last executing test programs: 3m7.528521416s ago: executing program 1 (id=450): r0 = socket$inet_icmp(0x2, 0x2, 0x1) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (rerun: 64) r2 = dup(r1) getpeername$packet(r2, 0x0, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) (async) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010120c300000000000000109022400010000000309040000090300030009210a00e628cb030122290009058103ff03"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x202, 0x46) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000038000000007e570c04cd1fe613874033e45be51dfd7417c14f47b19b40c2dfd8e14b893a41262cd32a805daf884b36f550fe359759cb763b2ffec0c1"], &(0x7f0000000340)=0x5c) (async) request_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='binder\x00', 0xfffffffffffffff8) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4c000) (rerun: 32) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000240)=0x8, 0x4) (async) poll(&(0x7f0000000000)=[{r7, 0x1200}], 0x1, 0x1) (async) write$tcp_mem(r7, &(0x7f00000000c0)={0x4, 0x2d, 0x20800006d2, 0x3a, 0x1, 0x2c}, 0x48) (async) copy_file_range(r6, 0x0, r6, &(0x7f0000000100)=0x20008a, 0x400000000000002, 0x0) (async) syz_usb_control_io(r5, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20303c0000003c278a303d5d8c15c5451a32d452044ff2fb956b2f8b92d17d9b88a09b53cdae7b8a19516b3c5a5971754a832eaa00000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m7.515526696s ago: executing program 1 (id=452): socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000180)={'veth0_macvtap\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f00000000c0)={@val={0x0, 0xa76b46610d92c08d}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @val={@val={0x88a8, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x1c, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x7}}}}}}, 0x36) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = gettid() process_vm_readv(r7, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) 3m7.38950979s ago: executing program 1 (id=453): socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x29, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x3, 0x7, 0x13, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x20, 0x80, 0x0, 0x1b20000}}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@remote, r2}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote, r4}, 0x14) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) creat(0x0, 0x84d65bdffb542d2d) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m7.312494662s ago: executing program 1 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, 0x0) (async) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', r2, 0x40, 0x8000, 0xffffff1a, 0x3, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x66, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000a, 0x11012, r4, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000275000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', r3, &(0x7f0000000300)='./file0\x00', 0x41) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r8, &(0x7f0000000100)='./file0\x00', 0x220) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf25010000000000000007410000001400187f1881e1217c61b2790c538851c4aae1"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40804) 3m7.311960132s ago: executing program 1 (id=455): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2142) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x40045402) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}}, 0x1c) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000100)={0x0, 0x0}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0xf2, 0x85, 0x8b, 0x8, 0x5f9, 0xffff, 0x9529, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x6, 0x90, 0x81, "", [{{0x9, 0x4, 0xff, 0xf3, 0x1, 0x44, 0x8, 0x9d, 0xfa, [], [{{0x9, 0x5, 0x6, 0x2, 0x20, 0x93, 0xa, 0xc2}}]}}]}}]}}, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x802, 0x40, 0x21}, 0x18) mknodat$null(r3, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x103) 3m7.251358465s ago: executing program 1 (id=456): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0xfff, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000040)=0x55) (async) r2 = syz_usb_connect$uac2(0x1, 0x98, &(0x7f0000000100)=ANY=[], &(0x7f0000000b40)={0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, [{0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x403}}, {0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x446}}, {0x0, &(0x7f00000000c0)=@string={0x0, 0x3, "817166da94e580fb"}}, {0x0, &(0x7f0000000a80)=@string={0x0, 0x3, "23650885d1bad7ab3416113364a5ce4b755e6f6bf1846b9585c1d9901e6f77a2a83801a2bb72987054f5d8428174e0e634f8da715285810f8b892436f1173ca2130fdb0b3cdbb8f712bcacad3ec9b9a5bc90ce76e16fe5215d3e2628de8e839c24"}}, {0x0, &(0x7f0000000b00)=@lang_id={0x0, 0x3, 0x2c01}}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) syz_usb_control_io(r2, &(0x7f0000000e80)={0x2c, &(0x7f0000000bc0)={0x20, 0xb, 0xac, {0xac, 0x1, "634771c7c658535a6824500258ee083082bd9619ff634c061cf7b9a7da6f5af5783663a92c9b213afa937c077e1b6edbd6b7af92c05970f65946cea700ffb973e3e9bc7b623752470ec45125a08118a997bc9af76e412f7b80f59a883f16784f721ecfd4721c5f6bbc274da2e40569de0d33012c2a7d7ccaf680178a7c72588daad8d4bddc4edf8550dfb3d1982be489f02f7b6ec3b7769bcb38e9874a7b32ca57e00e1d8b5247c40dcb"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000000cc0)={0x0, 0xf, 0x119, {0x5, 0xf, 0x119, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf6, "58a6983e16cf9fb12c9ba6406c747a33"}, @generic={0x100, 0x10, 0x2, "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"}]}}, &(0x7f0000000e00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0xb, 0xfc, "a3fb1fb0", "000e00"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x4, 0x5, 0x0, 0x7, 0x2}}}, &(0x7f0000001340)={0x84, &(0x7f0000001400)={0x40, 0x14, 0x98, "5d8977a1ac1e112a7549e457ce7523cfa108761d301bb2074a33bcc0bdc74549a04d83b5ce4f12501eed29e2284d07a17bbb7fb8608adeff2226dbb7e78fad2ddcd40bec0fb0153977152f8876629806dde2ae5cf941ac6dc266f6c52c41fb9266e003c0cb5e82f98dc5cabdd245275b221bafef19a55edbef1bef0fedffab2310bbf1817286d896e57ab870c75945e00e8e92b387277e0c"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x0, 0x10}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xe2}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001100)={0x40, 0xb, 0x2, "196d"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000001180)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001200)={0x40, 0x19, 0x2, "f3d2"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x8}}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84400, 0x0) preadv2(r3, &(0x7f00000014c0)=[{&(0x7f0000001140)=""/111, 0x6f}], 0x1, 0x7, 0x8, 0x9) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xd9) write(r4, &(0x7f0000002100)="8abda036", 0x4) syz_usb_connect(0x1, 0x76a, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0xad, 0x9b, 0x2b, 0x8, 0x1199, 0x683e, 0xff72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x758, 0x3, 0xff, 0x81, 0x20, 0x3, "", [{{0x9, 0x4, 0x5d, 0x6, 0xa, 0x8e, 0xd3, 0x9e, 0x1, [], [{{0x9, 0x5, 0xb, 0x3, 0x10, 0x2, 0xfe, 0x3a}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x5, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x401}, @generic={0x43, 0x22, "846cb38e54e253c8f8170d7521ce42c870d254722bd7daad08cf9b7175760f162b5c143490ee745cba81d1960d2563be1d79433059460e0304948ddc4459302551"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x7, 0x10, 0x80, [@generic={0xc9, 0x11, "540b9ee1d690cc31ff4b710150b5a08f3aaab41a3b2a5dc22bae9d22f2035ff398c1c29558a811793f33867382e69f1b3c8421b279f7d53c02a2c266fcd0ab327a77fd13def0a4122c21ace8889d16eb1c9cf8c8946c36148417aac60a05fca0de5b9565a81e49ca81a487756b8cb223d38a30649973bd8b7552cee6bfdfaa0c65de95962032dd8a51bb55a81692dd0ddefe49d7da56db72569ed1c01ba842294f97e438967cae785bd4adc9627b75cf85f705546fb9d950dd39ad83a7f7be0fbfe3e82c56b249"}, @generic={0xd2, 0x0, "e7d5102a8bc073b345efcbfa450a72165bd58d138b5d6ef5600bbf6d56ce4f5e229e6fa6a348b317f4483505597bb8b18ea28c4ab7290874fcc06dfebf76b37cee6780a11d675d6825533954af2b55122c172fcc25d1a6fbc13aa70bc203d51e03513b5e5671db4b2582b1ed169f699eeaa04fe09f4d5867c3e93c986514569bab5fe32c5e63271627c2ec27b0ab4873261ea3a19cb9fdad089745094be7d651cb324eb3cd43e9c735167dd01d711bdd1f2e9fb87dc294b8d391d3ae8b5f83c0657df759f539cf6b75b0c7a13736e815"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0xfd, 0xc, 0x4, [@generic={0xb1, 0x23, "d8a84dcca36aa51b2d321aa394573f6a997749b0a35b21b91b8b8591c832786dfcac3c88d2c91e4842e51f281a3f06bdfb2fb3bb67f1c281deb305f1389fba552839c28bfd752bd02adc667c3a5287c579e972cf832a1b8ae70ddddbdc5c9f38f3764bb7f872286f856c732532d1ba5e82401b6acd5d8a173dfe68651128072e2eb14c5c3cf51ba4ee2cd797d6ffc80e90ff1653b0d72db4bd6651b4efca403ab7e259c23799b2fbfd14b5594d55b6"}, @generic={0xbe, 0x23, "dad9b1bfca1075639b92d9ae56b15690f3027c3a6b24da303c8b8d10937671f15c536b98f86e560917c01088dde94e1fbe852c820808cf1334079da8cd8fe959f04b80991355f416f7a6f791d92d889c4ad2419893f7f6abd3119534c21f725165fbd83f808229ee5f9d76029b6bf904384bf8986490120a53c3d71f9326a48a3af0840f6fc0ff779c3aaaa80f9015ba24fd54828ae83df3290f0189a0c4aaf9d3c7e9ec2560237fdd77c3a4097ca4c7c271bd1d08679dcf537ee241"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x0, 0x5c, 0xe, [@generic={0x64, 0x24, "3391b9214fff073c0b506c1513268aaaa325e7f2d15628a8600b1cae7163efc4271443817f1efcb1b561b2d685f77c8cdd2bec1e208151aec1148a9b6d51bf2fdea2cb1b0a723298ff75caa8f98ac78d07b34fc456d27e1f3f83fcaf8d949693e5a4"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x55, 0xe}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x3, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x9}]}}, {{0x9, 0x5, 0xb, 0x1b, 0x400, 0x6c, 0x6, 0x7, [@generic={0x3a, 0x24, "6a140f1b4a2724ea8314c6b84d3be0724a6679831c8b9c3fcda6aec3b00457e501e4c7e188d7aa990ef374d6c581257e1fef3f2eb172b781"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x56, 0x6, 0xe}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x72, 0x5, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1, 0x5, 0xbd, [@generic={0xda, 0xe, "c2433570b6db1426b78792a6f5a36b062b42f617f1b636df543fdb497d62713eef7fd3ba6a5c2a27f2f261684551406e40c165b50f8fdbdf487ffd368fcb39d46236062f1cf46d5f32d2b82d8b3251b83f7cf5ec61061fee9f5ccfc2ff45620faa6bff2b8f585cdf4169d6aadce75bdef94533cea31e4d91b99a553bac335944143e5487e58882da7c34a81adf1ecab6e3a2ecbf05e185c68fc1b450c096bf6f16f3b43c44ca889c9407f1232fd58967611fc40dfd60f0bf1706da9cd02a21eb0592ea3c0ef1588c1be0f84895f9549a582246d2f6475f26"}]}}]}}, {{0x9, 0x4, 0xbf, 0x6, 0x8, 0x5c, 0x49, 0x68, 0x40, [@generic={0xf, 0x5, "3995b73f6d411e47b7973804b8"}], [{{0x9, 0x5, 0xd, 0x1, 0x40, 0xd, 0x1, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x4}]}}, {{0x9, 0x5, 0x8, 0x14, 0x3ff, 0x7, 0x80, 0x0, [@generic={0x5b, 0x22, "993bcfded8cba4c6d478cdfc2e812483a5e241570a0fa7b71bdcf37d739ea4a988612ba179539c63b81b1832b849d77e42d79f679cd8bf6dbe1cd40e903155e8bb324d173c0ea40b09feb712ed3af3ea401b7dbcc4486debc3"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}, @generic={0x78, 0x21, "0b32f36b0b537c8863ab9f9aaa24d35e18043367526aae3453e2616fb8baf5ff3d22fc12f6dd8f9f745745e09110945204f508080a6e2613258363da48f921720c5636df56a9a1c03b640ab65e1da4a1ac839c56f84c1c2de10b33ee40e6014caab6ca9a7ca7a28535fd3fda5ea2b1cb0e00b80dec90"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x1, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x33, 0x9e, 0x8}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x57, 0x7, 0x17, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4d, 0x8001}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0xa, 0x7, 0x1}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0xb, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x40}, @generic={0x77, 0x1a, "9ea06e9e8be5c0f33a348ffc05c419fd8970644e5357c9899d996f90d668cdcf67a0ef5099360c85823084a300c503840fec0e7f5e6d8eb2f51459792cdcb823741e3bf6b39c983e5cb077a7299ade6b07dfa54d17b2b9ecab29ce1c5590986cb46d45c48db71102ec763bd7233276f98bca70f96a"}]}}]}}, {{0x9, 0x4, 0x4e, 0x7, 0x0, 0x88, 0x38, 0xcd, 0x8, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7f, 0x4, 0x2, "b8ff"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x3ff, 0x2, "ef"}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "e501"}, {0x5, 0x24, 0x0, 0x3a9b}, {0xd, 0x24, 0xf, 0x1, 0x416, 0x848, 0x40, 0x6}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x3, 0xf, 0x8, 0x20, 0x80}, 0x19, &(0x7f0000000940)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x3, 0x0, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x9, 0x7, 0x1}]}, 0x3, [{0x36, &(0x7f0000000980)=@string={0x36, 0x3, "9ac268838728d171a28a8dd7471310f68f9cb8c90fd907b818e9cceaa9303352cbbe0145ec557b244796ffc5adc5c8c59f14eb5d"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x422}}, {0x5, &(0x7f0000000a00)=@string={0x5, 0x3, "bb8842"}}]}) 3m7.226105305s ago: executing program 32 (id=456): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0xfff, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x3, 0x0, &(0x7f0000000040)=0x55) (async) r2 = syz_usb_connect$uac2(0x1, 0x98, &(0x7f0000000100)=ANY=[], &(0x7f0000000b40)={0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, [{0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x403}}, {0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x446}}, {0x0, &(0x7f00000000c0)=@string={0x0, 0x3, "817166da94e580fb"}}, {0x0, &(0x7f0000000a80)=@string={0x0, 0x3, "23650885d1bad7ab3416113364a5ce4b755e6f6bf1846b9585c1d9901e6f77a2a83801a2bb72987054f5d8428174e0e634f8da715285810f8b892436f1173ca2130fdb0b3cdbb8f712bcacad3ec9b9a5bc90ce76e16fe5215d3e2628de8e839c24"}}, {0x0, &(0x7f0000000b00)=@lang_id={0x0, 0x3, 0x2c01}}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) syz_usb_control_io(r2, &(0x7f0000000e80)={0x2c, &(0x7f0000000bc0)={0x20, 0xb, 0xac, {0xac, 0x1, "634771c7c658535a6824500258ee083082bd9619ff634c061cf7b9a7da6f5af5783663a92c9b213afa937c077e1b6edbd6b7af92c05970f65946cea700ffb973e3e9bc7b623752470ec45125a08118a997bc9af76e412f7b80f59a883f16784f721ecfd4721c5f6bbc274da2e40569de0d33012c2a7d7ccaf680178a7c72588daad8d4bddc4edf8550dfb3d1982be489f02f7b6ec3b7769bcb38e9874a7b32ca57e00e1d8b5247c40dcb"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000000cc0)={0x0, 0xf, 0x119, {0x5, 0xf, 0x119, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf6, "58a6983e16cf9fb12c9ba6406c747a33"}, @generic={0x100, 0x10, 0x2, "4bf1b64beb65e5338f2e2be99b3f52c8ba888ee72eec084bad01e1ff58db482e90048d6a2b314f8ec51169c3d6fe39fdcdcf4836c8e326384010102928886e6ab04baee70662815bff687572ac17e4a9782ae89a93f6e9f299820aee29b9074758b0afc7983e332ec782cd33bce8a0fd841e02431741081042c293461fc954da816ce79c0c582730469371f25d6334bad6c5b6a351663c13cdeec06282145f702be66f44c3df668bb1ef120e4085cdea2bc2682071a45f217c370652729d73d1c8ac2c2f4ce5567e3be3fcd6cfeb03b1920e9d19fee76793e57f0bd69e9b187a0a97333a8c7d84e21fd516f857ed686f761abe6222bc00d18fda17ff19"}]}}, &(0x7f0000000e00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0xb, 0xfc, "a3fb1fb0", "000e00"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x4, 0x5, 0x0, 0x7, 0x2}}}, &(0x7f0000001340)={0x84, &(0x7f0000001400)={0x40, 0x14, 0x98, "5d8977a1ac1e112a7549e457ce7523cfa108761d301bb2074a33bcc0bdc74549a04d83b5ce4f12501eed29e2284d07a17bbb7fb8608adeff2226dbb7e78fad2ddcd40bec0fb0153977152f8876629806dde2ae5cf941ac6dc266f6c52c41fb9266e003c0cb5e82f98dc5cabdd245275b221bafef19a55edbef1bef0fedffab2310bbf1817286d896e57ab870c75945e00e8e92b387277e0c"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000001040)={0x20, 0x0, 0x4, {0x0, 0x10}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xe2}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001100)={0x40, 0xb, 0x2, "196d"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000001180)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001200)={0x40, 0x19, 0x2, "f3d2"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x8}}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84400, 0x0) preadv2(r3, &(0x7f00000014c0)=[{&(0x7f0000001140)=""/111, 0x6f}], 0x1, 0x7, 0x8, 0x9) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xd9) write(r4, &(0x7f0000002100)="8abda036", 0x4) syz_usb_connect(0x1, 0x76a, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0xad, 0x9b, 0x2b, 0x8, 0x1199, 0x683e, 0xff72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x758, 0x3, 0xff, 0x81, 0x20, 0x3, "", [{{0x9, 0x4, 0x5d, 0x6, 0xa, 0x8e, 0xd3, 0x9e, 0x1, [], [{{0x9, 0x5, 0xb, 0x3, 0x10, 0x2, 0xfe, 0x3a}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x5, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x401}, @generic={0x43, 0x22, "846cb38e54e253c8f8170d7521ce42c870d254722bd7daad08cf9b7175760f162b5c143490ee745cba81d1960d2563be1d79433059460e0304948ddc4459302551"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x7, 0x10, 0x80, [@generic={0xc9, 0x11, "540b9ee1d690cc31ff4b710150b5a08f3aaab41a3b2a5dc22bae9d22f2035ff398c1c29558a811793f33867382e69f1b3c8421b279f7d53c02a2c266fcd0ab327a77fd13def0a4122c21ace8889d16eb1c9cf8c8946c36148417aac60a05fca0de5b9565a81e49ca81a487756b8cb223d38a30649973bd8b7552cee6bfdfaa0c65de95962032dd8a51bb55a81692dd0ddefe49d7da56db72569ed1c01ba842294f97e438967cae785bd4adc9627b75cf85f705546fb9d950dd39ad83a7f7be0fbfe3e82c56b249"}, @generic={0xd2, 0x0, "e7d5102a8bc073b345efcbfa450a72165bd58d138b5d6ef5600bbf6d56ce4f5e229e6fa6a348b317f4483505597bb8b18ea28c4ab7290874fcc06dfebf76b37cee6780a11d675d6825533954af2b55122c172fcc25d1a6fbc13aa70bc203d51e03513b5e5671db4b2582b1ed169f699eeaa04fe09f4d5867c3e93c986514569bab5fe32c5e63271627c2ec27b0ab4873261ea3a19cb9fdad089745094be7d651cb324eb3cd43e9c735167dd01d711bdd1f2e9fb87dc294b8d391d3ae8b5f83c0657df759f539cf6b75b0c7a13736e815"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0xfd, 0xc, 0x4, [@generic={0xb1, 0x23, "d8a84dcca36aa51b2d321aa394573f6a997749b0a35b21b91b8b8591c832786dfcac3c88d2c91e4842e51f281a3f06bdfb2fb3bb67f1c281deb305f1389fba552839c28bfd752bd02adc667c3a5287c579e972cf832a1b8ae70ddddbdc5c9f38f3764bb7f872286f856c732532d1ba5e82401b6acd5d8a173dfe68651128072e2eb14c5c3cf51ba4ee2cd797d6ffc80e90ff1653b0d72db4bd6651b4efca403ab7e259c23799b2fbfd14b5594d55b6"}, @generic={0xbe, 0x23, "dad9b1bfca1075639b92d9ae56b15690f3027c3a6b24da303c8b8d10937671f15c536b98f86e560917c01088dde94e1fbe852c820808cf1334079da8cd8fe959f04b80991355f416f7a6f791d92d889c4ad2419893f7f6abd3119534c21f725165fbd83f808229ee5f9d76029b6bf904384bf8986490120a53c3d71f9326a48a3af0840f6fc0ff779c3aaaa80f9015ba24fd54828ae83df3290f0189a0c4aaf9d3c7e9ec2560237fdd77c3a4097ca4c7c271bd1d08679dcf537ee241"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x0, 0x5c, 0xe, [@generic={0x64, 0x24, "3391b9214fff073c0b506c1513268aaaa325e7f2d15628a8600b1cae7163efc4271443817f1efcb1b561b2d685f77c8cdd2bec1e208151aec1148a9b6d51bf2fdea2cb1b0a723298ff75caa8f98ac78d07b34fc456d27e1f3f83fcaf8d949693e5a4"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x55, 0xe}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x3, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x9}]}}, {{0x9, 0x5, 0xb, 0x1b, 0x400, 0x6c, 0x6, 0x7, [@generic={0x3a, 0x24, "6a140f1b4a2724ea8314c6b84d3be0724a6679831c8b9c3fcda6aec3b00457e501e4c7e188d7aa990ef374d6c581257e1fef3f2eb172b781"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x56, 0x6, 0xe}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x72, 0x5, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x1, 0x5, 0xbd, [@generic={0xda, 0xe, "c2433570b6db1426b78792a6f5a36b062b42f617f1b636df543fdb497d62713eef7fd3ba6a5c2a27f2f261684551406e40c165b50f8fdbdf487ffd368fcb39d46236062f1cf46d5f32d2b82d8b3251b83f7cf5ec61061fee9f5ccfc2ff45620faa6bff2b8f585cdf4169d6aadce75bdef94533cea31e4d91b99a553bac335944143e5487e58882da7c34a81adf1ecab6e3a2ecbf05e185c68fc1b450c096bf6f16f3b43c44ca889c9407f1232fd58967611fc40dfd60f0bf1706da9cd02a21eb0592ea3c0ef1588c1be0f84895f9549a582246d2f6475f26"}]}}]}}, {{0x9, 0x4, 0xbf, 0x6, 0x8, 0x5c, 0x49, 0x68, 0x40, [@generic={0xf, 0x5, "3995b73f6d411e47b7973804b8"}], [{{0x9, 0x5, 0xd, 0x1, 0x40, 0xd, 0x1, 0xe2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x4}]}}, {{0x9, 0x5, 0x8, 0x14, 0x3ff, 0x7, 0x80, 0x0, [@generic={0x5b, 0x22, "993bcfded8cba4c6d478cdfc2e812483a5e241570a0fa7b71bdcf37d739ea4a988612ba179539c63b81b1832b849d77e42d79f679cd8bf6dbe1cd40e903155e8bb324d173c0ea40b09feb712ed3af3ea401b7dbcc4486debc3"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}, @generic={0x78, 0x21, "0b32f36b0b537c8863ab9f9aaa24d35e18043367526aae3453e2616fb8baf5ff3d22fc12f6dd8f9f745745e09110945204f508080a6e2613258363da48f921720c5636df56a9a1c03b640ab65e1da4a1ac839c56f84c1c2de10b33ee40e6014caab6ca9a7ca7a28535fd3fda5ea2b1cb0e00b80dec90"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x1, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x33, 0x9e, 0x8}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x57, 0x7, 0x17, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4d, 0x8001}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0xa, 0x7, 0x1}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0xb, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x40}, @generic={0x77, 0x1a, "9ea06e9e8be5c0f33a348ffc05c419fd8970644e5357c9899d996f90d668cdcf67a0ef5099360c85823084a300c503840fec0e7f5e6d8eb2f51459792cdcb823741e3bf6b39c983e5cb077a7299ade6b07dfa54d17b2b9ecab29ce1c5590986cb46d45c48db71102ec763bd7233276f98bca70f96a"}]}}]}}, {{0x9, 0x4, 0x4e, 0x7, 0x0, 0x88, 0x38, 0xcd, 0x8, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7f, 0x4, 0x2, "b8ff"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x3ff, 0x2, "ef"}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "e501"}, {0x5, 0x24, 0x0, 0x3a9b}, {0xd, 0x24, 0xf, 0x1, 0x416, 0x848, 0x40, 0x6}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x3, 0xf, 0x8, 0x20, 0x80}, 0x19, &(0x7f0000000940)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x3, 0x0, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x9, 0x7, 0x1}]}, 0x3, [{0x36, &(0x7f0000000980)=@string={0x36, 0x3, "9ac268838728d171a28a8dd7471310f68f9cb8c90fd907b818e9cceaa9303352cbbe0145ec557b244796ffc5adc5c8c59f14eb5d"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x422}}, {0x5, &(0x7f0000000a00)=@string={0x5, 0x3, "bb8842"}}]}) 20.85557912s ago: executing program 4 (id=2000): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) eventfd(0x0) (async) eventfd(0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 20.792530942s ago: executing program 4 (id=2002): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0) syz_usb_connect$midi(0x5, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000020b4041b934000010203010902320001011810040904000001010300060724030305018009058e0b20000fd7021025010c26cc9892f3a2007744ac05b6"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xf0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) setuid(0xee01) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/12, 0xc}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_socket_connect_nvme_tcp() 20.240680579s ago: executing program 4 (id=2010): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb79"], 0xfdef) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone(0x40000200, &(0x7f0000000080)="3dc8febe9ae24cb82cfd65ada09b37407fd213eda524a84be5e7bcfc17e375ad1d0577aabd9a60fae6b38a8c5a6f50299ebc40c5f9f2c8d657", 0x39, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="7e9febe86c9b9ba815c361faeb0925293b6a2fe3b250286254f8cc5c42c4826c1d64205453450a8c8e193273d830561572c75b101a353853ad8fa7eb55c55df85980630ced0f8eb2904df8") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0, 0x61}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.186171331s ago: executing program 4 (id=2011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r3, &(0x7f0000000480)="4d4287ac770767f7429748", 0xb) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000280)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x0, r2, 0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xc45, 0x5112, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x90, 0x80, "", [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0xedd}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xab, 0x33}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x5, 0x62, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x7, {{0xb, 0x24, 0x6, 0x0, 0x0, "180bd0b68232"}, {0x5, 0x24, 0x0, 0xe6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x4, 0xd}, [@obex={0x5, 0x24, 0x15, 0x5}, @obex={0x5, 0x24, 0x15, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x69}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x84, 0x5, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x71, 0x7, 0x5, 0x10, 0x5}, 0x57, &(0x7f0000000140)={0x5, 0xf, 0x57, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x75, 0x5, 0x6, 0xf0f, 0x4, [0xffc000, 0xc000, 0xc000, 0x0, 0x30]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1f, 0xc, 0xf, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x3e, "fc0ac96ce39fbbc338f7f8c5cdb59d10"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "5c99cadc36d16935a19f3875118335b1"}]}, 0x7, [{0xa8, &(0x7f00000002c0)=@string={0xa8, 0x3, "fdb2a7a34c2992ef5d6702b818be575bad501aed1c3291c25c2d3244428618b518b3877e876d988636e323b2649de2c76c574c8fbe0ac2fa67eb3e3805d4d13031534ce736473277afd555e4de4ac05019f2d4e6343a913a726029b0d5bcb8e5a4a808ec38653085c9ddf9ae4cc6e1911339c6039186a319ec1b2c52a71a2b416e96ce35c2355e198ee9e67aa8e3f1921f8163b3701895953c90f25090f84791fd37d5bc4f88"}}, {0x7d, &(0x7f0000000380)=@string={0x7d, 0x3, "4e4463bfd2c903e1a094c4d09fc571fae88ff7a47f3252a6bb01b69e6b49b49c9a3fb5788fb72bb4be6935f5f20ba15b66b5584ced26d4c36b419e075ea243206400644b774b02c6f6577241c89ef351ffc9c97947445ad52672ee5eefcea626a37163d804b7ba30beea20dac5cf44f3df8f0136d399e913c5aa89"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x809}}, {0xe9, &(0x7f0000000500)=@string={0xe9, 0x3, "07ff9fd595202e72a7271316cae50c7a8c1476e4cbf76940f5c2caf77c730c9e7a71bf58d683bc7b3bcb4991e4308db16edd7ea9fbd09c0766af656d341a8dcdd5664acacf7e456b50666a931f98c06eafe93404a8e8c6c4b1026cc23d4aced66851a79c95f7f8b4431a975546987515d9918c3c38ce950c04d65ea0ab1ff2cb97348bb0a3aa2e731b1edd7c227f3c9a4229608445f0d29ff192a8bf073719c15f494a18f79434064693df59b56243d946e8a30e8fae8552263c312a58cffab7ad6e0f4fa48946058d73858cd2cc53ee624cb6a2934f417cc53ce412178b3e078d2eb7e799589a"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xc04}}]}) 19.563189231s ago: executing program 4 (id=2020): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3909007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') unshare(0x40000600) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000200)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x4, 0x20, 0x66, 0x0, 0x20, 0x2, 0x0, @private=0xa0100ff, @local}, {0x11, 0x14, 0x0, @multicast1, "ceef7c4b"}}}}}}, 0x32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 19.464615634s ago: executing program 4 (id=2023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0xffffffff}]}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000501000/0x400000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) readlink(0x0, &(0x7f0000000300)=""/194, 0xc2) 10.57661287s ago: executing program 3 (id=2072): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0xc, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3ff, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0010280000002823f7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xc70, 0xf014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xea, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x3, 0x80, 0x1, {0x22, 0x392}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xe, 0x8, 0x7d}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x6, 0xfc, 0x2}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xa5, 0x6, 0x1, 0x8, 0xf4}, 0x47, &(0x7f0000000180)={0x5, 0xf, 0x47, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xfc, 0x2, 0x3, 0xf0f, 0x273, [0x3f0f, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x8, 0x60}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x5, 0xa, 0xf}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xf9, 0x9, 0x7fff, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x1, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0xf5, 0x7, 0xa, 0x4}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40e}}, {0xcd, &(0x7f0000000240)=@string={0xcd, 0x3, "4b99085d0a14c71fafda754bb5571997c6b5e31b9b80eebb4d3930e9b737ced4e0857b6c7454826a3a10ec8bb9a74cecae174aa836e3eda3a9cbc5f311cf7adcec6af126487fcec6b25220bd1e908a36d2128184e8658223b475579d5a3315d1c0c376b51ec642efd0b879e14e2bb989bee921ca5cd76cffe9e900f3fd9cb1b483089549e4fa6f9742657a70da6a754b11f01fd9cb03e28bd53100b1838f2b6bf832f2aff5452c11900f78506a92dde8ec61b5f926c4cb0785f8b72cdc0c1d37c8622c26d9d9dabb16c68b"}}, {0x6f, &(0x7f0000000340)=@string={0x6f, 0x3, "41ddbee855dedfd8c042c2218f4f16ebad8c215864616e58f56dd0132583d02116958e857b9b2929a61367a4f972bcab2aaa46b213cd911d96d39df8764c306181eddcd26f32b5e3f05865b7bf0b1b0aec96e847d6d1659d4b3648f7fd9af61161569addea3e1bef99dcdcb279"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x426}}]}) 10.082337736s ago: executing program 3 (id=2074): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) pselect6(0xfffffeb1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) ftruncate(r1, 0x4) sendfile(r0, r1, 0x0, 0x10) 10.055267657s ago: executing program 3 (id=2075): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0x23c}}, 0x8d4) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x200, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x8008af26, &(0x7f0000000040)=0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 9.96465877s ago: executing program 3 (id=2076): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1f, 0x4, 0x1, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040005}, 0x4) 9.96436444s ago: executing program 3 (id=2077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone(0x40000200, &(0x7f0000000080)="3dc8febe9ae24cb82cfd65ada09b37407fd213eda524a84be5e7bcfc17e375ad1d0577aabd9a60fae6b38a8c5a6f50299ebc40c5f9f2c8d657", 0x39, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="7e9febe86c9b9ba815c361faeb0925293b6a2fe3b250286254f8cc5c42c4826c1d64205453450a8c8e193273d830561572c75b101a353853ad8fa7eb55c55df85980630ced0f8eb2904df8") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0, 0x61}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.102224337s ago: executing program 3 (id=2081): unshare(0x6020400) unshare(0x10400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000180)=""/133, 0x85) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x4040, &(0x7f0000000200)) unshare(0x44040200) 3.702597631s ago: executing program 33 (id=2023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0xffffffff}]}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000501000/0x400000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae010100000000010000000000f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f27424b80e2b7af277765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x7f8) readlink(0x0, &(0x7f0000000300)=""/194, 0xc2) 3.355757162s ago: executing program 0 (id=2105): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$invalidate(0x15, r2) 3.304552194s ago: executing program 0 (id=2106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="65460f32430f01c966b8c2008ec8364f0fc75d033e0f1c604bb93e080000b861470000ba000000000f306766460f60f266ba4000b8b55e0000ef44dee0f30f01e8", 0x41}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x1, 0x0, {[0x40, 0xfffffffffffffffc, 0xffff800000000000, 0xa, 0x1ff, 0x2, 0xc, 0x4]}}) 3.210735206s ago: executing program 0 (id=2107): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0xc91, 0x20c00) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, 0x0) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x20000880) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r8 = socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x9, 0x9, 0x7, 0xe3}]}, 0xfffffffffffffddb) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r5, &(0x7f0000000880)=[{&(0x7f0000000640)="000000019f2bd9305b39d17412b7865e6862e48d1a1e414131485acad04749052b1f1b02ca8718a8198dffc0ee55ced733d4236e3abfd610a5c158b724eac6ad59cc62dbe620745789e9e00bf567d561f2731915c2e82891883f2e1a530cabc42a1cc60eb92dee8e2e39fd6e4616d85560cfb108196d5f79de6fc2947201d8ac80b4e7a1be7187e085a2276a413f53645bc993647d0a84888beab8e02b41e39557d9283eb619a45e2cc229461fa1c053dec1d36a379323b843788bf216146280ecf43b2bed02", 0xc6}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85", 0x88}], 0x1}}], 0x1, 0x2090) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000500)={{r5}, 0x7, 0x5, 0x6}) syz_usb_connect$midi(0x2, 0x30, &(0x7f0000000e80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e, 0x1, 0x1, 0x54, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xa, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xc, 0x80}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x6d, 0x3}]}}}}}]}}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x8000000000b, 0x240040) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120101023b13d620fb092a604b640102030109021200010204000c0904420900162d9808"], &(0x7f0000000480)={0xfffffffffffffec0, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000280)=@lang_id={0x0, 0x3, 0x426}}, {0x0, &(0x7f0000000300)=@lang_id={0x0, 0x3, 0x80c}}, {0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003f403b1840dc1ad2e73065e63095495017d0b3b356fac795e14aaab15e8511b40be3e5ae688e70ce9da080ee9b77ee0c732881722cd9857a57adbf21636a869a8fcf981d25e109382ffeb0892f4a2c9e795a08b0eb857eb9586b1d9d981630a0993ce1ea16f3bdc6da35b467025b65f758613bdd749f4e24947f90a2f1bf8f02bdcc487f690db42ab6154217d789048d903dd4a923da034a3fbff9bb22884361f62c09047a4ee420894785226"]}, {0x0, &(0x7f0000000400)=@string={0x0, 0x3, "4becbdc4bd0e10ff390af10b0d1889d0a0d667cf76e10fd8fd88831ee4c64f910054756988cc1303d91f2b6a07a8f32188444cda908a2ca2948b9b9e628a63fe0d67ea5fa2fc5644d7e558bc6d3054c33b468ba89dda4e8e24c9c03547c7"}}]}) 2.407081152s ago: executing program 5 (id=2112): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000000002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x6, 0x6100) ioctl$BLKROSET(r1, 0x125d, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x12, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, 0xee01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000280)={@val={0xa, 0xb3f0}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfc01000000000000}, @mcast1}}}}}}}, 0x62) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) faccessat(0xffffffffffffffff, 0x0, 0x3) r5 = socket(0x10, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000140)="abe24238ce3239e2667488a77c439521b5b5a1084f0a87512c9c61f0e91b066048fc556363f4b7f182d792a43eb474735b933736c279c02e69384460da8654dc495d623e35f379346e875607d4a5f6c2daa3b9cc8129295174bc") r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xfffe, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @remote}}}, 0x108) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11) epoll_create1(0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x17, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$sock(r9, &(0x7f0000000040)=[{{&(0x7f00000000c0)=@generic={0x23, "aebae220a959befdad14a64d45cce5b0ce2328ccf7bb82be87706875938e0c02fc0648c1c634d59638008b886d6903234672fedb98e4c51d83ab28fb52d7caa3655f4bae9862ecc00a0b9a21bfdc0e7c2918947ee99e75b3d20490d0bab350d982c1259fd18407f86326d8c356da3aa4ca0ceb4ff8351b346c1deac532c8"}, 0x80, 0x0, 0x0, &(0x7f0000000740), 0x8c}}], 0x1, 0x0) r10 = epoll_create1(0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x15c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x42, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mic={0x8c, 0x10, {0x303, "32d91649f31c", @short="4d177e29f83ae42a"}}, @mic={0x8c, 0x18, {0xf19, "4373b9dae9fa", @long="de247c057c47b240ae087750dc4b2bd0"}}, @supported_rates={0x1, 0x5, [{0x78}, {0x2, 0x1}, {0x6}, {0x60}, {0xc, 0x1}]}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9340}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dc7ffd65c317"}, @NL80211_ATTR_SSID={0x13, 0x34, @random="771c37a9eb156ed4eb056290232887"}, @NL80211_ATTR_IE={0xd, 0x2a, [@supported_rates={0x1, 0x7, [{0x24}, {0x5, 0x1}, {0x18}, {0x76610f4fe9d09b8f, 0x1}, {0x6, 0x1}, {0x18, 0x1}, {0x36, 0x1}]}]}, @NL80211_ATTR_IE={0xaa, 0x2a, [@tim={0x5, 0x62, {0x7f, 0xd1, 0x40, "75e3b460eedf13c4ca1f617c81be242f39aa506d2b9d3386334191aa7e603fbce650fd9b270066b5f47ce62e43b17ae88d0518698b8c60720a23191d9eade07b117f140a2a879b58272390a00208dd394420a14e62f89c99cefab8926f23c0"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @random={0x7, 0x32, "50b2987e66ce2db3d899448ff55056580ce211ea212f7b40b6a4faeb4f2c207cf457dfc80c0d2368e96fff39abba1882b974"}, @chsw_timing={0x68, 0x4, {0x0, 0x7}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_MAC={0xa}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000100)={0x20000014}) 2.363362593s ago: executing program 5 (id=2113): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0xdc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_ZONE={0x0, 0x7, 0x1, 0x0, 0x2}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40010}, 0x24008010) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0xfffffffffffffecf, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x1, 0x1, 0x4, 0xffff, 0x4, 0x80, 0x2, 0xfffffffe, 0x800, 0x2, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0107000000d82f428b0d0f"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x64000600) 415.692186ms ago: executing program 2 (id=2124): r0 = socket$inet(0x2, 0x3, 0x4) recvmmsg(r0, &(0x7f0000004100)=[{{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x3}, 0xfd4}, {{&(0x7f0000003640)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003a40)=[{0x0}, {&(0x7f0000003880)=""/70, 0x46}, {&(0x7f0000003900)=""/114, 0x72}, {&(0x7f0000003980)=""/184, 0xb8}], 0x4, &(0x7f0000003ac0)=""/58, 0x3a}, 0x2d56}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004040)=""/132, 0x84}, 0x2e}], 0x3, 0x2102, &(0x7f00000041c0)={0x77359400}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) shutdown(0xffffffffffffffff, 0x1) 414.740586ms ago: executing program 2 (id=2125): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x4, 0x40, 0x8, 0xe, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0xf, 0x4, 0x7, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0x10000000, @mcast2, 0xe049}}]}, 0x70}, 0x1, 0x7}, 0x0) 410.354476ms ago: executing program 2 (id=2126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone(0x40000200, &(0x7f0000000080)="3dc8febe9ae24cb82cfd65ada09b37407fd213eda524a84be5e7bcfc17e375ad1d0577aabd9a60fae6b38a8c5a6f50299ebc40c5f9f2c8d657", 0x39, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="7e9febe86c9b9ba815c361faeb0925293b6a2fe3b250286254f8cc5c42c4826c1d64205453450a8c8e193273d830561572c75b101a353853ad8fa7eb55c55df85980630ced0f8eb2904df8") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0, 0x61}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 326.318999ms ago: executing program 5 (id=2127): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40090) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001e0021002bbd7000000000000a000000000000000000000014000100"], 0x30}}, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0x7, 0x3, 0x0) 220.600582ms ago: executing program 5 (id=2128): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000640)={&(0x7f0000000600), 0x0, 0x1, 0x0, 0x8, 0x7ff, 0x0, 0x5, 0xfffffffc}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000006) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) (rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1101}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000a00)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @ptr={0x66646185, 0x1, 0x0, 0x0, 0x0, 0x11}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', @broadcast}) (async) sync() writev(r2, &(0x7f0000000500)=[{&(0x7f0000000280)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d90491c3248040000db", 0x26}, {&(0x7f0000000080)="b00c7037e0", 0x5}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r10, 0x0, 0x0) (async, rerun: 32) sendto$inet6(r10, &(0x7f00000000c0)="3b6422c2a9c30c42cd80ddbd", 0xc, 0x2400c081, 0x0, 0x0) (async, rerun: 32) setreuid(0x0, r9) sync() 183.973534ms ago: executing program 0 (id=2129): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, 0xffffffffffffffff, 0xad30c000) socket$netlink(0x10, 0x3, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 144.362405ms ago: executing program 5 (id=2130): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (rerun: 64) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async) r1 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x29, 0x24, 0x0, &(0x7f0000000080)) 89.431027ms ago: executing program 2 (id=2131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {0x4, 0x7}}, 0x24, 0x1) 89.142427ms ago: executing program 5 (id=2132): r0 = socket(0x10, 0x803, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x0, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x3, 0x8, 0x9, 0x9, 0xffffffff, 0x3, 0x3, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x8, 0x268, 0x1, 0x4, 0x280, 0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000000000016, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="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", 0x1f0}], 0x1}, 0x20000090) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000580)={'ip6_vti0\x00', r3, 0x2f, 0x2, 0x6, 0x10, 0x30, @mcast1, @empty, 0x40, 0x7840, 0xfffffffb, 0x9}}) pipe2$9p(&(0x7f0000000700), 0x100) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fchdir(r5) exit(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="87d4520a981d89056b3b6bebc0c11e05e7689b551b315a0673055a9f88212de684b09c02d45ec1599c4e03d1e5d2a5306a8f7bd5c3bfb585ce325b36afa229524da7da71a2d7a93c72bcb7b8de2af90a8b6d039ea6d8bdc07125ccb9953d7589b8bc31acc0d21bd3b966399d271b7963977d", 0x72, 0x20048010, &(0x7f0000000300)={0x11, 0x1a, r4, 0x1, 0x43, 0x6, @broadcast}, 0x14) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000480)=0x2, 0x4) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, r8, 0x1, 0x70bd26, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x0, 0x590f, 0x3, 0x6, '\x00', 0x4, [0x2, 0xffffffff, 0x402, 0x7, 0x7fff, 0x74, 0x3]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4885}, 0x4000004) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000001fc0)=""/4104, 0x1008}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/66, 0x42}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={r6, r7+10000000}) 16.654789ms ago: executing program 0 (id=2133): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0xf0986f173bdc0d37, &(0x7f0000000000)={0x2, 0x4, 0x2, 0x8}) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 16.200009ms ago: executing program 2 (id=2134): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async, rerun: 32) r2 = dup(r1) (rerun: 32) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000500)=""/171, 0xab) 11.20412ms ago: executing program 0 (id=2135): syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1ae7, 0x9001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xfd, 0x90, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x665c03b48c1b83bb, 0x0, 0x8b, 0x1b}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xb2, 0xc}}]}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1ae7, 0x9001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xfd, 0x90, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x665c03b48c1b83bb, 0x0, 0x8b, 0x1b}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xb2, 0xc}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x8, 0x33, {0x33, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f559626a783e67fb727c92e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$uac3(0x3, 0xde, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x6, 0x60, 0xa2, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x4b}, [@processing_unit={0x11, 0x24, 0x9, 0x6, 0x5, [0x1, 0x1, 0x1]}, @processing_unit={0x1d, 0x24, 0x9, 0x2, 0x3, [0x1, 0x2, 0x3, 0x2, 0x2, 0x3]}, @mixer_unit={0x6, 0x24, 0x5, 0x6, 0x3, "dd"}, @cluster_info_segment={0x6, 0x20, 0x2, 0x8f}, @selector_unit={0x7, 0x24, 0xc, 0x8, 0x2, "71b8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xf0}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0x0, 0x8, {0xa, 0x25, 0x25, 0xffffff5c, 0x80, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x2, 0xfffffffb, 0xce, 0x1000, 0x2, 0x7, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x0, 0x3, {0xa, 0x25, 0x25, 0x80000001, 0x8, 0x7}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x42, 0x4, 0x7, 0x10, 0x1}, 0x50, &(0x7f0000000200)={0x5, 0xf, 0x50, 0x1, [@generic={0x4b, 0x10, 0xa, "fc4b848fc560fcb4765bac96a90cdaf4a2c2ecb32fb9f0e41ae5ba95de73cacaab237f63b0f4cc5df5fdb41221f2680c9ae59a6b57f1a928646e0d14c66b9c188d87685912ea012d"}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x100000020, 0x3, 0x2, 0x106c, 0x102, 0x8000000000000, 0x1000000003, 0x0, 0x8, 0x10, 0x6, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x40, 0xe, 0x5b, {0x5b, 0x2, "cc02530c58d8f80c7c9482cda93b4436cd578b75864747012a25d243c2a66344d3566676a8c52565d7edfe2af5ef15539f50b629d1207f633b8416d4fbe8e41ab9b1fed26a0fbe4632b82ab3dfdd82df42bbc8311498a488b3"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x20, 0x5109034107c63adb, 0x33, "e73209f06a6527d8aa3ec15cf08e1c5340c408e865a2e5be37a653a2fa33e017159ce8e926addf37db15be408b624c3a552e1d"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0x20, 0x81, 0x2, "6fce"}, &(0x7f0000000540)={0x20, 0x82, 0x1, "ee"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "e9d6"}, &(0x7f00000005c0)={0x20, 0x84, 0x4, "389c3fd0"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "3b59df"}}) (async) syz_usb_control_io$uac3(r1, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x40, 0xe, 0x5b, {0x5b, 0x2, "cc02530c58d8f80c7c9482cda93b4436cd578b75864747012a25d243c2a66344d3566676a8c52565d7edfe2af5ef15539f50b629d1207f633b8416d4fbe8e41ab9b1fed26a0fbe4632b82ab3dfdd82df42bbc8311498a488b3"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x20, 0x5109034107c63adb, 0x33, "e73209f06a6527d8aa3ec15cf08e1c5340c408e865a2e5be37a653a2fa33e017159ce8e926addf37db15be408b624c3a552e1d"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0x20, 0x81, 0x2, "6fce"}, &(0x7f0000000540)={0x20, 0x82, 0x1, "ee"}, &(0x7f0000000580)={0x20, 0x83, 0x2, "e9d6"}, &(0x7f00000005c0)={0x20, 0x84, 0x4, "389c3fd0"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "3b59df"}}) 0s ago: executing program 2 (id=2136): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x20022, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r4, 0xffffffffffff8001, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x1e}, @flat=@handle={0x73682a85, 0x10a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x14}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1040}], 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x167a00, 0x0) sendfile(r10, r11, 0x0, 0xb6f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): lNumber=3 [ 199.259000][ T2370] usb 3-1: Product: syz [ 199.263184][ T2370] usb 3-1: Manufacturer: syz [ 199.267780][ T2370] usb 3-1: SerialNumber: syz [ 199.273021][ T2370] usb 3-1: config 0 descriptor?? [ 199.278736][ T2370] sr9700 3-1:0.0: probe with driver sr9700 failed with error -22 [ 199.489249][ T5587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.497874][ T5587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.771660][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.780829][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.841272][ T2370] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 199.991214][ T2370] usb 1-1: Using ep0 maxpacket: 16 [ 199.998864][ T2370] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 200.008358][ T2370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.016398][ T2370] usb 1-1: Product: syz [ 200.020648][ T2370] usb 1-1: Manufacturer: syz [ 200.025369][ T2370] usb 1-1: SerialNumber: syz [ 200.032753][ T2370] r8152-cfgselector 1-1: Unknown version 0x0000 [ 200.039004][ T2370] r8152-cfgselector 1-1: config 0 descriptor?? [ 200.062894][ T9] usb 3-1: USB disconnect, device number 11 [ 200.108542][ T5619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 200.246330][ T2370] r8152-cfgselector 1-1: Needed 1 retries to read version [ 200.253570][ T2370] r8152-cfgselector 1-1: Unknown version 0x58e0 [ 200.259846][ T2370] r8152-cfgselector 1-1: bad CDC descriptors [ 200.325888][ T5627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.341395][ T5627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.419597][ T5632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.428264][ T5632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.437549][ T5632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.446471][ T5632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.447642][ T5600] netlink: 'syz.0.1569': attribute type 29 has an invalid length. [ 200.463248][ T2370] r8152-cfgselector 1-1: USB disconnect, device number 112 [ 200.748133][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 200.748150][ T36] audit: type=1326 audit(2016777855.050:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.1587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4ed9ce59 code=0x7ffc0000 [ 200.780253][ T36] audit: type=1326 audit(2016777855.050:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.1587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4ed9ce59 code=0x7ffc0000 [ 200.805689][ T36] audit: type=1326 audit(2016777855.050:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.1587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a4ed5d68e code=0x7ffc0000 [ 200.831071][ T36] audit: type=1326 audit(2016777855.050:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.1587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a4ed5d68e code=0x7ffc0000 [ 200.856533][ T36] audit: type=1326 audit(2016777855.050:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.1587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4ed9ce59 code=0x7ffc0000 [ 200.881888][ T36] audit: type=1326 audit(2016777855.050:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.1587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f7a4ed9ce59 code=0x7ffc0000 [ 200.907311][ T36] audit: type=1326 audit(2016777855.050:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.1587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4ed9ce59 code=0x7ffc0000 [ 200.932663][ T36] audit: type=1326 audit(2016777855.050:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.1587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7a4ed9ce59 code=0x7ffc0000 [ 200.958385][ T36] audit: type=1326 audit(2016777855.090:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.1587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4ed9ce59 code=0x7ffc0000 [ 200.997376][ T36] audit: type=1326 audit(2016777855.090:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.2.1587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4ed9ce59 code=0x7ffc0000 [ 201.132198][ T5659] serio: Serial port ptm1 [ 201.160412][ T5666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.172540][ T5666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.421229][ T9] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 201.430585][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.439113][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.461493][ T5673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.470054][ T5673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.551235][ T9] usb 1-1: device descriptor read/64, error -71 [ 201.779128][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 201.788117][ T5682] bridge_slave_1: left allmulticast mode [ 201.793780][ T5682] bridge_slave_1: left promiscuous mode [ 201.799525][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.801215][ T9] usb 1-1: device descriptor read/64, error -71 [ 201.813108][ T5682] bridge_slave_0: left allmulticast mode [ 201.818753][ T5682] bridge_slave_0: left promiscuous mode [ 201.825024][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.927656][ T5684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.044169][ T5690] netlink: 'syz.4.1601': attribute type 4 has an invalid length. [ 202.052035][ T9] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 202.052787][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.068483][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.094677][ T5695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1603'. [ 202.113578][ T5695] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1603'. [ 202.164417][ T5695] overlayfs: conflicting lowerdir path [ 202.191255][ T9] usb 1-1: device descriptor read/64, error -71 [ 202.431227][ T9] usb 1-1: device descriptor read/64, error -71 [ 202.541319][ T9] usb usb1-port1: attempt power cycle [ 202.643716][ T5710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.652275][ T5710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.840752][ T5721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5721 comm=syz.3.1612 [ 202.860387][ T5721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5721 comm=syz.3.1612 [ 202.891255][ T9] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 202.901542][ T5723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.910056][ T5723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.912247][ T9] usb 1-1: device descriptor read/8, error -71 [ 202.918971][ T5723] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 202.983007][ T31] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 203.082502][ T31] hid-generic 0000:0000:0000.0031: hidraw1: HID v0.00 Device [syz1] on syz0 [ 203.093827][ T9] usb 1-1: device descriptor read/8, error -71 [ 203.304310][ T5738] netlink: 'syz.4.1617': attribute type 6 has an invalid length. [ 203.312100][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 203.361255][ T9] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 203.382125][ T9] usb 1-1: device descriptor read/8, error -71 [ 203.410330][ T5740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.419079][ T5740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.429027][ T5740] netlink: 'syz.4.1618': attribute type 11 has an invalid length. [ 203.471210][ T66] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 203.490475][ T5742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.499059][ T5742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.512135][ T9] usb 1-1: device descriptor read/8, error -71 [ 203.621212][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 203.626492][ T9] usb usb1-port1: unable to enumerate USB device [ 203.634402][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.645353][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.655741][ T66] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 203.664932][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.674061][ T66] usb 3-1: config 0 descriptor?? [ 203.679911][ T66] hub 3-1:0.0: USB hub found [ 203.880307][ T66] hub 3-1:0.0: 1 port detected [ 203.955441][ T5744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.963999][ T5744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.977786][ T5744] fuse: Bad value for 'fd' [ 204.069179][ T5751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.077761][ T5751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.441208][ T1109] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 204.488127][ T66] hub 3-1:0.0: activate --> -90 [ 204.525247][ T5759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5759 comm=syz.4.1626 [ 204.537974][ T5759] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 204.569686][ T5763] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 204.578454][ T5765] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 204.603523][ T1109] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 204.614861][ T5767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.618294][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.631465][ T5767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.639758][ T1109] usb 1-1: Product: syz [ 204.645335][ T5774] rust_binder: 5773:5774 transaction to 0 failed: EINVAL [ 204.645644][ T5774] netlink: 'syz.4.1631': attribute type 27 has an invalid length. [ 204.660518][ T1109] usb 1-1: Manufacturer: syz [ 204.665187][ T1109] usb 1-1: SerialNumber: syz [ 204.689447][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.699864][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.708952][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.717817][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.726640][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.735219][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.891649][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.900189][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.908790][ T31] usb 3-1: USB disconnect, device number 12 [ 205.232527][ T5781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.241086][ T5781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.259299][ T5783] fuse: Unknown parameter 'rootmtde' [ 205.319490][ T5784] syzkaller1: entered promiscuous mode [ 205.325010][ T5784] syzkaller1: entered allmulticast mode [ 205.831230][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 205.981206][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 205.987421][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 7 [ 205.998385][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 206.010978][ T31] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 206.020080][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.028084][ T31] usb 3-1: Product: syz [ 206.032267][ T31] usb 3-1: Manufacturer: syz [ 206.036854][ T31] usb 3-1: SerialNumber: syz [ 206.237655][ T5792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.246272][ T5792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.247851][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 206.265387][ T31] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 206.280466][ T31] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 206.289940][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 206.301414][ T31] usb 3-1: USB disconnect, device number 13 [ 206.309782][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 206.943710][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.952315][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.021214][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 207.134426][ T553] usb 1-1: USB disconnect, device number 117 [ 207.171211][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 207.177707][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.186376][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 207.198853][ T31] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 207.207944][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.215956][ T31] usb 3-1: Product: syz [ 207.220118][ T31] usb 3-1: Manufacturer: syz [ 207.224814][ T31] usb 3-1: SerialNumber: syz [ 207.432635][ T31] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 207.440888][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 207.471233][ T553] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 207.632564][ T553] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.640572][ T553] usb 1-1: not running at top speed; connect to a high speed hub [ 207.641878][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.649658][ T553] usb 1-1: config 8 has an invalid interface number: 43 but max is 1 [ 207.659357][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.666473][ T553] usb 1-1: config 8 has an invalid interface number: 35 but max is 1 [ 207.685472][ T553] usb 1-1: config 8 has no interface number 0 [ 207.693993][ T553] usb 1-1: config 8 has no interface number 1 [ 207.700451][ T553] usb 1-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 207.700514][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 207.769074][ T553] usb 1-1: config 8 interface 43 has no altsetting 0 [ 207.775964][ T553] usb 1-1: config 8 interface 35 has no altsetting 0 [ 207.783995][ T553] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 207.793091][ T553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.801087][ T553] usb 1-1: Product: syz [ 207.805267][ T553] usb 1-1: Manufacturer: syz [ 207.809865][ T553] usb 1-1: SerialNumber: syz [ 207.955704][ T31] usb 3-1: USB disconnect, device number 14 [ 207.971560][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 208.020711][ T553] ums-alauda 1-1:8.43: USB Mass Storage device detected [ 208.030043][ T553] scsi host1: usb-storage 1-1:8.43 [ 208.038354][ T553] hub 1-1:8.35: Invalid hub with more than one config or interface [ 208.046609][ T553] hub 1-1:8.35: probe with driver hub failed with error -22 [ 208.056802][ T553] ums-alauda 1-1:8.35: USB Mass Storage device detected [ 208.113906][ T553] usb 1-1: USB disconnect, device number 118 [ 208.317605][ T5818] rust_binder: 5816:5818 transaction to 0 failed: EINVAL [ 208.476730][ T5820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1644'. [ 208.505816][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 208.505832][ T36] audit: type=1400 audit(2016777862.810:1428): avc: denied { ioctl } for pid=5821 comm="syz.2.1645" path="socket:[34898]" dev="sockfs" ino=34898 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 208.781212][ T31] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 208.791261][ T553] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 208.931265][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 208.936555][ T553] usb 3-1: device descriptor read/64, error -71 [ 208.943606][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.951625][ T31] usb 1-1: config 0 has no interface number 0 [ 208.957708][ T31] usb 1-1: config 0 interface 1 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.968768][ T31] usb 1-1: config 0 interface 1 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.981728][ T31] usb 1-1: config 0 interface 1 has no altsetting 0 [ 208.988313][ T31] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 208.997346][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.006024][ T31] usb 1-1: config 0 descriptor?? [ 209.123354][ T5834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.131958][ T5834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.181226][ T553] usb 3-1: device descriptor read/64, error -71 [ 209.213825][ T36] audit: type=1400 audit(2016777863.520:1429): avc: denied { mount } for pid=5826 comm="syz.0.1647" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 209.216315][ T31] uclogic 0003:28BD:1903.0032: interface is invalid, ignoring [ 209.431216][ T553] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 209.561215][ T553] usb 3-1: device descriptor read/64, error -71 [ 209.801249][ T553] usb 3-1: device descriptor read/64, error -71 [ 209.881135][ T36] audit: type=1400 audit(2016777864.180:1430): avc: granted { setsecparam } for pid=5847 comm="syz.3.1655" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 209.881694][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.909776][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.917701][ T553] usb usb3-port1: attempt power cycle [ 209.929744][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.938327][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.261217][ T553] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 210.282224][ T553] usb 3-1: device descriptor read/8, error -71 [ 210.412210][ T553] usb 3-1: device descriptor read/8, error -71 [ 210.511242][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.520188][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.540338][ T5871] netlink: 'syz.3.1662': attribute type 4 has an invalid length. [ 210.548127][ T5871] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1662'. [ 210.557648][ T5871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1662'. [ 210.651218][ T553] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 210.672240][ T553] usb 3-1: device descriptor read/8, error -71 [ 210.802270][ T553] usb 3-1: device descriptor read/8, error -71 [ 210.911315][ T553] usb usb3-port1: unable to enumerate USB device [ 211.102320][ T5875] usb usb8: usbfs: process 5875 (syz.3.1664) did not claim interface 0 before use [ 211.121459][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.130010][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.139375][ T5877] tmpfs: Unknown parameter 'si' [ 211.144874][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.153495][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.165204][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.173792][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.201582][ T36] audit: type=1400 audit(2016777865.510:1431): avc: denied { create } for pid=5881 comm="syz.4.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 211.201655][ T5882] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1667'. [ 211.230226][ T5882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1667'. [ 211.312019][ T1109] hid (null): global environment stack underflow [ 211.326311][ T1109] hid-generic 0000:0800:0500.0033: global environment stack underflow [ 211.334586][ T1109] hid-generic 0000:0800:0500.0033: item 0 2 1 11 parsing failed [ 211.342476][ T1109] hid-generic 0000:0800:0500.0033: probe with driver hid-generic failed with error -22 [ 211.558454][ T31] usb 1-1: USB disconnect, device number 119 [ 211.608796][ T5898] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1672'. [ 211.732969][ T5910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5910 comm=syz.0.1676 [ 212.104791][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.114301][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.443143][ T36] audit: type=1400 audit(2016777866.750:1432): avc: denied { setattr } for pid=5920 comm="syz.0.1680" path="socket:[36329]" dev="sockfs" ino=36329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.570539][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.579555][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.723571][ T5939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1687'. [ 212.781504][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.790167][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.799581][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.808225][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.911216][ T31] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 213.061202][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 213.067417][ T31] usb 1-1: config 8 has an invalid interface number: 25 but max is 0 [ 213.075527][ T31] usb 1-1: config 8 has no interface number 0 [ 213.081629][ T31] usb 1-1: config 8 interface 25 has no altsetting 0 [ 213.089672][ T31] usb 1-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=29.32 [ 213.098997][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.107073][ T31] usb 1-1: Product: syz [ 213.111297][ T31] usb 1-1: Manufacturer: syz [ 213.115907][ T31] usb 1-1: SerialNumber: syz [ 213.125600][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.134135][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.325954][ T36] audit: type=1400 audit(2016777867.630:1433): avc: denied { mounton } for pid=5925 comm="syz.0.1681" path="/267/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 213.343584][ T31] asix 1-1:8.25: probe with driver asix failed with error -22 [ 213.357264][ T31] usb 1-1: USB disconnect, device number 120 [ 213.391577][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.400148][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.702789][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.711327][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.888462][ T36] audit: type=1400 audit(2016777868.190:1434): avc: denied { ioctl } for pid=5955 comm="syz.0.1694" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.273661][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.282239][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.300600][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.309174][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.557594][ T5971] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1699'. [ 214.586516][ T5976] overlayfs: overlapping lowerdir path [ 214.597275][ T5976] input: syz0 as /devices/virtual/input/input48 [ 214.697492][ T36] audit: type=1326 audit(2016777869.000:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.0.1710" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c4719ce59 code=0x0 [ 214.751435][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.759109][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.766533][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.773944][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.781437][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.788828][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.796223][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.803714][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.811091][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.818519][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.825925][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.833512][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.841100][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.848680][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.850448][ T6008] netlink: 'syz.3.1712': attribute type 22 has an invalid length. [ 214.856520][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.873025][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.880449][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.881202][ T553] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 214.887952][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.902948][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.910387][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.919211][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.926808][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.934308][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.941735][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.949206][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.956997][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.964963][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.972542][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.980013][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.987671][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 214.995405][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.002994][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.010446][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.017935][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.025356][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.032760][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.040145][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.047555][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.051195][ T553] usb 3-1: Using ep0 maxpacket: 32 [ 215.054965][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.061991][ T553] usb 3-1: unable to get BOS descriptor or descriptor too short [ 215.067455][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.075373][ T553] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 215.082462][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.091604][ T553] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 215.097566][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.105368][ T553] usb 3-1: can't read configurations, error -61 [ 215.112626][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.126274][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.133907][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.141836][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.149631][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.157269][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.164884][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.173119][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.181109][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.189325][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.197016][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.204608][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.219575][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.229611][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.237096][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.244620][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.252087][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.259589][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.267054][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.271196][ T553] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 215.274647][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.301281][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.313083][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.324068][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.335904][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.348465][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.356067][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.363623][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.371192][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.378791][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.386404][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.394147][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.401748][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.409227][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.416858][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.424474][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.432186][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.439705][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.447497][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.455070][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.461181][ T553] usb 3-1: Using ep0 maxpacket: 32 [ 215.464073][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.468944][ T553] usb 3-1: unable to get BOS descriptor or descriptor too short [ 215.477951][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.490147][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.497641][ T553] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 215.499990][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.508587][ T553] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 215.515358][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.520426][ T553] usb 3-1: can't read configurations, error -61 [ 215.534377][ T553] usb usb3-port1: attempt power cycle [ 215.540398][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.548444][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.556061][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.563782][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.572017][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.579760][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.588286][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.596186][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.603988][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.612151][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.619735][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.627480][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.635359][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.643002][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.650870][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.658378][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.665880][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.673509][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.680959][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.688518][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.695937][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.703554][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.711062][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.718570][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.725992][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.733517][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.740924][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.748544][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.756159][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.763667][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.771070][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.778566][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.785986][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.793635][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.801043][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.808541][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.815961][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.823828][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.831554][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.839129][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.846816][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.854624][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.862303][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.869948][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.877819][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.885576][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.893847][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.901453][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.901582][ T553] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 215.908854][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.931559][ T553] usb 3-1: Using ep0 maxpacket: 32 [ 215.938230][ T553] usb 3-1: unable to get BOS descriptor or descriptor too short [ 215.938920][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.946129][ T553] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 215.955218][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.967091][ T553] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 215.968626][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.976156][ T553] usb 3-1: can't read configurations, error -61 [ 215.986096][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 215.997152][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.004672][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.012182][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.019619][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.027090][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.034501][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.041957][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.049374][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.056866][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.064294][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.071803][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.079208][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.086631][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.094049][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.101487][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.108882][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.116288][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.123694][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.131079][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.138478][ T1109] hid-generic 0003:0006:0002.0034: unknown main item tag 0x0 [ 216.141225][ T553] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 216.146575][ T1109] hid-generic 0003:0006:0002.0034: hidraw1: USB HID v0.08 Device [syz1] on syz0 [ 216.171563][ T553] usb 3-1: Using ep0 maxpacket: 32 [ 216.185804][ T6015] fido_id[6015]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 216.190803][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.216211][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.216368][ T553] usb 3-1: unable to get BOS descriptor or descriptor too short [ 216.224636][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.239189][ T553] usb 3-1: too many configurations: 32, using maximum allowed: 8 [ 216.240730][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.254332][ T553] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 216.263304][ T553] usb 3-1: can't read configurations, error -61 [ 216.271349][ T553] usb usb3-port1: unable to enumerate USB device [ 216.600494][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.609160][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.722341][ T6030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.730867][ T6030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.741202][ T1109] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 216.891198][ T1109] usb 1-1: Using ep0 maxpacket: 8 [ 216.897210][ T1109] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.907477][ T1109] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.916371][ T1109] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.930603][ T1109] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.939735][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.947907][ T1109] usb 1-1: Product: syz [ 216.952102][ T1109] usb 1-1: Manufacturer: syz [ 216.956697][ T1109] usb 1-1: SerialNumber: syz [ 217.164800][ T1109] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 217.171688][ T1109] cdc_ncm 1-1:1.0: bind() failure [ 217.177841][ T1109] usb 1-1: USB disconnect, device number 121 [ 217.267751][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.277303][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.643334][ T6040] fuse: Bad value for 'fd' [ 217.902910][ T6049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.911466][ T6049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.981230][ T553] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 218.031228][ T1109] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 218.121205][ T553] usb 1-1: device descriptor read/64, error -71 [ 218.181198][ T1109] usb 3-1: Using ep0 maxpacket: 16 [ 218.191715][ T1109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.207929][ T1109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.217913][ T1109] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 218.227062][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.235717][ T1109] usb 3-1: config 0 descriptor?? [ 218.336252][ T36] audit: type=1400 audit(2016777872.640:1436): avc: denied { write } for pid=6053 comm="syz.4.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 218.362659][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.371671][ T553] usb 1-1: device descriptor read/64, error -71 [ 218.378174][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.387324][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.396158][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.446967][ T1109] usbhid 3-1:0.0: can't add hid device: -71 [ 218.456924][ T1109] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 218.468152][ T1109] usb 3-1: USB disconnect, device number 23 [ 218.571500][ T6060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1729'. [ 218.572896][ T6064] exFAT-fs (rnullb0): invalid boot record signature [ 218.587345][ T6064] exFAT-fs (rnullb0): failed to read boot sector [ 218.593817][ T6064] exFAT-fs (rnullb0): failed to recognize exfat type [ 218.609588][ T6062] syzkaller1: entered promiscuous mode [ 218.611207][ T553] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 218.617880][ T6062] syzkaller1: entered allmulticast mode [ 218.751255][ T553] usb 1-1: device descriptor read/64, error -71 [ 218.784871][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.793413][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.955718][ T6082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.964247][ T6082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.992054][ T553] usb 1-1: device descriptor read/64, error -71 [ 219.101727][ T553] usb usb1-port1: attempt power cycle [ 219.368945][ T6087] netlink: 'syz.3.1737': attribute type 1 has an invalid length. [ 219.376798][ T420] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 219.441220][ T553] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 219.472321][ T553] usb 1-1: device descriptor read/8, error -71 [ 219.498144][ T6107] syzkaller1: entered promiscuous mode [ 219.503672][ T6107] syzkaller1: entered allmulticast mode [ 219.529905][ T6109] syzkaller1: entered promiscuous mode [ 219.535513][ T6109] syzkaller1: entered allmulticast mode [ 219.541257][ T420] usb 3-1: Using ep0 maxpacket: 8 [ 219.548378][ T420] usb 3-1: unable to get BOS descriptor or descriptor too short [ 219.572031][ T420] usb 3-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 219.581771][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.589967][ T420] usb 3-1: Product: syz [ 219.594604][ T420] usb 3-1: Manufacturer: syz [ 219.603515][ T420] usb 3-1: SerialNumber: syz [ 219.612202][ T553] usb 1-1: device descriptor read/8, error -71 [ 219.684665][ T6116] SELinux: ebitmap start bit (1048576) is beyond the end of the bitmap (1472) [ 219.695565][ T6116] SELinux: failed to load policy [ 219.702451][ T66] hid-generic 0000:10000:14000.0035: unknown main item tag 0x0 [ 219.722120][ T66] hid-generic 0000:10000:14000.0035: hidraw1: HID v0.00 Device [syz1] on syz0 [ 219.814941][ T420] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 219.831468][ T420] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 219.856711][ T420] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 219.871242][ T553] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 219.889770][ T420] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 219.911042][ T420] usb 3-1: USB disconnect, device number 24 [ 219.918012][ T553] usb 1-1: device descriptor read/8, error -71 [ 219.949865][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.036549][ T6120] incfs: Can't find or create .index dir in ./file0 [ 220.043272][ T6120] incfs: mount failed -1 [ 220.062316][ T553] usb 1-1: device descriptor read/8, error -71 [ 220.119789][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.128451][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.181312][ T553] usb usb1-port1: unable to enumerate USB device [ 220.474817][ T6133] input: syz0 as /devices/virtual/input/input49 [ 220.525230][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.534377][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.543876][ T36] audit: type=1400 audit(2016777874.850:1437): avc: denied { remount } for pid=6134 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 220.641215][ T553] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 220.701720][ T6137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1756'. [ 220.791197][ T553] usb 3-1: Using ep0 maxpacket: 16 [ 220.797453][ T553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.808475][ T553] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.818229][ T553] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.831072][ T553] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.840120][ T553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.848816][ T553] usb 3-1: config 0 descriptor?? [ 221.062571][ T553] usbhid 3-1:0.0: can't add hid device: -71 [ 221.083174][ T553] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 221.093473][ T6157] cgroup: noprefix used incorrectly [ 221.093793][ T553] usb 3-1: USB disconnect, device number 25 [ 221.141386][ T6159] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1762'. [ 221.151234][ T1109] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 221.205795][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.214962][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.311210][ T1109] usb 1-1: Using ep0 maxpacket: 32 [ 221.317675][ T1109] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 221.326305][ T1109] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 221.335379][ T1109] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 221.344537][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 221.355896][ T1109] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 221.366137][ T1109] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 221.379582][ T1109] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 221.388839][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.398318][ T1109] usb 1-1: config 0 descriptor?? [ 221.403790][ T6148] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 221.461243][ T553] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 221.587469][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.596021][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.612483][ T1109] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 221.632548][ T553] usb 3-1: unable to get BOS descriptor or descriptor too short [ 221.640896][ T553] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.651006][ T553] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 221.661971][ T553] usb 3-1: string descriptor 0 read error: -22 [ 221.668159][ T553] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.677196][ T553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.688667][ T553] usb 3-1: low speed audio streaming not supported [ 221.695231][ T553] usb 3-1: 0:2 : does not exist [ 221.816770][ T36] audit: type=1400 audit(2016777876.120:1438): avc: denied { execute } for pid=6147 comm="syz.0.1759" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 221.822701][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.848640][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.889699][ T553] usb 3-1: USB disconnect, device number 26 [ 221.912140][ T6178] fuse: Unknown parameter 'UZӟyF1WsL ?D[r燧VG$-Q/zRb` զlN~.&ʋlU7$ Ϻ>M5yaըwTx$>˶gPaS4 Y[7C(\MKx>T|' [ 221.952527][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.961092][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.116952][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.125582][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.487205][ T6188] 9p: Unknown access argument userKg: -22 [ 222.549422][ T6190] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1772'. [ 222.641261][ T66] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 222.652928][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.671372][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.680414][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.691850][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.712137][ T6211] netlink: 'syz.4.1778': attribute type 4 has an invalid length. [ 222.719901][ T6211] netlink: 'syz.4.1778': attribute type 32 has an invalid length. [ 222.727740][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.736990][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.745575][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.753736][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.763551][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.772283][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.802639][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 222.812625][ T66] usb 3-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 222.821782][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.829890][ T66] usb 3-1: Product: syz [ 222.834464][ T66] usb 3-1: Manufacturer: syz [ 222.839125][ T66] usb 3-1: SerialNumber: syz [ 223.053004][ T66] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 223.060083][ T66] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 223.077275][ T66] usb 3-1: USB disconnect, device number 27 [ 223.341593][ T6221] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1781'. [ 223.413922][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.432164][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.498450][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.507136][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.517040][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.526155][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.862117][ T420] usb 1-1: USB disconnect, device number 126 [ 223.876258][ T420] usblp0: removed [ 223.913923][ T6240] netlink: 'syz.0.1787': attribute type 20 has an invalid length. [ 223.920116][ T36] audit: type=1400 audit(2016777878.220:1439): avc: denied { accept } for pid=6239 comm="syz.0.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 224.005113][ T6242] ip6_tunnel: non-ECT from fe80:0000:0000:88fc:7073:8daf:7b32:00aa with DS=0xed [ 224.031369][ T6244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.040029][ T6244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.079821][ T6246] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1790'. [ 224.232051][ T6254] IPv6: Can't replace route, no match found [ 224.311201][ T420] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 224.383635][ T6268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.392234][ T6268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.482541][ T420] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 224.490144][ T420] usb 1-1: can't read configurations, error -61 [ 224.511235][ T31] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 224.621220][ T420] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 224.629636][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.638301][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.661201][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 224.782622][ T420] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 224.790240][ T420] usb 1-1: can't read configurations, error -61 [ 224.797538][ T31] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 224.805065][ T420] usb usb1-port1: attempt power cycle [ 224.951234][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 224.956713][ T31] usb usb3-port1: attempt power cycle [ 224.972112][ T36] audit: type=1400 audit(2016777879.280:1440): avc: denied { ioctl } for pid=6273 comm="syz.4.1799" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 225.016958][ T6276] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1800'. [ 225.091891][ T6280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.141204][ T420] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 225.182879][ T420] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 225.190465][ T420] usb 1-1: can't read configurations, error -61 [ 225.230720][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.240204][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.301233][ T31] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 225.328509][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 225.333893][ T420] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 225.363375][ T420] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 225.371032][ T420] usb 1-1: can't read configurations, error -61 [ 225.377604][ T420] usb usb1-port1: unable to enumerate USB device [ 225.481222][ T31] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 225.501544][ T31] usb 3-1: Invalid ep0 maxpacket: 16 [ 225.506983][ T31] usb usb3-port1: unable to enumerate USB device [ 226.035379][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.044055][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.288586][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.297601][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.308022][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.316493][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.408284][ T6301] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1809'. [ 226.540102][ T6306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.552021][ T6306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.645447][ T6312] lo: entered promiscuous mode [ 226.755785][ T6311] lo: left promiscuous mode [ 226.961913][ T6334] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1818'. [ 227.091484][ T6342] 9pnet_fd: Insufficient options for proto=fd [ 227.337772][ T6355] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1825'. [ 227.359045][ T6355] gretap0: entered promiscuous mode [ 227.367851][ T6355] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1825'. [ 227.377546][ T6355] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1825'. [ 227.386627][ T6355] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1825'. [ 227.398155][ T6355] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1825'. [ 227.407246][ T6355] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1825'. [ 227.431196][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 227.495227][ T6362] rust_binder: 164: no such ref 0 [ 227.601500][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 227.611945][ T31] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 227.631250][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 227.637883][ T31] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 227.647132][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.656127][ T31] usb 1-1: config 0 descriptor?? [ 228.063535][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.072791][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.206334][ T36] audit: type=1400 audit(2016777882.510:1441): avc: denied { ioctl } for pid=6381 comm="syz.2.1834" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 228.298198][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.306810][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.345500][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 228.351544][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 228.360141][ T31] usb 1-1: USB disconnect, device number 5 [ 228.780097][ T6393] rust_binder: 6392:6393 transaction to 0 failed: ENOENT [ 228.780605][ T36] audit: type=1400 audit(2016777883.080:1442): avc: denied { setattr } for pid=6392 comm="syz.4.1837" path="socket:[41371]" dev="sockfs" ino=41371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.835099][ T36] audit: type=1400 audit(2016777883.140:1443): avc: denied { append } for pid=6396 comm="syz.3.1839" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 228.907018][ T6406] syzkaller1: entered promiscuous mode [ 228.914365][ T6406] syzkaller1: entered allmulticast mode [ 229.019018][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.038425][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.121193][ T31] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 229.282295][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.299913][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.322298][ T31] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 229.341175][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.359345][ T31] usb 1-1: Product: syz [ 229.363566][ T31] usb 1-1: Manufacturer: syz [ 229.368159][ T31] usb 1-1: SerialNumber: syz [ 229.385177][ T31] usb 1-1: config 0 descriptor?? [ 229.395211][ T31] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 229.411497][ T31] usb 1-1: No valid video chain found. [ 229.591885][ T6404] 9pnet_fd: p9_fd_create_tcp (6404): problem connecting socket to 127.0.0.1 [ 229.608367][ T31] usb 1-1: USB disconnect, device number 6 [ 229.788902][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.797499][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.184012][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.193083][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.371208][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 230.455740][ T6434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.464284][ T6434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.521189][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 230.527420][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.538343][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.548079][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.560884][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.569939][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.578640][ T31] usb 1-1: config 0 descriptor?? [ 230.998420][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0036/input/input51 [ 231.018214][ T31] microsoft 0003:045E:07DA.0036: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 231.218453][ T31] usb 1-1: USB disconnect, device number 7 [ 231.961189][ T1109] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 232.001204][ T66] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 232.052646][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.061242][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.111192][ T1109] usb 3-1: Using ep0 maxpacket: 16 [ 232.117303][ T1109] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 232.128286][ T1109] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 232.140772][ T1109] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 232.149901][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.158506][ T1109] usb 3-1: Product: syz [ 232.162839][ T1109] usb 3-1: Manufacturer: syz [ 232.167441][ T1109] usb 3-1: SerialNumber: syz [ 232.172106][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 232.179463][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.190377][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.200153][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.212940][ T66] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.221983][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.230535][ T66] usb 1-1: config 0 descriptor?? [ 232.382313][ T1109] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 232.392398][ T1109] usb 3-1: USB disconnect, device number 32 [ 232.437222][ T6481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.445835][ T6481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.454660][ T6481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.463155][ T6481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.472007][ T6481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.482106][ T6481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.583166][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.591754][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.599995][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.609573][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.611184][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.625867][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.692770][ T66] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 232.700343][ T66] microsoft 0003:045E:07DA.0037: No inputs registered, leaving [ 232.708513][ T66] microsoft 0003:045E:07DA.0037: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 232.720133][ T66] microsoft 0003:045E:07DA.0037: no inputs found [ 232.726656][ T66] microsoft 0003:045E:07DA.0037: could not initialize ff, continuing anyway [ 232.769338][ T6501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.778005][ T6501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.859325][ T6506] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.867375][ T6506] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 232.875924][ T6506] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.883927][ T6506] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 232.897341][ T420] usb 1-1: USB disconnect, device number 8 [ 232.909764][ T6508] gretap0: left promiscuous mode [ 232.926827][ T6510] tipc: Can't bind to reserved service type 2 [ 233.231223][ T66] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 233.335773][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.344361][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.391200][ T66] usb 3-1: Invalid ep0 maxpacket: 64 [ 233.521189][ T66] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 233.671181][ T66] usb 3-1: Invalid ep0 maxpacket: 64 [ 233.676589][ T66] usb usb3-port1: attempt power cycle [ 233.711213][ T420] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 233.789011][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.798070][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.807338][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.815832][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.824286][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.832848][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.862519][ T420] usb 1-1: unable to get BOS descriptor or descriptor too short [ 233.870864][ T420] usb 1-1: not running at top speed; connect to a high speed hub [ 233.881185][ T420] usb 1-1: config 129 has an invalid interface number: 80 but max is 0 [ 233.889531][ T420] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 233.897863][ T420] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 233.907431][ T420] usb 1-1: config 129 has no interface number 0 [ 233.910030][ T6537] __nla_validate_parse: 27 callbacks suppressed [ 233.910047][ T6537] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1883'. [ 233.913926][ T420] usb 1-1: config 129 has no interface number 1 [ 233.935115][ T420] usb 1-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 233.935187][ T6537] gretap0: entered promiscuous mode [ 233.948619][ T420] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 233.953705][ T6537] gretap0: left allmulticast mode [ 233.964671][ T420] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 233.983033][ T420] usb 1-1: config 129 interface 80 has no altsetting 0 [ 233.989900][ T420] usb 1-1: config 129 interface 5 has no altsetting 0 [ 233.998949][ T420] usb 1-1: string descriptor 0 read error: -22 [ 234.005674][ T420] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 234.015021][ T6537] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1883'. [ 234.023934][ T420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.024071][ T6537] 0{X: renamed from gretap0 [ 234.036957][ T66] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 234.040013][ T420] usb 1-1: MIDIStreaming interface descriptor not found [ 234.052227][ T6537] 0{X: left promiscuous mode [ 234.058194][ T6537] 0{X: entered allmulticast mode [ 234.065363][ T66] usb 3-1: Invalid ep0 maxpacket: 64 [ 234.072512][ T6537] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 234.104433][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'. [ 234.211225][ T66] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 234.231611][ T66] usb 3-1: Invalid ep0 maxpacket: 64 [ 234.239104][ T66] usb usb3-port1: unable to enumerate USB device [ 234.286812][ T66] usb 1-1: USB disconnect, device number 9 [ 234.866417][ T6564] netlink: 'syz.3.1892': attribute type 4 has an invalid length. [ 234.954064][ T6570] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6570 comm=syz.3.1893 [ 235.029087][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1895'. [ 235.050205][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.058769][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.101202][ T66] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 235.123934][ T36] audit: type=1326 audit(2016777889.430:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6578 comm="syz.3.1897" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ba679ce59 code=0xc0000 [ 235.251191][ T66] usb 1-1: Using ep0 maxpacket: 8 [ 235.258187][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.270106][ T66] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.279188][ T66] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.297678][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.307020][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.315543][ T66] usb 1-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈→Ⓩ蟸맏᯻쌲钧욢 [ 235.331948][ T66] usb 1-1: SerialNumber: syz [ 235.464579][ T36] audit: type=1400 audit(2016777889.770:1445): avc: denied { setattr } for pid=6580 comm="syz.3.1898" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 235.539403][ T66] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 235.547321][ T66] cdc_ncm 1-1:1.0: bind() failure [ 235.554288][ T66] usb 1-1: USB disconnect, device number 10 [ 235.601255][ T6589] syzkaller1: entered promiscuous mode [ 235.606760][ T6589] syzkaller1: entered allmulticast mode [ 235.634282][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.645162][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.655520][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.664731][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.017225][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 236.274116][ T6607] syzkaller1: left promiscuous mode [ 236.288663][ T6607] syzkaller1: left allmulticast mode [ 236.357064][ T6616] input: syz0 as /devices/virtual/input/input54 [ 236.377144][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.392166][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.401397][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.412443][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.421365][ T66] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 236.581250][ T1109] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 236.590075][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.600721][ T66] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.612101][ T66] usb 3-1: config 1 interface 1 has no altsetting 1 [ 236.620345][ T66] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.629799][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.638026][ T66] usb 3-1: Product: syz [ 236.642481][ T66] usb 3-1: Manufacturer: syz [ 236.647152][ T66] usb 3-1: SerialNumber: syz [ 236.660025][ T66] usb 3-1: selecting invalid altsetting 1 [ 236.742322][ T1109] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 236.752716][ T1109] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.766896][ T1109] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 236.776273][ T1109] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.784643][ T1109] usb 1-1: Manufacturer: syz [ 236.792035][ T1109] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 236.858249][ T66] cdc_ncm 3-1:1.0: bind() failure [ 236.866668][ T66] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 236.873836][ T66] cdc_ncm 3-1:1.1: bind() failure [ 236.881537][ T66] usb 3-1: USB disconnect, device number 37 [ 236.993536][ T1109] usb 1-1: USB disconnect, device number 11 [ 237.391678][ T36] audit: type=1400 audit(2016777891.700:1446): avc: denied { getattr } for pid=6617 comm="syz.2.1911" path="cgroup:[4026532298]" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 237.583936][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 238.151220][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 238.322543][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 238.341566][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 238.352555][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 238.365343][ T31] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 238.385064][ T36] audit: type=1400 audit(2016777892.690:1447): avc: denied { mounton } for pid=6634 comm="syz.0.1917" path="/file0" dev="ramfs" ino=42972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 238.391174][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.415261][ T31] usb 3-1: Product: syz [ 238.419451][ T31] usb 3-1: Manufacturer: syz [ 238.424214][ T31] usb 3-1: SerialNumber: syz [ 238.637358][ T31] usb 3-1: Can't get UAC3 power state for id 10 [ 238.650129][ T31] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 238.662900][ T31] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 238.722764][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 238.731775][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 238.742729][ T31] usb 3-1: USB disconnect, device number 38 [ 238.752583][ T445] udevd[445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.879738][ T6660] tipc: Enabling of bearer rejected, failed to enable media [ 238.881190][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 238.898107][ T45] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 238.906482][ T45] usb 1-1: config 179 has no interface number 0 [ 238.912975][ T45] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 238.924240][ T45] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 238.936131][ T45] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 238.956417][ T45] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 238.969879][ T45] usb 1-1: config 179 interface 65 has no altsetting 0 [ 238.976769][ T45] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 238.994185][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.010287][ T36] audit: type=1400 audit(2016777893.310:1448): avc: denied { cmd } for pid=6667 comm="syz.3.1928" path="socket:[44219]" dev="sockfs" ino=44219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 239.035364][ T45] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input57 [ 239.081825][ T6669] fuse: Bad value for 'fd' [ 239.101301][ T319] input input57: unable to receive magic message: -110 [ 239.117588][ T95] input input57: unable to receive magic message: -32 [ 239.126423][ T95] input input57: unable to receive magic message: -32 [ 239.252549][ T45] usb 1-1: USB disconnect, device number 12 [ 239.258524][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 239.291180][ T45] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 239.320856][ T6678] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1932'. [ 239.330913][ T36] audit: type=1326 audit(2016777893.630:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.4.1932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc15e99ce59 code=0x0 [ 239.401957][ T6683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.411189][ T66] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 239.419834][ T6683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.428851][ T6685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.438103][ T6685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.447248][ T6685] futex_wake_op: syz.3.1935 tries to shift op by -1; fix this program [ 239.456944][ T6685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.466280][ T6685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.572423][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.580402][ T66] usb 3-1: not running at top speed; connect to a high speed hub [ 239.590057][ T66] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 239.599142][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.607147][ T66] usb 3-1: Product: syz [ 239.611338][ T66] usb 3-1: Manufacturer: syz [ 239.616018][ T66] usb 3-1: SerialNumber: syz [ 239.816327][ T6687] loop9: detected capacity change from 0 to 7 [ 239.825026][ T66] usb 3-1: 1:1 : bogus bTerminalLink 3 [ 239.832966][ T66] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 239.846741][ T66] usb 3-1: USB disconnect, device number 39 [ 239.966431][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.975006][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.004334][ T6702] tc_dump_action: action bad kind [ 240.029237][ T6705] input: syz0 as /devices/virtual/input/input58 [ 240.040200][ T6706] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1941'. [ 240.215205][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.224201][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.233029][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.241862][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.281194][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 240.536816][ T6730] incfs: Can't find or create .index dir in ./cgroup [ 240.543603][ T6730] incfs: mount failed -22 [ 240.711201][ T31] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 240.817541][ T6746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.827541][ T6746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.835517][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.844852][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.881173][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 240.890955][ T31] usb 3-1: config 3 has an invalid interface number: 255 but max is 0 [ 240.899448][ T31] usb 3-1: config 3 has an invalid descriptor of length 15, skipping remainder of the config [ 240.910056][ T31] usb 3-1: config 3 has no interface number 0 [ 240.916234][ T31] usb 3-1: config 3 interface 255 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.929862][ T31] usb 3-1: config 3 interface 255 has no altsetting 0 [ 240.938275][ T31] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=95.29 [ 240.947462][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.955554][ T31] usb 3-1: Product: syz [ 240.959860][ T31] usb 3-1: Manufacturer: syz [ 240.964599][ T31] usb 3-1: SerialNumber: syz [ 241.062856][ T6759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.071602][ T6759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.080049][ T6759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.089097][ T6759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.097639][ T6759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.106671][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.106746][ T6759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.117422][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.176273][ T31] usbserial_generic 3-1:3.255: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 241.187719][ T31] usbserial_generic 3-1:3.255: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 241.198608][ T31] usbserial_generic 3-1:3.255: device has no bulk endpoints [ 241.208862][ T31] usb 3-1: USB disconnect, device number 40 [ 241.406518][ T6767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.415118][ T6767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.648935][ T36] audit: type=1400 audit(2016777895.952:1450): avc: denied { execheap } for pid=6768 comm="syz.4.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 241.737787][ T36] audit: type=1400 audit(2016777896.042:1451): avc: denied { name_bind } for pid=6774 comm="syz.4.1964" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 241.790737][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1963'. [ 241.806811][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.815468][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.077688][ T6793] netlink: 'syz.2.1966': attribute type 4 has an invalid length. [ 242.098936][ T6784] netlink: 'syz.2.1966': attribute type 4 has an invalid length. [ 242.150615][ T6795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.166597][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.175318][ T6795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.183218][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.411093][ T1109] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 242.561078][ T1109] usb 3-1: Using ep0 maxpacket: 8 [ 242.567226][ T1109] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.580132][ T1109] usb 3-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 242.589279][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.598215][ T1109] usb 3-1: config 0 descriptor?? [ 242.633645][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.642589][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.822058][ T6797] kvm: Disabled LAPIC found during irq injection [ 242.834457][ T1109] wacom 0003:056A:0065.0038: ignoring exceeding usage max [ 242.844305][ T1109] wacom 0003:056A:0065.0038: unknown main item tag 0x0 [ 242.851888][ T1109] wacom 0003:056A:0065.0038: item fetching failed at offset 26/40 [ 242.870111][ T1109] wacom 0003:056A:0065.0038: parse failed [ 242.875974][ T1109] wacom 0003:056A:0065.0038: probe with driver wacom failed with error -22 [ 243.063461][ T1109] usb 3-1: USB disconnect, device number 41 [ 243.313962][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.322573][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.331796][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.340266][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.820963][ T420] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 243.838083][ T6833] tmpfs: Unknown parameter 'B' [ 243.892460][ T36] audit: type=1400 audit(2016777898.203:1452): avc: denied { watch watch_reads } for pid=6838 comm="syz.3.1986" path="/377/file0" dev="tmpfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 243.970961][ T420] usb 3-1: Using ep0 maxpacket: 16 [ 243.982788][ T420] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 243.990391][ T420] usb 3-1: can't read configurations, error -61 [ 244.121698][ T45] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 244.141272][ T420] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 244.271974][ T45] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.283023][ T45] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.292790][ T420] usb 3-1: Using ep0 maxpacket: 16 [ 244.297959][ T45] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.310843][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 244.317569][ T45] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 244.326665][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.335810][ T45] usb 1-1: config 0 descriptor?? [ 244.340883][ T420] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 244.348446][ T420] usb 3-1: can't read configurations, error -61 [ 244.354878][ T420] usb usb3-port1: attempt power cycle [ 244.700843][ T420] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 244.724885][ T420] usb 3-1: Using ep0 maxpacket: 16 [ 244.733077][ T420] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 244.740666][ T420] usb 3-1: can't read configurations, error -61 [ 244.769431][ T45] holtek 0003:1241:5015.0039: unknown main item tag 0x0 [ 244.780143][ T45] holtek 0003:1241:5015.0039: unknown main item tag 0x0 [ 244.787214][ T45] holtek 0003:1241:5015.0039: unknown main item tag 0x0 [ 244.794409][ T45] holtek 0003:1241:5015.0039: unknown main item tag 0x0 [ 244.801507][ T45] holtek 0003:1241:5015.0039: unknown main item tag 0x0 [ 244.812021][ T45] holtek 0003:1241:5015.0039: hidraw1: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 244.830822][ T45] holtek 0003:1241:5015.0039: no inputs found [ 244.870842][ T420] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 244.900158][ T6870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.909605][ T6870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.917534][ T420] usb 3-1: Using ep0 maxpacket: 16 [ 244.924194][ T420] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 244.931899][ T420] usb 3-1: can't read configurations, error -61 [ 244.938322][ T420] usb usb3-port1: unable to enumerate USB device [ 245.012285][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.022695][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.034989][ T1109] usb 1-1: USB disconnect, device number 14 [ 245.043282][ T6872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1993'. [ 245.512061][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.520557][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.592978][ T36] audit: type=1400 audit(2016777899.903:1453): avc: denied { setattr } for pid=6887 comm="syz.4.1998" name="UDPLITEv6" dev="sockfs" ino=45429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.663856][ T6894] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2000'. [ 245.681633][ T6898] overlayfs: failed to resolve './file0': -2 [ 245.712066][ T6903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.721325][ T6903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.892358][ T6908] 9pnet_fd: p9_fd_create_tcp (6908): problem connecting socket to 127.0.0.1 [ 245.957642][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 245.969446][ T6912] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2007'. [ 246.059277][ T6920] netlink: 'syz.3.2009': attribute type 16 has an invalid length. [ 246.068289][ T6920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.077217][ T6920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.280652][ T420] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 246.361552][ T6927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.370064][ T6927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.381443][ T6927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.391669][ T6927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.441708][ T420] usb 1-1: config 120 has an invalid interface number: 125 but max is 0 [ 246.450083][ T420] usb 1-1: config 120 has no interface number 0 [ 246.456411][ T420] usb 1-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64 [ 246.467660][ T420] usb 1-1: config 120 interface 125 has no altsetting 0 [ 246.481686][ T420] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 246.490845][ T420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.498842][ T420] usb 1-1: Product: syz [ 246.503042][ T420] usb 1-1: Manufacturer: syz [ 246.507639][ T420] usb 1-1: SerialNumber: syz [ 246.522758][ T6918] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 246.605471][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.614156][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.749718][ T6933] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2014'. [ 246.767402][ T6917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.776209][ T6917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.850318][ T6941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.864025][ T6941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.873796][ T6940] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2016'. [ 246.883645][ T6940] incfs: Options parsing error. -22 [ 246.889076][ T6940] incfs: mount failed -22 [ 246.890634][ T420] ums-usbat 1-1:120.125: USB Mass Storage device detected [ 246.931873][ T420] usb 1-1: USB disconnect, device number 15 [ 247.138204][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.162140][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.253770][ T416] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 247.291548][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.310801][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.450521][ T416] usb 3-1: Using ep0 maxpacket: 8 [ 247.469819][ T416] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.483744][ T416] usb 3-1: config 0 interface 0 has no altsetting 0 [ 247.490495][ T416] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 247.499797][ T416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.513604][ T416] usb 3-1: config 0 descriptor?? [ 247.540496][ T1109] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 247.700442][ T1109] usb 1-1: Using ep0 maxpacket: 8 [ 247.706613][ T1109] usb 1-1: config 0 has no interfaces? [ 247.713855][ T1109] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 247.724167][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.734961][ T416] usb 3-1: string descriptor 0 read error: -71 [ 247.741333][ T1109] usb 1-1: Product: syz [ 247.746102][ T416] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 247.755713][ T1109] usb 1-1: Manufacturer: syz [ 247.760342][ T1109] usb 1-1: SerialNumber: syz [ 247.771364][ T416] usbhid 3-1:0.0: can't add hid device: -71 [ 247.780964][ T416] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 247.789512][ T1109] usb 1-1: config 0 descriptor?? [ 247.799009][ T416] usb 3-1: USB disconnect, device number 46 [ 247.844282][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.853281][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.011041][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.020589][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.034091][ T416] usb 1-1: USB disconnect, device number 16 [ 248.560369][ T420] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 248.730306][ T420] usb 3-1: Using ep0 maxpacket: 32 [ 248.741414][ T420] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.761868][ T420] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 248.774281][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.790303][ T420] usb 3-1: Product: syz [ 248.794495][ T420] usb 3-1: Manufacturer: syz [ 248.799147][ T420] usb 3-1: SerialNumber: syz [ 248.808189][ T420] usb 3-1: config 0 descriptor?? [ 248.815443][ T420] smsc75xx v1.0.0 [ 248.819097][ T420] smsc75xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 248.829286][ T420] smsc75xx 3-1:0.0: probe with driver smsc75xx failed with error -22 [ 248.830349][ T416] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 249.011464][ T416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 249.027918][ T416] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 249.047576][ T416] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 249.067456][ T416] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 249.080837][ T416] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 249.091046][ T416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.105636][ T416] usb 1-1: Product: syz [ 249.109881][ T416] usb 1-1: Manufacturer: syz [ 249.116292][ T416] usb 1-1: SerialNumber: syz [ 249.140520][ T416] usb 1-1: config 0 descriptor?? [ 249.147122][ T416] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 249.262224][ T1109] usb 3-1: USB disconnect, device number 47 [ 249.361419][ T416] scsi host1: usb-storage 1-1:0.0 [ 249.373717][ T416] usb 1-1: USB disconnect, device number 17 [ 249.839433][ T6997] netlink: 'syz.2.2033': attribute type 12 has an invalid length. [ 249.892677][ T36] audit: type=1326 audit(2016777904.203:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.2035" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c4719ce59 code=0x0 [ 249.944943][ T36] audit: type=1326 audit(2016777904.253:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.2035" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4719ce59 code=0x7ffc0000 [ 249.971023][ T36] audit: type=1326 audit(2016777904.253:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.2035" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4719ce59 code=0x7ffc0000 [ 249.999100][ T36] audit: type=1326 audit(2016777904.253:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.2035" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4719ce59 code=0x7ffc0000 [ 250.024809][ T36] audit: type=1326 audit(2016777904.253:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.2035" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4719ce59 code=0x7ffc0000 [ 250.050686][ T36] audit: type=1326 audit(2016777904.253:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.2035" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f9c4719ce59 code=0x7ffc0000 [ 250.076377][ T36] audit: type=1326 audit(2016777904.253:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.2035" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4719ce59 code=0x7ffc0000 [ 250.104755][ T36] audit: type=1326 audit(2016777904.253:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.2035" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4719ce59 code=0x7ffc0000 [ 250.130459][ T36] audit: type=1326 audit(2016777904.283:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.2035" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4719ce59 code=0x7ffc0000 [ 250.158173][ T36] audit: type=1326 audit(2016777904.283:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7004 comm="syz.0.2035" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4719ce59 code=0x7ffc0000 [ 250.180199][ T420] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 250.350114][ T420] usb 3-1: Using ep0 maxpacket: 16 [ 250.371093][ T420] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 250.379185][ T420] usb 3-1: config 0 has no interface number 0 [ 250.390147][ T420] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 250.410157][ T420] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 250.421532][ T420] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 250.430767][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.438917][ T420] usb 3-1: Product: syz [ 250.443480][ T420] usb 3-1: Manufacturer: syz [ 250.448238][ T420] usb 3-1: SerialNumber: syz [ 250.460535][ T420] usb 3-1: config 0 descriptor?? [ 250.465738][ T7010] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 250.473157][ T7010] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 250.690325][ T7011] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 250.697985][ T7011] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 250.710827][ T420] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 250.805729][ T7016] netlink: 'syz.0.2037': attribute type 1 has an invalid length. [ 250.911262][ T420] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 250.939700][ T420] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 250.960108][ T420] asix 3-1:0.34: probe with driver asix failed with error -71 [ 250.981179][ T420] usb 3-1: USB disconnect, device number 48 [ 251.110101][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.130798][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.270047][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 251.431031][ T9] usb 1-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 251.459981][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.478572][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 251.500009][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.549998][ T9] usb 1-1: config 0 descriptor?? [ 251.669957][ T420] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 251.797383][ T7044] netlink: 'syz.3.2045': attribute type 3 has an invalid length. [ 251.806268][ T7044] netlink: 'syz.3.2045': attribute type 3 has an invalid length. [ 251.814065][ T420] usb 3-1: device descriptor read/64, error -71 [ 251.895478][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.905136][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.963734][ T9] usb 1-1: string descriptor 0 read error: -71 [ 251.973238][ T9] usb 1-1: USB disconnect, device number 18 [ 252.059957][ T420] usb 3-1: device descriptor read/64, error -71 [ 252.309931][ T420] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 252.439898][ T420] usb 3-1: device descriptor read/64, error -71 [ 252.679929][ T420] usb 3-1: device descriptor read/64, error -71 [ 252.730242][ T7062] tipc: Started in network mode [ 252.735136][ T7062] tipc: Node identity 7f000001, cluster identity 4711 [ 252.770169][ T7062] tipc: Enabled bearer , priority 10 [ 252.777856][ T7062] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2051'. [ 252.791070][ T420] usb usb3-port1: attempt power cycle [ 253.139808][ T420] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 253.180771][ T420] usb 3-1: device descriptor read/8, error -71 [ 253.315543][ T7073] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2055'. [ 253.322061][ T420] usb 3-1: device descriptor read/8, error -71 [ 253.440939][ T7077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.479982][ T7077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.581280][ T420] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 253.611095][ T420] usb 3-1: device descriptor read/8, error -71 [ 253.740712][ T420] usb 3-1: device descriptor read/8, error -71 [ 253.849829][ T420] usb usb3-port1: unable to enumerate USB device [ 253.889749][ T1109] tipc: Node number set to 2130706433 [ 254.029892][ T1109] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 254.153991][ T7095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.164380][ T7095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.179682][ T1109] usb 1-1: device descriptor read/64, error -71 [ 254.429653][ T1109] usb 1-1: device descriptor read/64, error -71 [ 254.693646][ T1109] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 254.711667][ T7099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2065'. [ 254.721568][ T7099] fuse: Bad value for 'fd' [ 254.859714][ T1109] usb 1-1: device descriptor read/64, error -71 [ 254.909576][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 255.089540][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 255.102520][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 255.110230][ T1109] usb 1-1: device descriptor read/64, error -71 [ 255.131661][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 255.149536][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.157564][ T9] usb 3-1: Product: syz [ 255.163407][ T7116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.179553][ T9] usb 3-1: Manufacturer: а [ 255.184106][ T9] usb 3-1: SerialNumber: syz [ 255.192900][ T7116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.202995][ T9] usb 3-1: Fast Track Pro switching to config #2 [ 255.221202][ T1109] usb usb1-port1: attempt power cycle [ 255.405661][ T7097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.420741][ T7097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.439717][ T9] usb 3-1: USB disconnect, device number 53 [ 255.569525][ T1109] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 255.594743][ T1109] usb 1-1: device descriptor read/8, error -71 [ 255.743079][ T1109] usb 1-1: device descriptor read/8, error -71 [ 255.919482][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.928651][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.989448][ T1109] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 256.030487][ T1109] usb 1-1: device descriptor read/8, error -71 [ 256.170449][ T1109] usb 1-1: device descriptor read/8, error -71 [ 256.189428][ T420] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 256.289588][ T1109] usb usb1-port1: unable to enumerate USB device [ 256.340405][ T420] usb 3-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 256.350779][ T420] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.361153][ T420] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.370273][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.378266][ T420] usb 3-1: Product: syz [ 256.382614][ T420] usb 3-1: Manufacturer: syz [ 256.387218][ T420] usb 3-1: SerialNumber: syz [ 256.482725][ T7126] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=7126 comm=syz.3.2075 [ 256.495672][ T7126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7126 comm=syz.3.2075 [ 257.111094][ T420] usb 3-1: 0:2 : does not exist [ 257.116065][ T420] usb 3-1: unit 9 not found! [ 257.133068][ T420] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 257.153973][ T420] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 257.165665][ T420] usb 3-1: 4:0: cannot get min/max values for control 3 (id 4) [ 257.188627][ T420] usb 3-1: 4:0: cannot get min/max values for control 4 (id 4) [ 257.207058][ T420] usb 3-1: 4:0: cannot get min/max values for control 5 (id 4) [ 257.225980][ T420] usb 3-1: 4:0: cannot get min/max values for control 6 (id 4) [ 257.243648][ T420] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4) [ 257.259294][ T420] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4) [ 257.273655][ T420] usb 3-1: 4:0: cannot get min/max values for control 9 (id 4) [ 257.291631][ T420] usb 3-1: 4:0: cannot get min/max values for control 10 (id 4) [ 257.304065][ T420] usb 3-1: USB disconnect, device number 54 [ 257.919224][ T416] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 258.080308][ T416] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 258.088644][ T416] usb 1-1: config 0 has no interface number 0 [ 258.095068][ T416] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 258.109442][ T416] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 258.118623][ T416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.126830][ T416] usb 1-1: Product: syz [ 258.131303][ T416] usb 1-1: Manufacturer: syz [ 258.135943][ T416] usb 1-1: SerialNumber: syz [ 258.141776][ T416] usb 1-1: config 0 descriptor?? [ 258.148939][ T7151] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 258.161979][ T416] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1a:25:66:a4:d6:e9 [ 258.362103][ T416] usb 1-1: USB disconnect, device number 23 [ 258.382637][ T416] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 259.149065][ T66] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 259.299029][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 259.305249][ T66] usb 1-1: config 5 has an invalid interface number: 90 but max is 0 [ 259.313672][ T66] usb 1-1: config 5 has no interface number 0 [ 259.319975][ T66] usb 1-1: config 5 interface 90 has no altsetting 0 [ 259.328116][ T66] usb 1-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 259.337452][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.359045][ T66] usb 1-1: Product: syz [ 259.363248][ T66] usb 1-1: Manufacturer: syz [ 259.367863][ T66] usb 1-1: SerialNumber: syz [ 259.713163][ T66] usb-storage 1-1:5.90: USB Mass Storage device detected [ 259.721365][ T66] usb-storage 1-1:5.90: Quirks match for vid 050d pid 0115: 4 [ 259.803178][ T66] usb 1-1: USB disconnect, device number 24 [ 260.405627][ T7200] overlayfs: disabling nfs_export due to verity=on [ 260.412297][ T7200] overlayfs: missing 'lowerdir' [ 260.418422][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'. [ 260.482311][ T7200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7200 comm=syz.2.2090 [ 260.498902][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 260.671551][ T45] usb 1-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.694591][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 260.710254][ T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.40 [ 260.728857][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.748305][ T45] usb 1-1: Product: 亸᷊Ɋ鎯뇵彽섉Ⅽ傢魘婸郍艣뵈깢䩕毚烈竝ꁻ堁嶧淺뾘蛓첈䂱睃쇚㪨Ȍ殻췺뚇埑㮐徆纖㗊鯉㗆슭兗䃊㯗㳕忊섺 [ 260.766594][ T45] usb 1-1: SerialNumber: 㖳л훅矎⋏嫋䣈痯舆顊✕햳ꔫﱀ땵׎蠆壘岯ビ뢏ᇶ诈랢뭉Ⲝ핞ꗖ┖ᯝ筵䡥嫙搨侚囬婄䄟䆑炪벤䋭꣙먺罚躙摭ᬛ䋽ᒉ㟳♏꾫뀭䁖╵鲗뾠ᜬ娭탇፮᭕^ၪ羋韚h请癦뻃퉬귯覇쵘콎逷⎲᪵흠 [ 261.000817][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 261.019558][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.030987][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.043195][ T45] usbhid 1-1:1.0: can't add hid device: -71 [ 261.049200][ T45] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 261.060516][ T45] usb 1-1: USB disconnect, device number 25 [ 261.398795][ T31] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 261.568933][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 261.581835][ T31] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.594273][ T31] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.604672][ T31] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.617931][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 261.624724][ T31] usb 3-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 261.640060][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.649162][ T31] usb 3-1: config 0 descriptor?? [ 261.650432][ T36] kauditd_printk_skb: 433 callbacks suppressed [ 261.650446][ T36] audit: type=1400 audit(2016777915.955:1897): avc: denied { mounton } for pid=7212 comm="syz.0.2095" path="/syzcgroup/unified/syz0" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 261.684453][ T7213] cgroup: release_agent respecified [ 262.066620][ T31] chicony 0003:04F2:1123.003A: unexpected long global item [ 262.083538][ T31] chicony 0003:04F2:1123.003A: Chicony hid parse failed: -22 [ 262.091241][ T31] chicony 0003:04F2:1123.003A: probe with driver chicony failed with error -22 [ 262.148739][ T420] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 262.276166][ T31] usb 3-1: USB disconnect, device number 55 [ 262.302357][ T420] usb 1-1: Using ep0 maxpacket: 32 [ 262.321072][ T420] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 262.338704][ T420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.356887][ T420] usb 1-1: Product: syz [ 262.363457][ T420] usb 1-1: Manufacturer: syz [ 262.378263][ T420] usb 1-1: SerialNumber: syz [ 262.602759][ T420] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 262.628196][ T420] usb 1-1: USB disconnect, device number 26 [ 262.651219][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 262.865760][ T1109] usb 5-1: USB disconnect, device number 19 [ 262.929577][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2102'. [ 263.056565][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.073764][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.080888][ T7232] bridge_slave_0: entered allmulticast mode [ 263.087241][ T7232] bridge_slave_0: entered promiscuous mode [ 263.093802][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.100850][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.107901][ T7232] bridge_slave_1: entered allmulticast mode [ 263.119003][ T7232] bridge_slave_1: entered promiscuous mode [ 263.182926][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.190020][ T7232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.197293][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.204335][ T7232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.227884][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.235396][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.256278][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.263335][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.272415][ T420] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 263.280998][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.288040][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.310444][ T7232] veth0_vlan: entered promiscuous mode [ 263.326237][ T7232] veth1_macvtap: entered promiscuous mode [ 263.351143][ T36] audit: type=1400 audit(2016777917.655:1898): avc: denied { mounton } for pid=7232 comm="syz-executor" path="/root/syzkaller.pohSTm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 263.379805][ T36] audit: type=1400 audit(2016777917.685:1899): avc: denied { mount } for pid=7232 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 263.428539][ T420] usb 3-1: Using ep0 maxpacket: 32 [ 263.435438][ T420] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.454721][ T420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 263.467535][ T420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 263.479406][ T420] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 263.488461][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.500196][ T7256] syz.0.2107: attempt to access beyond end of device [ 263.500196][ T7256] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 263.514431][ T7256] EXT4-fs (loop0): unable to read superblock [ 263.519727][ T420] usb 3-1: config 0 descriptor?? [ 263.525704][ T7233] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.535600][ T420] hub 3-1:0.0: USB hub found [ 263.740941][ T420] hub 3-1:0.0: 2 ports detected [ 263.778512][ T45] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 263.929870][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 263.939721][ T45] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 263.948877][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.957421][ T45] usb 1-1: Product: syz [ 263.961689][ T45] usb 1-1: Manufacturer: syz [ 263.966301][ T45] usb 1-1: SerialNumber: syz [ 264.131057][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 264.140001][ T7263] erspan0: entered promiscuous mode [ 264.146120][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2112'. [ 264.173983][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.182838][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.428422][ T66] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 264.589458][ T66] usb 6-1: config 1 has an invalid descriptor of length 8, skipping remainder of the config [ 264.599644][ T66] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.611940][ T66] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.621056][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.629067][ T66] usb 6-1: Product: syz [ 264.633240][ T66] usb 6-1: Manufacturer: syz [ 264.637841][ T66] usb 6-1: SerialNumber: syz [ 264.645336][ T66] cdc_mbim 6-1:1.0: skipping garbage [ 265.566429][ T553] usb 3-1: USB disconnect, device number 56 [ 265.647780][ T7273] 9pnet: p9_errstr2errno: server reported unknown error [ 266.190711][ T66] cdc_mbim 6-1:1.0: bind() failure [ 266.217291][ T66] usb 6-1: USB disconnect, device number 2 [ 266.292453][ T7322] rust_binder: 7321:7322 transaction to 0 failed: ENOENT [ 266.346960][ T45] usb 1-1: MIDIStreaming interface descriptor not found [ 266.370523][ T45] usb 1-1: USB disconnect, device number 27 [ 266.388519][ T445] udevd[445]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 266.572682][ T7349] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 266.572707][ T7349] rust_binder: Read failure Err(EFAULT) in pid:393 [ 266.582014][ T7349] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 266.588767][ T7349] rust_binder: Read failure Err(EFAULT) in pid:393 [ 266.597455][ T7349] rust_binder: Error while translating object. [ 266.598156][ T36] audit: type=1400 audit(2016777920.895:1900): avc: denied { transfer } for pid=7348 comm="syz.2.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 266.604385][ C0] BUG: TASK stack guard page was hit at ffffc9000dd8ffb8 (stack is ffffc9000dd90000..ffffc9000dd98000) [ 266.604428][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 266.604450][ C0] CPU: 0 UID: 0 PID: 7349 Comm: syz.2.2136 Not tainted syzkaller #0 8aa74d1509bce3bd8d8049784ad27492bf03aacb [ 266.604473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.604484][ C0] RIP: 0010:update_stack_state+0xf4/0x4b0 [ 266.604514][ C0] Code: 84 c0 0f 85 89 03 00 00 41 c6 06 01 b8 a8 00 00 00 49 89 d7 eb 05 b8 10 00 00 00 4c 8d 73 08 48 8d 4b 10 4c 89 7d b0 4c 01 f8 <48> 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 [ 266.604528][ C0] RSP: 0018:ffffc9000dd8ffc0 EFLAGS: 00010282 [ 266.604545][ C0] RAX: ffffc9000dd90220 RBX: ffffc9000dd90188 RCX: ffffc9000dd90198 [ 266.604559][ C0] RDX: ffffc9000dd90210 RSI: ffffc9000dd90210 RDI: ffffc9000dd901e0 [ 266.604573][ C0] RBP: ffffc9000dd90080 R08: ffffc9000dd90101 R09: 0000000000000000 [ 266.604601][ C0] R10: ffffc9000dd90188 R11: fffff52001bb203d R12: 0000000000000000 [ 266.604614][ C0] R13: dffffc0000000000 R14: ffffc9000dd90190 R15: ffffc9000dd90210 [ 266.604627][ C0] FS: 00007f7a4fc7b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 266.604643][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.604655][ C0] CR2: ffffc9000dd8ffb8 CR3: 000000010c3b8000 CR4: 00000000003526b0 [ 266.604672][ C0] Call Trace: [ 266.604681][ C0] [ 266.604689][ C0] ? unwind_next_frame+0x3c1/0x750 [ 266.604713][ C0] ? __unwind_start+0x34c/0x410 [ 266.604734][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 266.604755][ C0] ? arch_stack_walk+0xf2/0x170 [ 266.604772][ C0] ? arch_stack_walk+0xf2/0x170 [ 266.604789][ C0] ? stack_trace_save+0xaa/0x100 [ 266.604808][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 266.604828][ C0] ? __asan_memset+0x39/0x50 [ 266.604845][ C0] ? save_stack+0x125/0x240 [ 266.604865][ C0] ? free_contig_range+0x260/0x260 [ 266.604883][ C0] ? __reset_page_owner+0x450/0x450 [ 266.604903][ C0] ? zone_page_state_add+0x43/0x90 [ 266.604924][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 266.604946][ C0] ? sched_clock_noinstr+0xd/0x30 [ 266.604966][ C0] ? __set_page_owner+0x8e/0x600 [ 266.604986][ C0] ? __zone_watermark_ok+0x134/0x630 [ 266.605009][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 266.605029][ C0] ? kasan_unpoison+0x4a/0x70 [ 266.605046][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 266.605067][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 266.605088][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 266.605105][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 266.605121][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 266.605138][ C0] ? prep_new_page+0x2d/0x190 [ 266.605159][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 266.605189][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 266.605211][ C0] ? static_key_count+0x45/0x70 [ 266.605232][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 266.605256][ C0] ? lruvec_init+0x1b1/0x280 [ 266.605275][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 266.605298][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 266.605321][ C0] ? unwind_get_return_address+0x51/0x90 [ 266.605341][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 266.605360][ C0] ? arch_stack_walk+0x10a/0x170 [ 266.605379][ C0] ? stack_trace_save+0xaa/0x100 [ 266.605398][ C0] ? stack_depot_save_flags+0x672/0x800 [ 266.605417][ C0] ? kasan_save_track+0x4f/0x80 [ 266.605436][ C0] ? kasan_save_track+0x3e/0x80 [ 266.605453][ C0] ? kasan_save_free_info+0x4a/0x60 [ 266.605469][ C0] ? __kasan_slab_free+0x5f/0x80 [ 266.605489][ C0] ? kfree+0x158/0x440 [ 266.605505][ C0] ? krealloc_noprof+0xfa/0x130 [ 266.605523][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECs2tVsXcF29le_11rust_binder+0x114/0x360 [ 266.605572][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 266.605599][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 266.605628][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 266.605667][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 266.605694][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3d0/0x28d0 [ 266.605720][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x963/0x3e50 [ 266.605744][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 266.605768][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1192/0x5c20 [ 266.605788][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 266.605807][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 266.605826][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 266.605842][ C0] ? do_syscall_64+0x57/0xf0 [ 266.605859][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 266.605883][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 266.605912][ C0] ? kasan_save_free_info+0x4a/0x60 [ 266.605927][ C0] ? __kasan_slab_free+0x5f/0x80 [ 266.605946][ C0] ? kfree+0x158/0x440 [ 266.605960][ C0] ? krealloc_noprof+0xfa/0x130 [ 266.605979][ C0] ? krealloc_noprof+0xfa/0x130 [ 266.605997][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECs2tVsXcF29le_11rust_binder+0x114/0x360 [ 266.606040][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECs2tVsXcF29le_11rust_binder+0x10/0x10 [ 266.606083][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 266.606122][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 266.606161][ C0] ? __kasan_check_write+0x18/0x20 [ 266.606178][ C0] ? _raw_spin_lock+0x92/0x120 [ 266.606195][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 266.606213][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 266.606247][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 266.606281][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 266.606305][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.606321][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 266.606345][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 266.606369][ C0] ? __kasan_check_write+0x18/0x20 [ 266.606386][ C0] ? _raw_spin_lock+0x92/0x120 [ 266.606403][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 266.606419][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 266.606450][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.606466][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 266.606499][ C0] ? __cfi__RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 266.606530][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 266.606553][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.606569][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 266.606592][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 266.606616][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 266.606633][ C0] ? stack_depot_save_flags+0x399/0x800 [ 266.606651][ C0] ? __kasan_check_write+0x18/0x20 [ 266.606667][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 266.606683][ C0] ? kasan_save_track+0x4f/0x80 [ 266.606702][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 266.606725][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x30c/0x5dd0 [ 266.606755][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.606772][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 266.606805][ C0] ? kernel_text_address+0xa9/0xe0 [ 266.606830][ C0] ? __cfi__RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 266.606861][ C0] ? stack_depot_save_flags+0x399/0x800 [ 266.606880][ C0] ? kasan_save_track+0x4f/0x80 [ 266.606898][ C0] ? kasan_save_track+0x3e/0x80 [ 266.606915][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 266.606938][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 266.606957][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 266.606976][ C0] ? krealloc_noprof+0x8d/0x130 [ 266.606993][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 266.607021][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB5_14AllocationView22transfer_binder_object+0x224/0xc10 [ 266.607051][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x422d/0x9460 [ 266.607080][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3d0/0x28d0 [ 266.607111][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x963/0x3e50 [ 266.607135][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 266.607159][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1192/0x5c20 [ 266.607178][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 266.607197][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 266.607215][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 266.607230][ C0] ? do_syscall_64+0x57/0xf0 [ 266.607252][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 266.607275][ C0] ? put_dec_trunc8+0x229/0x380 [ 266.607292][ C0] ? put_dec+0xd7/0xf0 [ 266.607307][ C0] ? __asan_memset+0x39/0x50 [ 266.607322][ C0] ? move_right+0x8e/0xb0 [ 266.607338][ C0] ? format_decode+0x1bb/0x1610 [ 266.607354][ C0] ? vsnprintf+0x7b4/0x1ad0 [ 266.607369][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.607386][ C0] ? vsnprintf+0x19ef/0x1ad0 [ 266.607402][ C0] ? sprintf+0xe8/0x140 [ 266.607419][ C0] ? __cfi_sprintf+0x10/0x10 [ 266.607433][ C0] ? prb_first_seq+0x109/0x1d0 [ 266.607452][ C0] ? desc_read+0x202/0x3e0 [ 266.607470][ C0] ? info_print_prefix+0x269/0x4a0 [ 266.607489][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 266.607514][ C0] ? kernel_text_address+0xa9/0xe0 [ 266.607534][ C0] ? __kernel_text_address+0x11/0x40 [ 266.607557][ C0] ? __kasan_check_write+0x18/0x20 [ 266.607573][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 266.607590][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 266.607625][ C0] ? stack_trace_save+0xaa/0x100 [ 266.607644][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 266.607661][ C0] ? stack_depot_save_flags+0x399/0x800 [ 266.607679][ C0] ? __cfi___switch_to+0x10/0x10 [ 266.607703][ C0] ? kasan_save_track+0x4f/0x80 [ 266.607721][ C0] ? kasan_save_track+0x3e/0x80 [ 266.607738][ C0] ? kasan_save_free_info+0x4a/0x60 [ 266.607753][ C0] ? __kasan_slab_free+0x5f/0x80 [ 266.607772][ C0] ? kfree+0x158/0x440 [ 266.607787][ C0] ? krealloc_noprof+0xfa/0x130 [ 266.607805][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x371/0x820 [ 266.607839][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c18/0x9460 [ 266.607866][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3d0/0x28d0 [ 266.607893][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x963/0x3e50 [ 266.607918][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 266.607941][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1192/0x5c20 [ 266.607961][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 266.607980][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 266.607999][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 266.608015][ C0] ? do_syscall_64+0x57/0xf0 [ 266.608031][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 266.608056][ C0] ? __kasan_slab_free+0x6a/0x80 [ 266.608076][ C0] ? kfree+0x158/0x440 [ 266.608091][ C0] ? krealloc_noprof+0xfa/0x130 [ 266.608109][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 266.608128][ C0] ? krealloc_noprof+0xfa/0x130 [ 266.608145][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 266.608172][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 266.608207][ C0] ? irq_work_queue+0xc2/0x160 [ 266.608228][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 266.608269][ C0] ? vprintk_emit+0x3e3/0x650 [ 266.608290][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 266.608311][ C0] ? vprintk_default+0x2a/0x40 [ 266.608331][ C0] ? vprintk+0x93/0xa0 [ 266.608347][ C0] ? _printk+0xde/0x140 [ 266.608366][ C0] ? __cfi__printk+0x10/0x10 [ 266.608385][ C0] ? kfree+0x158/0x440 [ 266.608402][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 266.608432][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c47/0x9460 [ 266.608460][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 266.608499][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 266.608577][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 266.608601][ C0] ? kernel_text_address+0xa9/0xe0 [ 266.608622][ C0] ? __kernel_text_address+0x11/0x40 [ 266.608643][ C0] ? unwind_get_return_address+0x51/0x90 [ 266.608664][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 266.608686][ C0] ? stack_depot_save_flags+0x38/0x800 [ 266.608705][ C0] ? kasan_save_track+0x4f/0x80 [ 266.608722][ C0] ? kasan_save_track+0x3e/0x80 [ 266.608739][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 266.608761][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 266.608780][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 266.608799][ C0] ? krealloc_noprof+0x8d/0x130 [ 266.608816][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 266.608845][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x7c0/0x2660 [ 266.608872][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1a91/0xa690 [ 266.608896][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1192/0x5c20 [ 266.608915][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 266.608933][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 266.608951][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 266.608967][ C0] ? do_syscall_64+0x57/0xf0 [ 266.608984][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 266.609006][ C0] ? _raw_spin_lock+0x92/0x120 [ 266.609022][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 266.609039][ C0] ? __kasan_check_write+0x18/0x20 [ 266.609055][ C0] ? _RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0xc1/0x260 [ 266.609083][ C0] ? _raw_spin_unlock+0x45/0x60 [ 266.609100][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 266.609139][ C0] ? __kasan_check_write+0x18/0x20 [ 266.609155][ C0] ? mutex_unlock+0x90/0x240 [ 266.609175][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 266.609196][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 266.609222][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 266.609262][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3d0/0x28d0 [ 266.609293][ C0] ? __cfi__RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x10/0x10 [ 266.609322][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0 [ 266.609346][ C0] ? __cfi__RNvMs0_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 266.609371][ C0] ? __kasan_check_write+0x18/0x20 [ 266.609387][ C0] ? _raw_spin_lock+0x92/0x120 [ 266.609403][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 266.609420][ C0] ? __kasan_check_write+0x18/0x20 [ 266.609436][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 266.609456][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.609473][ C0] ? avc_has_perm_noaudit+0x28a/0x360 [ 266.609492][ C0] ? avc_has_perm+0x155/0x240 [ 266.609511][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 266.609534][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 266.609559][ C0] ? _raw_spin_lock+0x92/0x120 [ 266.609575][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 266.609593][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 266.609613][ C0] ? bpf_lsm_binder_transaction+0xd/0x20 [ 266.609637][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x963/0x3e50 [ 266.609662][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 266.609687][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 266.609717][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x10/0x10 [ 266.609753][ C0] ? __kasan_check_write+0x18/0x20 [ 266.609768][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 266.609805][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 266.609859][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 266.609884][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.609901][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 266.609926][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 266.609950][ C0] ? _RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0xf8/0x250 [ 266.609971][ C0] ? __cfi__RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0x10/0x10 [ 266.609991][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 266.610016][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 266.610040][ C0] ? _RNvMNtCs1ewLyjEZ7Le_6kernel5errorNtB2_5Error4name+0xf8/0x250 [ 266.610060][ C0] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter11debug_tuple+0xab/0x170 [ 266.610088][ C0] ? _RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0xd1/0x210 [ 266.610109][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 266.610131][ C0] ? __cfi__RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0x10/0x10 [ 266.610156][ C0] ? _RNvXsp_NtNtCsb7ts3l0a5c3_4core3fmt3numsNtB7_8UpperHex3fmt+0x10/0x250 [ 266.610180][ C0] ? _RNvXs_NtCs1ewLyjEZ7Le_6kernel5errorNtB4_5ErrorNtNtCsb7ts3l0a5c3_4core3fmt5Debug3fmt+0xd1/0x210 [ 266.610204][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 266.610230][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.610254][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 266.610278][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 266.610303][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.610320][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 266.610345][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 266.610369][ C0] ? _RNvMs2_NtNtCsb7ts3l0a5c3_4core3fmt8buildersNtB5_10DebugTuple5field+0x224/0x5c0 [ 266.610395][ C0] ? arch_stack_walk+0x10a/0x170 [ 266.610412][ C0] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter12pad_integral+0x309/0x810 [ 266.610439][ C0] ? put_dec_trunc8+0x229/0x380 [ 266.610456][ C0] ? put_dec+0xd7/0xf0 [ 266.610471][ C0] ? __asan_memset+0x39/0x50 [ 266.610486][ C0] ? move_right+0x8e/0xb0 [ 266.610504][ C0] ? format_decode+0x1bb/0x1610 [ 266.610519][ C0] ? vsnprintf+0x7b4/0x1ad0 [ 266.610534][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.610551][ C0] ? vsnprintf+0x19ef/0x1ad0 [ 266.610566][ C0] ? desc_read+0x202/0x3e0 [ 266.610584][ C0] ? __kasan_check_write+0x18/0x20 [ 266.610601][ C0] ? desc_read+0x1ab/0x3e0 [ 266.610619][ C0] ? prb_first_seq+0x109/0x1d0 [ 266.610637][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 266.610656][ C0] ? __kasan_check_write+0x18/0x20 [ 266.610672][ C0] ? desc_read+0x1ab/0x3e0 [ 266.610690][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 266.610709][ C0] ? this_cpu_in_panic+0x56/0x90 [ 266.610729][ C0] ? __kasan_check_read+0x15/0x20 [ 266.610745][ C0] ? resched_curr+0xb0/0x440 [ 266.610762][ C0] ? __cfi_resched_curr+0x10/0x10 [ 266.610778][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 266.610801][ C0] ? update_curr+0xf8/0x9e0 [ 266.610818][ C0] ? xfd_validate_state+0x68/0x140 [ 266.610840][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 266.610860][ C0] ? __kasan_check_write+0x18/0x20 [ 266.610876][ C0] ? __switch_to+0xc4f/0x1300 [ 266.610899][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 266.610922][ C0] ? __kasan_check_write+0x18/0x20 [ 266.610939][ C0] ? _raw_spin_lock+0x92/0x120 [ 266.610955][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 266.610971][ C0] ? psi_task_switch+0xad/0xa10 [ 266.610993][ C0] ? _raw_spin_unlock+0x45/0x60 [ 266.611009][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 266.611032][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x1008/0x1c70 [ 266.611059][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 266.611084][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 266.611102][ C0] ? up+0x10a/0x1b0 [ 266.611122][ C0] ? __cfi_up+0x10/0x10 [ 266.611142][ C0] ? __kasan_check_read+0x15/0x20 [ 266.611159][ C0] ? prb_read_valid+0x41/0x80 [ 266.611177][ C0] ? preempt_schedule_common+0x2d/0x60 [ 266.611196][ C0] ? preempt_schedule+0xc5/0xe0 [ 266.611214][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 266.611233][ C0] ? __printk_safe_exit+0xd/0x20 [ 266.611255][ C0] ? console_trylock+0x17e/0x220 [ 266.611275][ C0] ? __cfi_console_trylock+0x10/0x10 [ 266.611295][ C0] ? __kasan_check_write+0x18/0x20 [ 266.611312][ C0] ? irq_work_queue+0xc9/0x160 [ 266.611334][ C0] ? vprintk_emit+0x3e3/0x650 [ 266.611355][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 266.611374][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xd14/0x1030 [ 266.611399][ C0] ? __kernel_text_address+0x11/0x40 [ 266.611422][ C0] ? vprintk_default+0x2a/0x40 [ 266.611443][ C0] ? vprintk+0x93/0xa0 [ 266.611458][ C0] ? _printk+0xde/0x140 [ 266.611476][ C0] ? asm_exc_page_fault+0x2b/0x30 [ 266.611495][ C0] ? __kasan_check_write+0x18/0x20 [ 266.611512][ C0] ? _raw_spin_lock+0x92/0x120 [ 266.611528][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 266.611544][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x113c/0x5c20 [ 266.611564][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.611581][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1192/0x5c20 [ 266.611604][ C0] ? _raw_spin_unlock+0x45/0x60 [ 266.611621][ C0] ? call_rcu_nocb+0x6d7/0xc80 [ 266.611645][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 266.611665][ C0] ? swake_up_one_online_ipi+0x30/0x30 [ 266.611689][ C0] ? __cfi_mt_free_rcu+0x10/0x10 [ 266.611709][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 266.611733][ C0] ? kernel_text_address+0xa9/0xe0 [ 266.611754][ C0] ? __kernel_text_address+0x11/0x40 [ 266.611775][ C0] ? unwind_get_return_address+0x51/0x90 [ 266.611795][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 266.611815][ C0] ? arch_stack_walk+0x10a/0x170 [ 266.611833][ C0] ? stack_trace_save+0xaa/0x100 [ 266.611852][ C0] ? stack_depot_save_flags+0x38/0x800 [ 266.611869][ C0] ? kasan_save_track+0x4f/0x80 [ 266.611887][ C0] ? kasan_save_track+0x3e/0x80 [ 266.611905][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 266.611927][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 266.611946][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 266.611964][ C0] ? krealloc_noprof+0x8d/0x130 [ 266.611981][ C0] ? kvrealloc_noprof+0x59/0x120 [ 266.611997][ C0] ? _RNvCs2tVsXcF29le_11rust_binder16rust_binder_mmap+0x78b/0x11f0 [ 266.612016][ C0] ? mmap_region+0x157c/0x1d60 [ 266.612032][ C0] ? do_mmap+0xb85/0x13c0 [ 266.612047][ C0] ? vm_mmap_pgoff+0x36e/0x4b0 [ 266.612066][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 266.612085][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 266.612103][ C0] ? __kernel_text_address+0x11/0x40 [ 266.612124][ C0] ? unwind_get_return_address+0x51/0x90 [ 266.612145][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 266.612164][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 266.612183][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 266.612205][ C0] ? update_curr+0x6c1/0x9e0 [ 266.612223][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 266.612245][ C0] ? __calc_delta+0x280/0x280 [ 266.612262][ C0] ? update_entity_lag+0x28f/0x2c0 [ 266.612280][ C0] ? dequeue_entity+0x809/0x1380 [ 266.612303][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 266.612325][ C0] ? __cfi_update_misfit_status+0x10/0x10 [ 266.612346][ C0] ? dequeue_entities+0x1d7/0x1400 [ 266.612368][ C0] ? assign_cfs_rq_runtime+0x350/0x350 [ 266.612387][ C0] ? sched_balance_newidle+0x31a/0xab0 [ 266.612410][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 266.612431][ C0] ? sched_clock_noinstr+0xd/0x30 [ 266.612452][ C0] ? __kasan_check_write+0x18/0x20 [ 266.612468][ C0] ? __switch_to+0xc4f/0x1300 [ 266.612492][ C0] ? __cfi___switch_to+0x10/0x10 [ 266.612539][ C0] ? psi_task_switch+0x4f2/0xa10 [ 266.612560][ C0] ? __kasan_check_write+0x18/0x20 [ 266.612591][ C0] ? finish_task_switch+0x1d9/0x760 [ 266.612612][ C0] ? __switch_to_asm+0x3d/0x70 [ 266.612629][ C0] ? __schedule+0x14d6/0x2100 [ 266.612648][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 266.612666][ C0] ? __asan_memcpy+0x5a/0x80 [ 266.612683][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 266.612703][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 266.612725][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 266.612744][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 266.612765][ C0] ? schedule+0xc5/0x240 [ 266.612783][ C0] ? futex_unqueue+0x136/0x160 [ 266.612808][ C0] ? ioctl_has_perm+0x39a/0x500 [ 266.612824][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 266.612840][ C0] ? futex_wait+0x2ac/0x7b0 [ 266.612856][ C0] ? __cfi_futex_wait+0x10/0x10 [ 266.612873][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 266.612897][ C0] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 266.612916][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 266.612940][ C0] ? do_futex+0x32a/0x510 [ 266.612962][ C0] ? __cfi_do_futex+0x10/0x10 [ 266.612983][ C0] ? vm_mmap_pgoff+0x153/0x4b0 [ 266.613001][ C0] ? __fget_files+0x2c5/0x340 [ 266.613021][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 266.613042][ C0] ? security_file_ioctl+0x3e/0x110 [ 266.613065][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 266.613085][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 266.613105][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 266.613124][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 266.613140][ C0] ? do_syscall_64+0x57/0xf0 [ 266.613157][ C0] ? clear_bhb_loop+0x50/0xa0 [ 266.613176][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 266.613197][ C0] [ 266.613204][ C0] Modules linked in: [ 266.613225][ C0] ---[ end trace 0000000000000000 ]--- [ 266.613234][ C0] RIP: 0010:update_stack_state+0xf4/0x4b0 [ 266.613262][ C0] Code: 84 c0 0f 85 89 03 00 00 41 c6 06 01 b8 a8 00 00 00 49 89 d7 eb 05 b8 10 00 00 00 4c 8d 73 08 48 8d 4b 10 4c 89 7d b0 4c 01 f8 <48> 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 [ 266.613277][ C0] RSP: 0018:ffffc9000dd8ffc0 EFLAGS: 00010282 [ 266.613291][ C0] RAX: ffffc9000dd90220 RBX: ffffc9000dd90188 RCX: ffffc9000dd90198 [ 266.613305][ C0] RDX: ffffc9000dd90210 RSI: ffffc9000dd90210 RDI: ffffc9000dd901e0 [ 266.613318][ C0] RBP: ffffc9000dd90080 R08: ffffc9000dd90101 R09: 0000000000000000 [ 266.613331][ C0] R10: ffffc9000dd90188 R11: fffff52001bb203d R12: 0000000000000000 [ 266.613344][ C0] R13: dffffc0000000000 R14: ffffc9000dd90190 R15: ffffc9000dd90210 [ 266.613358][ C0] FS: 00007f7a4fc7b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 266.613374][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.613386][ C0] CR2: ffffc9000dd8ffb8 CR3: 000000010c3b8000 CR4: 00000000003526b0 [ 266.613404][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 266.629520][ C0] Kernel Offset: disabled