last executing test programs: 30.628183228s ago: executing program 2 (id=54): mount$cgroup2(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000300), 0x4006, &(0x7f0000000480)=ANY=[@ANYBLOB="6d656d6f72795f7265637572a2b4b43328d72031669f"]) r0 = socket$can_raw(0x1d, 0x3, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x8, &(0x7f0000000200), 0x4) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r1 = syz_io_uring_setup(0x74aa, &(0x7f0000000100)={0x0, 0x4c2c, 0x40, 0x3, 0x15a, 0x0, r0}, &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000380)) syz_io_uring_setup(0x24e2, &(0x7f0000000000)={0x0, 0x8081, 0x1, 0x3, 0x199, 0x0, r1}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) unlink(&(0x7f0000000040)='./file1\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) getcwd(&(0x7f0000000000)=""/133, 0x85) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 30.359846336s ago: executing program 2 (id=60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff, 0x0, 0xff, 0x5, 0xda73, 0x5}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x2}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) set_robust_list(&(0x7f0000000100)={0x0, 0x4}, 0x18) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x451e, &(0x7f0000000600)={0x0, 0x4bc5, 0x2, 0x1, 0x3d1}, 0x0, 0x0, &(0x7f0000000000)) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/134, 0x86}], 0x1) r6 = dup(r4) dup(r6) landlock_restrict_self(0xffffffffffffffff, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x23b718c7ab830b37, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r8, 0x1) ppoll(&(0x7f0000000100)=[{r8, 0x408}], 0x1, 0x0, 0x0, 0x0) 30.318957569s ago: executing program 2 (id=61): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x140) mount$overlay(0x0, 0x0, 0x0, 0x28, &(0x7f0000000000)={[{@redirect_dir_nofollow}, {@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_usb_connect$uac2(0x5, 0x9e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010102000000208c0d0c0040000102030109028c000301008008080b0101010c20060904000000010120000924010300042c000408240a05004000030c24030207030603050300010f24060305060001008425070004000904010000"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) 29.13112322s ago: executing program 2 (id=68): r0 = syz_usb_connect$uac3(0x2, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a0003010460085aadfb6bd63d808cb197a2080b0001012430010904000000010130000a2401f5260045d100001324030500040303060700000004000100040009240506025459ca2938c2fa77dd0b023000090401010101023000090501090002b905030a2525000200000106000904020000010230000904020101010230000905820908000602080a252507000000010500081487d1f1ab2d1f3ac175c28eb24ce83ef15f7b799c2bcb3093d043fe9ff5e2cd4522f01ebe51eba5e628e61e1712338a6dc02ad6a8980e2b083f7368a215986c344c2276fb1145cf6eb00df8b28748f905f4ab97fb039e9340773bdcc62b070dab98be2d426fa27dc28e0f201d2a87d2594ab7981c6f1120021963d6b531408c54ed6e38db9238d9a2b1cdd4b73e0a02a934bac16876c950056760a571071ab0f20106ba85b157ad881b5ddd79e5380e3a08ea1ea709ece3ad71c9f879f3974a88abe4af5065eb2764b9e0d095ce0efa9f7bed8384ef65af831a93ae908098"], &(0x7f00000006c0)={0xffffffffffffff1a, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = gettid() getpgid(r1) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x8000}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000008, 0x4010, r2, 0xa5295000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x30, 0x1e, 0x21, 0x70bd2d, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1bc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb536}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd200000}, @TIPC_NLA_SOCK_HAS_PUBL={0x28}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xddb4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x20004014) syz_usb_control_io$uac3(r0, &(0x7f00000002c0)={0x14, &(0x7f00000000c0)={0x0, 0x9, 0x2, {0x2, 0xa}}, 0x0}, 0x0) 26.098353938s ago: executing program 2 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x590, 0x32, 0x1, 0x70bd29, 0x25df9bfb, {}, [{0x57c, 0x1, [@m_ipt={0x360, 0xc, 0x0, 0x0, {{0x8}, {0x2f0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x7f, 0x6, {0xffff, 'mangle\x00', 0x0, 0xa, "e02182096f41db944a30d898ef2e37e22e5a1103117d1852a05407ba30029790b2ec4512fae3798059ace5eb9acda85fe5346cfe8e818d3fafce56710fa1fa52495cf62a7f55423feb526cdde9402324a1d2145062"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_TARG={0x3a, 0x6, {0x6, 'security\x00', 0x2, 0x1, "c560af587b320fd7bebe6134016018a0"}}, @TCA_IPT_TARG={0x90, 0x6, {0xe, 'raw\x00', 0xc0, 0x8, "803dc90db3133d196327b9be10aa196f2c6ed6a6316f1412d3df33bacc8bba35b2a8b2162ae1324e30d2de52c63f3f18e7a7dab4b7ba8b16e2f97847e695275b968e8187b33cc538902f54a4001682414aa376d8a5db9162ba1284eee9769a3e04574688572f"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x8d, 0x6, {0x0, 'filter\x00', 0x9f, 0x2, "8d6d6fecc63e8b76e39cd763f77ca65c2a3fd1c8989731ecc5d7a7837382af87ae193138c4c01ac550cab5e810d4b71b62b70480c7e2171be289727b387804587d0cd5b24071a9516d43953079199bbe8fe5cf6794183389611b56c71fecaf78b210eb"}}, @TCA_IPT_TARG={0xb0, 0x6, {0x0, 'raw\x00', 0xc, 0x0, "a8b35087ab404b3ff3ac0010dd6d4011635294e5ff6fe302a05a3a042067174e5b32e94bed653dadd927007f28da24700a5a3fc0705a7a7efa2ca8f87a6ed732b451c781f2cedb04fe0cdb146db4a625e82f868aac5a6247072494857f5ed86154e106907aff8e34905c27b5aadc4ce22ae2069f9a21590db533745058ae29525dc9f0f97320"}}]}, {0x4b, 0x6, "aaf9ef4338f14e5a8f1cf4cc821ac3bfe7215cceb63c54f6dd0f62162d3d4daf01d3e74e960221b47e21d9bf6e4fa91aa13c485a3af6c3a41fe8f4fba732b8aa10722ce59bf094"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x218, 0x20f, 0x0, 0x0, {{0x8}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xf4, 0x6, {0xa, 'raw\x00', 0xec, 0x458, "0cf7e8931d286d0b679b7b716a7273eb7b5eb2a24a01e2a542ef4437aa8c31128854398333f96be2c5f5c6958a03401a35a4f59fb94dbf05b161fd0fe2623ae31645b27fc2a83a63ca32bb968469fcb9a3b84f03c84f7870afd155c661d0b83113d457e879f9ffa5bf9493c84ebc446bbf7209f646984a7a670711fdb22a8efc714b19fd7f8763e2734aeae7c2fcf6a4d6e8aa382cd360b8b5b4b390c73714c712d59f05d2d925c009065006feed64c0399bfa40e5e016dd3cb9bbeab3f9cd88b70afd08d8ca1e53ba11"}}]}, {0xa1, 0x6, "bdb8e0e9febf3d8a0e26d022fbcaa8d9b596994b2f4409be41fa2353eef5a0d2b6f38e658d18dd7b67b9620293ad446b6a0c617751025b2590487566b4e5c434cb1aeec50ed068c0072d157812d97eede8984cce1a1c2b0d65e4dd73acea72bb07a486e9a12ebc14fbe6bf27d36846f35ba59e361726909b65c2b2bf89c8c043e053a9a01b8484d50731ceb74e589ff2f08c1f426f9f92f20df5810f83"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x590}, 0x1, 0x0, 0x0, 0x8080}, 0x9081) 26.029770492s ago: executing program 2 (id=87): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000240)=0x13, 0x4) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x18c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x58dd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x8844) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c880}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0xc4, 0xb1, 0xc2, 0x20, 0x1a0a, 0x104, 0x5a51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x20, 0x8}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x820}}, {0x6e, &(0x7f0000000dc0)=@string={0x6e, 0x3, "2c00caa3675afdc5914b60d7f49c29c2a7e733e132a584d0a918ac8f58c8afa6edba0f33d499c8c9f826d54a830fe3d975fcb6850774c413ec805b339d138279982b127d226801d0704a7bfca54bf298c00998cf688059d58fc93917255b3df8913a070d02300980cf6868de"}}]}) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002080), 0x4a8142, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000020c0)={0xdddd1000, 0x7000}) 25.996329434s ago: executing program 32 (id=87): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000240)=0x13, 0x4) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x18c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe01}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x58dd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x8844) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c880}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0xc4, 0xb1, 0xc2, 0x20, 0x1a0a, 0x104, 0x5a51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x20, 0x8}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x820}}, {0x6e, &(0x7f0000000dc0)=@string={0x6e, 0x3, "2c00caa3675afdc5914b60d7f49c29c2a7e733e132a584d0a918ac8f58c8afa6edba0f33d499c8c9f826d54a830fe3d975fcb6850774c413ec805b339d138279982b127d226801d0704a7bfca54bf298c00998cf688059d58fc93917255b3df8913a070d02300980cf6868de"}}]}) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002080), 0x4a8142, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000020c0)={0xdddd1000, 0x7000}) 3.234215129s ago: executing program 0 (id=254): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x2, 0x4, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7, 0x80, 0x8001, 0x6}}) (async) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000040)=0x15) r2 = open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async, rerun: 32) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (rerun: 32) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fff, 0x0) (async, rerun: 64) write$uinput_user_dev(r2, &(0x7f0000000580)={'syz0\x00', {0xa5d4, 0x5, 0x4, 0x2}, 0x54, [0x2, 0x3d, 0x0, 0x6, 0x10001, 0xc7, 0x4, 0x2, 0x7, 0x8, 0x3ff, 0x6, 0x5, 0x0, 0x7fff, 0x2, 0xffffffff, 0x7, 0x1, 0x7fffffff, 0x8, 0x1, 0x9, 0x6, 0x7, 0x7, 0x5ee4, 0xffff, 0x3, 0xfa, 0x1, 0x8, 0x9, 0x2, 0x2, 0x1, 0xc3d8, 0xb9d6, 0x8000, 0x4, 0xb, 0x4cef2f9a, 0x80000001, 0x68, 0x7, 0x0, 0x2000, 0x1, 0x7, 0x8, 0x8000, 0x9, 0x8, 0x7, 0x1, 0x3, 0xfffffffe, 0xfb, 0x7ff, 0x9, 0xff, 0x4, 0x1, 0x7], [0x8, 0x8, 0x80, 0x4, 0x1, 0x822c, 0xf, 0x4, 0x7bb, 0xb, 0x0, 0x9, 0xfffffffe, 0x8, 0xffff, 0x2140, 0x6, 0xfffffff8, 0x1, 0xffffffff, 0x200, 0x2, 0x2, 0x2, 0x6, 0xff, 0x5, 0xeb4, 0x4, 0x9, 0x7, 0xf2, 0x80, 0x8a04, 0xd16, 0x101, 0x7fff, 0x67, 0x23, 0xaa, 0x2, 0x8, 0x4, 0x6, 0x9, 0x3af, 0x6, 0xa987, 0x665, 0x3, 0xffffff81, 0x9, 0x4, 0x10001, 0x9, 0x9, 0x800, 0xb, 0x4, 0x0, 0x8, 0x6, 0xfff, 0x8000], [0x8, 0x31, 0x8, 0x3, 0x93, 0xf4, 0x9, 0x6b30, 0x200, 0xfabc80, 0x3, 0x100, 0x1, 0x1ff, 0x400, 0xae, 0x3, 0x101, 0x3ff, 0x3ff, 0x7, 0x2, 0x3, 0x1, 0x6425, 0x0, 0x400, 0x6fd, 0x7, 0xffffff36, 0x10, 0x1, 0x4, 0x61, 0x0, 0x1, 0x5, 0x78e2, 0x9, 0xea, 0x80c9, 0x5, 0x7f, 0x7, 0x194cdd98, 0x401, 0x0, 0x4, 0x1, 0xff1d, 0xd9e5, 0x8, 0xa, 0x81, 0xb2e, 0x1, 0x1ff, 0xa02b, 0x6, 0x1, 0x100000, 0xfffffe38, 0x1000, 0x5], [0x4, 0x80, 0x7, 0x1, 0x1, 0x4, 0x77fe, 0x0, 0x9, 0x5, 0x3, 0x8, 0x6, 0x0, 0x4, 0xffffffff, 0x67d7267a, 0x8, 0x7fffffff, 0x43f5, 0x6, 0xe, 0x8, 0x5, 0x101, 0x6, 0xd63, 0x9, 0x5cf3, 0x2, 0x0, 0x1ff, 0x4, 0x4, 0x876, 0x5, 0x0, 0x3, 0x93, 0x1, 0x100, 0xd8, 0xaf5b, 0x7, 0xb64, 0x21d, 0x5, 0x5, 0x7, 0x2, 0x8, 0x1c8, 0x7f, 0x1, 0x6a, 0x8, 0x885, 0x6, 0x2e000000, 0x1, 0x7, 0x2, 0x6, 0x5]}, 0x45c) (rerun: 64) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) syz_usb_connect(0x0, 0xf9, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0xc8, 0xb, 0xf3, 0x8, 0x15ba, 0x2a, 0x2eef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x2, 0x3, 0x61, 0x40, 0x7}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x19, &(0x7f0000000c00)=ANY=[], 0x2, [{0xe1, 0x0}, {0x0, 0x0}]}) (async) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000}) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x7) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af04, &(0x7f0000000100)) (async) read(r3, &(0x7f0000000040)=""/35, 0x23) (async) syz_clone(0xc840800, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f00000000c0)) 3.233644599s ago: executing program 0 (id=255): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0], 0x0) 1.212193057s ago: executing program 1 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsopen(0x0, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f00000004c0)='&@--@#^)\\}/@^}\x9d\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.016138771s ago: executing program 1 (id=269): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000003e40), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4044014) 1.014674201s ago: executing program 1 (id=270): prctl$PR_SET_TSC(0x1a, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000280)={{0x2, 0x4e21, @empty}, {0x306, @remote}, 0xa8, {0x2, 0x4e24, @empty}, 'veth1_macvtap\x00'}) 1.012008551s ago: executing program 1 (id=271): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$FUSE_POLL(r0, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x800, 0x2}, {0x0, 0x4}, {0x2, 0x400}, {0x101, 0x5}]}) syz_usb_connect$uac2(0x3, 0x84, &(0x7f0000001d40)=ANY=[@ANYBLOB="120110030000000844060e80400001020301090272000301030007080b0002010118060904000000010120000924010e000a0900030904010000010220000904010100fdff0b09050109400008067f0825010333030a00090402000001022000090402010101022000090582082501020fef0300"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 939.785336ms ago: executing program 3 (id=272): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000180001002bbd70eafadbdf251d00000087c4c2fd7dfcc91f87ea0f72efbbd5deef05bf58db40"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_sfeatures={0x3b, 0x2, [{0x400, 0x69e0}, {0x4, 0x1}]}}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0xba85d000) socket$inet_udp(0x2, 0x2, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) getsockopt(r6, 0xff, 0x28, 0x0, &(0x7f00000002c0)) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000100)=@routing={0xc, 0x8, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @empty, @private0, @remote]}, 0x48) syz_pidfd_open(r5, 0x0) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) 913.036748ms ago: executing program 3 (id=273): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x70) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x30000019}) (async, rerun: 32) epoll_pwait2(r5, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r7, 0x0, 0x0, 0x2004c080, 0x0, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r8, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/253, 0xfd}], 0x1, 0xffff8001, 0xfffffffd) (async) r9 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r9, r2, 0x0, 0xffff) (async) r10 = socket$inet6(0xa, 0x2, 0x3a) (async) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/26, 0x1a}, {&(0x7f0000000680)=""/253, 0xfd}, {&(0x7f0000000780)=""/220, 0xdc}], 0x5) connect$inet6(r10, &(0x7f0000000640)={0xa, 0x4e23, 0xfffffffc, @local, 0x20000009}, 0x1c) (async) r11 = dup(r10) bind$inet6(r11, &(0x7f0000000240)={0xa, 0x2, 0x10000, @empty}, 0x1c) (async) getsockopt$inet_int(r6, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 800.400215ms ago: executing program 3 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="b805000000b960f300000f01c10f20c035200000000f22c0c744240063000000c7442402ce570347ff1c24360f01df662e450f066636430f00dcc421f95b7500c482f5a71c43c481805e8c5400300000f30f2ca3f34f4d01", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000000)={0xbf}) 771.743817ms ago: executing program 3 (id=275): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x2, 0x0, [{0xf88e470f, 0xed, 0xfffffffffffffffc}, {0xb75, 0x0, 0x7}]}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes '], 0xb) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x60, 0xffffffffffffffff, 0x2000000000000001, 0xb3, 0x8d], 0xeeee8000, 0x2010c3}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) eventfd2(0x4001, 0x800) r4 = eventfd2(0x4, 0x0) (async) r5 = eventfd(0x4) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async) r6 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r8, 0x2, 0x4) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000000380)={0x6, [0x34, 0x2, 0x1000, 0x81, 0x7, 0x6]}) (async) r10 = dup(r9) (async) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x804800, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r11}}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x39}}, {@nodevmap}, {@loose}], [{@hash}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}], 0x6b}}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000002c0)={r4, 0xffff, 0x1, r5}) 712.237591ms ago: executing program 3 (id=276): r0 = socket$unix(0x1, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100008, 0x70, 0x40000, {r0}}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x208, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8911, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 660.156575ms ago: executing program 3 (id=277): syz_usb_connect$uac2(0x0, 0xa1, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000086d04500840000102030109028f000301018007080b0002010120060904000000010120000924010e000a1500030c240306030600060805"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x1, 0x2, 0x1e}, @flat=@handle={0x73682a85, 0x1, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8000000000000001}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x100000000}, {0xc, 0x90, 0x835}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008000}, 0x64880) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x49, 0x4, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0xc, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x29, 0x5, 0x4, '\x00', 0x2}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0x2}, {0x1, 0x10, 0xfb, '\x00', 0x9}, {0x9, 0xfd, 0x8f, '\x00', 0x19}, {0x73, 0x7, 0x13, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0xf, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0xe0}, {0x1, 0xe, 0x1, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0xfa, 0x0, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x8, 0xeb, 0xc0}, {0x7, 0x5, 0x2, '\x00', 0xb}]}}) 508.514086ms ago: executing program 1 (id=278): r0 = fsmount(0xffffffffffffffff, 0x0, 0xf2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) r1 = fsmount(r0, 0x1, 0x0) landlock_restrict_self(r0, 0x6) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000100)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x8, 0x38, "bfb2109df34b2c733229d92b195156e52a20ef3c85c2ae96dd7ef8348f3fdc0e5ab5dbf936c2a8cc9408b20564cde86622e6f91fb2b22012dd845188e90d483b", "ccef3383d0786f44fc6841d0223c532c38625d76688920b077c36fb92d0cef90fb63a924d3ea7725c1623eb6a76ad755bf6fd3e379f681283692f98d6f7fee7a", "30bb1c59dafea6164c95afc9305fe5e1ae746e16020ec96ad9768a296d712ea7", [0x7f, 0xe6]}) fchdir(r0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x4004880) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xe, @empty, 0x9}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000380)="06115965bf53642dc73656d6a9682cf849c7d0e5c7418b6af5d649a20d4d0c", 0x1f}, {&(0x7f00000003c0)="e95e", 0x2}, {&(0x7f0000000400)="bbf2bc42106cc27228a88c1a367621a71dd231054089820a58a65095a027955df6d082d39880d5cdcd31ac9a90f43ac5335e0e3d494a54826929d9e22cdaedcbd26bed37c58231dbfd65b2895c3caa497527fb8cb7c390bf020624e102fcef080c8a692d619793e6da77fc418f7a871860f308d702d31f057100347fee7f86d56b62b91c6e63bef9bfa29b5748a95ce4509c9d4794ca54d5699e30d4ff1ff1a7615336705e", 0xa5}, {&(0x7f00000004c0)="962af8ff4b1c5b7dea1183df", 0xc}, {&(0x7f0000000500)="1e1180fd4851bd4b90851b2262565cd136c5ed19e8f868f7875518c501091716be79dbb9f9ba920caa2f626b104174c6d993a91be4130621f2cd053d80ca7d691b3d963c12fd59f96b64960e289f", 0x4e}, {&(0x7f0000000580)="fcca92c497f5ebb29ef081fc1e1fc6774d22de4fc2030b295a2236feeea7ac6803775803b5b3051aae7eba901cd47694309a20df1d616daa0a30c6500d6b86a8afa18c375895630d7c4a2f5df0f28e206cf8c85bad3026216f37893a435e2e6814c275f7c57bf27031421d62ba", 0x6d}, {&(0x7f0000000600)}, {&(0x7f0000000640)="cf724a97e1f25f9a1e239882e935d1e5152d62ee9cd8792c23f5e5ede76730d143acd2d5b2df1b9aae7498cc9733396736a8", 0x32}, {&(0x7f0000000680)="f218daad4be0174d5adc549b8ef62305646d682c21fa37c0f7b0d06341c012cc13753bae7bdc27c378eaa6d471b5ab068d20fc0fc98e87cd82661008842421d18437089215980e195e7a44507310b8b030b5a88f757e397af65c0766cc1af46222bc27cc62659ada9d4b80fb429660066c24d16b3ddabe061c03cbec4dbe0692c8d163e202bd42cb6f14d1", 0x8b}, {&(0x7f0000000740)="1732e1e4d5913a8400", 0x9}], 0xa, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x5b, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x100}, @pad1, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x69, "860e6458161f5ad9e841b416b6e2909fe3b20dd4c3c3ac0fca3f019ce368781aeb130fb312ef1b2ec008c5b0f1a526c1ea4c19ba2d7f571c4ad9daa751710458cf9d571b693397dc88155b463c44dfc6f2c5561ee315160e84f96c456b0041ffa8c02c2fbee3c7967d"}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x89, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x1d, 0x8, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}}}, @rthdrdstopts={{0x1d0, 0x29, 0x37, {0x96, 0x36, '\x00', [@pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0xffe0, [0xe1, 0x5]}}, @generic={0xa0, 0xf0, "96c873de497522df313ed90f8135ab5f902bb3d9a748d503ddf832662b9f2b72702e6dfe66680dc924748767fc45328a5924cf7ed3edf22430571afb0651aa4eee21c98c9f460ba75328aa0b3722a1e434462de31575675ea6798c816314ebb09f6c6c91124ee0e425080ecb33be010e5a61272cf825902dacf701e3938a6803832a3579a6415d21d1636ef75bf0868fff203d183657eec2528079173dd9db29a6b59629d3eae3e4a401be9a0067f447c7f5008198f1088690d5f20f2be0b729168494faca58e51a37e5bdefb9f2995b50f7144b6f8ba52f0f3fabd61a41ef690a211c9ef2de81aba02bee6dfec6f73e"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x0, 0x2, [0x6, 0xfffffffffffffffe, 0x23c, 0xa8, 0x2, 0xc]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x58, {0x1, 0x14, 0x4, 0x2, [0x7, 0x7, 0xffffffff, 0xa, 0x0, 0x7207a031, 0x0, 0x9, 0x4, 0xe]}}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x328}}], 0x1, 0x40801) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r3, 0x400, 0x2, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000130}, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000e80)={{r4, &(0x7f0000000d00)='\x00', 0x0, &(0x7f0000000d40)={@_ha_fsid={[0x39, 0x8]}, {0x2, 0xfff, 0x7, 0xfffffffffffff119}}, 0x100, &(0x7f0000000d80), &(0x7f0000000dc0)}, {[0x1, 0x6f52ea1c, 0xfffffff9, 0x5]}, 0x9, 0x7f, &(0x7f0000000e00)=""/127}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000f00)=@gcm_256={{0x304}, "c8cc1bd2513b351e", "04905f46cd3ae020f03a6abed5bc83aa1842d67c80fdc6b76fcb19242f695198", "48e08725", "f292af4576460814"}, 0x38) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001080)={'syztnl0\x00', &(0x7f0000000f80)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x8, 0x8000, {{0x2a, 0x4, 0x2, 0x6, 0xa8, 0x64, 0x0, 0xd, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xc3, [@remote]}, @timestamp={0x44, 0x8, 0x19, 0x0, 0x9, [0xab]}, @lsrr={0x83, 0x7, 0x13, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0x8d, [@dev={0xac, 0x14, 0x14, 0x3d}]}, @cipso={0x86, 0x61, 0x0, [{0x5, 0xf, "e9ab66a741617023aefce242ee"}, {0x0, 0xe, "0c700c20700feab833f93f65"}, {0x5, 0xa, "978bc8f413c8b46c"}, {0x1, 0xc, "1ca66ed354837e09f606"}, {0x1, 0x8, "d387cbfec1b7"}, {0x7, 0x10, "8a52e9ab04308be4da63136817d0"}, {0x7, 0x2}, {0x1, 0x4, "1370"}, {0x5, 0xa, "5b5912c7bff18daa"}]}, @rr={0x7, 0xf, 0x36, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched_retired(r0, &(0x7f00000011c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)=@newchain={0x90, 0x64, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff}, {0x1, 0xb}, {0xb, 0x4}}, [@f_tcindex={{0xc}, {0x1c, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x26c4}, @TCA_TCINDEX_MASK={0x6}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xffe0, 0xffff}}]}}, @f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}, @f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1e}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x3, 0xffe0}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x48000}, 0x20000801) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xc4, r8, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xc9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}], @NL80211_ATTR_HE_OBSS_PD={0x58, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "23f0fbe35699d7c4"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x4}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x3}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x9}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "1ec6c94f6cbd7cf0"}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x14) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000001400)={0xffffffffffffffff, 0x1, 0x3, r7, 0x1ff}, 0xc) r9 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x541c, &(0x7f0000001440)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000001480)={0x0, 0x2, 0x2885}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001cc0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001500)={0x754, r8, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@mesh_chsw={0x76, 0x6, {0x3, 0x2, 0x2b, 0x3}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE_PROBE_RESP={0x113, 0x7f, [@cf={0x4, 0x6, {0x6, 0x9, 0x8, 0xfffa}}, @random_vendor={0xdd, 0x30, "89dcaa76d9b6103af8b22d0d63e5cabfe97adfd327d4adcca89c895c4efc9785dc1d898f694d8145c7488acda4b15dce"}, @supported_rates={0x1, 0x1, [{0x36, 0x1}]}, @measure_req={0x26, 0xd0, {0x1, 0x2, 0x5, "9883670d4d38c874246176acf0be416271d99fd41def9e8e5c0d57cdde6fc3b3d4a1f12f86963bbbe9033f3dd0ec6876592f7c1c13482ee3c9eb2eac5ce71067780f30dd6b19f57665c082c7212931b7fc1b8876fec234a0a29e38131c490b8ae5a2bc9cc70cc5da80ffb65e8312aaa5959bfeffe2080a83492f07dba293d8d467f9400287942059a551ceef648a7273369233b485735b93fab32423bb1f455d68e5543d6adffd5d3d7957925edf4d3029f7c4a77c3cedb451a41ebc884361288c13d0b794006e0fb599c9b1f4"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x4d0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf4, 0x2, "437d36839f9c44bd4208d088d1d024d12b90a26f0924a0f44cc888e69362cfcdbb0bce13c559ce7f11d8947a3339345f5c8ad400874a99104b6f54b035f37a1c97482616569c4bd3b977dd0fe130f6f283ec872b8f9baabbef9a2922976e7f53f75ce20bb08d344002ac6cd65571f9e83a020ff04b2c157f4417fa6f90fe05abfaeacae2385c62d5db145f665a15dc9c1299b188c459df49fd06b57d29c4fc3e529f4f0f71d2de02ff178c4edc0847b150da7dc0356c746e4ef858520cc5f73e3796174fe43716e9728ea47b6f81d120117c09239aa7f72c15780aca84ac2163bc725a77dc5ac76ec4454b296f37d774"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xbf, 0x2, "17fabee2a735efbdb610e4ec3995008c62b41d2716b081e349ccab1af3933fcc36b53beca7c842f9644154d0648034612d507f281d685da1c08cb31dc5aa3b24c727bd3b0600aeb7988591c3797db795ffb36496761b4dea0468f47042d32c0b79b5d2100d7bf17811e071047967ced4f43d6c30a6bea9208742fe3784598744ea7e1800bf9a1206205445dd12af7ed69d4b3e736f0e2c59e44d20163d8538052f32cb3aa1f5bfe091384e0cb1db576e594b927a0d88524eaea2cb"}, @NL80211_FTM_RESP_ATTR_LCI={0xfd, 0x2, "1c90e033a469efe1c95b7fb5706882ea301033aefbd7d1ac583f1a2a8abf04e67f9355b11ea75baec34137a05eac8621732e2897f35a2d3bddd91869dae7286e1adf7f6126add42d4284b14b81faecbe9e8ede3b4d86bead1b9b576070273441e82879bb1163a50605ebf0775b799409a1953849e441998cc221a2018d78f909a98c6ddd6f0c7b5d48cf154652bd0cdb5c272c4abc9977688c16234e6b186f2af0f6e2ccfabbea2fc1abfd40cba4fc304ae162b27d841519062d398c5ffa30a4c2f977feba8302ef0654d7ccfe8cc07849dba2d5c0225d9f31a0b531c3e47151b9e386998665c9a4b80697f34c6769fb22b6b7c2cd855a8a4c"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc9, 0x3, "edad42ee5c1938df82efa477d74cc62dc4e15793f024ef9504610e737a25006688962bfbfe913434338134537990e4d4e082922c063ae2013bf7c147ec1d8871835fc5cd78a6642d0c3ddcf1a5b8b6ef6f206abafd225c19489c907c0a9d8dbfe3fcd624f68b32bed4968d29fbdcdfa80562f9a483deac0a9d331a63fb42e025b56c5d0893c1c09b61fa8667ee2bfdafd17d8868ebaac1ac6d36bfe816f20ed5069a3ecf613a7a50884d794fb84ff87b2348180d924ede05b6dadb9e907f97dbb26b37882b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x27, 0x3, "ea17df5b5c448fa3241981072354e83685e2a28377bae231f51932e958e424b5505aa2"}, @NL80211_FTM_RESP_ATTR_LCI={0x2c, 0x2, "496b2058e01ece32c433b446973afc50a15004a8670359dde9ad063abf22812728d05f91b1abdce2"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xed, 0x3, "493e2022f8fb9eb2c6099a0a2bea1982549771d9b2961407acbd3322c51b74398a037222448ce1bc16dad355caf513cfd7a852626183b00c00009e5f66113ee2a41b46ed722078f0f4308420ce5cde1713b1b7b3bae0c62898b8aac32a3a5acede6abac2a8c90199e495f5fbeeeffc793a13f042d5536cc9b1fdea8f997eeeeef1e70b6910decd7395797a1de8f8286b23a4dabfe08339634cc2d31ff6f4e40aa1cb53fa0a14a07c47a4816c6d8f02ab7910d71f32bacad10c91c786ecd7ba8c5eb86a6c3e13feb00f62d09f3cfbe047f85443844a5883d41b971c545ed1a02adc9669140f1d882b00"}]}, @NL80211_ATTR_BEACON_TAIL={0x3c, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x0, @device_b, 0xfffffffd, @value=@device_b, 0x10000, 0x2, @device_b, 0x200}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0x10a, 0xf, [@measure_req={0x26, 0xf3, {0x3, 0x8, 0x7, "c24efb159ff117966cedd8a80f1cf02e155503905f4b672b48988fc048bac5bfe5a52c7552902657d84a1a4c615eb20d9c5f1bfb39552bb9a8f9c5c38c346cfa0cebb3c78b7f6ef1a8f7d0c2ca4aba6f054fa6ccbef94da0b69f89889c5cf045b1cb0191182505c695da30ca0dda4f37422d08f0fd32e0fe021ce18b485a757c71479844f04c47ce5d7a131a98efdec30b198d832dc1470d937dc57ccced292a6b3363877b067b27e9acebcff463885cdab7a121cd73f8ef9dc273b56f1314b137007598cceb90dafb4ab2073f8069223b4f0a42fc36a331593dec8e02a8f0f08a91d82529fbd257ac16213a5f688297"}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf7, 0x69}}, @mesh_chsw={0x76, 0x6, {0x2, 0xd, 0x0, 0x6}}]}]}, 0x754}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001d40)={'pim6reg1\x00', &(0x7f0000001d00)=@ethtool_ts_info}) sendmsg$nl_generic(r1, &(0x7f0000001f80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x148, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfd, {0x16}, [@generic="368636d857b0df3c4787af116afcac0342f8a7d29b07ee16b628c88fc048205f176d29465a7631fd4c671698e4f5c96aba4c9bdd4b1821578c45c201db9a9d0fba02f68556fc190e496317a251085e372f523b517a287bb2c0c0aa99c5454e5c310302bf64e767c99f4d3a904ec350fea6dcc1d7ee030e733a250aa4478de445501343531fc47cff3ad6c1a32c521053b9a06f5e4ef541f8b5e421bcbbd7694d90400ed2837a81f96fe354d184ee8fa5a6dac6739049dea5deb9d667711e96820a775f216347b8aa733b35577d951a5c32c887833d32493c717fdda729e43141f38d09479bf998e957ad6ce613ec599c", @typed={0x42, 0xdf, 0x0, 0x0, @binary="2760b06caa412d63d757c9cb1c991915e0a84050efc9b7c106a5ca00a8affe11d16a81704b53d001f1f47252a6779e5385b8d4721422f130932e0df05161"}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x40000c4) 497.513166ms ago: executing program 1 (id=279): ioctl$SNDRV_TIMER_IOCTL_TRIGGER(0xffffffffffffffff, 0x54a6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4022) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360f8fbfa5a10050aa37aa3766b817018ec8c4c1795a5100", 0x5b}], 0x1, 0x31, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @rand_addr, 0x10000000}, 0x1c) listen(r4, 0xffffdc47) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r3, 0x0, 0x0, 0x2000877d, &(0x7f0000e68000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x250, 0xc4, 0x14, 0x52, 0x20, 0x22b8, 0x2d9a, 0x9744, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0x2, 0xc0, 0x81, "", [{{0x9, 0x4, 0xa, 0x2, 0x0, 0xd, 0x1a, 0xc7, 0x9}}]}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x0, 0x3, 0x6, 0x10, 0x2}, 0x0, 0x0}) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f00000001c0)={0x3, 0x1, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0xc000, 0x800}}) 368.265725ms ago: executing program 4 (id=280): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x10}}], 0x10, 0x8001}}], 0x1, 0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r2 = dup(r0) write$uinput_user_dev(r2, &(0x7f00000004c0)={'syz1\x00', {0x459c, 0x7, 0x9, 0x135f}, 0x1d, [0x0, 0xa, 0x9, 0x8b3, 0xf21, 0xfffffffc, 0x5, 0x3, 0xd4, 0x7f, 0xb, 0x4, 0x7, 0x3, 0x8, 0x5, 0xfffffffc, 0x7fff, 0x8, 0x100, 0x4, 0x7f, 0x2bf9, 0x8, 0x4, 0x8, 0x6, 0x8, 0x9, 0xffff, 0x0, 0x5, 0x9, 0x6, 0x1, 0x80, 0x4, 0x7, 0xffff089b, 0x4, 0xffffffff, 0x4, 0xffff, 0x10000, 0x0, 0x7, 0x3, 0x7, 0x9, 0x1, 0x3ff, 0x400, 0x5, 0x7, 0x6, 0x1, 0x3, 0x401, 0x3, 0x52, 0x0, 0x0, 0x2, 0xc000000], [0x3, 0x800, 0xe00a, 0x5, 0x40, 0x1, 0xfffffff8, 0xbe72, 0xfd60, 0x7f, 0xaf8, 0x1, 0x2, 0x6, 0x4, 0x3, 0xf, 0x5, 0x101, 0x7, 0x2, 0x8, 0x7fff, 0x8, 0x8, 0x3, 0x80000000, 0x8, 0x20, 0xa, 0x5da0, 0x13, 0xf, 0xd9, 0x8, 0x8, 0xfff, 0x7, 0x9, 0x2, 0x7, 0x67, 0x40, 0x31f7, 0x2, 0x4, 0xe7, 0x9, 0x3000, 0x6, 0x7ff, 0x9, 0x7, 0x2, 0x8, 0x8001, 0xb5b0, 0x8, 0x9, 0xd93, 0x8, 0xffff, 0x400, 0x7], [0x6, 0x4, 0x7f, 0x5, 0x326, 0x1, 0x396d, 0x80000000, 0x8c, 0x100, 0x80000, 0x9, 0x5, 0x9a, 0x82d, 0xffffffff, 0x2, 0x5, 0x2, 0x4, 0x7, 0x8, 0x8, 0x7f18, 0x9, 0x7fff, 0x1, 0x3, 0x8, 0x3c, 0x2, 0x9, 0x0, 0x400, 0x0, 0x73, 0x900, 0xe50, 0x8, 0x9, 0x247d, 0x800, 0x2, 0x606, 0x6, 0x820, 0x1, 0x7, 0x5, 0x80000001, 0x3, 0x1, 0x20, 0xf3, 0x7, 0xefdb, 0xfff, 0x5, 0x4d26, 0x1708, 0x66fa, 0xc, 0x2, 0x80], [0x3, 0x74e, 0x0, 0x5, 0x7, 0xffff, 0xff, 0xffffff7f, 0x7, 0x1, 0x10000, 0x401, 0x4c38, 0xe, 0xd, 0x0, 0x7fffffff, 0x0, 0x7f, 0xfffffffa, 0xfffffc00, 0xfffffffa, 0x5, 0x6, 0x1ff, 0x7, 0x3ff, 0x3, 0x7cb, 0x7f, 0x7ff, 0x8, 0x50d, 0x62, 0x3, 0x8, 0xd9, 0x3, 0x324d, 0x4, 0x80000000, 0x100, 0x10001, 0x7, 0x1, 0x5, 0x8, 0x100, 0x0, 0xd176, 0x1, 0x4, 0x1000, 0x9, 0x1, 0x80000000, 0x8, 0x3, 0x4, 0x1, 0x4, 0x3, 0x6, 0x1]}, 0x45c) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 367.958975ms ago: executing program 4 (id=281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rootfs\x00', 0x2081000, &(0x7f0000000100)='()\x00') r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee01, 0xee00) keyctl$setperm(0x5, r2, 0x24012605) keyctl$unlink(0x9, r2, r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000000)={0x3000, 0xfee5b000, 0xe, 0xec, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rootfs\x00', 0x2081000, &(0x7f0000000100)='()\x00') (async) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) (async) keyctl$chown(0x4, r2, 0xee01, 0xee00) (async) keyctl$setperm(0x5, r2, 0x24012605) (async) keyctl$unlink(0x9, r2, r2) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000000)={0x3000, 0xfee5b000, 0xe, 0xec, 0x5}) (async) 326.744558ms ago: executing program 4 (id=282): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20010404) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24008004) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa7) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000500)=[{&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000000340)=""/79, 0xfffffffffffffeb8}, {&(0x7f0000000180)=""/237, 0xed}, {&(0x7f0000000540)=""/208, 0xd0}], 0x4, 0x100, 0xc) 313.213569ms ago: executing program 4 (id=283): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000180)) 246.231414ms ago: executing program 4 (id=284): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x880, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}, {@redirect_dir_follow}]}) 245.697853ms ago: executing program 4 (id=285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setattr(r3, &(0x7f0000000240)={0x38, 0x0, 0x1e, 0x8, 0x3, 0xd7, 0x5aa, 0x9, 0x3, 0x8}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000280)={0x2, 0x2, 0x2}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0x6}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="36f26d0f01c9b9800000c00f3235008000000f30b9ea0a0000b81a2a000066b846008ee80f300f070faeb14b594a6966baa000ecc7442400b03d0000c7442402b0000000c7442406000000000f011c24dc377ce7", 0x54}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500030000000058000b480400945f6400947e570028925a", 0x2f}], 0x1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x109481, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x0) 211.013676ms ago: executing program 0 (id=286): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="bf13e07cd9bad3cdeea272ee541af970df53ebeb73c9f8cac96bc26d6c55bcd0189381ecdce79dd5f01c5cb44abd419b6a0dbe294dc8655f78ff6c48384fbd550f3f5b38e8fa7ebc24a6d4f5b3d0cd8a12ea6515154a278b08dbfd2323268e792d92476b70980bd9066524f09e55b551c50528b30bb743f016e60b5c5b6c6e4d02ef0b0e99367df2bfa3784fbbc747bc6ad6f507111be07abbfaaf965dd1ae1ba01ff99caa70f24071eff69f6057093f17b29802", 0xb4}], 0x1) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="bf13e07cd9bad3cdeea272ee541af970df53ebeb73c9f8cac96bc26d6c55bcd0189381ecdce79dd5f01c5cb44abd419b6a0dbe294dc8655f78ff6c48384fbd550f3f5b38e8fa7ebc24a6d4f5b3d0cd8a12ea6515154a278b08dbfd2323268e792d92476b70980bd9066524f09e55b551c50528b30bb743f016e60b5c5b6c6e4d02ef0b0e99367df2bfa3784fbbc747bc6ad6f507111be07abbfaaf965dd1ae1ba01ff99caa70f24071eff69f6057093f17b29802", 0xb4}], 0x1) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000100)) open$dir(&(0x7f0000000140)='./file0\x00', 0x4002, 0x0) (async) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x4002, 0x0) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/152, 0x98}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000440)=""/189, 0xbd}, {&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001640)=""/4096, 0x1000}, 0x40000000) (async) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/152, 0x98}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000440)=""/189, 0xbd}, {&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001640)=""/4096, 0x1000}, 0x40000000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000002680)={{0x2, 0x4e21, @remote}, {0x1, @random="d0febb999541"}, 0x20, {0x2, 0x4e24, @multicast2}, 'veth1\x00'}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000002680)={{0x2, 0x4e21, @remote}, {0x1, @random="d0febb999541"}, 0x20, {0x2, 0x4e24, @multicast2}, 'veth1\x00'}) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000002700)={0x81, 0xda9, 0x5, 0x5, 0x3, 0x20, 0x1}) setsockopt$sock_void(r0, 0x1, 0x12, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000002740)={'IDLETIMER\x00'}, &(0x7f0000002780)=0x1e) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000002740)={'IDLETIMER\x00'}, &(0x7f0000002780)=0x1e) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt(r2, 0x39, 0x4, &(0x7f00000027c0)="61eb34e6a3b0814512a4dbd24cff8e1a05ca9324e3ea5634023b8ce0d2457bac6fe4ce49c98576bc034abdc1a271e75dc003ea71b327e5e010e0e0f4256bfa4c206eb8d1d0159ae96bbac9abad11c96a0634a0df8bd9dfec91bea6d2d84e76baba783aeec6", 0x65) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f0000002840)={r0, 0x0, 0x3, 0x5, 0x8, 0x1}) (async) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f0000002840)={r0, 0x0, 0x3, 0x5, 0x8, 0x1}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002880)={{{@in6=@private0, @in6=@remote}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000029c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x307, @multicast}, 0x2, {0x2, 0x4e21, @private=0xa010102}, 'batadv_slave_1\x00'}) r3 = openat$cgroup_devices(r0, &(0x7f0000002a40)='devices.allow\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000002a80), 0x0, 0x1) write(r3, &(0x7f0000002ac0)="2c5c757b19b18fafb399451bafed8d4af499275b3ee952eec512e007902b2ab50b596be530e0c2842ef6d4d26174e026714c3bcf042ec9319bf54ab98c09d1ae369646ea7122002b26fbc2e7fca545c62737f8b001d579a06a1dd14b7d573b4d86ee8e43256cc2cc941b6882406f1704030df087e764055d7772f02435bff6bc3b5df512b947be3cc86bff99873a0d12224beeae84ec28cc1666ad37d06a041261eeb36e60e4abdf79a0ba5c74e7b37b2ee9bd27f93ac4d3cc7dd86c31b7f77ee8b6b928ae", 0xc5) sendto(0xffffffffffffffff, &(0x7f0000002bc0)="5e4007be46476c691c489d9b733ffa73a262aa2a0920c24e99d28788940da9fbc88ea053a439ba39978b51a8374167968b566e287c229ba21d00812bec05ab500d5bf2e5e5026b93386643eeafcc8e649a5e5bb8d0cb5ee44d70815984c2b048bc997308fc96a32ebda15f2379988fa81b051d50ecf23c2442b54b47a8bc0778ec8846a23850d30e3511c9ac432c0e4a2198733787ca06a00cc44d0728807f93c82e59340af0945090155da1df3e43b9d5c5a57fd7e5a868efce2a99d505469fd7b060c9f05fdab6760d98819a82f3f5d7bdd05cb7188a21c8aba13f8c236229abe53a3d29", 0xe5, 0x20000080, &(0x7f0000002cc0)=@isdn={0x22, 0xe, 0x1, 0x1, 0x5}, 0x80) (async) sendto(0xffffffffffffffff, &(0x7f0000002bc0)="5e4007be46476c691c489d9b733ffa73a262aa2a0920c24e99d28788940da9fbc88ea053a439ba39978b51a8374167968b566e287c229ba21d00812bec05ab500d5bf2e5e5026b93386643eeafcc8e649a5e5bb8d0cb5ee44d70815984c2b048bc997308fc96a32ebda15f2379988fa81b051d50ecf23c2442b54b47a8bc0778ec8846a23850d30e3511c9ac432c0e4a2198733787ca06a00cc44d0728807f93c82e59340af0945090155da1df3e43b9d5c5a57fd7e5a868efce2a99d505469fd7b060c9f05fdab6760d98819a82f3f5d7bdd05cb7188a21c8aba13f8c236229abe53a3d29", 0xe5, 0x20000080, &(0x7f0000002cc0)=@isdn={0x22, 0xe, 0x1, 0x1, 0x5}, 0x80) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000002d40)=0x4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000002d80)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x4e24, @remote}, 'netpci0\x00'}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r0, 0x4068aea3, &(0x7f0000002e00)={0xed, 0x0, 0xaf1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002e80)={'bridge_slave_1\x00', 0xb100}) memfd_create(&(0x7f0000002ec0)='%.\x00', 0x3) (async) r5 = memfd_create(&(0x7f0000002ec0)='%.\x00', 0x3) accept4$unix(r0, 0x0, &(0x7f0000002f00), 0x0) (async) r6 = accept4$unix(r0, 0x0, &(0x7f0000002f00), 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000003040)={r6, &(0x7f0000002f40)='\x99]{\x00', 0x400000, &(0x7f0000002f80)={@align=0x4e48, {0x3, 0x1, 0x3, 0xa000000000000000}}, 0x0, &(0x7f0000002fc0), &(0x7f0000003000)=0x5}) ioctl$BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000003080)={0xfffffffffffffffc, 0x100}) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000030c0)) getsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000003100), &(0x7f0000003140)=0x4) syz_open_procfs$pagemap(0x0, &(0x7f0000004400)) 187.608977ms ago: executing program 0 (id=287): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000092, 0x0, 0x3264}]}) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000000)=0x17258, 0x4) 12.166719ms ago: executing program 0 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) write$tun(r2, &(0x7f00000003c0)={@void, @val={0x0, 0x0, 0x5, 0x3, 0x6, 0x2}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x66, 0x0, 0x8, 0x2, 0x0, @multicast1, @broadcast}, {0x12, 0x8, 0x0, @rand_addr=0x64010102}}}, 0x26) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000012000000000000000001"], 0xffe) 0s ago: executing program 0 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x317ea, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0x4, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x25000, 0x10000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x1, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xe000, 0xb, 0xe, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x6, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0xb1, 0x8, 0x21, 0x81, 0x80, 0x0, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x7, 0x5, 0x7, 0x3, 0x4, 0x81, 0x1, 0x70}, {0xb000, 0x1000, 0xd, 0x8, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x60000, [0xf90000000000, 0x4, 0x80, 0x5a00000000000000]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 22.815998][ T36] audit: type=1400 audit(1775316801.740:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.817165][ T282] cgroup: Unknown subsys name 'net' [ 22.839009][ T36] audit: type=1400 audit(1775316801.740:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.866764][ T36] audit: type=1400 audit(1775316801.780:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.866955][ T282] cgroup: Unknown subsys name 'devices' [ 23.052265][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.058053][ T282] cgroup: Unknown subsys name 'rlimit' [ 23.149934][ T36] audit: type=1400 audit(1775316802.080:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.173408][ T36] audit: type=1400 audit(1775316802.080:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.194118][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.198736][ T36] audit: type=1400 audit(1775316802.080:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.231071][ T36] audit: type=1400 audit(1775316802.140:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.231234][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.256648][ T36] audit: type=1400 audit(1775316802.140:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.291104][ T36] audit: type=1400 audit(1775316802.160:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.317013][ T36] audit: type=1400 audit(1775316802.160:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.596936][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.604241][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.611565][ T289] bridge_slave_0: entered allmulticast mode [ 24.618106][ T289] bridge_slave_0: entered promiscuous mode [ 24.625192][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.632555][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.639710][ T289] bridge_slave_1: entered allmulticast mode [ 24.645946][ T289] bridge_slave_1: entered promiscuous mode [ 24.753557][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.760720][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.767994][ T294] bridge_slave_0: entered allmulticast mode [ 24.774658][ T294] bridge_slave_0: entered promiscuous mode [ 24.784891][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.792005][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.799140][ T294] bridge_slave_1: entered allmulticast mode [ 24.805532][ T294] bridge_slave_1: entered promiscuous mode [ 24.869600][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.876795][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.884250][ T293] bridge_slave_0: entered allmulticast mode [ 24.890615][ T293] bridge_slave_0: entered promiscuous mode [ 24.899875][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.906988][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.914396][ T295] bridge_slave_0: entered allmulticast mode [ 24.920720][ T295] bridge_slave_0: entered promiscuous mode [ 24.927261][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.934473][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.941582][ T295] bridge_slave_1: entered allmulticast mode [ 24.947972][ T295] bridge_slave_1: entered promiscuous mode [ 24.954473][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.961595][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.968684][ T293] bridge_slave_1: entered allmulticast mode [ 24.975314][ T293] bridge_slave_1: entered promiscuous mode [ 25.033249][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.040336][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.047714][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.054798][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.153340][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.160602][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.167916][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.174981][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.195535][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.202930][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.210617][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.218108][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.232280][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.239358][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.252276][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.259353][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.305191][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.313085][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.325596][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.332671][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.346331][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.353415][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.366894][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.373977][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.384860][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.391931][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.404604][ T289] veth0_vlan: entered promiscuous mode [ 25.424328][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.431421][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.468776][ T289] veth1_macvtap: entered promiscuous mode [ 25.494441][ T295] veth0_vlan: entered promiscuous mode [ 25.502679][ T293] veth0_vlan: entered promiscuous mode [ 25.508963][ T294] veth0_vlan: entered promiscuous mode [ 25.536879][ T295] veth1_macvtap: entered promiscuous mode [ 25.547182][ T293] veth1_macvtap: entered promiscuous mode [ 25.557134][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.574416][ T294] veth1_macvtap: entered promiscuous mode [ 25.662743][ T318] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 25.676932][ T320] ======================================================= [ 25.676932][ T320] WARNING: The mand mount option has been deprecated and [ 25.676932][ T320] and is ignored by this kernel. Remove the mand [ 25.676932][ T320] option from the mount to silence this warning. [ 25.676932][ T320] ======================================================= [ 25.689246][ T325] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.728549][ T319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:5 [ 25.760117][ T331] loop7: detected capacity change from 0 to 7 [ 25.919439][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.049420][ T310] usb 1-1: device descriptor read/64, error -71 [ 26.059496][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.099438][ T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 26.199462][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.209375][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 26.215725][ T312] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 26.226519][ T312] usb 4-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 26.236227][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.244345][ T312] usb 4-1: Product: syz [ 26.248596][ T312] usb 4-1: Manufacturer: syz [ 26.253733][ T312] usb 4-1: SerialNumber: syz [ 26.259619][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 26.289423][ T310] usb 1-1: device descriptor read/64, error -71 [ 26.349376][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 26.356320][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 26.364467][ T31] usb 3-1: can't read configurations, error -22 [ 26.389394][ T9] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 26.465786][ T338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.474460][ T338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.482670][ T306] usb 4-1: USB disconnect, device number 2 [ 26.499375][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.529492][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.539376][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 26.544920][ T9] usb usb2-port1: attempt power cycle [ 26.649682][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 26.657019][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 26.659346][ T310] usb 1-1: device descriptor read/64, error -71 [ 26.665309][ T31] usb 3-1: can't read configurations, error -22 [ 26.678030][ T31] usb usb3-port1: attempt power cycle [ 26.889629][ T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 26.909501][ T310] usb 1-1: device descriptor read/64, error -71 [ 26.916084][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 27.014631][ T351] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.026717][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.026776][ T310] usb usb1-port1: attempt power cycle [ 27.052454][ T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 27.052542][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 27.067411][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 27.070847][ T354] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 27.075611][ T31] usb 3-1: can't read configurations, error -22 [ 27.083499][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 27.095174][ T9] usb usb2-port1: unable to enumerate USB device [ 27.095174][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.219369][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 27.239713][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 27.246310][ T31] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 27.254395][ T31] usb 3-1: can't read configurations, error -22 [ 27.260820][ T31] usb usb3-port1: unable to enumerate USB device [ 27.379475][ T310] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.400423][ T310] usb 1-1: device descriptor read/8, error -71 [ 27.531172][ T310] usb 1-1: device descriptor read/8, error -71 [ 27.769651][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 27.790603][ T310] usb 1-1: device descriptor read/8, error -71 [ 27.920491][ T310] usb 1-1: device descriptor read/8, error -71 [ 28.029534][ T310] usb usb1-port1: unable to enumerate USB device [ 28.973986][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 28.974005][ T36] audit: type=1400 audit(1775316807.900:126): avc: denied { ioctl } for pid=361 comm="syz.2.18" path="socket:[3474]" dev="sockfs" ino=3474 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.017277][ T36] audit: type=1400 audit(1775316807.940:127): avc: denied { setopt } for pid=364 comm="syz.2.19" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.059398][ T310] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 29.088404][ T36] audit: type=1400 audit(1775316808.010:128): avc: denied { ioctl } for pid=380 comm="syz.2.23" path="socket:[3490]" dev="sockfs" ino=3490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.088682][ T381] af_packet: tpacket_rcv: packet too big, clamped from 65386 to 4294967272. macoff=96 [ 29.113201][ T36] audit: type=1400 audit(1775316808.010:129): avc: denied { write } for pid=380 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.129533][ T355] Bluetooth: hci0: command 0x1003 tx timeout [ 29.141873][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.180127][ T36] audit: type=1400 audit(1775316808.110:130): avc: denied { read } for pid=384 comm="syz.2.25" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.203169][ T36] audit: type=1400 audit(1775316808.110:131): avc: denied { open } for pid=384 comm="syz.2.25" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.204582][ T385] input: syz1 as /devices/virtual/input/input4 [ 29.229334][ T36] audit: type=1400 audit(1775316808.140:132): avc: denied { ioctl } for pid=384 comm="syz.2.25" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.249360][ T310] usb 1-1: Invalid ep0 maxpacket: 16 [ 29.309404][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 29.389477][ T310] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 29.459348][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 29.465532][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.476602][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.479326][ T9] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 29.486385][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 29.506621][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 29.515762][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.524410][ T31] usb 2-1: config 0 descriptor?? [ 29.549393][ T310] usb 1-1: Invalid ep0 maxpacket: 16 [ 29.554984][ T310] usb usb1-port1: attempt power cycle [ 29.640894][ T9] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 29.649342][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 29.657437][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.667757][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 29.680863][ T9] usb 3-1: string descriptor 0 read error: -22 [ 29.682485][ T389] syzkaller1: entered promiscuous mode [ 29.687106][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 29.693238][ T389] syzkaller1: entered allmulticast mode [ 29.702489][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.714656][ T36] audit: type=1400 audit(1775316808.640:133): avc: denied { create } for pid=388 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 29.716399][ T9] usb 3-1: config 0 descriptor?? [ 29.737815][ T389] Zero length message leads to an empty skb [ 29.743937][ T36] audit: type=1400 audit(1775316808.670:134): avc: denied { getopt } for pid=388 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 29.767193][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 29.773764][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 29.844194][ T391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27'. [ 29.845630][ T36] audit: type=1400 audit(1775316808.770:135): avc: denied { bind } for pid=390 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.899408][ T310] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 29.919754][ T310] usb 1-1: Invalid ep0 maxpacket: 16 [ 30.049366][ T310] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 30.069545][ T10] usb 3-1: USB disconnect, device number 6 [ 30.077330][ T310] usb 1-1: Invalid ep0 maxpacket: 16 [ 30.082813][ T310] usb usb1-port1: unable to enumerate USB device [ 30.119378][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.270552][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.281680][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.291858][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.298581][ T9] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 30.307767][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.316562][ T9] usb 4-1: config 0 descriptor?? [ 30.351071][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 30.357265][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 30.366387][ T31] usb 2-1: USB disconnect, device number 6 [ 30.866822][ T408] netlink: 100 bytes leftover after parsing attributes in process `syz.1.31'. [ 30.989422][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 31.109398][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 31.140486][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 206, changing to 11 [ 31.151729][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42414, setting to 1024 [ 31.162935][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.175940][ T31] usb 3-1: New USB device found, idVendor=0404, idProduct=ffff, bcdDevice= 0.00 [ 31.185401][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.194611][ T31] usb 3-1: config 0 descriptor?? [ 31.199949][ T406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.269314][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 31.276044][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.284467][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.295064][ T45] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.305700][ T45] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 31.315234][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.323511][ T45] usb 2-1: Product: 볉貲䨕ꊦ줱潵ር溕ꊧ丸᫹㚃䗳陞岣뿏듫뱄ꥷ㾧๨癐㜭䠪傛﷣諟嗖㩸勗坂﮴鱑宯ᝄᴶ琚딚긗늰蝢ﵭ塱洆ጒፊ皜쬇ᄆ׹濚㺘寡 [ 31.343649][ T45] usb 2-1: Manufacturer: చ [ 31.348356][ T45] usb 2-1: SerialNumber: ఉ [ 31.411883][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 31.417904][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 31.426943][ T31] usb 3-1: USB disconnect, device number 7 [ 31.558633][ T45] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 31.567980][ T45] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 31.575963][ T45] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 31.584167][ T45] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 31.594260][ T45] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 31.602014][ T45] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 31.612522][ T45] usb 2-1: USB disconnect, device number 7 [ 31.640419][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.926696][ T420] netlink: 'syz.2.34': attribute type 27 has an invalid length. [ 31.935318][ T420] netlink: 96 bytes leftover after parsing attributes in process `syz.2.34'. [ 32.079318][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 32.239314][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 32.246295][ T10] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.259642][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 32.267693][ T10] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.40 [ 32.276837][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.279323][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 32.284917][ T10] usb 1-1: Product: ࠚ [ 32.296756][ T10] usb 1-1: Manufacturer: 䤞㢨᥃쁱묰吂셏퉷䮧艪㘃捔ᇱ県 [ 32.304822][ T10] usb 1-1: SerialNumber: ы [ 32.310740][ T418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.440756][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.449199][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 32.460286][ T45] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 32.473661][ T45] usb 3-1: string descriptor 0 read error: -22 [ 32.479995][ T45] usb 3-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 32.489038][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.581262][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 32.596696][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 32.607728][ T10] usb 1-1: USB disconnect, device number 10 [ 32.701647][ T428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.714872][ T443] syzkaller1: entered promiscuous mode [ 32.718181][ T428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.720915][ T443] syzkaller1: entered allmulticast mode [ 32.795177][ T444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 32.934538][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 32.947113][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 32.968515][ T9] usb 4-1: USB disconnect, device number 3 [ 33.019376][ T66] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 33.170551][ T66] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 33.181688][ T66] usb 1-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 33.192717][ T66] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 33.201908][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.209325][ T310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 33.219980][ T45] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 33.229725][ T45] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 33.240728][ T66] usb 1-1: invalid MIDI out EP 0 [ 33.247854][ T45] usb 3-1: USB disconnect, device number 8 [ 33.256044][ T66] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 33.272753][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 33.370476][ T310] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.381773][ T310] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.391714][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.398330][ T310] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 33.407410][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.416092][ T310] usb 2-1: config 0 descriptor?? [ 33.421715][ T9] usb 1-1: USB disconnect, device number 11 [ 33.650348][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 33.656372][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 33.665477][ T310] usb 2-1: USB disconnect, device number 8 [ 34.039086][ T467] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 34.048846][ T467] SELinux: failed to load policy [ 34.062868][ T36] kauditd_printk_skb: 99 callbacks suppressed [ 34.062885][ T36] audit: type=1400 audit(1775316812.960:235): avc: denied { setopt } for pid=466 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.088578][ T36] audit: type=1400 audit(1775316812.960:236): avc: denied { load_policy } for pid=466 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 34.119896][ T310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.153270][ T36] audit: type=1400 audit(1775316813.080:237): avc: denied { watch } for pid=469 comm="syz.0.52" path="/8" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.216613][ T474] cgroup2: Unknown parameter 'memory_recur3( 1f' [ 34.216625][ T36] audit: type=1400 audit(1775316813.140:238): avc: denied { mounton } for pid=473 comm="syz.2.54" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 34.262367][ T36] audit: type=1400 audit(1775316813.190:239): avc: denied { create } for pid=476 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 34.281867][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 34.288153][ T310] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 117, changing to 7 [ 34.299670][ T310] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 226, changing to 7 [ 34.314969][ T36] audit: type=1400 audit(1775316813.240:240): avc: denied { read } for pid=478 comm="syz.0.56" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.341461][ T310] usb 4-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 34.350853][ T36] audit: type=1400 audit(1775316813.270:241): avc: denied { map } for pid=481 comm="syz.0.57" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.373690][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.382409][ T310] usb 4-1: Product: syz [ 34.392382][ T310] usb 4-1: Manufacturer: syz [ 34.402487][ T310] usb 4-1: SerialNumber: syz [ 34.407155][ T36] audit: type=1400 audit(1775316813.270:242): avc: denied { execute } for pid=481 comm="syz.0.57" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 34.439353][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 34.525274][ T492] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 34.539554][ T36] audit: type=1400 audit(1775316813.470:243): avc: denied { create } for pid=491 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.590377][ T9] usb 2-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config [ 34.600767][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 34.609996][ T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 34.619207][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.627980][ T9] usb 2-1: config 0 descriptor?? [ 34.635495][ T310] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.642948][ T310] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 34.649345][ T66] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 34.654221][ T310] usb 4-1: USB disconnect, device number 4 [ 34.669059][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.809395][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 34.814610][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 34.824977][ T66] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 34.834199][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.842414][ T66] usb 1-1: Product: syz [ 34.847033][ T66] usb 1-1: Manufacturer: syz [ 34.848316][ T472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.851802][ T66] usb 1-1: SerialNumber: syz [ 34.861785][ T472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.865707][ T66] usb 1-1: config 0 descriptor?? [ 34.879660][ T66] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 34.887317][ T455] usb 2-1: USB disconnect, device number 9 [ 34.969425][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 34.976398][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.984836][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.995191][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 35.005763][ T45] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 35.015049][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.023102][ T45] usb 3-1: Product: syz [ 35.027277][ T45] usb 3-1: Manufacturer: syz [ 35.031910][ T45] usb 3-1: SerialNumber: syz [ 35.085800][ T36] audit: type=1400 audit(1775316814.010:244): avc: denied { create } for pid=488 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 35.085979][ T489] veth0_virt_wifi: entered allmulticast mode [ 35.116458][ T489] netlink: 'syz.0.59': attribute type 3 has an invalid length. [ 35.124516][ T488] veth0_virt_wifi: left allmulticast mode [ 35.130812][ T310] usb 1-1: USB disconnect, device number 12 [ 35.240181][ T45] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 35.248857][ T45] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 35.256748][ T45] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 35.264656][ T45] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 35.274238][ T45] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 35.281980][ T45] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 35.291716][ T45] usb 3-1: USB disconnect, device number 9 [ 35.459384][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.503137][ T507] mmap: syz.1.65 (507) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.630455][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.641642][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.651527][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 35.658315][ T9] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 35.667527][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.676189][ T9] usb 4-1: config 0 descriptor?? [ 35.769375][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 35.889351][ T455] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 35.909598][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 35.915543][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.919341][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 35.924497][ T9] usb 4-1: USB disconnect, device number 5 [ 35.933962][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 35.943312][ T45] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 35.950770][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 35.959841][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.974188][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.983350][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.991479][ T66] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 35.999244][ T45] usb 2-1: Product: syz [ 36.003566][ T45] usb 2-1: Manufacturer: syz [ 36.008448][ T45] usb 2-1: SerialNumber: syz [ 36.039333][ T455] usb 1-1: Using ep0 maxpacket: 32 [ 36.047077][ T455] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.058051][ T455] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.069598][ T455] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 36.078680][ T455] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 36.087044][ T455] usb 1-1: Product: syz [ 36.091519][ T455] usb 1-1: Manufacturer: syz [ 36.098727][ T455] hub 1-1:4.0: USB hub found [ 36.150932][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.158975][ T66] usb 3-1: not running at top speed; connect to a high speed hub [ 36.167727][ T66] usb 3-1: config 1 has an invalid descriptor of length 185, skipping remainder of the config [ 36.178512][ T66] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 36.189855][ T66] usb 3-1: string descriptor 0 read error: -22 [ 36.196074][ T66] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 36.205162][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.217786][ T45] cdc_ncm 2-1:1.0: skipping garbage [ 36.223525][ T45] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 36.230347][ T45] cdc_ncm 2-1:1.0: bind() failure [ 36.237279][ T45] usb 2-1: USB disconnect, device number 10 [ 36.299070][ T455] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 36.418621][ T513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=513 comm=syz.2.68 [ 36.502339][ T511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.510951][ T511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.759377][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.909366][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 36.914965][ T9] usb 4-1: too many configurations: 43, using maximum allowed: 8 [ 36.923866][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 36.934236][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.947944][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 36.958123][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.971828][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 36.982031][ T310] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 36.990011][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.004043][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 37.014247][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.027917][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 37.038159][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.051964][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 37.062346][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.076140][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 37.086343][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.100146][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 37.110287][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.124587][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 37.133847][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=173 [ 37.142468][ T9] usb 4-1: Product: syz [ 37.146750][ T9] usb 4-1: Manufacturer: syz [ 37.151384][ T9] usb 4-1: SerialNumber: syz [ 37.158236][ T9] hub 4-1:4.0: Invalid hub with more than one config or interface [ 37.166182][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 37.171418][ T9] hub 4-1:4.0: probe with driver hub failed with error -22 [ 37.179380][ T9] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 37.187432][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.196889][ T310] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 96, changing to 7 [ 37.209564][ T310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.218707][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.226769][ T310] usb 2-1: Product: syz [ 37.230986][ T310] usb 2-1: Manufacturer: syz [ 37.235606][ T310] usb 2-1: SerialNumber: syz [ 37.451070][ T310] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 37.457259][ T531] overlay: filesystem on ./file0 not supported as upperdir [ 37.463919][ T310] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 37.472226][ T531] overlay: filesystem on ./file0 not supported as upperdir [ 37.479851][ T531] overlay: filesystem on ./file0 not supported as upperdir [ 37.483027][ T310] usb 2-1: USB disconnect, device number 11 [ 37.494006][ T531] overlay: filesystem on ./file0 not supported as upperdir [ 37.498780][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.517878][ T531] overlay: filesystem on ./file0 not supported as upperdir [ 37.526254][ T531] overlay: filesystem on ./file0 not supported as upperdir [ 37.614244][ T538] loop7: detected capacity change from 0 to 7 [ 37.620899][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.630115][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.638184][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.647357][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.655359][ T538] loop7: unable to read partition table [ 37.661261][ T538] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 37.662915][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.681731][ T455] kernel write not supported for file /rfkill (pid: 455 comm: kworker/1:5) [ 37.684029][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.701045][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.710451][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.718984][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.728176][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.736436][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.745579][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.753878][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.763066][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 37.771875][ T539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.780974][ T539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.803301][ T310] usb 4-1: USB disconnect, device number 6 [ 38.179363][ T310] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 38.219391][ T455] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 38.329389][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 38.335820][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 38.344958][ T310] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 38.354736][ T310] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 38.364530][ T310] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 38.374299][ T310] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 38.384057][ T310] usb 4-1: config 1 interface 0 has no altsetting 0 [ 38.390695][ T310] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 38.390766][ T455] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 38.399794][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.407314][ T310] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 38.410365][ T455] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 38.640535][ T310] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 38.653961][ T310] usb 4-1: USB disconnect, device number 7 [ 38.676992][ T558] netlink: 'syz.0.82': attribute type 27 has an invalid length. [ 38.759610][ T45] usb 1-1: USB disconnect, device number 13 [ 38.764382][ T9] usb 3-1: USB disconnect, device number 10 [ 38.842106][ T12] bridge_slave_1: left allmulticast mode [ 38.848055][ T12] bridge_slave_1: left promiscuous mode [ 38.854400][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.863211][ T12] bridge_slave_0: left allmulticast mode [ 38.868909][ T12] bridge_slave_0: left promiscuous mode [ 38.875389][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.005756][ T12] veth1_macvtap: left promiscuous mode [ 39.011384][ T12] veth0_vlan: left promiscuous mode [ 39.070941][ T569] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.078074][ T569] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.085216][ T569] bridge_slave_0: entered allmulticast mode [ 39.091927][ T569] bridge_slave_0: entered promiscuous mode [ 39.098663][ T569] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.105829][ T569] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.113051][ T569] bridge_slave_1: entered allmulticast mode [ 39.119530][ T569] bridge_slave_1: entered promiscuous mode [ 39.174178][ T569] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.181268][ T569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.188754][ T569] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.195845][ T569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.202172][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 39.202191][ T36] audit: type=1400 audit(1775316818.130:265): avc: denied { connect } for pid=577 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.230997][ T9] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 39.231413][ T36] audit: type=1400 audit(1775316818.160:266): avc: denied { ioctl } for pid=577 comm="syz.3.90" path="socket:[5068]" dev="sockfs" ino=5068 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.262809][ T36] audit: type=1400 audit(1775316818.160:267): avc: denied { write } for pid=577 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.282784][ T36] audit: type=1400 audit(1775316818.160:268): avc: denied { read } for pid=577 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.324393][ T569] veth0_vlan: entered promiscuous mode [ 39.336424][ T569] veth1_macvtap: entered promiscuous mode [ 39.391983][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 39.405513][ T36] audit: type=1400 audit(1775316818.330:269): avc: denied { mount } for pid=584 comm="syz.4.91" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 39.406125][ T585] support for the xor transformation has been removed. [ 39.482095][ T587] netlink: 'syz.4.92': attribute type 1 has an invalid length. [ 39.490703][ T587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 39.501305][ T36] audit: type=1404 audit(1775316818.430:270): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 39.516656][ T36] audit: type=1404 audit(1775316818.450:271): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 39.532847][ T36] audit: type=1400 audit(1775316818.450:272): avc: denied { write } for pid=586 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.539753][ T9] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 39.561489][ T36] audit: type=1400 audit(1775316818.490:273): avc: denied { read write } for pid=569 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.590113][ T36] audit: type=1400 audit(1775316818.490:274): avc: denied { open } for pid=569 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.709311][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 39.714857][ T9] usb usb1-port1: attempt power cycle [ 39.899323][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.056163][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 40.064606][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 40.072373][ T9] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 40.095381][ T10] usb 5-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 40.104817][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.113050][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 40.119879][ T10] usb 5-1: Product: syz [ 40.124207][ T10] usb 5-1: Manufacturer: syz [ 40.128875][ T10] usb 5-1: SerialNumber: syz [ 40.249522][ T9] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 40.269750][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 40.275267][ T9] usb usb1-port1: unable to enumerate USB device [ 40.349350][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.360961][ T10] usb 5-1: found format II with max.bitrate = 5, frame size=11 [ 40.368901][ T10] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 40.388654][ T10] usb 5-1: USB disconnect, device number 2 [ 40.867418][ T605] netlink: 220 bytes leftover after parsing attributes in process `syz.4.98'. [ 40.878046][ T605] netlink: 'syz.4.98': attribute type 7 has an invalid length. [ 40.885897][ T605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.98'. [ 40.988100][ T455] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 41.019230][ T455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.030147][ T455] usb 2-1: Product: Ќ [ 41.036246][ T455] usb 2-1: Manufacturer: ࠧ [ 41.078635][ T455] usb 2-1: can't set config #1, error -71 [ 41.079584][ T617] 9p: Unknown uid 00000000004294967295 [ 41.085687][ T455] usb 2-1: USB disconnect, device number 12 [ 41.599328][ T310] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 41.729345][ T310] usb 2-1: device descriptor read/64, error -71 [ 41.800601][ T631] kvm: pic: single mode not supported [ 41.854548][ T635] netlink: 72 bytes leftover after parsing attributes in process `syz.4.110'. [ 41.914261][ T638] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=638 comm=syz.3.111 [ 41.969339][ T310] usb 2-1: device descriptor read/64, error -71 [ 42.006788][ T644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 42.166826][ T660] incfs: Options parsing error. -22 [ 42.172196][ T660] incfs: mount failed -22 [ 42.182511][ T660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 42.191349][ T660] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 42.203021][ T660] overlayfs: conflicting options: userxattr,verity=require [ 42.210424][ T310] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 42.349452][ T310] usb 2-1: device descriptor read/64, error -71 [ 42.369385][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 42.521278][ T45] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 42.529434][ T45] usb 1-1: can't read configurations, error -22 [ 42.599399][ T310] usb 2-1: device descriptor read/64, error -71 [ 42.649370][ T66] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 42.659438][ T45] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 42.709446][ T310] usb usb2-port1: attempt power cycle [ 42.799381][ T66] usb 5-1: device descriptor read/64, error -71 [ 42.820638][ T45] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 42.828729][ T45] usb 1-1: can't read configurations, error -22 [ 42.835368][ T45] usb usb1-port1: attempt power cycle [ 42.859367][ T10] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 42.989432][ T10] usb 4-1: device descriptor read/64, error -71 [ 43.039352][ T66] usb 5-1: device descriptor read/64, error -71 [ 43.049459][ T310] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 43.070377][ T310] usb 2-1: device descriptor read/8, error -71 [ 43.189348][ T45] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 43.200462][ T310] usb 2-1: device descriptor read/8, error -71 [ 43.211393][ T45] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 43.219570][ T45] usb 1-1: can't read configurations, error -22 [ 43.229557][ T10] usb 4-1: device descriptor read/64, error -71 [ 43.279351][ T66] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 43.349378][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 43.371359][ T45] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 43.379352][ T45] usb 1-1: can't read configurations, error -22 [ 43.385705][ T45] usb usb1-port1: unable to enumerate USB device [ 43.409427][ T66] usb 5-1: device descriptor read/64, error -71 [ 43.439404][ T310] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 43.460413][ T310] usb 2-1: device descriptor read/8, error -71 [ 43.469399][ T10] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 43.599464][ T10] usb 4-1: device descriptor read/64, error -71 [ 43.606750][ T310] usb 2-1: device descriptor read/8, error -71 [ 43.649368][ T66] usb 5-1: device descriptor read/64, error -71 [ 43.719446][ T310] usb usb2-port1: unable to enumerate USB device [ 43.759456][ T66] usb usb5-port1: attempt power cycle [ 43.839331][ T10] usb 4-1: device descriptor read/64, error -71 [ 43.949479][ T10] usb usb4-port1: attempt power cycle [ 44.099389][ T66] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 44.120446][ T66] usb 5-1: device descriptor read/8, error -71 [ 44.250465][ T66] usb 5-1: device descriptor read/8, error -71 [ 44.289418][ T10] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 44.310722][ T10] usb 4-1: device descriptor read/8, error -71 [ 44.450101][ T10] usb 4-1: device descriptor read/8, error -71 [ 44.489584][ T66] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 44.510447][ T66] usb 5-1: device descriptor read/8, error -71 [ 44.640452][ T66] usb 5-1: device descriptor read/8, error -71 [ 44.689524][ T10] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 44.710407][ T10] usb 4-1: device descriptor read/8, error -71 [ 44.749353][ T310] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 44.759405][ T66] usb usb5-port1: unable to enumerate USB device [ 44.840435][ T10] usb 4-1: device descriptor read/8, error -71 [ 44.899381][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 44.905865][ T310] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 44.917643][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 44.924323][ T310] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 44.933442][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.941991][ T310] usb 2-1: config 0 descriptor?? [ 44.949449][ T10] usb usb4-port1: unable to enumerate USB device [ 45.150399][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 45.150418][ T36] audit: type=1400 audit(1775316824.080:355): avc: denied { read } for pid=675 comm="syz.1.123" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.162893][ T676] rust_binder: Error while translating object. [ 45.179236][ T676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 45.179806][ T36] audit: type=1400 audit(1775316824.080:356): avc: denied { open } for pid=675 comm="syz.1.123" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.186327][ T676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:78 [ 45.195468][ T36] audit: type=1400 audit(1775316824.090:357): avc: denied { ioctl } for pid=675 comm="syz.1.123" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.253092][ T36] audit: type=1400 audit(1775316824.090:358): avc: denied { set_context_mgr } for pid=675 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 45.272757][ T36] audit: type=1400 audit(1775316824.090:359): avc: denied { map } for pid=675 comm="syz.1.123" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.296518][ T36] audit: type=1400 audit(1775316824.090:360): avc: denied { call } for pid=675 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 45.444497][ T36] audit: type=1400 audit(1775316824.370:361): avc: denied { append } for pid=681 comm="syz.4.126" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.467425][ T36] audit: type=1400 audit(1775316824.370:362): avc: denied { getopt } for pid=681 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.470410][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.497619][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.499978][ T36] audit: type=1400 audit(1775316824.430:363): avc: denied { read write } for pid=683 comm="syz.4.127" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.505126][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.529561][ T36] audit: type=1400 audit(1775316824.460:364): avc: denied { open } for pid=683 comm="syz.4.127" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.536877][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.567796][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 45.575623][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.583406][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.585133][ T684] netlink: 80 bytes leftover after parsing attributes in process `syz.4.127'. [ 45.590924][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.607346][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.614851][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.621709][ T684] netlink: 'syz.4.127': attribute type 5 has an invalid length. [ 45.633657][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.633757][ T684] netlink: 45 bytes leftover after parsing attributes in process `syz.4.127'. [ 45.641179][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.657856][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.665468][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.673207][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.675822][ T687] netlink: 'syz.4.128': attribute type 4 has an invalid length. [ 45.680898][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.688751][ T687] netlink: 17 bytes leftover after parsing attributes in process `syz.4.128'. [ 45.706096][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.713786][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.726303][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.729348][ T692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.734198][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.743474][ T692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.749759][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 45.762559][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.770277][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.777695][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.785321][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.792907][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.800589][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.810820][ T10] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 45.819920][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.827335][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.834747][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.843162][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.851024][ T10] usb 1-1: config 0 descriptor?? [ 45.856081][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.863654][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.872597][ T310] pantherlord 0003:0810:0001.0001: unknown main item tag 0x0 [ 45.881681][ T310] pantherlord 0003:0810:0001.0001: hidraw0: USB HID v0.04 Device [HID 0810:0001] on usb-dummy_hcd.1-1/input0 [ 45.893570][ T310] pantherlord 0003:0810:0001.0001: no output reports found [ 45.904170][ T310] usb 2-1: USB disconnect, device number 17 [ 46.019340][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 46.073879][ T310] usb 1-1: USB disconnect, device number 22 [ 46.169364][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 46.179323][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 46.186990][ T9] usb 4-1: can't read configurations, error -61 [ 46.188567][ T695] netlink: 'syz.1.130': attribute type 13 has an invalid length. [ 46.201732][ T695] erspan0: refused to change device tx_queue_len [ 46.242326][ T702] capability: warning: `syz.4.133' uses 32-bit capabilities (legacy support in use) [ 46.329349][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 46.499324][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 46.505799][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 46.513525][ T9] usb 4-1: can't read configurations, error -61 [ 46.520112][ T9] usb usb4-port1: attempt power cycle [ 46.529348][ T66] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 46.536994][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 46.669387][ T45] usb 5-1: device descriptor read/64, error -71 [ 46.690577][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.701848][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.711770][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 46.724606][ T66] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 46.733685][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.742503][ T66] usb 2-1: config 0 descriptor?? [ 46.829365][ T310] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 46.859342][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 46.879719][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 46.886298][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 46.893994][ T9] usb 4-1: can't read configurations, error -61 [ 46.919320][ T45] usb 5-1: device descriptor read/64, error -71 [ 46.979336][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 46.986292][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.994887][ T310] usb 1-1: config 9 has an invalid interface number: 88 but max is 0 [ 47.003081][ T310] usb 1-1: config 9 has no interface number 0 [ 47.009219][ T310] usb 1-1: config 9 interface 88 has no altsetting 0 [ 47.017760][ T310] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.b8 [ 47.026863][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.034934][ T310] usb 1-1: Product: syz [ 47.039111][ T310] usb 1-1: Manufacturer: syz [ 47.043745][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 47.051381][ T310] usb 1-1: SerialNumber: syz [ 47.069692][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 47.076238][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 47.083866][ T9] usb 4-1: can't read configurations, error -61 [ 47.090299][ T9] usb usb4-port1: unable to enumerate USB device [ 47.150699][ T66] magicmouse 0003:05AC:0265.0002: item fetching failed at offset 8/41 [ 47.159139][ T66] magicmouse 0003:05AC:0265.0002: magicmouse hid parse failed [ 47.166783][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 47.174357][ T66] magicmouse 0003:05AC:0265.0002: probe with driver magicmouse failed with error -22 [ 47.258557][ T310] ums-datafab 1-1:9.88: USB Mass Storage device detected [ 47.280826][ T310] ums-sddr55 1-1:9.88: USB Mass Storage device detected [ 47.301195][ T310] usb 1-1: USB disconnect, device number 23 [ 47.319320][ T45] usb 5-1: device descriptor read/64, error -71 [ 47.350480][ T66] usb 2-1: USB disconnect, device number 18 [ 47.559361][ T45] usb 5-1: device descriptor read/64, error -71 [ 47.669465][ T45] usb usb5-port1: attempt power cycle [ 48.009349][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 48.030420][ T45] usb 5-1: device descriptor read/8, error -71 [ 48.089341][ T310] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 48.160383][ T45] usb 5-1: device descriptor read/8, error -71 [ 48.219344][ T310] usb 1-1: device descriptor read/64, error -71 [ 48.399330][ T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 48.420464][ T45] usb 5-1: device descriptor read/8, error -71 [ 48.459367][ T310] usb 1-1: device descriptor read/64, error -71 [ 48.550591][ T45] usb 5-1: device descriptor read/8, error -71 [ 48.659415][ T45] usb usb5-port1: unable to enumerate USB device [ 48.699432][ T310] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 48.730697][ T727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.141'. [ 48.739720][ T727] tipc: Invalid UDP bearer configuration [ 48.739746][ T727] tipc: Enabling of bearer rejected, failed to enable media [ 48.770463][ T729] fuse: Bad value for 'fd' [ 48.840191][ T310] usb 1-1: device descriptor read/64, error -71 [ 49.026389][ T765] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 49.079372][ T310] usb 1-1: device descriptor read/64, error -71 [ 49.079372][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 49.199489][ T310] usb usb1-port1: attempt power cycle [ 49.229353][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 49.235731][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.245921][ T45] usb 4-1: config 0 has no interfaces? [ 49.251434][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 49.260708][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.269520][ T45] usb 4-1: config 0 descriptor?? [ 49.319396][ T409] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 49.462716][ T779] tipc: Started in network mode [ 49.467603][ T779] tipc: Node identity dac8cda28b01, cluster identity 4711 [ 49.471340][ T409] usb 2-1: Using ep0 maxpacket: 32 [ 49.475104][ T779] tipc: Enabled bearer , priority 0 [ 49.482076][ T734] overlayfs: upper fs does not support file handles, falling back to index=off. [ 49.489693][ T779] syzkaller0: MTU too low for tipc bearer [ 49.495629][ T734] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 49.501482][ T779] tipc: Disabling bearer [ 49.511222][ T409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.519643][ T9] usb 4-1: USB disconnect, device number 17 [ 49.529047][ T409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.540909][ T780] loop5: detected capacity change from 0 to 58 [ 49.543772][ T409] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 49.549311][ T310] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 49.561769][ T409] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 49.578337][ T409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.583960][ T779] netlink: 'syz.4.159': attribute type 11 has an invalid length. [ 49.594504][ T779] netlink: 44 bytes leftover after parsing attributes in process `syz.4.159'. [ 49.600359][ T409] usb 2-1: config 0 descriptor?? [ 49.610459][ T310] usb 1-1: device descriptor read/8, error -71 [ 49.740435][ T310] usb 1-1: device descriptor read/8, error -71 [ 49.959360][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 49.979386][ T310] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 50.000428][ T310] usb 1-1: device descriptor read/8, error -71 [ 50.109330][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 50.116404][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 50.125228][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.135548][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.138273][ T409] usbhid 2-1:0.0: can't add hid device: -71 [ 50.146754][ T310] usb 1-1: device descriptor read/8, error -71 [ 50.150656][ T409] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 50.157332][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.170006][ T409] usb 2-1: USB disconnect, device number 19 [ 50.174187][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.187508][ T10] usb 5-1: Product: syz [ 50.191759][ T10] usb 5-1: Manufacturer: syz [ 50.196368][ T10] usb 5-1: SerialNumber: syz [ 50.269421][ T310] usb usb1-port1: unable to enumerate USB device [ 50.319359][ T66] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 50.403229][ T10] usb 5-1: 0:2 : does not exist [ 50.469326][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 50.475665][ T66] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 50.483950][ T66] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.494088][ T66] usb 4-1: config 0 has no interface number 0 [ 50.501890][ T66] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 50.511105][ T66] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 50.519165][ T66] usb 4-1: Product: syz [ 50.523387][ T66] usb 4-1: Manufacturer: syz [ 50.528009][ T66] usb 4-1: SerialNumber: syz [ 50.533358][ T66] usb 4-1: config 0 descriptor?? [ 50.539375][ T66] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 50.545770][ T66] uvcvideo 4-1:0.105: Entity type for entity Output 1 was not initialized! [ 50.554498][ T66] usb 4-1: Failed to create links for entity 1 [ 50.560735][ T66] usb 4-1: Failed to register entities (-22). [ 50.751852][ T795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.760872][ T795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.769747][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 50.769763][ T36] audit: type=1400 audit(1775316829.700:399): avc: denied { write } for pid=794 comm="syz.3.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.814709][ T310] usb 4-1: USB disconnect, device number 18 [ 50.822291][ T36] audit: type=1400 audit(1775316829.750:400): avc: denied { map } for pid=805 comm="syz.0.168" path="socket:[7533]" dev="sockfs" ino=7533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 50.850629][ T36] audit: type=1400 audit(1775316829.750:401): avc: denied { connect } for pid=805 comm="syz.0.168" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.935342][ T812] overlayfs: overlapping lowerdir path [ 51.039334][ T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 51.190474][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 51.201442][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.212537][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.222410][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 51.236455][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 51.245583][ T45] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 51.253732][ T45] usb 2-1: Manufacturer: syz [ 51.259155][ T45] usb 2-1: config 0 descriptor?? [ 51.337905][ T36] audit: type=1400 audit(1775316830.260:402): avc: denied { mount } for pid=813 comm="syz.3.171" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.610278][ T66] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 51.666278][ T45] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 51.673576][ T45] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 51.682759][ T45] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 51.699925][ T310] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 51.761566][ T66] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 51.769375][ T66] usb 4-1: can't read configurations, error -71 [ 51.881805][ T310] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 51.891006][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.899054][ T310] usb 1-1: Product: syz [ 51.903494][ T310] usb 1-1: Manufacturer: syz [ 51.908108][ T310] usb 1-1: SerialNumber: syz [ 52.115183][ T818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.123972][ T818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.241295][ T36] audit: type=1400 audit(1775316831.170:403): avc: denied { setopt } for pid=817 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.284232][ T36] audit: type=1400 audit(1775316831.210:404): avc: denied { read } for pid=823 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.334462][ T36] audit: type=1400 audit(1775316831.260:405): avc: denied { write } for pid=823 comm="syz.3.174" path="socket:[7708]" dev="sockfs" ino=7708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.488113][ T36] audit: type=1400 audit(1775316831.410:406): avc: denied { read } for pid=829 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.540998][ T830] : renamed from vlan0 (while UP) [ 52.548396][ T830] usb usb9: usbfs: process 830 (syz.3.176) did not claim interface 1 before use [ 52.726394][ T66] usb 5-1: USB disconnect, device number 11 [ 52.806850][ T839] rust_binder: Error while translating object. [ 52.806884][ T839] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.813502][ T839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 52.839888][ T36] audit: type=1400 audit(1775316831.770:407): avc: denied { read write } for pid=840 comm="syz.3.180" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 52.880423][ T36] audit: type=1400 audit(1775316831.770:408): avc: denied { open } for pid=840 comm="syz.3.180" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 52.898634][ T848] input: syz0 as /devices/virtual/input/input7 [ 52.917954][ T848] random: crng reseeded on system resumption [ 52.988996][ T310] rtl8150 1-1:1.0: couldn't reset the device [ 52.995305][ T310] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 53.063668][ T851] capability: warning: `syz.3.183' uses deprecated v2 capabilities in a way that may be insecure [ 53.079540][ T66] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 53.120376][ T853] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 53.239316][ T66] usb 5-1: Using ep0 maxpacket: 16 [ 53.245691][ T66] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 53.253783][ T66] usb 5-1: config 0 has no interface number 0 [ 53.260185][ T66] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 53.271673][ T66] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 53.280966][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.288964][ T66] usb 5-1: Product: syz [ 53.293281][ T66] usb 5-1: Manufacturer: syz [ 53.297944][ T66] usb 5-1: SerialNumber: syz [ 53.303505][ T66] usb 5-1: config 0 descriptor?? [ 53.311456][ T66] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 53.344112][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.370421][ T310] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 53.511144][ T66] usb 5-1: USB disconnect, device number 12 [ 53.519861][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 53.527695][ T310] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 53.543953][ T310] usb 4-1: string descriptor 0 read error: -71 [ 53.550674][ T310] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 53.559884][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.572187][ T310] r8152-cfgselector 4-1: Unknown version 0x0000 [ 53.578573][ T310] r8152-cfgselector 4-1: rejected 8 configurations due to insufficient available bus power [ 53.588623][ T310] r8152-cfgselector 4-1: no configuration chosen from 8 choices [ 53.597301][ T310] r8152-cfgselector 4-1: USB disconnect, device number 21 [ 54.159332][ T45] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 54.167885][ T45] usb 2-1: device reset changed ep0 maxpacket size! [ 54.175643][ T10] usb 2-1: USB disconnect, device number 20 [ 54.309337][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 54.340023][ T862] : renamed from vlan0 (while UP) [ 54.459353][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 54.465751][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.476758][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.477607][ T45] usb 1-1: USB disconnect, device number 28 [ 54.492144][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.501553][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.512665][ T10] usb 2-1: config 0 descriptor?? [ 54.518733][ T10] hub 2-1:0.0: USB hub found [ 54.532787][ T874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 54.589350][ T344] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 54.605503][ T880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.192'. [ 54.718831][ T10] hub 2-1:0.0: 5 ports detected [ 54.724037][ T10] hub 2-1:0.0: insufficient power available to use all downstream ports [ 54.740918][ T344] usb 5-1: unable to get BOS descriptor or descriptor too short [ 54.749385][ T344] usb 5-1: config 192 has an invalid interface number: 40 but max is 1 [ 54.757750][ T344] usb 5-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 54.768053][ T344] usb 5-1: config 192 has 1 interface, different from the descriptor's value: 2 [ 54.777338][ T344] usb 5-1: config 192 has no interface number 0 [ 54.783666][ T344] usb 5-1: too many endpoints for config 192 interface 40 altsetting 217: 207, using maximum allowed: 30 [ 54.795047][ T344] usb 5-1: config 192 interface 40 altsetting 217 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 54.808825][ T344] usb 5-1: config 192 interface 40 has no altsetting 0 [ 54.818901][ T344] usb 5-1: New USB device found, idVendor=125f, idProduct=a94a, bcdDevice= 1.60 [ 54.832107][ T344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.840381][ T344] usb 5-1: Product: syz [ 54.844634][ T344] usb 5-1: Manufacturer: syz [ 54.849611][ T344] usb 5-1: SerialNumber: syz [ 54.883326][ T894] netlink: 17 bytes leftover after parsing attributes in process `syz.0.197'. [ 54.895510][ T894] netlink: 'syz.0.197': attribute type 4 has an invalid length. [ 55.061215][ T344] usb-storage 5-1:192.40: USB Mass Storage device detected [ 55.069843][ T344] usb-storage 5-1:192.40: Quirks match for vid 125f pid a94a: 2000000 [ 55.112676][ T344] usb 5-1: USB disconnect, device number 13 [ 55.149326][ T409] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 55.178006][ T906] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.300953][ T409] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.311943][ T409] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 55.321246][ T409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.326020][ T10] usb 2-1: USB disconnect, device number 21 [ 55.334981][ T409] usb 1-1: Product: 뙿ᯄ틓戵켋廔䴘⪰䯤탵瑬ୟ주줮 [ 55.343399][ T409] usb 1-1: Manufacturer: 䀁 [ 55.348018][ T409] usb 1-1: SerialNumber: 鱑᧝㝈超喔쎮ᙕ쉭괃ᗫ᷈迆凒艢饏몮嶘荺쪴ࢨ뢔Ꙃ쫻졵瞃쇅Ɔ攮뛩᧣྽딪虜鿅项준範休㿸嚡氥쪏㖿㿥̇녒驑肱즀涄䇿ꋉ뱺ꫯ੡轢斦ѷꌺ告䭳뺾념蕦㻗ᑚ썉뮸偱村⩅輕滭黖䗗ꇌ䩿퇒鞪匷띒呔痝쯑̔ [ 55.380211][ T409] usb 1-1: selecting invalid altsetting 1 [ 55.386192][ T409] usb 1-1: unit 6 not found! [ 55.589369][ T409] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 55.597766][ T409] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 55.607452][ T409] usb 1-1: selecting invalid altsetting 1 [ 55.613497][ T409] usb 1-1: unit 6 not found! [ 55.677092][ T912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.685730][ T912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.807467][ T409] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 55.815493][ T409] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 55.825535][ T409] usb 1-1: selecting invalid altsetting 1 [ 55.831654][ T409] usb 1-1: unit 6 not found! [ 55.839548][ T409] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 55.850580][ T409] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 55.860737][ T409] usb 1-1: USB disconnect, device number 29 [ 55.870920][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.909319][ T66] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 56.039366][ T66] usb 5-1: device descriptor read/64, error -71 [ 56.053791][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 56.053811][ T36] audit: type=1400 audit(1775316834.980:432): avc: denied { write } for pid=920 comm="syz.3.205" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.099320][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 56.249540][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 56.250855][ T36] audit: type=1400 audit(1775316835.180:433): avc: denied { ioctl } for pid=923 comm="syz.3.206" path="socket:[8095]" dev="sockfs" ino=8095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.280178][ T66] usb 5-1: device descriptor read/64, error -71 [ 56.288685][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 56.295302][ T36] audit: type=1400 audit(1775316835.220:434): avc: denied { read } for pid=928 comm="syz.3.207" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.303638][ T10] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 56.327303][ T36] audit: type=1400 audit(1775316835.220:435): avc: denied { open } for pid=928 comm="syz.3.207" path="/61/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.334011][ T10] usb 2-1: config 1 has no interface number 0 [ 56.358515][ T36] audit: type=1400 audit(1775316835.220:436): avc: denied { ioctl } for pid=928 comm="syz.3.207" path="/61/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.385582][ T10] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 56.394791][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.405439][ T10] usb 2-1: Product: syz [ 56.409869][ T10] usb 2-1: Manufacturer: syz [ 56.414538][ T10] usb 2-1: SerialNumber: syz [ 56.421061][ T36] audit: type=1400 audit(1775316835.340:437): avc: denied { create } for pid=933 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.444506][ T36] audit: type=1400 audit(1775316835.350:438): avc: denied { map } for pid=933 comm="syz.3.209" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.468230][ T36] audit: type=1400 audit(1775316835.350:439): avc: denied { create } for pid=933 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 56.513160][ T36] audit: type=1400 audit(1775316835.350:440): avc: denied { sys_admin } for pid=933 comm="syz.3.209" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 56.535499][ T36] audit: type=1400 audit(1775316835.370:441): avc: denied { execmem } for pid=934 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 56.556201][ T66] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 56.689377][ T66] usb 5-1: device descriptor read/64, error -71 [ 56.799640][ T10] usb 2-1: USB disconnect, device number 22 [ 56.851800][ T960] syz.0.219 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 56.879515][ T409] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 56.939310][ T66] usb 5-1: device descriptor read/64, error -71 [ 57.049487][ T66] usb usb5-port1: attempt power cycle [ 57.054946][ T409] usb 4-1: Using ep0 maxpacket: 8 [ 57.061438][ T409] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 57.069841][ T409] usb 4-1: config 179 has no interface number 0 [ 57.076223][ T409] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 57.087417][ T409] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 57.099155][ T409] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 57.110342][ T409] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 57.121867][ T409] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 57.135680][ T409] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 57.144779][ T409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.153791][ T947] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 57.199355][ T310] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 57.357054][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 57.365289][ T310] usb 1-1: not running at top speed; connect to a high speed hub [ 57.366911][ T409] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 57.376575][ T310] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 4 [ 57.396852][ T310] usb 1-1: string descriptor 0 read error: -22 [ 57.403395][ T310] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 57.409389][ T66] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 57.412842][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.434153][ T310] usb 1-1: selecting invalid altsetting 1 [ 57.440329][ T310] usb 1-1: unit 3 not found! [ 57.450592][ T66] usb 5-1: device descriptor read/8, error -71 [ 57.567681][ T947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.576376][ T947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.585865][ T66] usb 5-1: device descriptor read/8, error -71 [ 57.589318][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 57.633929][ T310] usb 1-1: cannot request logical cluster ID: 35217 (err: -5) [ 57.641486][ T310] usb 1-1: invalid MIXER UNIT descriptor 6 [ 57.647429][ T310] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 57.657317][ T310] usb 1-1: selecting invalid altsetting 1 [ 57.663316][ T310] usb 1-1: unit 3 not found! [ 57.668452][ T310] usb 1-1: cannot request logical cluster ID: 35217 (err: -5) [ 57.676085][ T310] usb 1-1: invalid MIXER UNIT descriptor 6 [ 57.682142][ T310] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -5 [ 57.691635][ T310] usb 1-1: selecting invalid altsetting 1 [ 57.697591][ T310] usb 1-1: unit 3 not found! [ 57.759365][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 57.765890][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 57.774488][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 57.785537][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 57.787054][ T409] usb 4-1: USB disconnect, device number 22 [ 57.795316][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 57.795316][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 57.795355][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 57.795353][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 57.795381][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 57.804886][ T409] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 57.809849][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 57.849339][ T66] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 57.860093][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 120 [ 57.889215][ T310] usb 1-1: cannot request logical cluster ID: 35217 (err: -71) [ 57.896841][ T310] usb 1-1: invalid MIXER UNIT descriptor 6 [ 57.900755][ T66] usb 5-1: device descriptor read/8, error -71 [ 57.911536][ T310] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 57.922467][ T310] usb 1-1: USB disconnect, device number 30 [ 57.928817][ T10] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 57.938973][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.947522][ T10] usb 2-1: Product: syz [ 57.951750][ T10] usb 2-1: Manufacturer: syz [ 57.956442][ T10] usb 2-1: SerialNumber: syz [ 57.961723][ T10] usb 2-1: config 0 descriptor?? [ 57.967054][ T968] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 57.974295][ T968] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 57.991279][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.040376][ T66] usb 5-1: device descriptor read/8, error -71 [ 58.149424][ T66] usb usb5-port1: unable to enumerate USB device [ 58.192309][ T968] netlink: 72 bytes leftover after parsing attributes in process `syz.1.222'. [ 58.558303][ T12] tipc: Subscription rejected, illegal request [ 58.580083][ T988] netlink: 25 bytes leftover after parsing attributes in process `syz.3.230'. [ 58.626136][ T990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.629340][ T66] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 58.635108][ T990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.730779][ T992] netlink: 'syz.4.232': attribute type 5 has an invalid length. [ 58.738602][ T992] netlink: 45 bytes leftover after parsing attributes in process `syz.4.232'. [ 58.769318][ T66] usb 1-1: device descriptor read/64, error -71 [ 59.009332][ T409] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 59.017128][ T66] usb 1-1: device descriptor read/64, error -71 [ 59.170428][ T409] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.180679][ T409] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.192974][ T409] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.202187][ T409] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 59.210472][ T409] usb 4-1: Product: syz [ 59.214633][ T409] usb 4-1: SerialNumber: syz [ 59.269307][ T66] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 59.399332][ T66] usb 1-1: device descriptor read/64, error -71 [ 59.422506][ T1008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.431280][ T1008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.444086][ T409] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 59.450862][ T409] cdc_ncm 4-1:1.0: bind() failure [ 59.457502][ T409] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 59.464586][ T409] cdc_ncm 4-1:1.1: bind() failure [ 59.470743][ T409] usb 4-1: USB disconnect, device number 23 [ 59.639367][ T66] usb 1-1: device descriptor read/64, error -71 [ 59.749391][ T66] usb usb1-port1: attempt power cycle [ 59.859315][ T455] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 60.010046][ T455] usb 5-1: Using ep0 maxpacket: 16 [ 60.018254][ T455] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 60.027556][ T455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.035830][ T455] usb 5-1: Product: syz [ 60.040131][ T455] usb 5-1: Manufacturer: syz [ 60.045539][ T455] usb 5-1: SerialNumber: syz [ 60.050952][ T455] usb 5-1: config 0 descriptor?? [ 60.057056][ T455] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 60.065028][ T455] usb 5-1: Detected FT-X [ 60.089529][ T66] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 60.110317][ T66] usb 1-1: device descriptor read/8, error -71 [ 60.194265][ T1029] netlink: 'syz.3.244': attribute type 13 has an invalid length. [ 60.240381][ T66] usb 1-1: device descriptor read/8, error -71 [ 60.257137][ T455] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 60.479345][ T66] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 60.500448][ T66] usb 1-1: device descriptor read/8, error -71 [ 60.630446][ T66] usb 1-1: device descriptor read/8, error -71 [ 60.666537][ T455] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 60.739504][ T66] usb usb1-port1: unable to enumerate USB device [ 60.866652][ T66] usb 5-1: USB disconnect, device number 18 [ 60.874907][ T66] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 60.885259][ T66] ftdi_sio 5-1:0.0: device disconnected [ 61.026138][ T1039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.034738][ T1039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.309314][ T66] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 61.414192][ T1048] veth0_virt_wifi: entered allmulticast mode [ 61.425170][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 61.425188][ T36] audit: type=1400 audit(1775316840.350:456): avc: denied { bind } for pid=1047 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.451368][ T36] audit: type=1400 audit(1775316840.350:457): avc: denied { name_bind } for pid=1047 comm="syz.0.250" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 61.472421][ T36] audit: type=1400 audit(1775316840.350:458): avc: denied { node_bind } for pid=1047 comm="syz.0.250" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 61.493223][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 61.500554][ T1051] netlink: 32 bytes leftover after parsing attributes in process `syz.4.251'. [ 61.502816][ T36] audit: type=1400 audit(1775316840.430:459): avc: denied { map } for pid=1047 comm="syz.0.250" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 61.510107][ T66] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 61.549420][ T66] usb 4-1: config 1 has no interface number 0 [ 61.560094][ T66] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 61.570429][ T1047] veth0_virt_wifi: left allmulticast mode [ 61.574302][ T66] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 61.586288][ T66] usb 4-1: config 1 interface 105 has no altsetting 0 [ 61.594898][ T66] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 61.604198][ T66] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 61.612347][ T66] usb 4-1: Product: syz [ 61.616578][ T66] usb 4-1: Manufacturer: syz [ 61.622848][ T66] usb 4-1: SerialNumber: syz [ 61.628566][ T1044] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 61.635938][ T1044] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 61.716987][ T1066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.717015][ T1066] rust_binder: Failure BR_FAILED_REPLY { source: EFAULT } during reply - delivering BR_FAILED_REPLY to sender. [ 61.726470][ T1066] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:171 [ 61.754028][ T36] audit: type=1400 audit(1775316840.680:460): avc: denied { execute } for pid=1068 comm="syz.1.257" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.809323][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 61.847171][ T36] audit: type=1400 audit(1775316840.770:461): avc: denied { read write } for pid=1043 comm="syz.3.248" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.848962][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.872187][ T36] audit: type=1400 audit(1775316840.770:462): avc: denied { open } for pid=1043 comm="syz.3.248" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.878253][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.908715][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.916152][ T455] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 61.923799][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.931904][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.939464][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.947355][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.954890][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.962528][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.970132][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.977560][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.985096][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.992528][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 61.999402][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 62.000134][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 62.006836][ T10] usb 5-1: config 120 has an invalid interface number: 144 but max is 0 [ 62.013895][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 62.021575][ T10] usb 5-1: config 120 has no interface number 0 [ 62.029159][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 62.035444][ T10] usb 5-1: config 120 interface 144 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 62.042955][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 62.053829][ T10] usb 5-1: config 120 interface 144 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 62.062242][ T45] hid-generic 0003:0003:0000.0004: unknown main item tag 0x0 [ 62.082368][ T10] usb 5-1: config 120 interface 144 has no altsetting 0 [ 62.082811][ T45] hid-generic 0003:0003:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 62.099486][ T455] usb 1-1: device descriptor read/64, error -71 [ 62.100905][ T10] usb 5-1: New USB device found, idVendor=1fb9, idProduct=0303, bcdDevice=3f.1c [ 62.115672][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.123740][ T10] usb 5-1: Product: syz [ 62.128355][ T1044] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 62.130955][ T1082] fido_id[1082]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.135629][ T1044] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 62.156506][ T10] usb 5-1: Manufacturer: syz [ 62.161162][ T10] usb 5-1: SerialNumber: syz [ 62.339378][ T455] usb 1-1: device descriptor read/64, error -71 [ 62.372961][ T10] usb 5-1: USB disconnect, device number 19 [ 62.579323][ T455] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 62.603807][ T36] audit: type=1400 audit(1775316841.530:463): avc: denied { bind } for pid=1083 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.604451][ T1084] netlink: 108 bytes leftover after parsing attributes in process `syz.1.261'. [ 62.632684][ T1084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 62.642131][ T1084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.650993][ T1084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.709330][ T455] usb 1-1: device descriptor read/64, error -71 [ 62.761905][ T66] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 62.773848][ T66] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 62.787200][ T66] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 56:32:d5:b8:49:c1 [ 62.787967][ T1095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.802199][ T66] usb 4-1: USB disconnect, device number 24 [ 62.815809][ T66] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 62.816082][ T1095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.832349][ T36] audit: type=1400 audit(1775316841.760:464): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 62.866751][ T36] audit: type=1400 audit(1775316841.760:465): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.928420][ T66] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 62.946309][ T66] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 62.955916][ T66] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 62.989333][ T455] usb 1-1: device descriptor read/64, error -71 [ 63.099394][ T455] usb usb1-port1: attempt power cycle [ 63.159455][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 63.310607][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.321559][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.331339][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 63.340513][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.349367][ T10] usb 5-1: config 0 descriptor?? [ 63.439377][ T455] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 63.460535][ T455] usb 1-1: device descriptor read/8, error -71 [ 63.539327][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 63.556517][ T10] playstation 0003:054C:0BA0.0005: unknown main item tag 0x0 [ 63.564060][ T10] playstation 0003:054C:0BA0.0005: unknown main item tag 0x0 [ 63.571476][ T10] playstation 0003:054C:0BA0.0005: unknown main item tag 0x0 [ 63.579151][ T10] playstation 0003:054C:0BA0.0005: unknown main item tag 0x0 [ 63.586668][ T10] playstation 0003:054C:0BA0.0005: unknown main item tag 0x0 [ 63.594162][ T10] playstation 0003:054C:0BA0.0005: unknown main item tag 0x0 [ 63.600417][ T455] usb 1-1: device descriptor read/8, error -71 [ 63.601651][ T10] playstation 0003:054C:0BA0.0005: unknown main item tag 0x0 [ 63.616066][ T10] playstation 0003:054C:0BA0.0005: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 63.690329][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.701632][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 63.711062][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.720261][ T9] usb 4-1: config 0 descriptor?? [ 63.755987][ T10] playstation 0003:054C:0BA0.0005: Invalid reportID received, expected 18 got 105 [ 63.765261][ T10] playstation 0003:054C:0BA0.0005: Failed to retrieve DualShock4 pairing info: -22 [ 63.775323][ T10] playstation 0003:054C:0BA0.0005: Failed to get MAC address from DualShock4 [ 63.784141][ T10] playstation 0003:054C:0BA0.0005: Failed to create dualshock4. [ 63.793063][ T10] playstation 0003:054C:0BA0.0005: probe with driver playstation failed with error -22 [ 63.846635][ T1143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.855325][ T1143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.869343][ T455] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 63.890692][ T455] usb 1-1: device descriptor read/8, error -71 [ 63.932545][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 63.938817][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 63.950355][ T9] usb 4-1: USB disconnect, device number 25 [ 63.956311][ T409] usb 5-1: USB disconnect, device number 20 [ 64.020437][ T455] usb 1-1: device descriptor read/8, error -71 [ 64.129538][ T455] usb usb1-port1: unable to enumerate USB device [ 64.386383][ T1169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.394985][ T1169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.409367][ T455] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 64.559362][ T455] usb 4-1: Using ep0 maxpacket: 8 [ 64.566928][ T455] usb 4-1: unable to get BOS descriptor or descriptor too short [ 64.579780][ T455] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.586409][ T1182] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 64.595370][ T455] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.608418][ T455] usb 4-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 64.623200][ T455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.633723][ T455] usb 4-1: Product: syz [ 64.638155][ T455] usb 4-1: Manufacturer: syz [ 64.642963][ T455] usb 4-1: SerialNumber: syz [ 64.698117][ T1189] random: crng reseeded on system resumption [ 64.892275][ T1165] rust_binder: Error while translating object. [ 64.892340][ C1] BUG: TASK stack guard page was hit at ffffc90006afff78 (stack is ffffc90006b00000..ffffc90006b08000) [ 64.892369][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 64.892391][ C1] CPU: 1 UID: 0 PID: 1165 Comm: syz.3.277 Not tainted syzkaller #0 6df8a48c60291494d9389e53691a3df5daca5615 [ 64.892416][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.892427][ C1] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 64.892460][ C1] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 64.892478][ C1] RSP: 0018:ffffc90006afff80 EFLAGS: 00010a02 [ 64.892496][ C1] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92000d6002c [ 64.892512][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 64.892526][ C1] RBP: ffffc90006b00250 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 64.892540][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: dffffc0000000000 [ 64.892554][ C1] R13: dffffc0000000000 R14: 1ffff92000d60050 R15: ffffc90006b002f0 [ 64.892569][ C1] FS: 00007fb5a2a0f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.892587][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.892601][ C1] CR2: ffffc90006afff78 CR3: 00000001199be000 CR4: 00000000003526b0 [ 64.892620][ C1] Call Trace: [ 64.892628][ C1] [ 64.892641][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 64.892665][ C1] ? static_key_count+0x45/0x70 [ 64.892685][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 64.892711][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 64.892738][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 64.892758][ C1] ? unwind_next_frame+0x3c1/0x750 [ 64.892780][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.892802][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 64.892830][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.892852][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 64.892878][ C1] ? stack_depot_save_flags+0x672/0x800 [ 64.892905][ C1] ? stack_depot_save+0x12/0x20 [ 64.892929][ C1] ? save_stack+0x133/0x240 [ 64.892948][ C1] ? free_contig_range+0x260/0x260 [ 64.892973][ C1] ? __reset_page_owner+0x450/0x450 [ 64.893001][ C1] ? zone_page_state_add+0x43/0x90 [ 64.893028][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 64.893048][ C1] ? prep_new_page+0x20/0x120 [ 64.893067][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 64.893090][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 64.893109][ C1] ? stack_depot_save_flags+0x672/0x800 [ 64.893132][ C1] ? kasan_save_track+0x4f/0x80 [ 64.893156][ C1] ? kasan_save_free_info+0x4a/0x60 [ 64.893176][ C1] ? __kasan_slab_free+0x5f/0x80 [ 64.893192][ C1] ? kfree+0x158/0x440 [ 64.893211][ C1] ? krealloc_noprof+0xfa/0x130 [ 64.893237][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 64.893298][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 64.893330][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 64.893366][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 64.893403][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 64.893436][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 64.893460][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 64.893485][ C1] ? sched_clock_noinstr+0xd/0x30 [ 64.893506][ C1] ? __set_page_owner+0x8e/0x600 [ 64.893524][ C1] ? __zone_watermark_ok+0x134/0x630 [ 64.893548][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 64.893568][ C1] ? kasan_unpoison+0x4a/0x70 [ 64.893594][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 64.893614][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 64.893633][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 64.893661][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 64.893685][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 64.893713][ C1] ? prep_new_page+0x20/0x120 [ 64.893733][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 64.893759][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 64.893784][ C1] ? static_key_count+0x45/0x70 [ 64.893802][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 64.893827][ C1] ? lruvec_init+0x201/0x280 [ 64.893856][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 64.893878][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.893901][ C1] ? unwind_get_return_address+0x51/0x90 [ 64.893923][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.893941][ C1] ? arch_stack_walk+0x10a/0x170 [ 64.893971][ C1] ? stack_trace_save+0xaa/0x100 [ 64.893998][ C1] ? stack_depot_save_flags+0x672/0x800 [ 64.894026][ C1] ? kasan_save_track+0x4f/0x80 [ 64.894051][ C1] ? kasan_save_track+0x3e/0x80 [ 64.894079][ C1] ? kasan_save_free_info+0x4a/0x60 [ 64.894101][ C1] ? __kasan_slab_free+0x5f/0x80 [ 64.894117][ C1] ? kfree+0x158/0x440 [ 64.894143][ C1] ? krealloc_noprof+0xfa/0x130 [ 64.894167][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 64.894227][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 64.894260][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 64.894293][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 64.894331][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 64.894363][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 64.894389][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 64.894423][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x19d1/0xaf80 [ 64.894451][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 64.894473][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 64.894494][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 64.894511][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 64.894539][ C1] ? do_syscall_64+0x57/0xf0 [ 64.894565][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.894598][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 64.894628][ C1] ? kasan_save_free_info+0x4a/0x60 [ 64.894649][ C1] ? __kasan_slab_free+0x5f/0x80 [ 64.894670][ C1] ? kfree+0x158/0x440 [ 64.894691][ C1] ? krealloc_noprof+0xfa/0x130 [ 64.894719][ C1] ? krealloc_noprof+0xfa/0x130 [ 64.894745][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 64.894805][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x10/0x10 [ 64.894864][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 64.894910][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 64.894956][ C1] ? __kasan_check_write+0x18/0x20 [ 64.894981][ C1] ? _raw_spin_lock+0x92/0x120 [ 64.895015][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.895042][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 64.895077][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 64.895114][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 64.895150][ C1] ? __asan_memcpy+0x5a/0x80 [ 64.895173][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 64.895207][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 64.895238][ C1] ? __kasan_check_write+0x18/0x20 [ 64.895265][ C1] ? _raw_spin_lock+0x92/0x120 [ 64.895289][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.895318][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 64.895353][ C1] ? __asan_memcpy+0x5a/0x80 [ 64.895379][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 64.895414][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 64.895453][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 64.895485][ C1] ? __asan_memcpy+0x5a/0x80 [ 64.895509][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 64.895539][ C1] ? __kasan_check_write+0x18/0x20 [ 64.895586][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 64.895620][ C1] ? __kasan_check_write+0x18/0x20 [ 64.895645][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.895669][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 64.895706][ C1] ? __asan_memcpy+0x5a/0x80 [ 64.895729][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 64.895771][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 64.895805][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 64.895837][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 64.895873][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 64.895918][ C1] ? __kasan_check_write+0x18/0x20 [ 64.895942][ C1] ? mutex_unlock+0x90/0x240 [ 64.895962][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 64.895993][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 64.896015][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 64.896052][ C1] ? resched_curr+0x119/0x440 [ 64.896078][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 64.896114][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 64.896133][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 64.896168][ C1] ? __asan_memcpy+0x5a/0x80 [ 64.896192][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 64.896227][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 64.896260][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 64.896296][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 64.896330][ C1] ? desc_read+0x202/0x3e0 [ 64.896349][ C1] ? __kasan_check_write+0x18/0x20 [ 64.896372][ C1] ? desc_read+0x1ab/0x3e0 [ 64.896393][ C1] ? prb_first_seq+0x109/0x1d0 [ 64.896412][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 64.896429][ C1] ? __kasan_check_write+0x18/0x20 [ 64.896455][ C1] ? desc_read+0x1ab/0x3e0 [ 64.896472][ C1] ? __kasan_check_read+0x15/0x20 [ 64.896495][ C1] ? this_cpu_in_panic+0x56/0x90 [ 64.896517][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 64.896536][ C1] ? __asan_memcpy+0x5a/0x80 [ 64.896561][ C1] ? prb_read_valid+0x80/0x80 [ 64.896580][ C1] ? data_alloc+0x4d0/0x7e0 [ 64.896598][ C1] ? desc_read+0x202/0x3e0 [ 64.896615][ C1] ? __kasan_check_write+0x18/0x20 [ 64.896642][ C1] ? desc_read+0x1ab/0x3e0 [ 64.896660][ C1] ? prb_first_seq+0x109/0x1d0 [ 64.896680][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 64.896699][ C1] ? __kasan_check_write+0x18/0x20 [ 64.896722][ C1] ? desc_read+0x1ab/0x3e0 [ 64.896738][ C1] ? __kasan_check_read+0x15/0x20 [ 64.896765][ C1] ? this_cpu_in_panic+0x56/0x90 [ 64.896783][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 64.896804][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 64.896832][ C1] ? prb_read_valid+0x80/0x80 [ 64.896848][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 64.896878][ C1] ? up+0x10a/0x1b0 [ 64.896898][ C1] ? __cfi_up+0x10/0x10 [ 64.896920][ C1] ? __kasan_check_write+0x18/0x20 [ 64.896945][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 64.896972][ C1] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 64.897011][ C1] ? __cfi_llist_add_batch+0x10/0x10 [ 64.897031][ C1] ? console_unlock+0x247/0x2c0 [ 64.897054][ C1] ? __cfi_console_unlock+0x10/0x10 [ 64.897075][ C1] ? krealloc_noprof+0xfa/0x130 [ 64.897102][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 64.897127][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 64.897168][ C1] ? irq_work_queue+0xc2/0x160 [ 64.897191][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 64.897237][ C1] ? vprintk_emit+0x3e3/0x650 [ 64.897258][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 64.897282][ C1] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 64.897314][ C1] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 64.897350][ C1] ? vprintk_default+0x2a/0x40 [ 64.897371][ C1] ? vprintk+0x93/0xa0 [ 64.897396][ C1] ? _printk+0xde/0x140 [ 64.897416][ C1] ? __cfi___check_object_size+0x10/0x10 [ 64.897441][ C1] ? __cfi__printk+0x10/0x10 [ 64.897464][ C1] ? _copy_from_user+0x87/0xa0 [ 64.897482][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 64.897518][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 64.897550][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 64.897593][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 64.897699][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 64.897730][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 64.897760][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0 [ 64.897788][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 64.897818][ C1] ? __kasan_check_write+0x18/0x20 [ 64.897842][ C1] ? _raw_spin_lock+0x92/0x120 [ 64.897869][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.897895][ C1] ? __kasan_check_write+0x18/0x20 [ 64.897921][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 64.897948][ C1] ? __asan_memcpy+0x5a/0x80 [ 64.897971][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 64.898010][ C1] ? avc_has_perm+0x155/0x240 [ 64.898036][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 64.898060][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 64.898084][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 64.898106][ C1] ? bpf_lsm_binder_transaction+0xd/0x20 [ 64.898128][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 64.898165][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x10/0x10 [ 64.898201][ C1] ? __kasan_check_write+0x18/0x20 [ 64.898228][ C1] ? _raw_spin_lock+0x92/0x120 [ 64.898252][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.898280][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0xfc0/0xaf80 [ 64.898307][ C1] ? __asan_memcpy+0x5a/0x80 [ 64.898333][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x19d1/0xaf80 [ 64.898372][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 64.898444][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 64.898469][ C1] ? kernel_text_address+0xa9/0xe0 [ 64.898491][ C1] ? __kernel_text_address+0x11/0x40 [ 64.898515][ C1] ? unwind_get_return_address+0x51/0x90 [ 64.898537][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.898555][ C1] ? arch_stack_walk+0x10a/0x170 [ 64.898589][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 64.898612][ C1] ? kernel_text_address+0xa9/0xe0 [ 64.898637][ C1] ? __kernel_text_address+0x11/0x40 [ 64.898658][ C1] ? unwind_get_return_address+0x51/0x90 [ 64.898680][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.898700][ C1] ? arch_stack_walk+0x10a/0x170 [ 64.898731][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 64.898758][ C1] ? kernel_text_address+0xa9/0xe0 [ 64.898780][ C1] ? __kernel_text_address+0x11/0x40 [ 64.898802][ C1] ? unwind_get_return_address+0x51/0x90 [ 64.898824][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.898843][ C1] ? arch_stack_walk+0x10a/0x170 [ 64.898873][ C1] ? stack_depot_save_flags+0x38/0x800 [ 64.898920][ C1] ? irqentry_exit_to_user_mode+0x80/0xb0 [ 64.898946][ C1] ? kasan_save_track+0x4f/0x80 [ 64.898971][ C1] ? kasan_save_track+0x3e/0x80 [ 64.899012][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 64.899035][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 64.899054][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 64.899080][ C1] ? krealloc_noprof+0x8d/0x130 [ 64.899107][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x84c/0x1d80 [ 64.899135][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20 [ 64.899160][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 64.899177][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 64.899194][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 64.899221][ C1] ? do_syscall_64+0x57/0xf0 [ 64.899246][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.899275][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 64.899308][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 64.899340][ C1] ? __kasan_check_write+0x18/0x20 [ 64.899362][ C1] ? _raw_spin_lock+0x92/0x120 [ 64.899386][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.899410][ C1] ? _raw_spin_unlock+0x45/0x60 [ 64.899433][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 64.899452][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 64.899478][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 64.899496][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 64.899520][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 64.899545][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 64.899571][ C1] ? prep_new_page+0x20/0x120 [ 64.899590][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 64.899615][ C1] ? __asan_memcpy+0x5a/0x80 [ 64.899640][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 64.899664][ C1] ? kernel_text_address+0xa9/0xe0 [ 64.899686][ C1] ? __kernel_text_address+0x11/0x40 [ 64.899707][ C1] ? unwind_get_return_address+0x51/0x90 [ 64.899729][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.899746][ C1] ? arch_stack_walk+0x10a/0x170 [ 64.899773][ C1] ? stack_trace_save+0xaa/0x100 [ 64.899792][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 64.899815][ C1] ? __asan_memcpy+0x5a/0x80 [ 64.899837][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 64.899862][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 64.899888][ C1] ? _raw_spin_unlock+0x45/0x60 [ 64.899914][ C1] ? call_rcu_nocb+0x6d7/0xc80 [ 64.899939][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 64.899962][ C1] ? swake_up_one_online_ipi+0x30/0x30 [ 64.900023][ C1] ? __cfi_mt_free_rcu+0x10/0x10 [ 64.900054][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 64.900073][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 64.900094][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 64.900119][ C1] ? __cgroup_account_cputime+0xa5/0xd0 [ 64.900138][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 64.900163][ C1] ? sched_clock_noinstr+0xd/0x30 [ 64.900184][ C1] ? __kasan_check_write+0x18/0x20 [ 64.900209][ C1] ? __switch_to+0xc4f/0x1300 [ 64.900234][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 64.900256][ C1] ? plist_del+0x3e3/0x400 [ 64.900284][ C1] ? __cfi___switch_to+0x10/0x10 [ 64.900308][ C1] ? psi_task_switch+0xad/0xa10 [ 64.900333][ C1] ? __kasan_check_write+0x18/0x20 [ 64.900360][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 64.900386][ C1] ? kernel_text_address+0xa9/0xe0 [ 64.900408][ C1] ? __kernel_text_address+0x11/0x40 [ 64.900429][ C1] ? unwind_get_return_address+0x51/0x90 [ 64.900454][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.900473][ C1] ? arch_stack_walk+0x10a/0x170 [ 64.900502][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 64.900522][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 64.900540][ C1] ? kasan_save_stack+0x4d/0x60 [ 64.900568][ C1] ? kasan_save_stack+0x3e/0x60 [ 64.900593][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 64.900615][ C1] ? __call_rcu_common+0xd7/0x720 [ 64.900637][ C1] ? call_rcu+0x14/0x20 [ 64.900656][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 64.900682][ C1] ? xfd_validate_state+0x68/0x140 [ 64.900705][ C1] ? save_fpregs_to_fpstate+0x196/0x220 [ 64.900724][ C1] ? __kasan_check_write+0x18/0x20 [ 64.900750][ C1] ? __switch_to+0xc4f/0x1300 [ 64.900770][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 64.900789][ C1] ? __cfi___switch_to+0x10/0x10 [ 64.900809][ C1] ? psi_task_switch+0xad/0xa10 [ 64.900829][ C1] ? _raw_spin_unlock+0x45/0x60 [ 64.900854][ C1] ? finish_task_switch+0x139/0x760 [ 64.900875][ C1] ? __switch_to_asm+0x3d/0x70 [ 64.900902][ C1] ? __schedule+0x13a1/0x1fa0 [ 64.900921][ C1] ? __sched_text_start+0x10/0x10 [ 64.900943][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 64.900969][ C1] ? __asan_memcpy+0x5a/0x80 [ 64.901004][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 64.901031][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 64.901054][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 64.901073][ C1] ? preempt_schedule_thunk+0x1a/0x40 [ 64.901092][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 64.901113][ C1] ? try_to_wake_up+0xf9e/0x1db0 [ 64.901134][ C1] ? __cfi_try_to_wake_up+0x10/0x10 [ 64.901155][ C1] ? ioctl_has_perm+0x39a/0x500 [ 64.901180][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 64.901204][ C1] ? file_mmap_ok+0x147/0x1a0 [ 64.901228][ C1] ? userfaultfd_unmap_complete+0x29f/0x320 [ 64.901257][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 64.901278][ C1] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 64.901306][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 64.901329][ C1] ? do_futex+0x37d/0x510 [ 64.901354][ C1] ? __cfi_do_futex+0x10/0x10 [ 64.901375][ C1] ? vm_mmap_pgoff+0x153/0x4b0 [ 64.901399][ C1] ? __fget_files+0x2c5/0x340 [ 64.901420][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 64.901439][ C1] ? security_file_ioctl+0x3e/0x110 [ 64.901459][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 64.901486][ C1] ? __se_sys_ioctl+0x135/0x1b0 [ 64.901504][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 64.901522][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 64.901549][ C1] ? do_syscall_64+0x57/0xf0 [ 64.901573][ C1] ? clear_bhb_loop+0x50/0xa0 [ 64.901595][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.901622][ C1] [ 64.901628][ C1] Modules linked in: [ 64.901645][ C1] ---[ end trace 0000000000000000 ]--- [ 64.901655][ C1] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 64.901681][ C1] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 64.901699][ C1] RSP: 0018:ffffc90006afff80 EFLAGS: 00010a02 [ 64.901717][ C1] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92000d6002c [ 64.901732][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 64.901745][ C1] RBP: ffffc90006b00250 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 64.901759][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: dffffc0000000000 [ 64.901775][ C1] R13: dffffc0000000000 R14: 1ffff92000d60050 R15: ffffc90006b002f0 [ 64.901789][ C1] FS: 00007fb5a2a0f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.901807][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.901820][ C1] CR2: ffffc90006afff78 CR3: 00000001199be000 CR4: 00000000003526b0 [ 64.901845][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 64.901998][ C1] Kernel Offset: disabled