ? stack_depot_save_flags+0x672/0x800 [ 66.847357][ C0] ? kasan_save_track+0x4f/0x80 [ 66.847378][ C0] ? kasan_save_track+0x3e/0x80 [ 66.847400][ C0] ? kasan_save_free_info+0x4a/0x60 [ 66.847419][ C0] ? __kasan_slab_free+0x5f/0x80 [ 66.847434][ C0] ? kfree+0x158/0x440 [ 66.847453][ C0] ? krealloc_noprof+0xfa/0x130 [ 66.847474][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 66.847524][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 66.847551][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 66.847580][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 66.847609][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 66.847643][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 66.847663][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 66.847692][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1a01/0xaf80 [ 66.847716][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 66.847736][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 66.847751][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 66.847766][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 66.847789][ C0] ? do_syscall_64+0x57/0xf0 [ 66.847811][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.847839][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 66.847864][ C0] ? kasan_save_free_info+0x4a/0x60 [ 66.847883][ C0] ? __kasan_slab_free+0x5f/0x80 [ 66.847899][ C0] ? kfree+0x158/0x440 [ 66.847918][ C0] ? krealloc_noprof+0xfa/0x130 [ 66.847940][ C0] ? krealloc_noprof+0xfa/0x130 [ 66.847961][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 66.848012][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x10/0x10 [ 66.848062][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 66.848101][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 66.848139][ C0] ? __kasan_check_write+0x18/0x20 [ 66.848158][ C0] ? _raw_spin_lock+0x92/0x120 [ 66.848180][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 66.848203][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 66.848232][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 66.848265][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 66.848296][ C0] ? __asan_memcpy+0x5a/0x80 [ 66.848317][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 66.848343][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 66.848370][ C0] ? __kasan_check_write+0x18/0x20 [ 66.848390][ C0] ? _raw_spin_lock+0x92/0x120 [ 66.848412][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 66.848434][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 66.848465][ C0] ? __asan_memcpy+0x5a/0x80 [ 66.848485][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 66.848517][ C0] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 66.848547][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 66.848573][ C0] ? __asan_memcpy+0x5a/0x80 [ 66.848594][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 66.848619][ C0] ? __kasan_check_write+0x18/0x20 [ 66.848646][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 66.848674][ C0] ? __kasan_check_write+0x18/0x20 [ 66.848695][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 66.848717][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 66.848746][ C0] ? __asan_memcpy+0x5a/0x80 [ 66.848767][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 66.848798][ C0] ? __kasan_check_write+0x18/0x20 [ 66.848817][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_7NodeRef6absorb+0x887/0xaa0 [ 66.848847][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 66.848885][ C0] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 66.848915][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 66.848953][ C0] ? __kasan_check_write+0x18/0x20 [ 66.848973][ C0] ? mutex_unlock+0x90/0x240 [ 66.848990][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 66.849009][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 66.849028][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 66.849059][ C0] ? put_dec_trunc8+0x229/0x380 [ 66.849082][ C0] ? put_dec+0xd7/0xf0 [ 66.849102][ C0] ? __asan_memset+0x39/0x50 [ 66.849122][ C0] ? move_right+0x8e/0xb0 [ 66.849144][ C0] ? format_decode+0x1bb/0x1610 [ 66.849165][ C0] ? vsnprintf+0x7b4/0x1ad0 [ 66.849186][ C0] ? __asan_memcpy+0x5a/0x80 [ 66.849206][ C0] ? vsnprintf+0x19ef/0x1ad0 [ 66.849228][ C0] ? sprintf+0xe8/0x140 [ 66.849249][ C0] ? __cfi_sprintf+0x10/0x10 [ 66.849269][ C0] ? prb_first_seq+0x109/0x1d0 [ 66.849286][ C0] ? desc_read+0x202/0x3e0 [ 66.849302][ C0] ? info_print_prefix+0x269/0x4a0 [ 66.849324][ C0] ? trace_raw_output_console+0xf0/0xf0 [ 66.849345][ C0] ? _prb_read_valid+0xa71/0xa80 [ 66.849361][ C0] ? record_print_text+0x290/0x450 [ 66.849380][ C0] ? __asan_memcpy+0x5a/0x80 [ 66.849400][ C0] ? record_print_text+0x319/0x450 [ 66.849420][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 66.849440][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 66.849460][ C0] ? update_curr+0xf8/0x9e0 [ 66.849482][ C0] ? xfd_validate_state+0x68/0x140 [ 66.849502][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 66.849520][ C0] ? __kasan_check_write+0x18/0x20 [ 66.849539][ C0] ? __switch_to+0xc4f/0x1300 [ 66.849561][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 66.849582][ C0] ? __cfi___switch_to+0x10/0x10 [ 66.849603][ C0] ? psi_task_switch+0xad/0xa10 [ 66.849622][ C0] ? _raw_spin_unlock+0x45/0x60 [ 66.849650][ C0] ? finish_task_switch+0x139/0x760 [ 66.849668][ C0] ? __switch_to_asm+0x3d/0x70 [ 66.849690][ C0] ? __schedule+0x13a1/0x1fa0 [ 66.849707][ C0] ? console_flush_all+0xa12/0xac0 [ 66.849727][ C0] ? __sched_text_start+0x10/0x10 [ 66.849744][ C0] ? __console_rewind_all+0x170/0x170 [ 66.849763][ C0] ? __kasan_check_read+0x15/0x20 [ 66.849783][ C0] ? is_printk_cpu_sync_owner+0x39/0x50 [ 66.849804][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 66.849828][ C0] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 66.849852][ C0] ? preempt_schedule_common+0x2d/0x60 [ 66.849868][ C0] ? preempt_schedule+0xc5/0xe0 [ 66.849884][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 66.849901][ C0] ? krealloc_noprof+0xfa/0x130 [ 66.849923][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 66.849944][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 66.849978][ C0] ? irq_work_queue+0xc9/0x160 [ 66.849997][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 66.850031][ C0] ? vprintk_emit+0x3e3/0x650 [ 66.850049][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 66.850067][ C0] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 66.850095][ C0] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 66.850124][ C0] ? vprintk_default+0x2a/0x40 [ 66.850142][ C0] ? vprintk+0x93/0xa0 [ 66.850162][ C0] ? _printk+0xde/0x140 [ 66.850179][ C0] ? __cfi___check_object_size+0x10/0x10 [ 66.850201][ C0] ? __cfi__printk+0x10/0x10 [ 66.850218][ C0] ? _copy_from_user+0x87/0xa0 [ 66.850235][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 66.850265][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 66.850292][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 66.850327][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 66.850407][ C0] ? __cfi_min_vruntime_cb_rotate+0x10/0x10 [ 66.850436][ C0] ? __kernel_text_address+0x11/0x40 [ 66.850456][ C0] ? __kasan_check_write+0x18/0x20 [ 66.850477][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 66.850499][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 66.850524][ C0] ? stack_trace_save+0xaa/0x100 [ 66.850539][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 66.850562][ C0] ? stack_depot_save_flags+0x399/0x800 [ 66.850588][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 66.850612][ C0] ? __kasan_slab_free+0x6a/0x80 [ 66.850627][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 66.850655][ C0] ? __wake_up+0x169/0x190 [ 66.850669][ C0] ? audit_log_end+0x1f1/0x240 [ 66.850692][ C0] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 66.850714][ C0] ? audit_log_end+0x1f1/0x240 [ 66.850735][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 66.850759][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 66.850782][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 66.850804][ C0] ? __cfi_common_lsm_audit+0x10/0x10 [ 66.850825][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 66.850849][ C0] ? call_rcu_hurry+0x30/0x30 [ 66.850864][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0 [ 66.850889][ C0] ? avc_update_node+0x2f1/0x9c0 [ 66.850911][ C0] ? slow_avc_audit+0x19f/0x220 [ 66.850933][ C0] ? __cfi_slow_avc_audit+0x10/0x10 [ 66.850956][ C0] ? avc_has_perm_noaudit+0x2bd/0x360 [ 66.850978][ C0] ? avc_has_perm+0x1ec/0x240 [ 66.850999][ C0] ? avc_has_perm+0x211/0x240 [ 66.851022][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 66.851042][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 66.851063][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 66.851080][ C0] ? bpf_lsm_binder_transaction+0xd/0x20 [ 66.851100][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 66.851131][ C0] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x10/0x10 [ 66.851162][ C0] ? __kasan_check_write+0x18/0x20 [ 66.851182][ C0] ? _raw_spin_lock+0x92/0x120 [ 66.851204][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 66.851227][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x155c/0xaf80 [ 66.851250][ C0] ? __asan_memcpy+0x5a/0x80 [ 66.851270][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x1a01/0xaf80 [ 66.851304][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 66.851371][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 66.851392][ C0] ? kernel_text_address+0xa9/0xe0 [ 66.851411][ C0] ? __kernel_text_address+0x11/0x40 [ 66.851429][ C0] ? unwind_get_return_address+0x51/0x90 [ 66.851448][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 66.851465][ C0] ? arch_stack_walk+0x10a/0x170 [ 66.851491][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 66.851512][ C0] ? kernel_text_address+0xa9/0xe0 [ 66.851531][ C0] ? __kernel_text_address+0x11/0x40 [ 66.851550][ C0] ? unwind_get_return_address+0x51/0x90 [ 66.851568][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 66.851585][ C0] ? arch_stack_walk+0x10a/0x170 [ 66.851608][ C0] ? stack_depot_save_flags+0x38/0x800 [ 66.851630][ C0] ? kasan_save_track+0x4f/0x80 [ 66.851659][ C0] ? kasan_save_track+0x3e/0x80 [ 66.851680][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 66.851699][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 66.851714][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 66.851737][ C0] ? krealloc_noprof+0x8d/0x130 [ 66.851758][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x84c/0x1d80 [ 66.851782][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20 [ 66.851802][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 66.851817][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 66.851831][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 66.851853][ C0] ? do_syscall_64+0x57/0xf0 [ 66.851874][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.851902][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 66.851933][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 66.851964][ C0] ? __kasan_check_write+0x18/0x20 [ 66.851984][ C0] ? _raw_spin_lock+0x92/0x120 [ 66.852006][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 66.852028][ C0] ? _raw_spin_unlock+0x45/0x60 [ 66.852051][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 66.852072][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 66.852099][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 66.852135][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 66.852156][ C0] ? __asan_memcpy+0x5a/0x80 [ 66.852177][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 66.852199][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 66.852229][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 66.852250][ C0] ? kernel_text_address+0xa9/0xe0 [ 66.852269][ C0] ? __kernel_text_address+0x11/0x40 [ 66.852288][ C0] ? unwind_get_return_address+0x51/0x90 [ 66.852306][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 66.852323][ C0] ? arch_stack_walk+0x10a/0x170 [ 66.852346][ C0] ? stack_depot_save_flags+0x38/0x800 [ 66.852368][ C0] ? stack_depot_save+0x12/0x20 [ 66.852388][ C0] ? save_stack+0x149/0x240 [ 66.852403][ C0] ? free_contig_range+0x260/0x260 [ 66.852424][ C0] ? __reset_page_owner+0x450/0x450 [ 66.852440][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 66.852456][ C0] ? prep_new_page+0x20/0x120 [ 66.852473][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 66.852492][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 66.852510][ C0] ? __folio_alloc_noprof+0x14/0x80 [ 66.852528][ C0] ? folio_prealloc+0x46/0x220 [ 66.852545][ C0] ? __kasan_check_write+0x18/0x20 [ 66.852565][ C0] ? __update_page_owner_handle+0x318/0x370 [ 66.852583][ C0] ? __kasan_check_write+0x18/0x20 [ 66.852603][ C0] ? __set_page_owner+0x3fe/0x600 [ 66.852620][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 66.852644][ C0] ? kasan_unpoison+0x4a/0x70 [ 66.852665][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 66.852682][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 66.852699][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 66.852720][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 66.852743][ C0] ? prep_new_page+0x20/0x120 [ 66.852760][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 66.852782][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 66.852800][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 66.852816][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 66.852834][ C0] ? gfp_to_alloc_flags_cma+0x80/0x1c0 [ 66.852855][ C0] ? __count_memcg_events+0xdf/0x3b0 [ 66.852872][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 66.852888][ C0] ? __kasan_check_read+0x15/0x20 [ 66.852908][ C0] ? __folio_batch_add_and_move+0x25b/0x320 [ 66.852927][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 66.852949][ C0] ? __asan_memcpy+0x5a/0x80 [ 66.852969][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 66.852992][ C0] ? folio_add_lru+0x116/0x400 [ 66.853009][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 66.853027][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 66.853043][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 66.853064][ C0] ? ioctl_has_perm+0x39a/0x500 [ 66.853085][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 66.853104][ C0] ? pte_offset_map_rw_nolock+0xba/0x110 [ 66.853126][ C0] ? handle_mm_fault+0x171c/0x1bf0 [ 66.853142][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 66.853162][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 66.853182][ C0] ? cgroup_freezing+0x8a/0xb0 [ 66.853201][ C0] ? __kasan_check_write+0x18/0x20 [ 66.853222][ C0] ? __kasan_check_write+0x18/0x20 [ 66.853241][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 66.853264][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 66.853287][ C0] ? __fget_files+0x2c5/0x340 [ 66.853303][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 66.853320][ C0] ? security_file_ioctl+0x3e/0x110 [ 66.853340][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 66.853359][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 66.853376][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 66.853391][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 66.853412][ C0] ? do_syscall_64+0x57/0xf0 [ 66.853434][ C0] ? clear_bhb_loop+0x50/0xa0 [ 66.853451][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.853475][ C0] [ 66.853482][ C0] Modules linked in: [ 66.853494][ C0] ---[ end trace 0000000000000000 ]--- [ 66.853503][ C0] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 66.853524][ C0] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 66.853537][ C0] RSP: 0018:ffffc900102dff80 EFLAGS: 00010a02 [ 66.853551][ C0] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff9200205c02c [ 66.853564][ C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 66.853575][ C0] RBP: ffffc900102e0250 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc [ 66.853588][ C0] R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: dffffc0000000000 [ 66.853600][ C0] R13: dffffc0000000000 R14: 1ffff9200205c050 R15: ffffc900102e02f0 [ 66.853613][ C0] FS: 00007fecd2feb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 66.853628][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.853647][ C0] CR2: ffffc900102dff78 CR3: 0000000120898000 CR4: 00000000003526b0 [ 66.853666][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 66.872038][ C0] Kernel Offset: disabled