last executing test programs: 18.842238885s ago: executing program 3 (id=681): writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="61f79a3eb72979ec20216c3646d3b0535339c48cb9032d77c0877bdc7310478603cc7dfe2f7eee7ecbf6fab16b14334809900035f6260fde9f00c00b24c893257dac571a090d5e8e2f5b6a2a06d9eb5d459202db375819f3d3032bf3c28e1810a6d7686b91c042b84e63013d847db8dbb03e2328d397134eea35435451eea2edf52302a3944ca7c0f73a3bc92a9def515caea701c150fc7f40d14d15bde74e99ba39cefa671888ea538c", 0xaa}], 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) getdents64(r3, &(0x7f0000000280)=""/94, 0x5e) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1838d24d8b8103c7d882d261c13d6af77719c04ef812b218a143b48979c67fa599d0fe9c52f5905db02e733f8e047468c312427737d9b895818cdf3ccb1d31e8c6e89693f09ae784c29671b61d4460fe9d31f938e61a54901e0d4996327eb4d064c70e4a34004b11fc73d0584bf0a8b0fa060bb08d6a5d220a838e593ce0c3f3"], 0x28}], 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b2402"], 0x0) 17.56236668s ago: executing program 3 (id=687): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x104, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x84}, {@in=@local, 0x4d4, 0x3c}, @in6=@rand_addr=' \x01\x00', {0x0, 0x192, 0x6, 0x1, 0x82520, 0x2, 0xffbffffffffffff8, 0xe2e237c}, {0xffffffffffffffff, 0x0, 0x1f, 0xffffffffffffffde}, {0x2, 0xfffffffc, 0x40}, 0x70bd28, 0x3504, 0x2, 0x2}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x25}}]}, 0x104}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x87, 0x0, 0x0, 0x4}, {0x6}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xcb) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090552", @ANYRES16], 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x4, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000140)) 15.991857383s ago: executing program 3 (id=692): r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4e34, 0x5, 0x4e23, 0x0, 0xa, 0x10}, {0x9, 0x1, 0x0, 0xfffffffffffffffc, 0x4, 0x400000000006, 0x2, 0x3fffffffffffff}, {0xffffffffffffdfff, 0xfffffffffffffff7, 0x1, 0x20}, 0xfffffff7, 0x101, 0x1, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x1, 0x33}, 0xa, @in6=@remote, 0x14fe, 0x3, 0x0, 0x0, 0xc36}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004054) 15.699362531s ago: executing program 3 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x2) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 15.598659858s ago: executing program 3 (id=697): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x24, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x3f}]}]}, 0x24}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080004}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r1, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x52}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008040}, 0x20044051) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'vlan1\x00'}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000001300)={'filter\x00', 0xb001, 0x4, 0x3c0, 0xe8, 0x0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=mmap,cache=loose']) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6}, 0x10) (async) close(0x3) 15.299547109s ago: executing program 3 (id=700): futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000388000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/181, 0xb5, 0x1, &(0x7f0000000280)=""/87, 0x57}, &(0x7f0000000240)=0x40) clock_gettime(0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000140)={0x2}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x7) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) futex(&(0x7f00000040c0)=0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80081, 0x0) writev(r6, &(0x7f0000002840)=[{&(0x7f0000001640)="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", 0x7a6}], 0x1) 15.252974056s ago: executing program 32 (id=700): futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000388000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/181, 0xb5, 0x1, &(0x7f0000000280)=""/87, 0x57}, &(0x7f0000000240)=0x40) clock_gettime(0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000140)={0x2}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x7) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) futex(&(0x7f00000040c0)=0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80081, 0x0) writev(r6, &(0x7f0000002840)=[{&(0x7f0000001640)="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", 0x7a6}], 0x1) 7.128269237s ago: executing program 2 (id=739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x10001, 0x0, &(0x7f0000001000/0x4000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.863114111s ago: executing program 2 (id=741): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000077"], 0x0) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 5.429691341s ago: executing program 0 (id=750): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff"], 0x0) listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x28048010) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0xf63], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.763913742s ago: executing program 4 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x6, 0x8, 0x81], 0x54000, 0x100204}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x7, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031", 0x0, 0x32}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x3, 0x4, 0x18, 0x1, 0xf8, 0x0, 0x2, 0x0, 0x80000000, 0x6, 0x6, 0x9, 0x4, 0xfa, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 4.154119554s ago: executing program 4 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x81) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)={0x3bc, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x154, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2df3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x19, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9df}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x58}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x983}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d25c670}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8722}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x2004081c}, 0x8) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x904}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) (rerun: 32) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000008c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4d5371c2ea80b305}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, r7, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x32}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x14, 0x4, "8343df55092d432ac4932e7b26be5faa"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "973abdb416"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "8d0907f55a78b870cb"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "42fb357c33"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000002) r9 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) preadv2(r9, &(0x7f0000000fc0)=[{&(0x7f0000000b00)=""/187, 0xbb}, {&(0x7f0000000bc0)=""/116, 0x74}, {&(0x7f0000000c40)=""/226, 0xe2}, {&(0x7f0000000d40)=""/24, 0x18}, {&(0x7f0000000d80)=""/83, 0x53}, {&(0x7f0000000e00)=""/102, 0x66}, {&(0x7f0000000e80)=""/98, 0x62}, {&(0x7f0000000f00)=""/144, 0x90}], 0x8, 0x3, 0x9, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r2) sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x50, r11, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x8}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xffff}]}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x3}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x68}]}, 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x30048000) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001200), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x3c, r12, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r13, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$int_in(r1, 0x5421, &(0x7f0000001440)=0x81) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001580)={'syztnl0\x00', &(0x7f0000001500)={'ip6_vti0\x00', 0x0, 0x29, 0x3c, 0x2, 0xf38, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8717, 0x1, 0x0, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000015c0)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000016c0)={'gre0\x00', &(0x7f0000001600)={'gretap0\x00', 0x0, 0x8, 0x10, 0x1, 0xfffffe00, {{0x28, 0x4, 0x2, 0x8, 0xa0, 0x65, 0x0, 0x0, 0x6, 0x0, @local, @rand_addr=0x64010101, {[@rr={0x7, 0x13, 0x33, [@loopback, @empty, @broadcast, @remote]}, @ssrr={0x89, 0x13, 0xe4, [@private=0xa010101, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x46, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x81}, {@empty, 0x5}]}, @rr={0x7, 0x23, 0x5c, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @multicast1, @multicast1, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x2c, 0x7, 0x1, 0x8, [{@private=0xa010102, 0x4}, {@remote, 0x2}, {@multicast1, 0x2}, {@loopback, 0x5}, {@empty, 0x6}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000002880)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002840)={&(0x7f0000001700)={0x1140, r14, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x100c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "0d9c3ade461f80caf81f7ac7361aa1e6bd69d7c7959df84e4e8e9e98aeb0fcb0d7eca2b0b1499130efdef001f4856749a95dfa0afd62743d3931aa4733e70112bc98a72b874cfe728ae7bbc40bc0a245f74fece61e43a90869f60e5cd251d5f77484c036d53fe755b621b38065930606ad8a0ecfb8a1dfbd43c335912cacb04ac0bc3320f1d1467f2141796260ba"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x1140}, 0x1, 0x0, 0x0, 0x80}, 0x4010) 3.958852287s ago: executing program 4 (id=757): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r1}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000440)={0x0, 0x34f, 0x0, [0xee3a, 0x8000000000000000, 0x8, 0x38, 0x5], [0xf, 0x400, 0x6, 0x3, 0x9f, 0x9, 0x0, 0x1, 0xffff, 0xfffffffffffff47c, 0xe3, 0x3, 0x2, 0x3, 0x596, 0xfffffffffffffff9, 0x4, 0x4, 0x7ff, 0x4, 0x22, 0x313d, 0x8001, 0x4, 0x100000000, 0x80000001, 0xd, 0x9322, 0x40, 0xffffffff, 0x1, 0x0, 0x6, 0x6, 0x2, 0x5, 0x1, 0x3, 0xffffffffffffd932, 0x8000000000000000, 0x2, 0xb3, 0x1, 0x0, 0x9, 0xb3b, 0x6, 0x1ff, 0x9, 0x7, 0x100000000, 0x401, 0x0, 0x3, 0xffffffffffffffff, 0x80000000000000, 0x4, 0x0, 0x9, 0x8, 0x8001, 0x8, 0xa, 0x7fffffffffffffff, 0x4, 0x6, 0x80000000, 0x80000001, 0x2, 0x1, 0xc, 0x5, 0x5, 0xa, 0xced4, 0x6, 0x7, 0xffffffffffffff55, 0x1, 0xf, 0x8, 0x1ff, 0x5192bee0, 0x3, 0xfffffffffffffffc, 0xfffffffffffff597, 0x7, 0x40, 0x1, 0xee, 0x2, 0xf, 0x8, 0xa41, 0x2, 0x0, 0x1, 0xe94a, 0x6, 0x1ff, 0x8, 0xff, 0xa44d, 0x4, 0x3, 0x6, 0x3c04, 0x1, 0x2, 0x8, 0x2dd, 0x4, 0x6, 0x2, 0x7, 0x2, 0x81, 0x10001, 0x3e243c03, 0x0, 0x8001]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000880)={{r3}, r4, 0x4, @inherit={0x88, &(0x7f0000000080)={0x0, 0x8, 0x4, 0xd409, {0x34, 0xb8, 0x80000000, 0x9f, 0xff}, [0xdb5, 0x18, 0x4, 0xc, 0x1, 0xeb61, 0x10e, 0x0]}}, @devid=r5}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.788882335s ago: executing program 2 (id=758): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{r0, r1+60000000}, {0x0, 0x989680}}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) (async, rerun: 64) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) (async) fcntl$addseals(r3, 0x409, 0x7) (async) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) lseek(r4, 0xcf7, 0x2) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.695876641s ago: executing program 2 (id=759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000040)=0x9, 0x4) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x7}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x20}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r5}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', r5, 0x29, 0x4, 0xc4, 0x2a, 0x2b, @mcast2, @loopback, 0x7, 0x40, 0x3ff, 0x2}}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0xffffffffffffffff, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x6, 0x8, 0x81], 0x54000, 0x100204}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x7, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031", 0x0, 0x32}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x3, 0x4, 0x18, 0x1, 0xf8, 0x0, 0x2, 0x0, 0x80000000, 0x6, 0x6, 0x9, 0x4, 0xfa, '\x00', 0x4, 0x4}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) r6 = socket(0x1e, 0x2, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x141) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0xf66ea000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.684478343s ago: executing program 0 (id=760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='reno', 0x4) shutdown(r0, 0x1) 3.618493634s ago: executing program 0 (id=761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa, 0xb3f0}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x12, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x4, 0x200, 0x2000004, 0x54, [{0x19}]}}}}}}}, 0x4c) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000002280)) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r7, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000180)={0x50, 0x0, r8, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) fallocate(r6, 0x100000003, 0x4, 0xffffffff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r10 = inotify_init1(0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x4) inotify_add_watch(r10, &(0x7f0000000000)='.\x00', 0x50007a2) write$binfmt_elf64(r9, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3e, 0xffffffeb, 0x200000294, 0x40, 0x0, 0x0, 0x8f2d, 0x38, 0x1, 0xfffe, 0x2, 0xfff}, [{0x3, 0xf97, 0x8, 0xd, 0x0, 0xe5, 0xffffffffffffffff, 0x4}], "75c064fb248c82455f3d5f7a31b3a8beb0076f11bfb0ab9c186a5ca8c881ba65daba20c5a2aaa07207114753a1d2ea8fe4b520f6035bb8eda72ce8cb9b6afc8577c7d8527bf3ecf6cde00a60385ec741b83087ca0663a7e5264e311cb370c83efaa618147d1fbca68da956b7653d24ed60f0234881"}, 0xed) close(r9) 3.527377429s ago: executing program 2 (id=762): syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000000)=ANY=[@ANYBLOB="1201b0c63e0739086b1d01014000010203010902c80003010000730904000000010100000a24010000060201020c24020502020602060006ff090401000001020000097801010101020000072401090100000924020206000300060c240201270320cbb2bb9bcb0905010900021f0504071001000006000900020000040000000904020101ff"], &(0x7f0000000bc0)={0x0, 0x0, 0x1, 0x0}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo\x00') read$watch_queue(r0, &(0x7f0000000100)=""/255, 0xff) 1.868005367s ago: executing program 4 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd29, 0x8, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x24000090) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000040)={@loopback, @dev}, &(0x7f0000000080)=0xc) 1.61290144s ago: executing program 4 (id=765): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x81c0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/30, 0x1e) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x42, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x7800, 0x8000, 0x0, 0x7}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) syz_usb_connect$uac3(0x5, 0x93, &(0x7f0000007580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x5, 0x80, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x1d, 0x8}, [@output_terminal={0x13, 0x24, 0x3, 0x2, 0x504, 0x3, 0x6, 0x8, 0x1, 0x8, 0x8, 0xbee}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x1, 0x7f, {0xa, 0x25, 0x25, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xab, 0x5, 0xb6, {0xa, 0x25, 0x25, 0x7, 0x1, 0xfffd}}}}}}}}]}}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) 1.37105566s ago: executing program 1 (id=767): r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1b, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f00000000c0)="b1", 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0xa7d, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xff, 0xf5, 0x7e, 0x20, 0x1199, 0x9006, 0x4227, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6b, 0x3, 0xff, 0xc, 0x10, 0x70, "", [{{0x9, 0x4, 0x9f, 0xf, 0x4, 0x10, 0xab, 0xed, 0x4, [@hid_hid={0x9, 0x21, 0xcc5e, 0x6, 0x1, {0x22, 0x2d0}}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "e9b9df97ffe4"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfe, 0xff5b, 0x3, 0xd6}, [@ncm={0x6, 0x24, 0x1a, 0x1, 0xb}, @dmm={0x7, 0x24, 0x14, 0x8000, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x22, 0xf8, 0x1, 0x1}]}], [{{0x9, 0x5, 0xf, 0x0, 0x200, 0x4f, 0xfe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xbab40ba11cfcb695, 0x3, 0xfff}, @generic={0x23, 0x3, "7959d2f6fba35631a008f35536aae0f7d062cea0d8873fab3203a3762fd47dd9ae"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x6, 0x3, 0x7, [@generic={0x80, 0xf, "06e8c2fcd80dce503416f0ca02be720d204a9490f56625948e6ca3be56652ead203d932a14fd35d994615a4388fc9c08edd6caaee3b09973336d6b99cab122605b23307cc4d4b2ae1d7e455d84496639379024af5a47ea727231cf370d19b54d4d9ec7eab16430ce9c21d1ccb8fca35aed0d5cd7d2d14d2e6ccfae59dc7a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x8e, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2f, 0xb}, @generic={0xbd, 0x8, "70c072ea1444f0342f71f8eca6905618e71ed812be06ed4a660723dd3391e62b40fa8911ec92885aac1dcfc95f29f050455dd121ca49585a9945b4b564a2fa77e57fb68cb51dade25454f74776241909bcce59f3fced3da9b8edf05a368569c3651e568fb6a729c7153a83f69378f1a10346f6e818e9ad6a4e54f26db301b9869deafddd43f70a3b159bb0ebd8c974edf33af7062c9792d7100219370a57c5563cc474484b44f54164ed3a55e76eb2b68d1d85323de59723944ba0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x5, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}]}}]}}, {{0x9, 0x4, 0x49, 0x3, 0x8, 0x13, 0x17, 0xb, 0xc3, [], [{{0x9, 0x5, 0x6, 0x8, 0x200, 0x6, 0x10, 0x4a}}, {{0x9, 0x5, 0x1, 0x3, 0x0, 0x47, 0x51, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc6, 0x40}]}}, {{0x9, 0x5, 0x5, 0x13, 0x200, 0xbb, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x6}, @generic={0xf, 0x9, "7a2287027c1ddb841c8473e8b0"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x6, 0x97, 0x10, [@generic={0xb9, 0x24, "e1332b81216b3c20fe95f124516d18340064f6b5d40410fd3ca53a59cc3a1bd8bc7df9c5655a57beb43bac0e014f16ddfaa6bf77354b11359aa4c76dd13f250d1e8320277b9330acffd95f0966989a7a2b104a2bc1c0ab9220fe36d97195978816e5da39bfc79cb6117b69cff1f157c3b50c1c782d6042c0377ef94a597a1651bbaec9b9a6d5cd6e97639a7a7b9040cb895227f6aee3cdcf90782f7bba94a9ddcae5983512f28340e53dd8ebc2e3958b274a152f64c15a"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xad, 0x3, 0x10, [@generic={0xda, 0x22, "d7a5b05e72307b63fa9702ba9211961a4dd40ed80ef2d58c833331c32209425ae7be3068c05e717bbe46719d6f2e850b97c9242f30881eeed56df5a79c80ef02946423701500a7a1acce85eb30df3160f8d2adafcd8013fd6fb11c15f10021574d940c1e5f93f9cc1dbac3eb28c24ca00e24bc30b3cec0b5b8e12b2af0bc6288d0e6dc1085c11ebff9299f1e5c4c2a97c508ae48a5ba11e12335edf1ad4be9adc0d24835dea4a09fb296b6b9092e67a3ae9cf517f61cff12800359a034fa84bb18413741041eb43860bdf1e5c404a023f9d9020b8e83e425"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x45, 0xb}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x7, 0x6, 0x9, [@uac_iso={0x7}, @generic={0x65, 0xb, "bccd423626b82bb91ce494809e6ef963cc8a2b9ec9bf1b40074a83804705ca96563f4c6ebd9c669913efe901da9ab1d9128416a277041182fef431841a8a5da4c728573119312728b394fecdc1c56f6f0700bd31385dee3f300ce4bec74c1926ab7b4a"}]}}, {{0x9, 0x5, 0x3, 0x7, 0x40, 0xf3, 0x3, 0x6, [@generic={0xb2, 0xf, "77ffa6c9bcbb78371e9793432c0232ff3d601c55926c478b30df75e4f2deef1b9e7535ba81f0e8e6c743acc1f9986440dba39de273bf300893e310ff8edefccc36a90bf09668f5eedb322979462fbb6ba51b78277f3e2cdee772b20518a0df43d8ddb0a3d138416fd0ac6df18dad2a95b90419bc4352043113f941f9379bd463da4621e2abaa6efdfc10014580272c98b34a783e878f02486357df383f042baf191c791db46ff52e70947eb28c1837d9"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x9, 0x5, 0x9}}]}}, {{0x9, 0x4, 0x92, 0x13, 0xd, 0xbf, 0xba, 0x4d, 0x2, [], [{{0x9, 0x5, 0x0, 0x1, 0x40, 0xf, 0x10, 0x81, [@generic={0x8a, 0x10, "74d4581dcd170ecb86ed6e47f8d450746e56f3ef61c6300232a2f209a9f0d99e83113a3c46363a3d69ca95a3f7a966e1aeea45b02a89636f2aa89ed5a93395a6b648e72b34d958a7e6ad5e12eeeeb32cd3e664b5ef6034b95ec1434a931fd270f7fe65e3e3fbd68aa6ddc7c453f5eff4db64badc4143b523e02e6db9e1d0c6e7770a8624f4b48bcd"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xa85d}]}}, {{0x9, 0x5, 0xa, 0x368844a158e44cbf, 0x8, 0x9, 0x10, 0xd}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x3, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x80, 0xf, 0x80}}, {{0x9, 0x5, 0x4, 0x3, 0x30, 0x1, 0x6, 0x4, [@generic={0xd3, 0x24, "5efa2ee2d27749a23624c529542f7209fd316736e873a92d9fccc1d004c96bf054abe9d701940d00c463e148cbd88801fd634e013c189df4af95e47dd611c85e2adba214625fe57caa8131e02f05e6a1160bb6c625a64c73290804c54fe71a035818b6577b8ec38e08ffb6e98c40a59680de2529e31136019cf1d055c573d7bcceffa522351ebea72d79222eca59bbf6e8f7c17e6b441c6639caa2ba8f7d96382b7cb6e220b9fbdb3a17d06ff5cade9e7f28a16efcab8df7c4670230e62d269604d1ee83dfa6929e94110be66ed1ada92d"}, @generic={0xc4, 0x31, "5a8cfd7a9ea91eaf5d9fd223acf1d9c2437af4b8cdf7ca60d493863795b94b1bca0b24311e6e3ab175effee10b8f4770bdc42fc663fa50f837f06ae508efc4c6fbbdacaad0707e21a0662babe5b4570ae1bd17b39bedf60564e24a24934063685480373ea702471498301ebe699b8b18a63b59512e2f967639a62901d0a6dd51faf6a03623f54868470ee86818b0f66402a788d78a23603992561f221132bb386ee065d3d1f0cf1fe34e4fd281e6df343197879dad9f0c9626a78bcf9431ac96e1a6"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x1, 0x81, 0x1}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0xa, 0x39, 0x8b, [@generic={0x23, 0x21, "2cee14b74e57aff318492b50dbec7531c045185e2e3a9bb8a48b1a3d9e4706af8b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x1, 0x80, 0x2d, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0xd}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x3, 0x3, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x1}, @generic={0xf3, 0x8, "dc0216244bcfa92df37acf7df65c12454fc325d3ac51427a770c226957b42f11f61e19b6ac3e5cd2ee326ee58b686f76957519af6e99660bcae7393b0aeab411db2ec7c1d5fbfbd025b60de3d7c68d22b9b88bd18b80d2f8b893ea5982eb8376864d871398ec794527ff075d2f94d36a026099e015ee1329201af0b2d4361254cf5c69ab7602f2b7872404ab5959d4b5907a96d2d9a8e71417f2e7a265d2590974b3891480e41c3dc72e51f97ae66f1326475745fb910e85e1f0360b8acd272223b018bd723bf16574040b64441150309fc4a581ecce50ce13b1a11178c9e0efd5bd99663a212d88e9182ed2d4d819513e"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x4, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xfc87}, @generic={0xa2, 0x31, "473f397fdcef6d8eebf492794a9e51f55341a4e786638ca4f404fa8e3cb072019dc8fd82038e623cdb909262d62468f8f9f044386cc4f64cef768386bc5f13a915a333314be9097b941d3faef52eede76add48650b4e572fb07ab39f33f8207ec28d1fc046c17b826967bfeab0025fc0a5129d0ea4d624ec08e8843c9cb52f8bce08624818f943624d51a7da9ec035e82f8c3c1ffb7ad496e44cdedbb196d181"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x6b, 0x3, 0x5}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0xc, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x2}, @generic={0x14, 0xf, "b53c02c7daaafa28be4af06a7f7f94298ee8"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x8, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x7ff}, @generic={0xc4, 0xb, "874f6d9479fa7037a126e4be08e9bb535e35c647ab8f0b65ec8f1a3f54b541bdaaa5145ec8acda2c433dcb7ad3f1d9c09f261028b8e367b9e4ce5707f981cc66377a43edb271d85abc7538541c88adeb792aa23cc76e41af5ec6c1f532727c2fe6c4d8f562b258216175b43c2759a968694f4e3f7492abbf95920343c1246485718a3e66d34bd3c4e6e96243ad4d4c79ef48f979ba8ae879badcd2b7e6765c8cc8b07830318fc898c01630628a6d125023035f40fe99947caff8e911ee8609243fa8"}]}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x250, 0x4, 0x0, 0x5, 0x8, 0xa5}, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="000000004c002c1096b036c568588f92b19c5292a992597d9dc73bf639261ad7c87008faa7f1f3b84da1caa9a10e24ced6619cdb860c1f04be2954e8f0f693"], 0x1, [{0x70, &(0x7f0000001300)=@string={0x70, 0x3, "ea5bfb597a40cf6f256194391d10351f8992978946543cc98c78c975789e03129764c886f7c8e81652a5250ef72fc1432cb23d1f5ffc19a12e6de82452de6095cec499b54cd82be40482e1505a955bbea7f6c9dc19121a69d14b01aea41912d59c62fdb05e9cdb18565391f80cde"}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) unshare(0x20000400) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) 972.691057ms ago: executing program 2 (id=768): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff"], 0x0) listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x28048010) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0xf63], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 731.914787ms ago: executing program 1 (id=769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='reno', 0x4) shutdown(r0, 0x1) 726.545758ms ago: executing program 1 (id=770): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x7, 0x0, [{0x584, 0x0, 0x8}, {0xa31, 0x0, 0x3}, {0x0, 0x0, 0xfff}, {0x1a7, 0x0, 0x2}, {0x26b, 0x0, 0xb}, {0x287, 0x0, 0x45f}, {0x1a6, 0x0, 0x2}]}) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) (async) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc) (async) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x2) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x7, 0x0, [{0x584, 0x0, 0x8}, {0xa31, 0x0, 0x3}, {0x0, 0x0, 0xfff}, {0x1a7, 0x0, 0x2}, {0x26b, 0x0, 0xb}, {0x287, 0x0, 0x45f}, {0x1a6, 0x0, 0x2}]}) (async) 680.265705ms ago: executing program 1 (id=771): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp\x00') preadv(r0, 0x0, 0x0, 0x7, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@multicast1, @private=0xa010101, 0x0, 0xff, 0x0, 0xf, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x200, 0xb943, 0x7, 0x1, 0xffff, 'veth1_virt_wifi\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x81}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @local, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB, @ANYRES8=r2, @ANYBLOB='\a'], 0x0) r3 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240102000a000201020904010000010200f70804010101010200000905010910000206000725010c004000090402000001020000090402010101020000090582090002"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r3, &(0x7f0000001f80)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x18, @string={0x18, 0x3, "b3c0f56582cffe689200d47ec7c5975898a3edc72ba2"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) 367.879588ms ago: executing program 0 (id=772): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = socket(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001200)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)="ec085233ce8f5d331877cc5694f2f79c7fe65ef3673c6fb9e2bfb6d0175933a57f8f9b3d0fb0c6f1c61f0e628d5d10d3", 0x30}], 0x1, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7c}}], 0x38}}], 0x1, 0x20044000) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_on}]}) 345.168052ms ago: executing program 4 (id=773): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x7f41, 0x7, 0x7, 0x7, {{0x10, 0x4, 0x0, 0x2c, 0x40, 0x68, 0x0, 0xd, 0x4, 0x0, @broadcast, @private=0xa010102, {[@generic={0x82, 0xe, "3781f6363bf719d5a8a5eaa6"}, @timestamp={0x44, 0x1c, 0xc2, 0x0, 0x4, [0x5, 0x9, 0xffff0001, 0x6, 0xd, 0x0]}]}}}}}) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000100)}}, {{&(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000280)="91e64663a3fa91564b253788597d34745e9742efbbc87496b97967a5022f2ba2038f5408c2d9c9909688ec", 0x2b}, {&(0x7f0000000300)="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", 0xfa}, {&(0x7f0000000440)="ad9b0b2702427b629b50dc4341b8f35025f1343912ae125a9f0a56c830f647c32a0fb496aeeee36ef1d4987f5ae0bc1971502655d45038441f51998ea014d42abecbb2af8c138c428188575f8657ff806f04e5e4a5b970b9bd7fa0d3529a29dd71ffe3bb9cf101ca70dc6d3406b1d466e5e7158561cf4344befd5b8f1bb89ec89268c2bb55bb0cb7c90101e0c88398b7101fed6bb522e7d706210f93f9c0bf8e4ed6cbf8653c1f29d2a3c5b8a4aa9600b180deaae88f6132610ac45a15", 0xbd}, {&(0x7f0000000500)="8377b60820a91939d61c783242a2bc7e7d74b45b369c0810f915dab4021c1278547f434e4f9e7fae1173f975b59dd295d0758ccf45f390ca099c79f2c39a1e532fcda2", 0x43}, {&(0x7f0000000580)="d9a8e59a6409b6d0abfbe43015bda65caff5b8e89c1abb2002d95fdf6f2e490893bd2723711f708bb9d18b9ac5e02894354611eb66eeca80174573ee849bb46c9327ffe8c52f481a7b7a2deef755b21c6794045a51e8f60e43e2546a607e516b21ef30caa0eec8d6c9dd3ce00c50b22dc5a0f1ce208f461df175ebbe3530e133b1be7b3b8752662f5babc0831950f4969e47c5ed145c1b1004b6", 0x9a}, {&(0x7f0000000640)}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="900000000000000000000000070000004424c583e000000100000008e0000001000000037f00000100000002ac1e00010000000000440c1e90000000060000023a830f2cac1414aaac14143564010101830b4bffffffffac1414bb44345993ac14143f00000000ac141424000003ff7f000001000001ff7f00000100000008ac14141a0000688a0000000000000003001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000005b9fe0258db2d19e4f74dbaea2db7818fb8748aa514aadc8010100000000000042e2b587096dc7e5c2cb15dd7a210543aaf7"], 0xb0}}, {{&(0x7f0000000880)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffe}}], 0x90}}], 0x3, 0x2404c042) (async) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xd) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x3) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)=0x7) (async) r4 = socket$inet6(0xa, 0x1, 0x0) listen(r4, 0x5) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000080)={0x17, 0x0, 0x0}) (async) ioctl$TIOCSCTTY(r3, 0x540e, 0x6) (async) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x4252}, {r3, 0x1}, {r0, 0x2111}, {r0, 0x7084}, {r3, 0x504}, {r4, 0x8420}, {r3, 0x400}, {r3, 0xa450}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000200)={[0x9]}, 0x8) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x10) 333.250054ms ago: executing program 0 (id=774): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffeb5, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x805}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c0015005a07350081"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 243.795569ms ago: executing program 0 (id=775): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x109080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f00000011c0)=@svm={0x4, 0x1, 0x1080, {0x6000}, {"032eaeffe987c15146be535eb5226de057186084268c91b0282964566490eea078c107dd190028180b603cd9e61c132848fcadcc941c08562657a9f36bf7b96013b2b52b8b2ddfada1893975c3825002ad86d06336df62c486e921873de6aae41df57c458b83658de62d495ad47741937af7f8b5d3978d4a49f5346b598a9b35bb0330b797a6b93598e9bfe2e27167c17004c8c90bde7e78a4e3b48b1fb091d99efc926b3ebe040be5c9874b5706a60d61cb5c151f469b38f07498dd7418b94406b26460f31bcc45117a285375992b8c13b920501733db21b97677e0149cad73984370fd706a030003d57a0c0b590b2a51628f600fb1841f56f5de7223da655ab3c12983ff243aab555ce3c03fdd4b72aff7575cf1a78413840347820c21208a3082bef813f904ed2e2939fe6e6e3a832e265344742d0589627cb64649e4653079708a9996bb34bbc692f3b394288bbad043b40c76341c4e437fbeaad4cbf0921cf4880e62e1288a53024dc496311e3198314fd1f06369b5420b71e40b107ec1459d630a17be4d1d935196d9d4a5d9c2117e36a0a04f392c71f137c5403bc085bb40031f25333c1e0ef2418c11b47d17f68fea7591afdbec7c05f3cdc88a10019c415bbe854368ef8e73fc14c4b86497f50f5f40ad92865bec948113b3a6aa9c67d5bce03ee608251a06af4106e10ab155eb0094da0d26d878221f44fba8a6b58dc31fc13608d9fa7f6ac6eab7a0e505a5f7a32bc3cced44ee46d20c5f198ef04e0554f80b9682abf357edc969b60913fae2c9c827b1a4326667aaaa9ba952ee7d5276fc295ff8152016a26decb22229f3741baae6d9f1d733e7dca929a9ca8ee97e429d943786630c97de73cd41ab47aa7d78af9bf49150b4b759b25585d297f39f0f68d1197b75157ee457011f39c7bdf369f7261f1574753c4402d18e05ec75c7aac1cd80fddab5aa67fb48903e6d0b8ca339fe87f7c3082f7a7e72bb999a0d72d576f8f73dc11ac55fc744091d8bf994f62f55138db1e4c2df559e60ed1f9b25c7f6e766c81e45ac7763851b681aa0309fc7bebd5fac09cf91cff197baa9ade7563e52de180ba1006d764aa1b50881ead93f07d141c96f18483a0370e5ebb7095797479012ffbe179a48a68aa6a2aa6f566b2ce7b73b226b3802661629a1566ae03a332bb2a708e174b504a7d4a3510db285adae7e4e0bff89c547510dd5eb1df71bce2084473417a71c86741c7a8540da3445184b0b665419ea95edcbdcca69758ca89fe1c079edb6c7208f0800be47e38495d7a2ddf1ccc42d3c664fb337478c00b25bdadb0668efd82a5c48d52f29d320f6eace405a73553bc739235b62949b061a27124bc655f411b091ed31cc5d44c5d962ac7fcc8caa6bd8c3cb63285c9f0eeea23020027b9cb3fa7722ff9ed1c66746209339107c72b79f45a0235aa34fc5fbfadb6d9f4a5ba2846fafb038985de8ee2ecb951195cd36015ba2524adda85e826fc1cf3d6b2c0cf36708dafb1649052acdecff933f2a4dee50260e78674f9451340dd241d2ac3ee370c77e8d57feba4759032bca28266f5eab5c616770cee98e87a8feb8d1e940662d56b2cd8e48bbe7bc64738e0623063615656a80d939e6cac7c43f62541d82a09e01c6bf93319c3d4dd2482824985270727e865234430ce38eedc2f39439b0e05f90432752f272daa4320ec3e3111982f5ea315471c668587d4edbd738e7227d7280cdd8da4336faac78c6031f0849968229e1d0dcc516de54d7c2fdb1e4ab8a128a88569254c62d0316a65c477d6d41006398c6489394e743fb48e47778bb48ddb2abb0fedd4e4cf3bee39d19c9ce5e1d0abd230e0e55e02befe55a705d123f1ee69ce6410cfe720f21a5921cc0ca6de087a3ffc20d306cf2ec31ab0ba3af69566bc73e172f0d51b0e017a1d3a19ed69e197566e49551996065a42b379f701013b4de4b41b0d6bacf501817000cedb14b180ebb2525904cf9bb238a284fca91ddb810d9d64565ce8203e6aa9a578399ca405730a0ce64c7eff4db299cda9df94416d09405b9f1ba62dcf8c17d598102ed347b601f6dc0925eeb67256aff988d9e6f70722fa60c80a388b42ff1237c10494f4a374d67ecd6db6df1b4b9e728d99f82e728b3605bee8132c98fc2df2012d9c5c1d0e292072108df1d0f4c20a8c989d693c19a688a7eb68355bc39b33ff46c3815404b04f8755f3e8439912a7a604c4ed71a68d4e7b88dabbc7105db35d50b820ff8864ffba1a23024212ed0bb428fe02575c5295350ff2bfcae1ec243f4097ac66b8ddc2a082d1d8062fd76250d854f520ec3cc847f65f5763af96ea0cbb366febbf4a032457c9e8d83430dff55b9261324052a505d38f84f62b5763e1ab7eb3077286a9699db5545b857d83bf46148cdae2f5b16becb1abf03500b384855a67e4163ee4878636194caabbdbfae589f020aa9da557df7d2796e497135aef308ef4aab1571d444e2eb094d74c41b110f0ede68eaa439a92395164d0b579b5726d51b6bc044e9db43265dc873c07fa21dec14c3546cab5416a2012166a29eb3bb2a058802c007cd925a8ea45c30b2753a11ef8482fea4ed2641a342dac1fc892d1fb3e07eb33c8f50a96d55b066486093d8a14c4c7dfeb8498d6b9f9b11bca628a76d085911964b480f7426d90b21a7b52bc448dc291ec611ba992bccd442184272601c19adb06f4a50e7970caebfb24f4d3fc7f21242662130aa440e7ae0dc5d25d6313596424a6aa45a0665df95867e2a48a636bc477af2f61859f6afd90dd7afb14481f576247046f7a3c01b4cfc33f2c0f139a917c87b7895d6996e0bc7665b273039274e381a5ca2bd1303136703e2c58f10e3f3d72b8d8560d10d8e5b683faeadcdb2942e844d31f0ea049cb227badad55c7ba6c6d305a3b64a75adb41e7d0c8283e7cb97bb3b0d00baf3410d242d59ab9483639081c24cb2216c7901c0715e577059d912dfdbfb8a6ab3617f7055d3133b6d346e58df6b4d76c3400d2264bb34546e85ddd558da8b48649b9239e941d593d8c81aa104492766ce775abcf576c94051895d4b4b4cc4a52c2191ef5cdb3404d13b5b2bbc55c2cde1b941c147d38fc293b5738a425e7aff510ac101d2ebff8586956d4618c21d4a5ae8104ceab825d13eea65fa54f48e7f0434285fe5737ec9015a6c9aaa4065448cceb2faefe660237e25b656ffbca3d6ee2831db8b605180965f47877d1118fc2ebafe977b0a3025aabf491ce3e55e9bc56ed729176f0ac38c7dafed889d3c29335a4331681dc81dd5df075b9db16076f8ce4db62826e7d700de9d112a847f3668e74afc6ed86f1c68c8467b8b0fc0763c7d88109eda49fbaa02fda7f62806e2060b87548cc1945725487794b5a8de0df6665dfa372710a1ffc29c80d779402ee61857bd3e7144969aa55a7530a9a5571843b16bac79f9c7e53faf9fee8d2686a2b64eb1a23c5ae740618b049912062915424d1a63941f0cc14bfe00f6e2fa8bbcf732686fdb45111bd2dd7dba3f9c296b019d3b1132944ff005fb209480c063c21c779bc0028c2c7970a5bd81414d13033f1d003ab6d97266e546e60043cb1db7ca8557b1bd96e7c2e0c9ebe28476f791b43928e02140ed6d25b23f343ddb0d74d24586db5cf0ff3ab0edf6e42b5e58762f8e35f1595672349e5b80f0744acf82c034a9dd585f0e2639f9fab3e8988249cfeb2cc2fde953103ff3d300ebe0cd0498e6c8bf4ca8fb90d8864ad8e6130b7fb832422f611e0ffeeb1c7d386cf253bbab84da06b9abf76d977ed88dd733346ff33c8417ea05c8fa2a271dc1e2ca12d11a0322ca03e952a1f71e8a9a79f8dae72127a484b578c71bafb96b70e689c9692264b1d597e88e929f2156da812a5e274f311baa456f1ed93574e2c6e2a56aa0c5be93b2da72e6d84d50466c5826ed84540bd476f5065e68d59b6112440e2ecc450065d3ca796c27d97089457b431c2878cc5843b0421c7d3027e2adffced0e0a20023e005f37fd7d21f0634c3bddf429d322bf95a26f159a64a97374a6fea26292a7d1c517dd597ebf45a3d934b38f7b39bc0092fd9f66d6dc1760bcbe4c63d48676636f3239412595bd7b95f87a63cdbc1fe38c90f34783fc60ee715104665c3ea9b5ff87ff4ef0647ba2f98e2eb220961ad00ed90acd60aa9a95d0d0e9c1bb9f0ab5d87066e9140a6b32d8158078f5a2aa2fd13ff94549e9e15b3a15cfee56e76b366180d9e1093446f134ef47f30c61d9bd9e638e8512e1ff8cf1ab010777e0c6f8cefdb0ac434aaa48b6c3abdad52316b0caba2582588ec3fd492dec9a4d305ad11d0dd47bff3da3474196d2370195f63faf3d73bb825d9666b4007ff145ae13b3488c25def5bade221492839d27edd11567554e384d2f2b387f4267ffbb938f22d86869f62fe64ccd9845d732944296534f5c3e3baded2f59e08b102037d0b4c7d9f179bd63758a3fa82c3767a7671488877e091b9c4999015946cfb7882629d5b28c849e46536ab39456d8776f3f8dbf5b66ab4924b86372f796865ab56b23f0660fbb7e6cf045c91f58f586c06e6b3a947da16ad8414a69e0e4f5c9f7622e9eea50e8f6cdae977fbc7acdcb718b0a61584280b8a2c117cdb06a2af2ab5a1235485dda680d006add0024f1f04b403245992b7d534ec526c86567e0bd8b075fb6ff6fe434f441387b8cc6dc5eacb788a638a98f8f7795f4a1bfde2d746d5cb35fbe38169dada7bb4e8959f2e4e45768b80a3a79b93633d74c4c6b3c9ff91118febc95b2d30d5195e0cade2abd4078dafe834e5ee74fd607611e7b329b82aaafc2fad62eabc2a681771e124d97bd0d54efcbfbc94cbfe1906a3c853a3187b9a524e7bf7b763d8cbcd53d273af99abad5cf7811a22f02ffd6df5a93094b0a070142c728b019f87a6c3cb7ab25f194617bb6fdf566924a746102875bbcca1d36d1ca6cddbed70095ccd0625b48b3861755ab2fdd987cf33e9d08c0c0e119fa1b4109e95791811d1e74015bef1c4b98c62a211e532b4b0297963badf9f6ad9f56060ab60004916db9f7feddf5d0e650253720f6f8a52e2ee59c62815ca5334617fdea27028a88c3be97299107d139d6470a51b34ccd298fad34bcf98a616ad5bb5037b5cad6bd03e07c9e0fe84611b30fd1d3b8e2180b51d14edf1ea76867ed9b49e80c57ba5e24f32d48f7e0b2443188ea5f006e91a109691d35878e138345d0c0ad7bf1dabef79e03b50cb022521f68cf0c7a35e7b8a568c53c27a526f68d29edbe27e217d2154fcd6f1521c5ad9d906a40af05646e0717d44cc7c7db6dc2493945b867b2da17c4b4093eceb3543121cf594865e94b2099a716173212d0e9afed0837b47beed05de2316fa938405977ca9c6094a0b63980916ba7d249d1b6bcc69020d9c1884b5860a594a380b71bfa809a88577aece2a813d8e3c3cfc8488eb41171efef72dcb66558ed5f1826be5089563cb7cb3d59eb7c5793cc0a7c83e88c52af9da4ca29fa8a44e1eb7aacbb07f0e963331e25722aa8e1f5e0a5c12912c6c1439d270c4c8a4cdb95fb06151f763182919be721e41994ed2725652f90e4e89887170c4f58b4b7969f7a62f7eaae98cae7e5bb10f2deda502039401b7338578b922d08f51a3b59901a4252676f681860fc86c957a81cb0dbea47cd48583d635526cda13714889ee26f056f986b2739054171b462bbb82ee09e69004b0dd646a708b3ec16d7dd7ee44d522bbd8bcf6f5529e9e37eeea73d4cc478e442575aca91c"}}) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xe) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(0xffffffffffffffff, 0x0, 0x1043) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) dup2(r0, r0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x109080, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) (async) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f00000011c0)=@svm={0x4, 0x1, 0x1080, {0x6000}, {"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"}}) (async) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) (async) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xe) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$tun(0xffffffffffffffff, 0x0, 0x1043) (async) 92.306205ms ago: executing program 1 (id=776): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0xfffffffe, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @remote, 0xfffffffc}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) keyctl$clear(0x11, 0xfffffffffffffffd) close_range(r0, r0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000640)={0x5, {{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x33}, 0x2}}, {{0xa, 0x4e22, 0x6, @empty, 0xf}}}, 0x108) r1 = socket(0x2c, 0x80000, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r2, 0x1) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) socket(0x10, 0x803, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/162) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000040)={0x2, 0x6000, @multicast2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8979) sendfile(r3, r4, 0x0, 0x80000010) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_adj\x00') write$tcp_mem(r7, &(0x7f0000000240)={0x2, 0x20, 0x2, 0x20, 0x8040002}, 0x48) 0s ago: executing program 1 (id=777): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r2}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'sha256-arm64\x00'}}, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x1200, 0x2}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}, @fda={0x66646185, 0x400003, 0x1, 0x1e}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 489'. [ 95.807639][ T36] audit: type=1400 audit(1776359238.406:1970): avc: denied { lock } for pid=1905 comm="syz.2.489" path="socket:[14350]" dev="sockfs" ino=14350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.893483][ T1908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 95.991950][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 96.142939][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 96.152506][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.160355][ T31] usb 1-1: too many configurations: 33, using maximum allowed: 8 [ 96.169605][ T31] usb 1-1: config index 0 descriptor too short (expected 22, got 18) [ 96.178382][ T31] usb 1-1: config 9 has an invalid interface number: 13 but max is 0 [ 96.186850][ T31] usb 1-1: config 9 has no interface number 0 [ 96.193250][ T31] usb 1-1: config 9 interface 13 has no altsetting 0 [ 96.201105][ T31] usb 1-1: config index 1 descriptor too short (expected 22, got 18) [ 96.209944][ T31] usb 1-1: config 9 has an invalid interface number: 13 but max is 0 [ 96.218317][ T31] usb 1-1: config 9 has no interface number 0 [ 96.224803][ T31] usb 1-1: config 9 interface 13 has no altsetting 0 [ 96.232336][ T31] usb 1-1: config index 2 descriptor too short (expected 22, got 18) [ 96.240463][ T31] usb 1-1: config 9 has an invalid interface number: 13 but max is 0 [ 96.248747][ T31] usb 1-1: config 9 has no interface number 0 [ 96.254985][ T31] usb 1-1: config 9 interface 13 has no altsetting 0 [ 96.262557][ T31] usb 1-1: config index 3 descriptor too short (expected 22, got 18) [ 96.270785][ T31] usb 1-1: config 9 has an invalid interface number: 13 but max is 0 [ 96.279418][ T31] usb 1-1: config 9 has no interface number 0 [ 96.284100][ T1922] SELinux: policydb magic number 0x66667830 does not match expected magic number 0xf97cff8c [ 96.286301][ T31] usb 1-1: config 9 interface 13 has no altsetting 0 [ 96.296226][ T1922] SELinux: failed to load policy [ 96.304241][ T31] usb 1-1: config index 4 descriptor too short (expected 22, got 18) [ 96.316316][ T31] usb 1-1: config 9 has an invalid interface number: 13 but max is 0 [ 96.324859][ T31] usb 1-1: config 9 has no interface number 0 [ 96.331120][ T31] usb 1-1: config 9 interface 13 has no altsetting 0 [ 96.338124][ T372] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 96.347102][ T31] usb 1-1: config index 5 descriptor too short (expected 22, got 18) [ 96.356604][ T31] usb 1-1: config 9 has an invalid interface number: 13 but max is 0 [ 96.364931][ T31] usb 1-1: config 9 has no interface number 0 [ 96.371130][ T31] usb 1-1: config 9 interface 13 has no altsetting 0 [ 96.380938][ T1924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.381372][ T31] usb 1-1: config index 6 descriptor too short (expected 22, got 18) [ 96.390766][ T1924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.397997][ T31] usb 1-1: config 9 has an invalid interface number: 13 but max is 0 [ 96.408835][ T348] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 96.413852][ T31] usb 1-1: config 9 has no interface number 0 [ 96.413883][ T31] usb 1-1: config 9 interface 13 has no altsetting 0 [ 96.415039][ T31] usb 1-1: config index 7 descriptor too short (expected 22, got 18) [ 96.443414][ T31] usb 1-1: config 9 has an invalid interface number: 13 but max is 0 [ 96.451572][ T31] usb 1-1: config 9 has no interface number 0 [ 96.457792][ T31] usb 1-1: config 9 interface 13 has no altsetting 0 [ 96.467003][ T31] usb 1-1: New USB device found, idVendor=19d2, idProduct=ffd4, bcdDevice=26.8e [ 96.476179][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.484428][ T31] usb 1-1: Product: syz [ 96.488862][ T31] usb 1-1: Manufacturer: syz [ 96.493567][ T31] usb 1-1: SerialNumber: syz [ 96.522021][ T372] usb 3-1: Using ep0 maxpacket: 16 [ 96.528496][ T372] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.539252][ T372] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.551005][ T372] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.560575][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.568839][ T372] usb 3-1: Product: syz [ 96.573083][ T372] usb 3-1: Manufacturer: syz [ 96.577733][ T372] usb 3-1: SerialNumber: syz [ 96.593298][ T348] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.602537][ T348] usb 4-1: config 0 has no interface number 0 [ 96.608840][ T348] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.619916][ T348] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.630005][ T348] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 96.639379][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.648402][ T348] usb 4-1: config 0 descriptor?? [ 96.712271][ T31] cdc_acm 1-1:9.13: Zero length descriptor references [ 96.719354][ T31] cdc_acm 1-1:9.13: probe with driver cdc_acm failed with error -22 [ 96.729738][ T31] usb 1-1: USB disconnect, device number 53 [ 96.785099][ T1918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.794060][ T1918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.803561][ T372] usb 3-1: 0:2 : does not exist [ 96.811320][ T372] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 96.825736][ T372] usb 3-1: USB disconnect, device number 49 [ 96.839559][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.062381][ T348] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 97.069977][ T348] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 97.078209][ T348] prodikeys 0003:041E:2801.000B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 97.092175][ T348] hid_prodikeys: hid-prodikeys: failed to find output report [ 97.092175][ T348] [ 97.241603][ T1934] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 97.250475][ T1934] rust_binder: 255: no such ref 1 [ 97.255788][ T1935] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 97.264631][ T1935] rust_binder: 255: no such ref 1 [ 97.268370][ T31] usb 4-1: USB disconnect, device number 50 [ 97.328653][ T36] audit: type=1400 audit(1776359239.926:1971): avc: denied { accept } for pid=1933 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 97.620038][ T1949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.628570][ T9] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 97.632220][ T372] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 97.636966][ T1949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.801943][ T372] usb 3-1: Using ep0 maxpacket: 16 [ 97.812741][ T372] usb 3-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 97.824094][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.831945][ T372] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.834274][ T372] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.862293][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.863502][ T9] usb 1-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 97.871039][ T372] usb 3-1: Product: syz [ 97.892315][ T9] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 97.903906][ T9] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 97.906595][ T372] usb 3-1: Manufacturer: syz [ 97.916341][ T9] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 97.922036][ T372] usb 3-1: SerialNumber: syz [ 97.934545][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 97.947853][ T1953] batadv_slave_1: entered promiscuous mode [ 97.954521][ T1952] batadv_slave_1: left promiscuous mode [ 97.965300][ T9] usb 1-1: string descriptor 0 read error: -22 [ 97.971865][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.981510][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.005188][ T1941] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 98.017940][ T1941] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 98.029351][ T9] usb 1-1: bad CDC descriptors [ 98.165126][ T372] usb 3-1: 0:2 : does not exist [ 98.171928][ T372] usb 3-1: unit 0 not found! [ 98.176632][ T372] usb 3-1: unit 15 not found! [ 98.181367][ T372] usb 3-1: unit 121 not found! [ 98.189372][ T372] usb 3-1: unit 208 not found! [ 98.194821][ T372] usb 3-1: unit 72 not found! [ 98.199747][ T372] usb 3-1: unit 199 not found! [ 98.205667][ T372] usb 3-1: unit 194 not found! [ 98.210768][ T372] usb 3-1: unit 2 not found! [ 98.215706][ T372] usb 3-1: unit 44 not found! [ 98.229595][ T372] usb 3-1: USB disconnect, device number 50 [ 98.245781][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.257527][ T9] usb 1-1: USB disconnect, device number 54 [ 98.274701][ T1961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.283476][ T1961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.291954][ T346] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 98.294666][ T1961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.308539][ T1961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.443600][ T346] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.456740][ T346] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.469049][ T346] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.481716][ T346] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 98.491091][ T346] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 98.499392][ T346] usb 4-1: Manufacturer: syz [ 98.506145][ T1955] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 98.714631][ T346] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 98.723964][ T346] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input12 [ 98.736429][ T346] usb 4-1: USB disconnect, device number 51 [ 98.742690][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 98.818135][ T36] audit: type=1400 audit(1776359241.416:1972): avc: denied { create } for pid=1962 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 98.957363][ T36] audit: type=1400 audit(1776359241.556:1973): avc: denied { create } for pid=1975 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.041966][ T67] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 99.197204][ T67] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 99.206568][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.215592][ T67] usb 1-1: config 0 descriptor?? [ 99.381929][ T346] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 99.491922][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 99.531912][ T346] usb 3-1: Using ep0 maxpacket: 16 [ 99.538588][ T346] usb 3-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 99.549302][ T346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.560505][ T346] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.570368][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.578482][ T346] usb 3-1: Product: syz [ 99.582772][ T346] usb 3-1: Manufacturer: syz [ 99.587422][ T346] usb 3-1: SerialNumber: syz [ 99.630326][ T1994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.639065][ T1994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.647239][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 99.653682][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.664120][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.674837][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.684198][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.692480][ T9] usb 4-1: Product: syz [ 99.696993][ T9] usb 4-1: Manufacturer: syz [ 99.701631][ T9] usb 4-1: SerialNumber: syz [ 99.794681][ T346] usb 3-1: 0:2 : does not exist [ 99.799768][ T346] usb 3-1: unit 0 not found! [ 99.804499][ T346] usb 3-1: unit 15 not found! [ 99.809286][ T346] usb 3-1: unit 121 not found! [ 99.814284][ T346] usb 3-1: unit 208 not found! [ 99.819176][ T346] usb 3-1: unit 72 not found! [ 99.824004][ T346] usb 3-1: unit 199 not found! [ 99.828882][ T346] usb 3-1: unit 194 not found! [ 99.834218][ T67] usb 1-1: Cannot set autoneg [ 99.839021][ T67] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 99.851207][ T346] usb 3-1: unit 2 not found! [ 99.856023][ T346] usb 3-1: unit 44 not found! [ 99.862779][ T346] usb 3-1: USB disconnect, device number 51 [ 99.869868][ T67] usb 1-1: USB disconnect, device number 55 [ 99.909031][ T1992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.918280][ T1992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.927904][ T9] usb 4-1: 0:2 : does not exist [ 99.935764][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 99.951713][ T9] usb 4-1: USB disconnect, device number 52 [ 99.965749][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 100.218348][ T1997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.227025][ T1997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.691962][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 100.721965][ T372] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 100.821989][ T9] usb 4-1: device descriptor read/64, error -71 [ 100.851939][ T372] usb 1-1: device descriptor read/64, error -71 [ 100.937429][ T2024] overlayfs: unescaped trailing colons in lowerdir mount option. [ 101.061985][ T9] usb 4-1: device descriptor read/64, error -71 [ 101.092495][ T372] usb 1-1: device descriptor read/64, error -71 [ 101.301985][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 101.312125][ T346] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 101.331934][ T372] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 101.431934][ T9] usb 4-1: device descriptor read/64, error -71 [ 101.461985][ T372] usb 1-1: device descriptor read/64, error -71 [ 101.464308][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.479502][ T346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.489635][ T346] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 101.498966][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.508044][ T346] usb 3-1: config 0 descriptor?? [ 101.671968][ T9] usb 4-1: device descriptor read/64, error -71 [ 101.702176][ T372] usb 1-1: device descriptor read/64, error -71 [ 101.782261][ T9] usb usb4-port1: attempt power cycle [ 101.812101][ T372] usb usb1-port1: attempt power cycle [ 101.918074][ T346] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 101.925624][ T346] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 101.933143][ T346] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 101.940574][ T346] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 101.948119][ T346] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 101.956357][ T346] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 102.117075][ T346] playstation 0003:054C:0DF2.000C: Invalid byte count transferred, expected 20 got 0 [ 102.126732][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 102.134492][ T346] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense pairing info: -22 [ 102.143846][ T346] playstation 0003:054C:0DF2.000C: Failed to get MAC address from DualSense [ 102.152843][ T346] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 102.161082][ T346] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 102.162074][ T372] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 102.176491][ T9] usb 4-1: device descriptor read/8, error -71 [ 102.193634][ T372] usb 1-1: device descriptor read/8, error -71 [ 102.313238][ T9] usb 4-1: device descriptor read/8, error -71 [ 102.321642][ T347] usb 3-1: USB disconnect, device number 52 [ 102.329057][ T372] usb 1-1: device descriptor read/8, error -71 [ 102.551961][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 102.571956][ T372] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 102.573656][ T9] usb 4-1: device descriptor read/8, error -71 [ 102.593306][ T372] usb 1-1: device descriptor read/8, error -71 [ 102.713199][ T9] usb 4-1: device descriptor read/8, error -71 [ 102.723368][ T372] usb 1-1: device descriptor read/8, error -71 [ 102.823070][ T9] usb usb4-port1: unable to enumerate USB device [ 102.842757][ T372] usb usb1-port1: unable to enumerate USB device [ 103.091955][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 103.238386][ T2037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.247105][ T2037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.252053][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 103.262403][ T9] usb 3-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 103.272999][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.283697][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.292871][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.301026][ T9] usb 3-1: Product: syz [ 103.305323][ T9] usb 3-1: Manufacturer: syz [ 103.310042][ T9] usb 3-1: SerialNumber: syz [ 103.531021][ T9] usb 3-1: 0:2 : does not exist [ 103.536044][ T9] usb 3-1: unit 9 not found! [ 103.540694][ T9] usb 3-1: unit 10 not found! [ 103.554404][ T9] usb 3-1: USB disconnect, device number 53 [ 103.570499][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.598895][ T2048] syz.3.539: attempt to access beyond end of device [ 103.598895][ T2048] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 103.627546][ T36] audit: type=1400 audit(1776359246.226:1974): avc: denied { bind } for pid=2052 comm="syz.3.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.784379][ T36] audit: type=1400 audit(1776359246.386:1975): avc: denied { write } for pid=2063 comm="syz.1.544" path="socket:[16110]" dev="sockfs" ino=16110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.919157][ T2070] syzkaller1: entered allmulticast mode [ 104.021982][ T347] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 104.106147][ T2073] sit0: entered promiscuous mode [ 104.111617][ T2073] netlink: 'syz.2.547': attribute type 1 has an invalid length. [ 104.119571][ T2073] netlink: 1 bytes leftover after parsing attributes in process `syz.2.547'. [ 104.173365][ T347] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 104.182040][ T347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.192268][ T347] usb 1-1: config 0 has no interface number 0 [ 104.200266][ T347] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 104.209895][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.218168][ T347] usb 1-1: Product: syz [ 104.222479][ T347] usb 1-1: Manufacturer: syz [ 104.227203][ T347] usb 1-1: SerialNumber: syz [ 104.232704][ T347] usb 1-1: config 0 descriptor?? [ 104.381974][ T348] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 104.531957][ T348] usb 3-1: Using ep0 maxpacket: 16 [ 104.539052][ T348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.549082][ T348] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 104.558931][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.559708][ T36] audit: type=1400 audit(1776359247.156:1976): avc: denied { create } for pid=2078 comm="syz.3.549" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.568154][ T348] usb 3-1: Product: syz [ 104.592450][ T348] usb 3-1: Manufacturer: syz [ 104.597106][ T348] usb 3-1: SerialNumber: syz [ 104.604538][ T36] audit: type=1400 audit(1776359247.206:1977): avc: denied { mounton } for pid=2078 comm="syz.3.549" path="/115/file0" dev="tmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.807241][ T348] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 104.814419][ T348] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 104.826815][ T348] usb 3-1: USB disconnect, device number 54 [ 104.837387][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.321528][ T36] audit: type=1400 audit(1776359247.916:1978): avc: denied { setattr } for pid=2082 comm="syz.2.550" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.731994][ T346] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 105.883682][ T346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.892212][ T346] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 105.901167][ T346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.911510][ T346] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.922412][ T346] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 105.931674][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.939802][ T346] usb 3-1: Product: syz [ 105.944085][ T346] usb 3-1: Manufacturer: syz [ 105.948827][ T346] usb 3-1: SerialNumber: syz [ 106.558567][ T346] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 106.572651][ T346] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 106.582957][ T346] usb 3-1: USB disconnect, device number 55 [ 106.605991][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.720795][ T9] usb 1-1: USB disconnect, device number 60 [ 106.741028][ T36] audit: type=1400 audit(1776359249.336:1979): avc: denied { read } for pid=2091 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.940138][ T2094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.948822][ T2094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.051954][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 107.203194][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 107.216286][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 107.225769][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.233895][ T9] usb 1-1: Product: syz [ 107.238225][ T9] usb 1-1: Manufacturer: syz [ 107.242928][ T9] usb 1-1: SerialNumber: syz [ 107.432046][ T347] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 107.452758][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 107.459832][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 107.470001][ T9] usb 1-1: 0:3 : does not exist [ 107.474990][ T9] usb 1-1: 0:4 : does not exist [ 107.479956][ T9] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 107.491557][ T2101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.495017][ T9] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 107.510518][ T2101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.519387][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 107.525649][ T2101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.536796][ T9] usb 1-1: USB disconnect, device number 61 [ 107.545115][ T2101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.559107][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.601971][ T347] usb 3-1: Using ep0 maxpacket: 16 [ 107.608844][ T347] usb 3-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 107.619294][ T347] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.629958][ T347] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.639400][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.647510][ T347] usb 3-1: Product: syz [ 107.651952][ T347] usb 3-1: Manufacturer: syz [ 107.656615][ T347] usb 3-1: SerialNumber: syz [ 107.868298][ T347] usb 3-1: 0:2 : does not exist [ 107.875591][ T347] usb 3-1: unit 9 not found! [ 107.880548][ T347] usb 3-1: unit 10 not found! [ 107.894070][ T347] usb 3-1: USB disconnect, device number 56 [ 107.907085][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 108.092906][ T311] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 108.251935][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 108.259039][ T311] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 108.267576][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.278174][ T311] usb 4-1: config 1 has no interface number 0 [ 108.284544][ T311] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 108.298087][ T311] usb 4-1: config 1 interface 105 has no altsetting 0 [ 108.306892][ T311] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 108.316504][ T311] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 108.324947][ T311] usb 4-1: Product: syz [ 108.329462][ T311] usb 4-1: Manufacturer: syz [ 108.334416][ T311] usb 4-1: SerialNumber: syz [ 108.562782][ T311] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 108.711954][ T347] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 108.819151][ T2133] devtmpfs: Unknown parameter '/dev/uinput' [ 108.826829][ T2133] devtmpfs: Unknown parameter '/dev/uinput' [ 108.833323][ T2133] devtmpfs: Unknown parameter '/dev/uinput' [ 108.848388][ T2133] devtmpfs: Unknown parameter '/dev/uinput' [ 108.861187][ T2133] devtmpfs: Unknown parameter '/dev/uinput' [ 108.868303][ T2133] devtmpfs: Unknown parameter '/dev/uinput' [ 108.875058][ T347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.883920][ T2133] devtmpfs: Unknown parameter '/dev/uinput' [ 108.890162][ T347] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping [ 108.899950][ T347] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.910451][ T347] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.921273][ T347] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 108.937424][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.948728][ T347] usb 3-1: Product: syz [ 108.952365][ T36] audit: type=1400 audit(1776359251.546:1980): avc: denied { create } for pid=2137 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 108.956247][ T347] usb 3-1: Manufacturer: syz [ 108.991931][ T347] usb 3-1: SerialNumber: syz [ 109.027574][ T36] audit: type=1400 audit(1776359251.626:1981): avc: denied { setattr } for pid=2141 comm="syz.0.570" name="L2CAP" dev="sockfs" ino=17416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.237407][ T36] audit: type=1400 audit(1776359251.836:1982): avc: denied { create } for pid=2154 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.392001][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 109.541950][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 109.548390][ T9] usb 1-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 109.558860][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.569700][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.578951][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.587080][ T9] usb 1-1: Product: syz [ 109.591308][ T9] usb 1-1: Manufacturer: syz [ 109.596004][ T9] usb 1-1: SerialNumber: syz [ 109.605570][ T347] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 109.804126][ T9] usb 1-1: 0:2 : does not exist [ 109.811806][ T9] usb 1-1: unit 9 not found! [ 109.816626][ T9] usb 1-1: unit 10 not found! [ 109.825843][ T9] usb 1-1: USB disconnect, device number 62 [ 109.829719][ T347] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 109.845695][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.862323][ T347] usb 3-1: USB disconnect, device number 57 [ 109.872746][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 110.127049][ T2165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2165 comm=syz.2.577 [ 110.166710][ T2170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.170464][ T2171] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 110.176771][ T2170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.187341][ T2171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 110.211715][ T36] audit: type=1400 audit(1776359252.806:1983): avc: denied { read write } for pid=2174 comm="syz.1.580" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 110.236737][ T36] audit: type=1400 audit(1776359252.806:1984): avc: denied { open } for pid=2174 comm="syz.1.580" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 110.261632][ T36] audit: type=1400 audit(1776359252.816:1985): avc: denied { ioctl } for pid=2174 comm="syz.1.580" path="/newroot/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 110.281853][ T2179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.297858][ T2179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.391963][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 110.544658][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 7 [ 110.557683][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 110.566885][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.575457][ T9] usb 3-1: Product: 힖賽롳콕⃼ï€Å„ê¬å¼¬å“žæ­žîº…ꘊ롋ì±à£‹ë¥Œâ¶¹î£è–”á•ã®ºêŠªá¬‚㒡┽橡䋥앾鷛넻术ᢹ涉嶢㽜æ¤èŸ­ä¦§ë²«è¦£ç¼ë¤Šã¿á¶–჉宻ꮾᎃ夷ो桨꾹煌⟶葱淥ë­ë§×¡äží‰˜ì¨é®âŒ‰í“ºê§µã„µç²á½µà«£ë€ºî™‘䭸왕஧⟦륙ã’怩ä·â”Ÿã–¶é£¯ï£ë‹ë¿£è„„ꩠ瞦㺣ꈮã±é’¤á²è¶‰á”œê©…丱ꂩ [ 110.609096][ T9] usb 3-1: Manufacturer: Ð’ [ 110.613720][ T9] usb 3-1: SerialNumber: Л [ 110.701952][ T346] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 110.825491][ T9] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 110.834314][ T9] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 110.852308][ T346] usb 1-1: Using ep0 maxpacket: 32 [ 110.853256][ T2193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.861562][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 110.871754][ T2193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.881779][ T346] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.885392][ T2193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.898360][ T2193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.910162][ T9] usb 3-1: USB disconnect, device number 58 [ 110.916214][ T346] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 110.927996][ T346] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.938629][ T346] usb 1-1: config 0 has no interface number 0 [ 110.949310][ T347] usb 4-1: USB disconnect, device number 57 [ 110.950954][ T346] usb 1-1: config 0 interface 251 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.969911][ T346] usb 1-1: config 0 interface 251 has no altsetting 0 [ 110.984403][ T36] audit: type=1400 audit(1776359253.586:1986): avc: denied { accept } for pid=2194 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.008104][ T2195] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 111.018730][ T346] usb 1-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 111.028013][ T346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.038063][ T346] usb 1-1: Product: syz [ 111.042362][ T346] usb 1-1: Manufacturer: syz [ 111.047043][ T346] usb 1-1: SerialNumber: syz [ 111.052570][ T346] usb 1-1: config 0 descriptor?? [ 111.263603][ T346] usb 1-1: USB disconnect, device number 63 [ 111.442386][ T2204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.451266][ T2204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.774060][ T2207] input: syz0 as /devices/virtual/input/input13 [ 112.023531][ T2214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.032205][ T2214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.141971][ T347] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 112.291980][ T347] usb 1-1: Using ep0 maxpacket: 16 [ 112.298562][ T347] usb 1-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 112.309027][ T347] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.319711][ T347] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.328859][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.336955][ T347] usb 1-1: Product: syz [ 112.341140][ T347] usb 1-1: Manufacturer: syz [ 112.345812][ T347] usb 1-1: SerialNumber: syz [ 112.511966][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 112.559741][ T2222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.564479][ T347] usb 1-1: 0:2 : does not exist [ 112.570359][ T2222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.575557][ T347] usb 1-1: unit 9 not found! [ 112.585778][ T2222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.595543][ T2222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.604102][ T347] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 112.614340][ T347] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 112.625199][ T347] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 112.635642][ T347] usb 1-1: 4:0: cannot get min/max values for control 5 (id 4) [ 112.645906][ T347] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 112.656095][ T347] usb 1-1: 4:0: cannot get min/max values for control 7 (id 4) [ 112.666035][ T347] usb 1-1: 4:0: cannot get min/max values for control 9 (id 4) [ 112.676345][ T347] usb 1-1: USB disconnect, device number 64 [ 112.682817][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 112.690409][ T9] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 112.699187][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.701727][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 112.709956][ T9] usb 3-1: config 1 has no interface number 0 [ 112.731602][ T9] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.744894][ T9] usb 3-1: config 1 interface 105 has no altsetting 0 [ 112.753246][ T9] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 112.762447][ T9] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 112.770624][ T9] usb 3-1: Product: syz [ 112.775017][ T9] usb 3-1: Manufacturer: syz [ 112.779732][ T9] usb 3-1: SerialNumber: syz [ 112.998100][ T9] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 113.061989][ T1230] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.186197][ T36] audit: type=1400 audit(1776359255.786:1987): avc: denied { read } for pid=2230 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 113.342021][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 113.421969][ T348] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 113.492014][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 113.499242][ T9] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 113.508080][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.518710][ T9] usb 4-1: config 0 has no interface number 0 [ 113.524886][ T9] usb 4-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 113.538114][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 113.547318][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.556621][ T9] usb 4-1: config 0 descriptor?? [ 113.571720][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.136/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.588399][ T9] snd-usb-audio 4-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 113.598502][ T348] usb 1-1: Using ep0 maxpacket: 32 [ 113.606611][ T348] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.615178][ T348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.625345][ T348] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.634367][ T348] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 113.647276][ T348] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 113.656389][ T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.664424][ T348] usb 1-1: Product: syz [ 113.668619][ T348] usb 1-1: Manufacturer: syz [ 113.673284][ T348] usb 1-1: SerialNumber: syz [ 113.763777][ T9] usb 4-1: USB disconnect, device number 58 [ 113.876417][ T2246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.885228][ T2246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.896262][ T2246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.905013][ T2246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.913566][ T348] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 113.921423][ T348] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 113.927933][ T348] usb 1-1: 0:2 : does not exist [ 113.937265][ T348] usb 1-1: USB disconnect, device number 65 [ 113.950137][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.437801][ T2255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.446510][ T2255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.556364][ T36] audit: type=1400 audit(1776359257.156:1988): avc: denied { create } for pid=2259 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 114.562910][ T2260] page size migration: [2260 (syz.0.613)] madvise_vma_pad_pages:299: Invalid attempt to madvise padding on MAP_SHARED vma [ 114.614020][ T36] audit: type=1400 audit(1776359257.216:1989): avc: granted { setsecparam } for pid=2259 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 114.930117][ T2271] syzkaller0: entered promiscuous mode [ 114.935714][ T2271] syzkaller0: entered allmulticast mode [ 115.023903][ T2275] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 115.281969][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 115.323408][ T348] usb 3-1: USB disconnect, device number 59 [ 115.442011][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 115.448500][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 115.459968][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 115.473949][ T9] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 115.483105][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.491129][ T9] usb 4-1: Product: syz [ 115.495514][ T9] usb 4-1: Manufacturer: syz [ 115.500154][ T9] usb 4-1: SerialNumber: syz [ 115.661977][ T348] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 115.720788][ T9] usb 4-1: unit 130 not found! [ 115.730939][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.742030][ T9] usb 4-1: unit 130 not found! [ 115.747784][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 115.759110][ T9] usb 4-1: unit 130 not found! [ 115.767926][ T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 115.780068][ T9] usb 4-1: USB disconnect, device number 59 [ 115.791472][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.807475][ T36] audit: type=1326 audit(1776359258.406:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2272 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531939c819 code=0x7fc00000 [ 115.822040][ T348] usb 3-1: Using ep0 maxpacket: 16 [ 115.847749][ T348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.855351][ T36] audit: type=1400 audit(1776359258.446:1991): avc: denied { nlmsg_read } for pid=2298 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.858230][ T348] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.891593][ T348] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.901071][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.909218][ T348] usb 3-1: Product: syz [ 115.913466][ T348] usb 3-1: Manufacturer: syz [ 115.918188][ T348] usb 3-1: SerialNumber: syz [ 115.925679][ T2301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.932202][ T36] audit: type=1400 audit(1776359258.526:1992): avc: denied { read write } for pid=2300 comm="syz.1.629" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.936413][ T2301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.962739][ T36] audit: type=1400 audit(1776359258.526:1993): avc: denied { open } for pid=2300 comm="syz.1.629" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.978678][ T2301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.993446][ T36] audit: type=1400 audit(1776359258.526:1994): avc: denied { ioctl } for pid=2300 comm="syz.1.629" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.999157][ T2301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.032695][ T36] audit: type=1400 audit(1776359258.636:1995): avc: denied { append } for pid=2300 comm="syz.1.629" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.056089][ T36] audit: type=1400 audit(1776359258.636:1996): avc: denied { open } for pid=2300 comm="syz.1.629" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.079770][ T36] audit: type=1400 audit(1776359258.636:1997): avc: denied { ioctl } for pid=2300 comm="syz.1.629" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.112008][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 116.126997][ T2278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.135818][ T2278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.145826][ T348] usb 3-1: 0:2 : does not exist [ 116.154403][ T348] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 116.182777][ T348] usb 3-1: USB disconnect, device number 60 [ 116.273053][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 116.304194][ T9] usb 4-1: New USB device found, idVendor=534d, idProduct=2109, bcdDevice= 0.40 [ 116.321917][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.330095][ T9] usb 4-1: Product: П [ 116.342371][ T9] usb 4-1: Manufacturer: Კ煚쀦䎩禡ే쮥㖛暸峺ﲌ騿庵辜娷Ƀℵ鴕㞃ᬔí‘ү녲ìªïº é•í”›ê¿®äª²ì§½à¶‘瓽◰宼 [ 116.357398][ T9] usb 4-1: SerialNumber: 嘉꽬孇⺤âºï›äž½ê¬¯îž²çœŸç¢¯é›½â«žç¬ë†£î»ªî§™å¾‡ä¯ƒæ¯ä€¯ä¹¬ä‰„ë¯ç®–晚ђשׂꋄ꽼呹袨碩éˆãº¼é´¬à§¨î§³é­‹ë„œÞƒí‡ ê¸‡äŒŠæ ·ã½Šç™‰ê¡–꓀㌰੡彘綄覦ê£î¹ á–¡í霌핸å˜í»é«“裸ࣅç¶ã±žâ¡¿á˜å’ªà°ê‚¸î¦«å´€ëµ‰æ¦€ä±æ‰°çŽ¾ìŸ¹ [ 116.481948][ T347] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 116.632006][ T347] usb 1-1: Using ep0 maxpacket: 16 [ 116.639939][ T347] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 116.648543][ T347] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.658876][ T347] usb 1-1: config 1 has no interface number 0 [ 116.671952][ T347] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.685518][ T347] usb 1-1: config 1 interface 105 has no altsetting 0 [ 116.704963][ T347] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 116.722367][ T347] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 116.740705][ T347] usb 1-1: Product: syz [ 116.745115][ T347] usb 1-1: Manufacturer: syz [ 116.750384][ T347] usb 1-1: SerialNumber: syz [ 116.959468][ T2317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.992051][ T2317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.044342][ T2317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.073514][ T2317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.101939][ T2317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.132511][ T2317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.154640][ T347] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 117.182595][ T347] usb 1-1: USB disconnect, device number 66 [ 117.450459][ T2324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2324 comm=syz.2.637 [ 117.889438][ T2336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.914126][ T2336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.971663][ T2336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.001961][ T2336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.161945][ T311] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 118.271761][ T9] kernel write not supported for file /uinput (pid: 9 comm: kworker/0:0) [ 118.331933][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 118.339558][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.350334][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.363750][ T311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.372933][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.380971][ T311] usb 1-1: Product: syz [ 118.385237][ T311] usb 1-1: Manufacturer: syz [ 118.389990][ T311] usb 1-1: SerialNumber: syz [ 118.531985][ T9] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 118.604469][ T2334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.614199][ T2334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.622336][ T2345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.634154][ T2345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.646013][ T311] usb 1-1: 0:2 : does not exist [ 118.657052][ T311] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 118.676008][ T311] usb 1-1: USB disconnect, device number 67 [ 118.691955][ T9] usb 3-1: device descriptor read/64, error -71 [ 118.732696][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 118.754659][ T347] usb 4-1: USB disconnect, device number 60 [ 118.931977][ T9] usb 3-1: device descriptor read/64, error -71 [ 119.142000][ T347] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 119.171918][ T9] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 119.281987][ T347] usb 4-1: device descriptor read/64, error -71 [ 119.323829][ T9] usb 3-1: device descriptor read/64, error -71 [ 119.521962][ T347] usb 4-1: device descriptor read/64, error -71 [ 119.571961][ T9] usb 3-1: device descriptor read/64, error -71 [ 119.601436][ T36] kauditd_printk_skb: 356 callbacks suppressed [ 119.601456][ T36] audit: type=1400 audit(1776359262.196:2354): avc: denied { create } for pid=2363 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.628253][ T36] audit: type=1400 audit(1776359262.206:2355): avc: denied { write } for pid=2363 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.655971][ T36] audit: type=1400 audit(1776359262.206:2356): avc: denied { nlmsg_write } for pid=2363 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.682008][ T9] usb usb3-port1: attempt power cycle [ 119.691907][ T36] audit: type=1400 audit(1776359262.206:2357): avc: denied { write } for pid=2363 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.732319][ T36] audit: type=1400 audit(1776359262.206:2358): avc: denied { nlmsg_write } for pid=2363 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.771907][ T36] audit: type=1400 audit(1776359262.216:2359): avc: denied { write } for pid=2363 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.800755][ T347] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 119.808547][ T36] audit: type=1400 audit(1776359262.216:2360): avc: denied { read } for pid=2363 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.830239][ T36] audit: type=1400 audit(1776359262.216:2361): avc: denied { read } for pid=2363 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.851104][ T36] audit: type=1400 audit(1776359262.216:2362): avc: denied { write } for pid=2363 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.874012][ T36] audit: type=1400 audit(1776359262.256:2363): avc: denied { ioctl } for pid=2346 comm="syz.3.646" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.981952][ T347] usb 4-1: device descriptor read/64, error -71 [ 120.009893][ T2371] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 120.021982][ T9] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 120.055433][ T9] usb 3-1: device descriptor read/8, error -71 [ 120.195724][ T9] usb 3-1: device descriptor read/8, error -71 [ 120.231972][ T347] usb 4-1: device descriptor read/64, error -71 [ 120.330733][ T2376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.339814][ T2376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.348950][ T347] usb usb4-port1: attempt power cycle [ 120.358766][ T2376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.368917][ T2376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.441929][ T9] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 120.466847][ T9] usb 3-1: device descriptor read/8, error -71 [ 120.606953][ T9] usb 3-1: device descriptor read/8, error -71 [ 120.699055][ T347] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 120.722517][ T9] usb usb3-port1: unable to enumerate USB device [ 120.735041][ T347] usb 4-1: device descriptor read/8, error -71 [ 120.854457][ T2390] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 120.882196][ T347] usb 4-1: device descriptor read/8, error -71 [ 121.058974][ T2394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=2394 comm=syz.0.662 [ 121.073821][ T2394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.662'. [ 121.131939][ T347] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 121.154663][ T347] usb 4-1: device descriptor read/8, error -71 [ 121.306046][ T347] usb 4-1: device descriptor read/8, error -71 [ 121.432571][ T347] usb usb4-port1: unable to enumerate USB device [ 121.643395][ T2416] netlink: 44 bytes leftover after parsing attributes in process `syz.0.670'. [ 121.652514][ T2416] netlink: 43 bytes leftover after parsing attributes in process `syz.0.670'. [ 121.661580][ T2416] netlink: 'syz.0.670': attribute type 6 has an invalid length. [ 121.669585][ T348] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 121.675251][ T2416] netlink: 'syz.0.670': attribute type 5 has an invalid length. [ 121.685056][ T2416] netlink: 43 bytes leftover after parsing attributes in process `syz.0.670'. [ 121.821907][ T348] usb 3-1: device descriptor read/64, error -71 [ 122.031914][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 122.092008][ T348] usb 3-1: device descriptor read/64, error -71 [ 122.191945][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 122.199815][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.210300][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.222709][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.231803][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.239860][ T9] usb 1-1: Product: syz [ 122.244092][ T9] usb 1-1: Manufacturer: syz [ 122.248899][ T9] usb 1-1: SerialNumber: syz [ 122.252085][ T372] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 122.351953][ T348] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 122.411961][ T372] usb 4-1: Using ep0 maxpacket: 16 [ 122.420027][ T372] usb 4-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 122.430381][ T372] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.443919][ T372] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.453232][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.461411][ T372] usb 4-1: Product: syz [ 122.465763][ T372] usb 4-1: Manufacturer: syz [ 122.470491][ T372] usb 4-1: SerialNumber: syz [ 122.480243][ T2420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.491234][ T2420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.509454][ T348] usb 3-1: device descriptor read/64, error -71 [ 122.517757][ T9] usb 1-1: 0:2 : does not exist [ 122.532906][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 122.550456][ T9] usb 1-1: USB disconnect, device number 68 [ 122.693499][ T372] usb 4-1: 0:2 : does not exist [ 122.704173][ T372] usb 4-1: unit 9 not found! [ 122.723263][ T372] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 122.739381][ T372] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 122.749487][ T372] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 122.752077][ T348] usb 3-1: device descriptor read/64, error -71 [ 122.764133][ T372] usb 4-1: 4:0: cannot get min/max values for control 5 (id 4) [ 122.774666][ T372] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4) [ 122.785254][ T372] usb 4-1: 4:0: cannot get min/max values for control 7 (id 4) [ 122.795760][ T372] usb 4-1: 4:0: cannot get min/max values for control 9 (id 4) [ 122.811102][ T372] usb 4-1: USB disconnect, device number 65 [ 122.873994][ T348] usb usb3-port1: attempt power cycle [ 122.899995][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 122.921519][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 123.077296][ T2441] netlink: 112 bytes leftover after parsing attributes in process `syz.0.679'. [ 123.112257][ T2442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.137126][ T2442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.232013][ T348] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 123.260847][ T348] usb 3-1: device descriptor read/8, error -71 [ 123.295722][ T2445] netlink: 52 bytes leftover after parsing attributes in process `syz.3.680'. [ 123.341920][ T372] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 123.360839][ T2447] overlayfs: failed to resolve '/ÄŒ¹-wÀ‡{ÜsG†Ì}þ/~î~Ëöú±k3H ': -2 [ 123.371412][ T2447] tipc: New replicast peer: 255.255.255.255 [ 123.379012][ T2447] tipc: Enabled bearer , priority 10 [ 123.404654][ T348] usb 3-1: device descriptor read/8, error -71 [ 123.505145][ T372] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 123.513753][ T372] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 123.524190][ T372] usb 1-1: config 220 has no interface number 2 [ 123.530483][ T372] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 123.543963][ T372] usb 1-1: config 220 interface 0 has no altsetting 0 [ 123.551331][ T372] usb 1-1: config 220 interface 76 has no altsetting 0 [ 123.558360][ T372] usb 1-1: config 220 interface 1 has no altsetting 0 [ 123.569819][ T372] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 123.579011][ T372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.587093][ T372] usb 1-1: Product: syz [ 123.591319][ T372] usb 1-1: Manufacturer: syz [ 123.595994][ T372] usb 1-1: SerialNumber: syz [ 123.621985][ T311] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 123.662009][ T348] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 123.684971][ T348] usb 3-1: device descriptor read/8, error -71 [ 123.773107][ T311] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 123.796827][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 123.806162][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.819794][ T311] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 123.826835][ T311] usb 4-1: No valid video chain found. [ 123.840123][ T348] usb 3-1: device descriptor read/8, error -71 [ 123.851668][ T2441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.862650][ T2441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.884446][ T372] usb 1-1: selecting invalid altsetting 0 [ 123.893364][ T372] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 123.900006][ T372] usb 1-1: No valid video chain found. [ 123.921429][ T372] usb 1-1: USB disconnect, device number 69 [ 123.952464][ T348] usb usb3-port1: unable to enumerate USB device [ 124.028777][ T311] usb 4-1: USB disconnect, device number 66 [ 124.453776][ T2457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2457 comm=syz.0.684 [ 124.469008][ T2457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2457 comm=syz.0.684 [ 124.494746][ T2459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2459 comm=syz.0.684 [ 124.605630][ T36] kauditd_printk_skb: 641 callbacks suppressed [ 124.605651][ T36] audit: type=1400 audit(1776359267.206:3005): avc: denied { read write } for pid=290 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.667072][ T36] audit: type=1400 audit(1776359267.206:3006): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.721906][ T36] audit: type=1400 audit(1776359267.206:3007): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.762389][ T36] audit: type=1400 audit(1776359267.236:3008): avc: denied { create } for pid=2462 comm="syz.2.685" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.786582][ T36] audit: type=1400 audit(1776359267.236:3009): avc: denied { map } for pid=2462 comm="syz.2.685" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.816872][ T36] audit: type=1400 audit(1776359267.236:3010): avc: denied { read write } for pid=2462 comm="syz.2.685" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.845877][ T36] audit: type=1400 audit(1776359267.256:3011): avc: denied { read write } for pid=788 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.852358][ T311] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 124.870408][ T36] audit: type=1400 audit(1776359267.256:3012): avc: denied { read write open } for pid=788 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.932140][ T2469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.940743][ T2469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.974763][ T2469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.991898][ T36] audit: type=1400 audit(1776359267.256:3013): avc: denied { ioctl } for pid=788 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.011585][ T2469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.051959][ T311] usb 1-1: device descriptor read/64, error -71 [ 125.072180][ T36] audit: type=1400 audit(1776359267.266:3014): avc: denied { ioctl } for pid=2460 comm="syz.0.686" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.131958][ T372] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 125.202001][ T31] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 125.285335][ T372] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 125.297114][ T311] usb 1-1: device descriptor read/64, error -71 [ 125.304102][ T372] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 125.315929][ T372] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 125.327537][ T372] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 125.336812][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.348536][ T2470] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 125.361943][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 125.370462][ T31] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 125.379399][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.389795][ T31] usb 3-1: config 1 has no interface number 0 [ 125.396019][ T31] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.409309][ T31] usb 3-1: config 1 interface 105 has no altsetting 0 [ 125.424460][ T31] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 125.434171][ T31] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 125.442375][ T31] usb 3-1: Product: syz [ 125.446599][ T31] usb 3-1: Manufacturer: syz [ 125.451328][ T31] usb 3-1: SerialNumber: syz [ 125.552051][ T311] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 125.692043][ T311] usb 1-1: device descriptor read/64, error -71 [ 125.756143][ T31] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 125.774248][ T31] usb 3-1: USB disconnect, device number 69 [ 125.971994][ T311] usb 1-1: device descriptor read/64, error -71 [ 126.082608][ T311] usb usb1-port1: attempt power cycle [ 126.117813][ T372] usb 4-1: string descriptor 0 read error: -71 [ 126.132215][ T372] hub 4-1:32.0: bad descriptor, ignoring hub [ 126.145216][ T372] hub 4-1:32.0: probe with driver hub failed with error -5 [ 126.182592][ T372] usb 4-1: USB disconnect, device number 67 [ 126.422150][ T311] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 126.454745][ T311] usb 1-1: device descriptor read/8, error -71 [ 126.607325][ T311] usb 1-1: device descriptor read/8, error -71 [ 126.861964][ T311] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 126.885078][ T311] usb 1-1: device descriptor read/8, error -71 [ 127.001930][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 127.024854][ T311] usb 1-1: device descriptor read/8, error -71 [ 127.060030][ T2498] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.067344][ T2498] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.074502][ T2498] bridge_slave_0: entered allmulticast mode [ 127.080880][ T2498] bridge_slave_0: entered promiscuous mode [ 127.102619][ T2498] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.109765][ T2498] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.117039][ T2498] bridge_slave_1: entered allmulticast mode [ 127.123699][ T2498] bridge_slave_1: entered promiscuous mode [ 127.142046][ T311] usb usb1-port1: unable to enumerate USB device [ 127.151903][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 127.157139][ T317] tipc: Disabling bearer [ 127.162633][ T317] tipc: Disabling bearer [ 127.168293][ T317] tipc: Left network mode [ 127.175835][ T317] veth1_macvtap: left promiscuous mode [ 127.176874][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.181645][ T317] veth0_vlan: left promiscuous mode [ 127.192362][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.210108][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.219792][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.227885][ T9] usb 3-1: Product: syz [ 127.232342][ T9] usb 3-1: Manufacturer: syz [ 127.236988][ T9] usb 3-1: SerialNumber: syz [ 127.367651][ T2498] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.374781][ T2498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.382142][ T2498] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.389216][ T2498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.431612][ T2503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.449350][ T2503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.464277][ T2496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.482105][ T2496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.512804][ T9] usb 3-1: 0:2 : does not exist [ 127.534283][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 127.544118][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.555288][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.575230][ T9] usb 3-1: USB disconnect, device number 70 [ 127.595794][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.603006][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.645841][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.652970][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.746498][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.806596][ T2498] veth0_vlan: entered promiscuous mode [ 127.852415][ T2498] veth1_macvtap: entered promiscuous mode [ 128.221958][ T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.372013][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 128.380612][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.393681][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.404817][ T311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.419078][ T311] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.438509][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.458717][ T311] usb 5-1: config 0 descriptor?? [ 128.888916][ T311] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 128.901304][ T311] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000D/input/input15 [ 128.911953][ T346] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 128.943909][ T311] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 128.993653][ T2529] syz.2.710 uses obsolete (PF_INET,SOCK_PACKET) [ 129.071894][ T346] usb 1-1: Using ep0 maxpacket: 16 [ 129.082676][ T346] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.116226][ T346] usb 1-1: config 0 has no interface number 0 [ 129.123889][ T2508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.141993][ T346] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.161416][ T2508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.171535][ T346] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.192982][ T311] usb 5-1: USB disconnect, device number 2 [ 129.193767][ T346] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 129.214974][ T2531] fido_id[2531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 129.229751][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.250714][ T346] usb 1-1: config 0 descriptor?? [ 129.512001][ T9] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 129.620695][ T36] kauditd_printk_skb: 569 callbacks suppressed [ 129.620714][ T36] audit: type=1400 audit(1776359272.216:3584): avc: denied { create } for pid=2534 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.650966][ T36] audit: type=1400 audit(1776359272.226:3585): avc: denied { write } for pid=2534 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.670668][ T2536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.681278][ T36] audit: type=1400 audit(1776359272.226:3586): avc: denied { read } for pid=2534 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.691013][ T2536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.723991][ T9] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 129.734674][ T9] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 129.751925][ T36] audit: type=1400 audit(1776359272.226:3587): avc: denied { read } for pid=2534 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.781964][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 129.803111][ T9] usb 3-1: string descriptor 0 read error: -22 [ 129.809576][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.825877][ T36] audit: type=1400 audit(1776359272.226:3588): avc: denied { write } for pid=2534 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.846470][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.857624][ T36] audit: type=1400 audit(1776359272.246:3589): avc: denied { read write } for pid=2534 comm="syz.1.712" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.883009][ T2533] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 129.890731][ T2533] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 129.898046][ T36] audit: type=1400 audit(1776359272.246:3590): avc: denied { read write open } for pid=2534 comm="syz.1.712" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.923246][ T346] uclogic 0003:28BD:0071.000E: failed retrieving string descriptor #100: -71 [ 129.932628][ T346] uclogic 0003:28BD:0071.000E: failed retrieving pen parameters: -71 [ 129.943090][ T346] uclogic 0003:28BD:0071.000E: pen probing failed: -71 [ 129.950434][ T36] audit: type=1400 audit(1776359272.246:3591): avc: denied { ioctl } for pid=2534 comm="syz.1.712" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.981504][ T346] uclogic 0003:28BD:0071.000E: failed probing parameters: -71 [ 129.989301][ T346] uclogic 0003:28BD:0071.000E: probe with driver uclogic failed with error -71 [ 130.000037][ T346] usb 1-1: USB disconnect, device number 74 [ 130.012721][ T2541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.023638][ T36] audit: type=1400 audit(1776359272.246:3592): avc: denied { ioctl } for pid=2534 comm="syz.1.712" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.050148][ T2541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.066635][ T36] audit: type=1400 audit(1776359272.286:3593): avc: denied { ioctl } for pid=2522 comm="syz.0.708" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.092121][ T311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.097839][ T2541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.122219][ T2541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.144380][ T348] usb 3-1: USB disconnect, device number 71 [ 130.281990][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 130.289988][ T311] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 130.298276][ T311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.308640][ T311] usb 5-1: config 1 has no interface number 0 [ 130.314914][ T311] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.328618][ T311] usb 5-1: config 1 interface 105 has no altsetting 0 [ 130.339024][ T311] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 130.348551][ T311] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 130.356772][ T311] usb 5-1: Product: syz [ 130.361141][ T311] usb 5-1: Manufacturer: syz [ 130.365860][ T311] usb 5-1: SerialNumber: syz [ 130.499893][ T2545] syzkaller1: entered promiscuous mode [ 130.505830][ T2545] syzkaller1: entered allmulticast mode [ 130.537923][ T2545] veth0_to_batadv: mtu greater than device maximum [ 130.545566][ T2545] netlink: 4084 bytes leftover after parsing attributes in process `syz.0.715'. [ 130.680449][ T311] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 130.717927][ T311] usb 5-1: USB disconnect, device number 3 [ 130.879762][ T2555] fuse: Unknown parameter '0000000000000000000000400000000000000000004' [ 130.958307][ T2558] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 131.075086][ T2562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.102923][ T2562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.451908][ T311] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 131.521911][ T348] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.551658][ T2579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.563823][ T2579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.622175][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 131.630121][ T311] usb 1-1: config 5 has an invalid interface number: 216 but max is 1 [ 131.638427][ T311] usb 1-1: config 5 has an invalid interface number: 139 but max is 1 [ 131.647262][ T311] usb 1-1: config 5 has no interface number 0 [ 131.653472][ T311] usb 1-1: config 5 has no interface number 1 [ 131.659597][ T311] usb 1-1: config 5 interface 216 altsetting 15 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 131.671138][ T311] usb 1-1: config 5 interface 216 altsetting 15 bulk endpoint 0x4 has invalid maxpacket 8 [ 131.681163][ T311] usb 1-1: config 5 interface 216 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 131.692069][ T311] usb 1-1: config 5 interface 216 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 131.704719][ T311] usb 1-1: config 5 interface 216 altsetting 15 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 131.710752][ T348] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.715792][ T311] usb 1-1: config 5 interface 216 has no altsetting 0 [ 131.732558][ T348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.733843][ T311] usb 1-1: config 5 interface 139 has no altsetting 0 [ 131.741108][ T348] usb 5-1: Product: syz [ 131.754501][ T348] usb 5-1: Manufacturer: syz [ 131.756163][ T311] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice=31.b8 [ 131.759215][ T348] usb 5-1: SerialNumber: syz [ 131.771232][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.781609][ T311] usb 1-1: Product: syz [ 131.785985][ T311] usb 1-1: Manufacturer: syz [ 131.792906][ T311] usb 1-1: SerialNumber: syz [ 131.805770][ T2568] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.185839][ T2584] syzkaller1: entered promiscuous mode [ 132.191390][ T2584] syzkaller1: entered allmulticast mode [ 132.205529][ T2584] tipc: Enabling of bearer rejected, failed to enable media [ 132.582026][ T311] usb 1-1: USB disconnect, device number 75 [ 132.807949][ T2591] tipc: Started in network mode [ 132.813167][ T2591] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 132.823682][ T2591] tipc: Enabling of bearer rejected, failed to enable media [ 133.071956][ T311] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 133.175755][ T348] cdc_ncm 5-1:1.0: failed to get mac address [ 133.189808][ T348] cdc_ncm 5-1:1.0: bind() failure [ 133.197444][ T348] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 133.206542][ T348] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 133.222736][ T348] usb 5-1: USB disconnect, device number 4 [ 133.246904][ T311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.254143][ T311] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 133.264537][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.275605][ T311] usb 1-1: config 0 descriptor?? [ 133.331971][ T346] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 133.486202][ T346] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 133.501540][ T346] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.510759][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.518882][ T346] usb 3-1: SerialNumber: syz [ 133.695626][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.711398][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.731622][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.738518][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.751926][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.769062][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.780266][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.797572][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.804858][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.811960][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.827449][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.841975][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.859203][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.869484][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.882770][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.898329][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.906087][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.913923][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.920865][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.928961][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.937272][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.945528][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.955352][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.964308][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.971393][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.987244][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 133.995090][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 134.002662][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 134.009497][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 134.016939][ T311] kye 0003:0458:0153.000F: unknown main item tag 0x0 [ 134.033941][ T311] kye 0003:0458:0153.000F: hidraw0: USB HID v0.04 Device [HID 0458:0153] on usb-dummy_hcd.0-1/input0 [ 134.115692][ T311] usb 1-1: USB disconnect, device number 76 [ 134.174390][ T2601] fido_id[2601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 134.210355][ T346] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 134.351941][ T348] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 134.478166][ T311] usb 3-1: USB disconnect, device number 72 [ 134.493338][ T2606] bridge0: port 3(erspan0) entered blocking state [ 134.502429][ T311] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 134.515401][ T2606] bridge0: port 3(erspan0) entered disabled state [ 134.523101][ T2606] erspan0: entered allmulticast mode [ 134.532812][ T348] usb 5-1: config 0 has an invalid descriptor of length 87, skipping remainder of the config [ 134.540268][ T2606] erspan0: entered promiscuous mode [ 134.559639][ T348] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 134.606657][ T348] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 134.625293][ T36] kauditd_printk_skb: 595 callbacks suppressed [ 134.625311][ T36] audit: type=1400 audit(1776359277.226:4189): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.653738][ T348] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 134.681905][ T348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.700480][ T348] usb 5-1: config 0 descriptor?? [ 134.729180][ T348] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 134.732033][ T36] audit: type=1400 audit(1776359277.256:4190): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.793999][ T36] audit: type=1400 audit(1776359277.276:4191): avc: denied { read write } for pid=293 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.840255][ T36] audit: type=1400 audit(1776359277.276:4192): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.886382][ T36] audit: type=1400 audit(1776359277.296:4193): avc: denied { search } for pid=2609 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.909186][ T36] audit: type=1400 audit(1776359277.296:4194): avc: denied { read } for pid=2609 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.971912][ T36] audit: type=1400 audit(1776359277.296:4195): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.051901][ T36] audit: type=1400 audit(1776359277.296:4196): avc: denied { read open } for pid=2609 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.105646][ T2622] netlink: 388 bytes leftover after parsing attributes in process `syz.0.738'. [ 135.140826][ T36] audit: type=1400 audit(1776359277.296:4197): avc: denied { getattr } for pid=2609 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.177493][ T2626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.186296][ T2626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.198436][ T36] audit: type=1400 audit(1776359277.326:4198): avc: denied { ioctl } for pid=2599 comm="syz.4.734" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.621978][ T348] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 135.761937][ T348] usb 3-1: device descriptor read/64, error -71 [ 135.985371][ T2655] FAULT_INJECTION: forcing a failure. [ 135.985371][ T2655] name failslab, interval 1, probability 0, space 0, times 1 [ 136.011923][ T348] usb 3-1: device descriptor read/64, error -71 [ 136.018325][ T2655] CPU: 0 UID: 0 PID: 2655 Comm: syz.0.743 Not tainted syzkaller #0 ea42a5a06c94a64aa94aef8df7e3609365ccddb0 [ 136.018361][ T2655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 136.018378][ T2655] Call Trace: [ 136.018385][ T2655] [ 136.018395][ T2655] __dump_stack+0x21/0x30 [ 136.018431][ T2655] dump_stack_lvl+0x140/0x1c0 [ 136.018460][ T2655] ? __cfi_dump_stack_lvl+0x10/0x10 [ 136.018490][ T2655] ? __cfi_avc_has_perm+0x10/0x10 [ 136.018522][ T2655] ? avc_perm_nonode+0x118/0x1d0 [ 136.018552][ T2655] dump_stack+0x19/0x20 [ 136.018580][ T2655] should_fail_ex+0x3d7/0x530 [ 136.018610][ T2655] should_failslab+0xac/0x100 [ 136.018632][ T2655] __kmalloc_cache_noprof+0x41/0x470 [ 136.018663][ T2655] ? vhost_task_create+0x12c/0x400 [ 136.018686][ T2655] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 136.018709][ T2655] vhost_task_create+0x12c/0x400 [ 136.018729][ T2655] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 136.018754][ T2655] ? __cfi_vhost_task_create+0x10/0x10 [ 136.018775][ T2655] ? __cfi_vhost_task_fn+0x10/0x10 [ 136.018796][ T2655] ? __kasan_check_write+0x18/0x20 [ 136.018826][ T2655] ? mutex_lock+0x97/0x1d0 [ 136.018851][ T2655] ? __cfi_mutex_lock+0x10/0x10 [ 136.018875][ T2655] ? kernel_text_address+0xa9/0xe0 [ 136.018902][ T2655] kvm_mmu_post_init_vm+0x161/0x300 [ 136.018931][ T2655] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 136.018959][ T2655] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 136.018985][ T2655] ? kstrtoull+0x13b/0x1e0 [ 136.019012][ T2655] ? kstrtouint+0x78/0xf0 [ 136.019036][ T2655] ? ioctl_has_perm+0x1bc/0x500 [ 136.019064][ T2655] ? __asan_memcpy+0x5a/0x80 [ 136.019093][ T2655] ? ioctl_has_perm+0x408/0x500 [ 136.019120][ T2655] ? has_cap_mac_admin+0xd0/0xd0 [ 136.019147][ T2655] ? __kasan_check_write+0x18/0x20 [ 136.019177][ T2655] ? mutex_lock_killable+0x97/0x1d0 [ 136.019204][ T2655] ? __cfi_mutex_lock_killable+0x10/0x10 [ 136.019231][ T2655] ? proc_fail_nth_write+0x184/0x220 [ 136.019260][ T2655] kvm_vcpu_ioctl+0xa48/0x1000 [ 136.019294][ T2655] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 136.019334][ T2655] ? __cfi_vfs_write+0x10/0x10 [ 136.019366][ T2655] ? __kasan_check_write+0x18/0x20 [ 136.019395][ T2655] ? mutex_unlock+0x90/0x240 [ 136.019419][ T2655] ? __cfi_mutex_unlock+0x10/0x10 [ 136.019443][ T2655] ? __fget_files+0x2c5/0x340 [ 136.019467][ T2655] ? __fget_files+0x2c5/0x340 [ 136.019489][ T2655] ? bpf_lsm_file_ioctl+0xd/0x20 [ 136.019513][ T2655] ? security_file_ioctl+0x3e/0x110 [ 136.019540][ T2655] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 136.019573][ T2655] __se_sys_ioctl+0x132/0x1b0 [ 136.019596][ T2655] __x64_sys_ioctl+0x7f/0xa0 [ 136.019617][ T2655] x64_sys_call+0x1878/0x2ee0 [ 136.019650][ T2655] do_syscall_64+0x57/0xf0 [ 136.019682][ T2655] ? clear_bhb_loop+0x50/0xa0 [ 136.019704][ T2655] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 136.019739][ T2655] RIP: 0033:0x7fada319c819 [ 136.019768][ T2655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.019790][ T2655] RSP: 002b:00007fada3f83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.019816][ T2655] RAX: ffffffffffffffda RBX: 00007fada3415fa0 RCX: 00007fada319c819 [ 136.019856][ T2655] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000003 [ 136.019872][ T2655] RBP: 00007fada3f83090 R08: 0000000000000000 R09: 0000000000000000 [ 136.019887][ T2655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.019902][ T2655] R13: 00007fada3416038 R14: 00007fada3415fa0 R15: 00007ffcfd3965d8 [ 136.019923][ T2655] [ 136.291174][ T2660] devtmpfs: Unknown parameter '/dev/uinput' [ 136.407797][ T2660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.421122][ T2660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.441916][ T348] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 136.484981][ T2663] netlink: 'syz.0.746': attribute type 6 has an invalid length. [ 136.581914][ T348] usb 3-1: device descriptor read/64, error -71 [ 136.822045][ T348] usb 3-1: device descriptor read/64, error -71 [ 136.932582][ T348] usb usb3-port1: attempt power cycle [ 136.992058][ T31] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 137.118709][ T2676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.127440][ T2676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.142021][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 137.156577][ T31] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 137.165416][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.177084][ T31] usb 1-1: config 1 has no interface number 0 [ 137.183895][ T31] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.197874][ T31] usb 1-1: config 1 interface 105 has no altsetting 0 [ 137.208424][ T31] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 137.217686][ T31] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 137.225882][ T31] usb 1-1: Product: syz [ 137.227510][ T67] usb 5-1: USB disconnect, device number 5 [ 137.230376][ T31] usb 1-1: Manufacturer: syz [ 137.230397][ T31] usb 1-1: SerialNumber: syz [ 137.281928][ T348] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 137.325224][ T348] usb 3-1: device descriptor read/8, error -71 [ 137.464859][ T348] usb 3-1: device descriptor read/8, error -71 [ 137.484753][ T2680] FAULT_INJECTION: forcing a failure. [ 137.484753][ T2680] name failslab, interval 1, probability 0, space 0, times 0 [ 137.497597][ T2680] CPU: 0 UID: 0 PID: 2680 Comm: syz.4.754 Not tainted syzkaller #0 ea42a5a06c94a64aa94aef8df7e3609365ccddb0 [ 137.497632][ T2680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.497648][ T2680] Call Trace: [ 137.497656][ T2680] [ 137.497665][ T2680] __dump_stack+0x21/0x30 [ 137.497721][ T2680] dump_stack_lvl+0x140/0x1c0 [ 137.497751][ T2680] ? __cfi_dump_stack_lvl+0x10/0x10 [ 137.497784][ T2680] dump_stack+0x19/0x20 [ 137.497812][ T2680] should_fail_ex+0x3d7/0x530 [ 137.497844][ T2680] should_failslab+0xac/0x100 [ 137.497866][ T2680] kmem_cache_alloc_node_noprof+0x45/0x420 [ 137.497900][ T2680] ? dup_task_struct+0xc1/0xd80 [ 137.497926][ T2680] ? kasan_save_alloc_info+0x40/0x50 [ 137.497954][ T2680] ? __kasan_kmalloc+0x96/0xb0 [ 137.497976][ T2680] ? __kmalloc_cache_noprof+0x23c/0x470 [ 137.498009][ T2680] dup_task_struct+0xc1/0xd80 [ 137.498035][ T2680] ? __kasan_check_write+0x18/0x20 [ 137.498066][ T2680] ? _raw_spin_lock_irq+0x93/0x120 [ 137.498101][ T2680] ? copy_process+0x32a0/0x32a0 [ 137.498133][ T2680] ? __kasan_check_write+0x18/0x20 [ 137.498164][ T2680] copy_process+0x55a/0x32a0 [ 137.498194][ T2680] ? __cfi_copy_process+0x10/0x10 [ 137.498219][ T2680] ? __kmalloc_cache_noprof+0x23c/0x470 [ 137.498253][ T2680] ? __kasan_check_write+0x18/0x20 [ 137.498284][ T2680] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 137.498309][ T2680] vhost_task_create+0x1f7/0x400 [ 137.498330][ T2680] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 137.498357][ T2680] ? __cfi_vhost_task_create+0x10/0x10 [ 137.498381][ T2680] ? __cfi_vhost_task_fn+0x10/0x10 [ 137.498402][ T2680] ? __kasan_check_write+0x18/0x20 [ 137.498433][ T2680] ? mutex_lock+0x97/0x1d0 [ 137.498458][ T2680] ? __cfi_mutex_lock+0x10/0x10 [ 137.498482][ T2680] ? kernel_text_address+0xa9/0xe0 [ 137.498512][ T2680] kvm_mmu_post_init_vm+0x161/0x300 [ 137.498544][ T2680] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 137.498575][ T2680] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 137.498601][ T2680] ? kstrtoull+0x13b/0x1e0 [ 137.498625][ T2680] ? kstrtouint+0x78/0xf0 [ 137.498651][ T2680] ? ioctl_has_perm+0x1bc/0x500 [ 137.498676][ T2680] ? __asan_memcpy+0x5a/0x80 [ 137.498702][ T2680] ? ioctl_has_perm+0x408/0x500 [ 137.498727][ T2680] ? has_cap_mac_admin+0xd0/0xd0 [ 137.498751][ T2680] ? __kasan_check_write+0x18/0x20 [ 137.498778][ T2680] ? mutex_lock_killable+0x97/0x1d0 [ 137.498802][ T2680] ? __cfi_mutex_lock_killable+0x10/0x10 [ 137.498824][ T2680] ? proc_fail_nth_write+0x184/0x220 [ 137.498849][ T2680] kvm_vcpu_ioctl+0xa48/0x1000 [ 137.498879][ T2680] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 137.498909][ T2680] ? __cfi_vfs_write+0x10/0x10 [ 137.498938][ T2680] ? __kasan_check_write+0x18/0x20 [ 137.498963][ T2680] ? mutex_unlock+0x90/0x240 [ 137.498984][ T2680] ? __cfi_mutex_unlock+0x10/0x10 [ 137.499005][ T2680] ? __fget_files+0x2c5/0x340 [ 137.499025][ T2680] ? __fget_files+0x2c5/0x340 [ 137.499044][ T2680] ? bpf_lsm_file_ioctl+0xd/0x20 [ 137.499066][ T2680] ? security_file_ioctl+0x3e/0x110 [ 137.499090][ T2680] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 137.499123][ T2680] __se_sys_ioctl+0x132/0x1b0 [ 137.499142][ T2680] __x64_sys_ioctl+0x7f/0xa0 [ 137.499160][ T2680] x64_sys_call+0x1878/0x2ee0 [ 137.499191][ T2680] do_syscall_64+0x57/0xf0 [ 137.499220][ T2680] ? clear_bhb_loop+0x50/0xa0 [ 137.499239][ T2680] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.499270][ T2680] RIP: 0033:0x7f75cb19c819 [ 137.499286][ T2680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.499304][ T2680] RSP: 002b:00007f75cbfa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.499329][ T2680] RAX: ffffffffffffffda RBX: 00007f75cb415fa0 RCX: 00007f75cb19c819 [ 137.499344][ T2680] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000003 [ 137.499357][ T2680] RBP: 00007f75cbfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 137.499370][ T2680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.499382][ T2680] R13: 00007f75cb416038 R14: 00007f75cb415fa0 R15: 00007ffcdab48648 [ 137.499399][ T2680] [ 137.945509][ T31] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 137.959324][ T31] usb 1-1: USB disconnect, device number 77 [ 138.075222][ T348] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 138.134336][ T348] usb 3-1: device descriptor read/8, error -71 [ 138.147781][ T2687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.166341][ T2687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.178384][ T2687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.187343][ T2687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.264533][ T348] usb 3-1: device descriptor read/8, error -71 [ 138.372097][ T348] usb usb3-port1: unable to enumerate USB device [ 138.475091][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.654902][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.671817][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.682873][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 138.702776][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.724079][ T31] usb 5-1: config 0 descriptor?? [ 138.806383][ T2707] FAULT_INJECTION: forcing a failure. [ 138.806383][ T2707] name failslab, interval 1, probability 0, space 0, times 0 [ 138.819333][ T2707] CPU: 0 UID: 0 PID: 2707 Comm: syz.1.763 Not tainted syzkaller #0 ea42a5a06c94a64aa94aef8df7e3609365ccddb0 [ 138.819485][ T2707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 138.819509][ T2707] Call Trace: [ 138.819520][ T2707] [ 138.819530][ T2707] __dump_stack+0x21/0x30 [ 138.819600][ T2707] dump_stack_lvl+0x140/0x1c0 [ 138.819632][ T2707] ? __cfi_dump_stack_lvl+0x10/0x10 [ 138.819662][ T2707] dump_stack+0x19/0x20 [ 138.819693][ T2707] should_fail_ex+0x3d7/0x530 [ 138.819715][ T2707] should_failslab+0xac/0x100 [ 138.819731][ T2707] __kmalloc_cache_node_noprof+0x46/0x430 [ 138.819838][ T2707] ? kasan_save_track+0x4f/0x80 [ 138.819863][ T2707] ? __get_vm_area_node+0x14d/0x3d0 [ 138.819882][ T2707] ? __kasan_slab_alloc+0x73/0x90 [ 138.819916][ T2707] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 138.819953][ T2707] ? dup_task_struct+0xc1/0xd80 [ 138.819979][ T2707] __get_vm_area_node+0x14d/0x3d0 [ 138.820008][ T2707] __vmalloc_node_range_noprof+0x30e/0x1480 [ 138.820030][ T2707] ? copy_process+0x55a/0x32a0 [ 138.820069][ T2707] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 138.820100][ T2707] ? kasan_save_alloc_info+0x40/0x50 [ 138.820128][ T2707] ? __kasan_slab_alloc+0x73/0x90 [ 138.820152][ T2707] ? arch_dup_task_struct+0x5b/0xe0 [ 138.820174][ T2707] ? __asan_memcpy+0x5a/0x80 [ 138.820197][ T2707] dup_task_struct+0x5d6/0xd80 [ 138.820238][ T2707] ? copy_process+0x55a/0x32a0 [ 138.820264][ T2707] ? _raw_spin_lock_irq+0x93/0x120 [ 138.820302][ T2707] ? copy_process+0x32a0/0x32a0 [ 138.820320][ T2707] ? __kasan_check_write+0x18/0x20 [ 138.820342][ T2707] copy_process+0x55a/0x32a0 [ 138.820385][ T2707] ? __cfi_copy_process+0x10/0x10 [ 138.820410][ T2707] ? __kmalloc_cache_noprof+0x23c/0x470 [ 138.820441][ T2707] ? __kasan_check_write+0x18/0x20 [ 138.820471][ T2707] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 138.820489][ T2707] vhost_task_create+0x1f7/0x400 [ 138.820504][ T2707] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 138.820545][ T2707] ? __cfi_vhost_task_create+0x10/0x10 [ 138.820567][ T2707] ? __cfi_vhost_task_fn+0x10/0x10 [ 138.820589][ T2707] ? __kasan_check_write+0x18/0x20 [ 138.820618][ T2707] ? mutex_lock+0x97/0x1d0 [ 138.820636][ T2707] ? __cfi_mutex_lock+0x10/0x10 [ 138.820654][ T2707] ? kernel_text_address+0xa9/0xe0 [ 138.820701][ T2707] kvm_mmu_post_init_vm+0x161/0x300 [ 138.820732][ T2707] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 138.820765][ T2707] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 138.820792][ T2707] ? kstrtoull+0x13b/0x1e0 [ 138.820825][ T2707] ? kstrtouint+0x78/0xf0 [ 138.820853][ T2707] ? ioctl_has_perm+0x1bc/0x500 [ 138.820880][ T2707] ? __asan_memcpy+0x5a/0x80 [ 138.820913][ T2707] ? ioctl_has_perm+0x408/0x500 [ 138.820934][ T2707] ? has_cap_mac_admin+0xd0/0xd0 [ 138.820955][ T2707] ? __kasan_check_write+0x18/0x20 [ 138.820997][ T2707] ? mutex_lock_killable+0x97/0x1d0 [ 138.821024][ T2707] ? __cfi_mutex_lock_killable+0x10/0x10 [ 138.821049][ T2707] ? proc_fail_nth_write+0x184/0x220 [ 138.821077][ T2707] kvm_vcpu_ioctl+0xa48/0x1000 [ 138.821103][ T2707] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 138.821148][ T2707] ? __cfi_vfs_write+0x10/0x10 [ 138.821179][ T2707] ? __kasan_check_write+0x18/0x20 [ 138.821214][ T2707] ? mutex_unlock+0x90/0x240 [ 138.821232][ T2707] ? __cfi_mutex_unlock+0x10/0x10 [ 138.821250][ T2707] ? __fget_files+0x2c5/0x340 [ 138.821281][ T2707] ? __fget_files+0x2c5/0x340 [ 138.821303][ T2707] ? bpf_lsm_file_ioctl+0xd/0x20 [ 138.821327][ T2707] ? security_file_ioctl+0x3e/0x110 [ 138.821355][ T2707] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 138.821386][ T2707] __se_sys_ioctl+0x132/0x1b0 [ 138.821402][ T2707] __x64_sys_ioctl+0x7f/0xa0 [ 138.821417][ T2707] x64_sys_call+0x1878/0x2ee0 [ 138.821465][ T2707] do_syscall_64+0x57/0xf0 [ 138.821497][ T2707] ? clear_bhb_loop+0x50/0xa0 [ 138.821523][ T2707] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 138.821550][ T2707] RIP: 0033:0x7f531939c819 [ 138.821564][ T2707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.821600][ T2707] RSP: 002b:00007f531a271028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.821624][ T2707] RAX: ffffffffffffffda RBX: 00007f5319615fa0 RCX: 00007f531939c819 [ 138.821642][ T2707] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000003 [ 138.821656][ T2707] RBP: 00007f531a271090 R08: 0000000000000000 R09: 0000000000000000 [ 138.821674][ T2707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.821684][ T2707] R13: 00007f5319616038 R14: 00007f5319615fa0 R15: 00007ffe24a49998 [ 138.821698][ T2707] [ 138.821708][ T2707] syz.1.763: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 139.183071][ T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 139.235966][ T2707] ,cpuset= [ 139.242871][ T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 139.250965][ T67] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 139.259078][ T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 139.272123][ T2707] syz1 [ 139.275796][ T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 139.284521][ T2707] ,mems_allowed=0 [ 139.291271][ T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 139.299656][ T2707] [ 139.301142][ T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 139.309804][ T2707] CPU: 0 UID: 0 PID: 2707 Comm: syz.1.763 Not tainted syzkaller #0 ea42a5a06c94a64aa94aef8df7e3609365ccddb0 [ 139.309900][ T2707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 139.309950][ T2707] Call Trace: [ 139.309987][ T2707] [ 139.310021][ T2707] __dump_stack+0x21/0x30 [ 139.310119][ T2707] dump_stack_lvl+0x140/0x1c0 [ 139.310197][ T2707] ? __cfi_dump_stack_lvl+0x10/0x10 [ 139.310282][ T2707] dump_stack+0x19/0x20 [ 139.310358][ T2707] warn_alloc+0x1e7/0x2c0 [ 139.310418][ T2707] ? __kasan_kmalloc+0x28/0xb0 [ 139.310481][ T2707] ? __cfi_warn_alloc+0x10/0x10 [ 139.310546][ T2707] ? kasan_save_track+0x4f/0x80 [ 139.310635][ T2707] ? dup_task_struct+0xc1/0xd80 [ 139.310710][ T2707] ? __get_vm_area_node+0x3bd/0x3d0 [ 139.310780][ T2707] __vmalloc_node_range_noprof+0x333/0x1480 [ 139.310869][ T2707] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 139.310949][ T2707] ? kasan_save_alloc_info+0x40/0x50 [ 139.311030][ T2707] ? __kasan_slab_alloc+0x73/0x90 [ 139.311085][ T2707] ? arch_dup_task_struct+0x5b/0xe0 [ 139.311171][ T2707] ? __asan_memcpy+0x5a/0x80 [ 139.311235][ T2707] dup_task_struct+0x5d6/0xd80 [ 139.311318][ T2707] ? copy_process+0x55a/0x32a0 [ 139.311405][ T2707] ? _raw_spin_lock_irq+0x93/0x120 [ 139.311508][ T2707] ? copy_process+0x32a0/0x32a0 [ 139.311574][ T2707] ? __kasan_check_write+0x18/0x20 [ 139.311658][ T2707] copy_process+0x55a/0x32a0 [ 139.311743][ T2707] ? __cfi_copy_process+0x10/0x10 [ 139.311811][ T2707] ? __kmalloc_cache_noprof+0x23c/0x470 [ 139.311909][ T2707] ? __kasan_check_write+0x18/0x20 [ 139.311985][ T2707] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 139.312055][ T2707] vhost_task_create+0x1f7/0x400 [ 139.312111][ T2707] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 139.312178][ T2707] ? __cfi_vhost_task_create+0x10/0x10 [ 139.312241][ T2707] ? __cfi_vhost_task_fn+0x10/0x10 [ 139.312296][ T2707] ? __kasan_check_write+0x18/0x20 [ 139.312373][ T2707] ? mutex_lock+0x97/0x1d0 [ 139.312446][ T2707] ? __cfi_mutex_lock+0x10/0x10 [ 139.312511][ T2707] ? kernel_text_address+0xa9/0xe0 [ 139.312588][ T2707] kvm_mmu_post_init_vm+0x161/0x300 [ 139.312673][ T2707] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 139.312857][ T2707] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 139.312953][ T2707] ? kstrtoull+0x13b/0x1e0 [ 139.313034][ T2707] ? kstrtouint+0x78/0xf0 [ 139.313095][ T2707] ? ioctl_has_perm+0x1bc/0x500 [ 139.313173][ T2707] ? __asan_memcpy+0x5a/0x80 [ 139.313251][ T2707] ? ioctl_has_perm+0x408/0x500 [ 139.313327][ T2707] ? has_cap_mac_admin+0xd0/0xd0 [ 139.313404][ T2707] ? __kasan_check_write+0x18/0x20 [ 139.313482][ T2707] ? mutex_lock_killable+0x97/0x1d0 [ 139.313549][ T2707] ? __cfi_mutex_lock_killable+0x10/0x10 [ 139.313624][ T2707] ? proc_fail_nth_write+0x184/0x220 [ 139.313704][ T2707] kvm_vcpu_ioctl+0xa48/0x1000 [ 139.313802][ T2707] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 139.313891][ T2707] ? __cfi_vfs_write+0x10/0x10 [ 139.313970][ T2707] ? __kasan_check_write+0x18/0x20 [ 139.314042][ T2707] ? mutex_unlock+0x90/0x240 [ 139.314116][ T2707] ? __cfi_mutex_unlock+0x10/0x10 [ 139.314183][ T2707] ? __fget_files+0x2c5/0x340 [ 139.314255][ T2707] ? __fget_files+0x2c5/0x340 [ 139.314311][ T2707] ? bpf_lsm_file_ioctl+0xd/0x20 [ 139.314385][ T2707] ? security_file_ioctl+0x3e/0x110 [ 139.314460][ T2707] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 139.314552][ T2707] __se_sys_ioctl+0x132/0x1b0 [ 139.314607][ T2707] __x64_sys_ioctl+0x7f/0xa0 [ 139.314671][ T2707] x64_sys_call+0x1878/0x2ee0 [ 139.314755][ T2707] do_syscall_64+0x57/0xf0 [ 139.314791][ T2707] ? clear_bhb_loop+0x50/0xa0 [ 139.314815][ T2707] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 139.314925][ T2707] RIP: 0033:0x7f531939c819 [ 139.315003][ T2707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.315052][ T2707] RSP: 002b:00007f531a271028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.315122][ T2707] RAX: ffffffffffffffda RBX: 00007f5319615fa0 RCX: 00007f531939c819 [ 139.315176][ T2707] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000003 [ 139.315211][ T2707] RBP: 00007f531a271090 R08: 0000000000000000 R09: 0000000000000000 [ 139.315254][ T2707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.315289][ T2707] R13: 00007f5319616038 R14: 00007f5319615fa0 R15: 00007ffe24a49998 [ 139.315343][ T2707] [ 139.320180][ T2707] Mem-Info: [ 139.322983][ T31] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 139.330398][ T2707] active_anon:24118 inactive_anon:2 isolated_anon:0 [ 139.330398][ T2707] active_file:22134 inactive_file:2354 isolated_file:0 [ 139.330398][ T2707] unevictable:0 dirty:44 writeback:0 [ 139.330398][ T2707] slab_reclaimable:5177 slab_unreclaimable:71605 [ 139.330398][ T2707] mapped:24948 shmem:16584 pagetables:974 [ 139.330398][ T2707] sec_pagetables:0 bounce:0 [ 139.330398][ T2707] kernel_misc_reclaimable:0 [ 139.330398][ T2707] free:1502986 free_pcp:1905 free_cma:0 [ 139.346524][ T31] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 139.372841][ T2707] Node 0 active_anon:96472kB inactive_anon:8kB active_file:88536kB inactive_file:9416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99792kB dirty:176kB writeback:0kB shmem:66336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4832kB pagetables:3896kB sec_pagetables:0kB all_unreclaimable? no [ 139.411452][ T31] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device [ 139.452035][ T67] usb 3-1: Using ep0 maxpacket: 8 [ 139.520587][ T31] pyra 0003:1E7D:2CF6.0010: couldn't install mouse [ 139.558641][ T2707] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963356kB mlocked:0kB bounce:0kB free_pcp:5192kB local_pcp:5192kB free_cma:0kB [ 139.579210][ T31] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -71 [ 139.592069][ T2707] lowmem_reserve[]: [ 139.624449][ T31] usb 5-1: USB disconnect, device number 6 [ 139.658175][ T2707] 0 [ 139.782201][ T36] kauditd_printk_skb: 748 callbacks suppressed [ 139.782271][ T36] audit: type=1400 audit(1776359282.346:4908): avc: denied { ioctl } for pid=2704 comm="syz.2.762" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.784101][ T2707] 3921 [ 139.788487][ T36] audit: type=1400 audit(1776359282.356:4909): avc: denied { ioctl } for pid=2704 comm="syz.2.762" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.793744][ T67] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.889286][ T2708] fido_id[2708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 139.890210][ T2707] 3921 [ 139.908962][ T36] audit: type=1400 audit(1776359282.386:4910): avc: denied { ioctl } for pid=2704 comm="syz.2.762" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.946960][ T2707] [ 139.968041][ T36] audit: type=1400 audit(1776359282.436:4911): avc: denied { ioctl } for pid=2704 comm="syz.2.762" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.022090][ T2707] Normal free:3053736kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96672kB inactive_anon:8kB active_file:88536kB inactive_file:9416kB unevictable:0kB writepending:176kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:3072kB local_pcp:2944kB free_cma:0kB [ 140.041012][ T36] audit: type=1400 audit(1776359282.636:4912): avc: denied { ioctl } for pid=2704 comm="syz.2.762" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.085223][ T67] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 140.107024][ T36] audit: type=1400 audit(1776359282.686:4913): avc: denied { ioctl } for pid=2704 comm="syz.2.762" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.141576][ T2707] lowmem_reserve[]: [ 140.147967][ T36] audit: type=1400 audit(1776359282.686:4914): avc: denied { ioctl } for pid=2704 comm="syz.2.762" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.154539][ T2707] 0 [ 140.183224][ T36] audit: type=1400 audit(1776359282.726:4915): avc: denied { ioctl } for pid=2704 comm="syz.2.762" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.236550][ T67] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.246867][ T67] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 140.256069][ T67] usb 3-1: config 1 has no interface number 1 [ 140.262299][ T67] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 140.275420][ T67] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.288889][ T67] usb 3-1: config 1 interface 2 has no altsetting 0 [ 140.296463][ T2707] 0 0 [ 140.299845][ T2707] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB [ 140.302737][ T36] audit: type=1400 audit(1776359282.896:4916): avc: denied { ioctl } for pid=2704 comm="syz.2.762" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.342190][ T67] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.346240][ T36] audit: type=1400 audit(1776359282.896:4917): avc: denied { ioctl } for pid=2704 comm="syz.2.762" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.351459][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.351490][ T67] usb 3-1: Product: syz [ 140.392588][ T2707] (M) = 2958164kB [ 140.396395][ T2707] Normal: 127*4kB (UME) 417*8kB (UME) 479*16kB (UME) 495*32kB (UME) 544*64kB (UME) 66*128kB (UME) 55*256kB (UME) 34*512kB (UME) 20*1024kB (UME) 15*2048kB (UME) 708*4096kB (UM) = 3053268kB [ 140.415254][ T67] usb 3-1: Manufacturer: syz [ 140.419949][ T67] usb 3-1: SerialNumber: syz [ 140.425244][ T2707] 41069 total pagecache pages [ 140.430022][ T2707] 3 pages in swap cache [ 140.434498][ T2707] Free swap = 124472kB [ 140.438681][ T2707] Total swap = 124996kB [ 140.443397][ T2707] 2097051 pages RAM [ 140.449975][ T2707] 0 pages HighMem/MovableOnly [ 140.455021][ T2707] 352246 pages reserved [ 140.459242][ T2707] 0 pages cma reserved [ 140.466585][ T2707] Memory allocations: [ 140.470936][ T2707] 0 B 0 init/main.c:1477 func:do_initcalls [ 140.478395][ T2707] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 140.486669][ T2707] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 140.494445][ T2707] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 140.521901][ T2707] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 140.533899][ T2707] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 140.544323][ T2707] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 140.553129][ T2707] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 140.561237][ T2707] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 140.569445][ T2707] 0 B 0 init/initramfs.c:101 func:find_link [ 140.670692][ T67] usb 3-1: USB disconnect, device number 77 [ 140.734737][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 140.820710][ T2719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.829476][ T2719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.872042][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 141.024904][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 171, changing to 7 [ 141.039695][ T31] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 141.048848][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.056963][ T31] usb 5-1: Product: syz [ 141.061165][ T31] usb 5-1: Manufacturer: syz [ 141.066777][ T31] usb 5-1: SerialNumber: syz [ 141.281889][ T31] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 141.288998][ T31] usb 5-1: unit 6 not found! [ 141.294696][ T31] usb 5-1: unit 8 not found! [ 141.310137][ T31] usb 5-1: USB disconnect, device number 7 [ 141.365643][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.461962][ T67] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 141.512273][ T2730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.522497][ T2730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.533194][ T2730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.542231][ T2730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.611924][ T67] usb 3-1: Using ep0 maxpacket: 16 [ 141.619605][ T67] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 141.627959][ T67] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.638679][ T67] usb 3-1: config 1 has no interface number 0 [ 141.644858][ T67] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.658079][ T67] usb 3-1: config 1 interface 105 has no altsetting 0 [ 141.668406][ T67] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 141.677683][ T67] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 141.685832][ T67] usb 3-1: Product: syz [ 141.690027][ T67] usb 3-1: Manufacturer: syz [ 141.694707][ T67] usb 3-1: SerialNumber: syz [ 141.898347][ T12] Bluetooth: hci0: Frame reassembly failed (-90) [ 141.905555][ T2739] Bluetooth: hci0: Frame reassembly failed (-84) [ 141.941974][ T2741] Bluetooth: hci0: Frame reassembly failed (-84) [ 141.999373][ T67] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 142.022961][ T67] usb 3-1: USB disconnect, device number 78 [ 142.138556][ T2747] syz.1.776 (2747): /proc/2746/oom_adj is deprecated, please use /proc/2746/oom_score_adj instead. [ 142.189562][ T2749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.191500][ T2749] rust_binder: Error while translating object. [ 142.198165][ C0] BUG: TASK stack guard page was hit at ffffc9000feafed8 (stack is ffffc9000feb0000..ffffc9000feb8000) [ 142.198208][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 142.198236][ C0] CPU: 0 UID: 0 PID: 2749 Comm: syz.1.777 Not tainted syzkaller #0 ea42a5a06c94a64aa94aef8df7e3609365ccddb0 [ 142.198264][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 142.198278][ C0] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 142.198313][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 142.198333][ C0] RSP: 0018:ffffc9000feafee0 EFLAGS: 00010282 [ 142.198351][ C0] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc9000feb0250 [ 142.198366][ C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 142.198380][ C0] RBP: ffffc9000feb01b0 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc [ 142.198396][ C0] R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: 0000000000000680 [ 142.198411][ C0] R13: dffffc0000000000 R14: 1ffff92001fd603c R15: ffffc9000feb0250 [ 142.198429][ C0] FS: 00007f531a2716c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 142.198449][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.198465][ C0] CR2: ffffc9000feafed8 CR3: 0000000115c0a000 CR4: 00000000003526b0 [ 142.198485][ C0] DR0: 00000000ea2b0e2c DR1: 0000000000000000 DR2: 0000000000000000 [ 142.198500][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 142.198516][ C0] Call Trace: [ 142.198525][ C0] [ 142.198537][ C0] ? __kasan_check_read+0x15/0x20 [ 142.198568][ C0] ? static_key_count+0x45/0x70 [ 142.198591][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 142.198623][ C0] ? __cfi_gfp_zone+0x10/0x10 [ 142.198656][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 142.198688][ C0] ? unwind_next_frame+0x3c1/0x750 [ 142.198713][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 142.198736][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 142.198769][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 142.198795][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 142.198827][ C0] ? stack_depot_save_flags+0x672/0x800 [ 142.198858][ C0] ? stack_depot_save+0x12/0x20 [ 142.198888][ C0] ? save_stack+0x133/0x240 [ 142.198910][ C0] ? free_contig_range+0x260/0x260 [ 142.198940][ C0] ? __reset_page_owner+0x450/0x450 [ 142.198960][ C0] ? zone_page_state_add+0x43/0x90 [ 142.198993][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 142.199015][ C0] ? prep_new_page+0x20/0x120 [ 142.199038][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 142.199064][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 142.199089][ C0] ? stack_depot_save_flags+0x672/0x800 [ 142.199118][ C0] ? kasan_save_track+0x4f/0x80 [ 142.199149][ C0] ? kasan_save_free_info+0x4a/0x60 [ 142.199176][ C0] ? __kasan_slab_free+0x5f/0x80 [ 142.199196][ C0] ? kfree+0x158/0x440 [ 142.199223][ C0] ? krealloc_noprof+0xfa/0x130 [ 142.199253][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 142.199332][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 142.199372][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 142.199415][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 142.199464][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 142.199503][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 142.199534][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 142.199562][ C0] ? sched_clock_noinstr+0xd/0x30 [ 142.199587][ C0] ? __set_page_owner+0x8e/0x600 [ 142.199609][ C0] ? __zone_watermark_ok+0x134/0x630 [ 142.199635][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 142.199658][ C0] ? kasan_unpoison+0x4a/0x70 [ 142.199704][ C0] ? post_alloc_hook+0x3b8/0x3f0 [ 142.199726][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 142.199748][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 142.199778][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 142.199810][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 142.199842][ C0] ? prep_new_page+0x20/0x120 [ 142.199864][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 142.199900][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 142.199926][ C0] ? static_key_count+0x45/0x70 [ 142.199948][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 142.199977][ C0] ? lruvec_init+0x1b1/0x280 [ 142.200009][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 142.200034][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 142.200060][ C0] ? unwind_get_return_address+0x51/0x90 [ 142.200085][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 142.200107][ C0] ? arch_stack_walk+0x10a/0x170 [ 142.200140][ C0] ? stack_trace_save+0xaa/0x100 [ 142.200163][ C0] ? stack_depot_save_flags+0x672/0x800 [ 142.200193][ C0] ? kasan_save_track+0x4f/0x80 [ 142.200225][ C0] ? kasan_save_track+0x3e/0x80 [ 142.200255][ C0] ? kasan_save_free_info+0x4a/0x60 [ 142.200279][ C0] ? __kasan_slab_free+0x5f/0x80 [ 142.200300][ C0] ? kfree+0x158/0x440 [ 142.200326][ C0] ? krealloc_noprof+0xfa/0x130 [ 142.200355][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 142.200418][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 142.200452][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 142.200488][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 142.200531][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 142.200570][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 142.200600][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 142.200641][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 142.200682][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 142.200709][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 142.200730][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 142.200750][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 142.200782][ C0] ? do_syscall_64+0x57/0xf0 [ 142.200813][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.200854][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 142.200889][ C0] ? kasan_save_free_info+0x4a/0x60 [ 142.200916][ C0] ? __kasan_slab_free+0x5f/0x80 [ 142.200936][ C0] ? kfree+0x158/0x440 [ 142.200962][ C0] ? krealloc_noprof+0xfa/0x130 [ 142.200991][ C0] ? krealloc_noprof+0xfa/0x130 [ 142.201022][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 142.201087][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 142.201151][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 142.201209][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 142.201266][ C0] ? __kasan_check_write+0x18/0x20 [ 142.201295][ C0] ? _raw_spin_lock+0x92/0x120 [ 142.201326][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 142.201360][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 142.201403][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 142.201452][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 142.201493][ C0] ? __asan_memcpy+0x5a/0x80 [ 142.201521][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 142.201559][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 142.201597][ C0] ? __kasan_check_write+0x18/0x20 [ 142.201626][ C0] ? _raw_spin_lock+0x92/0x120 [ 142.201657][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 142.201696][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 142.201742][ C0] ? __asan_memcpy+0x5a/0x80 [ 142.201771][ C0] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 142.201818][ C0] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 142.201867][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 142.201903][ C0] ? __asan_memcpy+0x5a/0x80 [ 142.201931][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 142.201969][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 142.201992][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 142.202031][ C0] ? __kasan_check_write+0x18/0x20 [ 142.202058][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 142.202087][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 142.202131][ C0] ? __asan_memcpy+0x5a/0x80 [ 142.202160][ C0] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 142.202212][ C0] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 142.202252][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 142.202293][ C0] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 142.202335][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 142.202391][ C0] ? __kasan_check_write+0x18/0x20 [ 142.202417][ C0] ? mutex_unlock+0x90/0x240 [ 142.202442][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 142.202468][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 142.202493][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 142.202540][ C0] ? put_dec_trunc8+0x229/0x380 [ 142.202572][ C0] ? put_dec+0xd7/0xf0 [ 142.202602][ C0] ? __asan_memset+0x39/0x50 [ 142.202630][ C0] ? move_right+0x8e/0xb0 [ 142.202661][ C0] ? format_decode+0x1bb/0x1610 [ 142.202699][ C0] ? vsnprintf+0x7b4/0x1ad0 [ 142.202726][ C0] ? __asan_memcpy+0x5a/0x80 [ 142.202751][ C0] ? vsnprintf+0x19ef/0x1ad0 [ 142.202780][ C0] ? desc_read+0x202/0x3e0 [ 142.202801][ C0] ? __kasan_check_write+0x18/0x20 [ 142.202831][ C0] ? desc_read+0x1ab/0x3e0 [ 142.202852][ C0] ? prb_first_seq+0x109/0x1d0 [ 142.202873][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 142.202892][ C0] ? __kasan_check_write+0x18/0x20 [ 142.202920][ C0] ? desc_read+0x1ab/0x3e0 [ 142.202940][ C0] ? __kasan_check_read+0x15/0x20 [ 142.202968][ C0] ? this_cpu_in_panic+0x56/0x90 [ 142.202991][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 142.203012][ C0] ? record_print_text+0x290/0x450 [ 142.203038][ C0] ? prb_read_valid+0x80/0x80 [ 142.203060][ C0] ? _raw_spin_lock_irqsave+0x31/0x160 [ 142.203091][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 142.203114][ C0] ? sched_clock_noinstr+0xd/0x30 [ 142.203138][ C0] ? __kasan_check_write+0x18/0x20 [ 142.203163][ C0] ? __switch_to+0xc4f/0x1300 [ 142.203191][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 142.203220][ C0] ? plist_del+0x3e3/0x400 [ 142.203252][ C0] ? __cfi___switch_to+0x10/0x10 [ 142.203279][ C0] ? psi_task_switch+0xad/0xa10 [ 142.203304][ C0] ? __kasan_check_write+0x18/0x20 [ 142.203333][ C0] ? finish_task_switch+0x1d9/0x760 [ 142.203356][ C0] ? __switch_to_asm+0x3d/0x70 [ 142.203387][ C0] ? __schedule+0x13a1/0x1fa0 [ 142.203411][ C0] ? __sched_text_start+0x10/0x10 [ 142.203433][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 142.203467][ C0] ? up+0x10a/0x1b0 [ 142.203491][ C0] ? __cfi_up+0x10/0x10 [ 142.203514][ C0] ? __kasan_check_read+0x15/0x20 [ 142.203543][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 142.203577][ C0] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 142.203611][ C0] ? preempt_schedule_common+0x2d/0x60 [ 142.203634][ C0] ? preempt_schedule+0xc5/0xe0 [ 142.203655][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 142.203687][ C0] ? krealloc_noprof+0xfa/0x130 [ 142.203718][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 142.203749][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 142.203800][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 142.203850][ C0] ? vprintk_emit+0x3e3/0x650 [ 142.203875][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 142.203899][ C0] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 142.203941][ C0] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 142.203984][ C0] ? vprintk_default+0x2a/0x40 [ 142.204008][ C0] ? vprintk+0x93/0xa0 [ 142.204038][ C0] ? _printk+0xde/0x140 [ 142.204060][ C0] ? __cfi___check_object_size+0x10/0x10 [ 142.204091][ C0] ? __cfi__printk+0x10/0x10 [ 142.204114][ C0] ? _copy_from_user+0x87/0xa0 [ 142.204134][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 142.204179][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 142.204219][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 142.204272][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 142.204412][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 142.204443][ C0] ? kernel_text_address+0xa9/0xe0 [ 142.204471][ C0] ? __kasan_check_write+0x18/0x20 [ 142.204506][ C0] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 142.204537][ C0] ? krealloc_noprof+0x8d/0x130 [ 142.204567][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 142.204631][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xa2f/0x1290 [ 142.204686][ C0] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 142.204719][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 142.204746][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 142.204768][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 142.204801][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x124/0x850 [ 142.204866][ C0] ? __asan_memset+0x39/0x50 [ 142.204893][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x2ff/0x850 [ 142.204956][ C0] ? __cfi_slow_avc_audit+0x10/0x10 [ 142.204987][ C0] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1Z_EEBS_+0x10/0x10 [ 142.205051][ C0] ? __kasan_check_write+0x18/0x20 [ 142.205080][ C0] ? mutex_unlock+0x90/0x240 [ 142.205104][ C0] ? avc_has_perm_noaudit+0x220/0x360 [ 142.205137][ C0] ? avc_has_perm+0x1ec/0x240 [ 142.205168][ C0] ? avc_has_perm+0x211/0x240 [ 142.205199][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 142.205228][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 142.205257][ C0] ? __kasan_check_write+0x18/0x20 [ 142.205286][ C0] ? _raw_spin_lock+0x92/0x120 [ 142.205317][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 142.205341][ C0] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb22/0x1290 [ 142.205386][ C0] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 142.205432][ C0] ? __kasan_check_write+0x18/0x20 [ 142.205461][ C0] ? _raw_spin_lock+0x92/0x120 [ 142.205492][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 142.205523][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x155c/0xaf80 [ 142.205558][ C0] ? __asan_memcpy+0x5a/0x80 [ 142.205587][ C0] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x15b0/0xaf80 [ 142.205638][ C0] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 142.205750][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 142.205781][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 142.205823][ C0] ? __asan_memcpy+0x5a/0x80 [ 142.205852][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 142.205894][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 142.205935][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 142.205977][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 142.206018][ C0] ? desc_read+0x202/0x3e0 [ 142.206039][ C0] ? __kasan_check_write+0x18/0x20 [ 142.206068][ C0] ? desc_read+0x1ab/0x3e0 [ 142.206088][ C0] ? prb_first_seq+0x109/0x1d0 [ 142.206107][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 142.206128][ C0] ? __kasan_check_write+0x18/0x20 [ 142.206156][ C0] ? desc_read+0x1ab/0x3e0 [ 142.206177][ C0] ? __kasan_check_read+0x15/0x20 [ 142.206206][ C0] ? this_cpu_in_panic+0x56/0x90 [ 142.206226][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 142.206246][ C0] ? __asan_memcpy+0x5a/0x80 [ 142.206274][ C0] ? prb_read_valid+0x80/0x80 [ 142.206295][ C0] ? data_alloc+0x4d0/0x7e0 [ 142.206316][ C0] ? desc_read+0x202/0x3e0 [ 142.206336][ C0] ? __kasan_check_write+0x18/0x20 [ 142.206364][ C0] ? desc_read+0x1ab/0x3e0 [ 142.206385][ C0] ? prb_first_seq+0x109/0x1d0 [ 142.206405][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 142.206427][ C0] ? __kasan_check_write+0x18/0x20 [ 142.206455][ C0] ? desc_read+0x1ab/0x3e0 [ 142.206476][ C0] ? __kasan_check_read+0x15/0x20 [ 142.206505][ C0] ? this_cpu_in_panic+0x56/0x90 [ 142.206528][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 142.206549][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 142.206584][ C0] ? __kasan_check_write+0x18/0x20 [ 142.206613][ C0] ? _raw_spin_lock+0x92/0x120 [ 142.206644][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 142.206682][ C0] ? prb_read_valid+0x80/0x80 [ 142.206702][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 142.206736][ C0] ? _raw_spin_unlock+0x45/0x60 [ 142.206767][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 142.206791][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 142.206828][ C0] ? llist_add_batch+0x10f/0x1f0 [ 142.206853][ C0] ? prb_read_valid+0x41/0x80 [ 142.206874][ C0] ? __cfi_llist_add_batch+0x10/0x10 [ 142.206898][ C0] ? console_unlock+0x247/0x2c0 [ 142.206923][ C0] ? __cfi_console_unlock+0x10/0x10 [ 142.206947][ C0] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 142.206983][ C0] ? tick_nohz_tick_stopped+0x4c/0x60 [ 142.207010][ C0] ? __irq_work_queue_local+0xc4/0x260 [ 142.207037][ C0] ? irq_work_queue+0xc2/0x160 [ 142.207062][ C0] ? vprintk_emit+0x3e3/0x650 [ 142.207088][ C0] ? __kasan_check_write+0x18/0x20 [ 142.207117][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 142.207167][ C0] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0 [ 142.207202][ C0] ? vprintk+0x93/0xa0 [ 142.207230][ C0] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 142.207264][ C0] ? _printk+0xde/0x140 [ 142.207288][ C0] ? __kasan_check_write+0x18/0x20 [ 142.207317][ C0] ? _raw_spin_lock+0x92/0x120 [ 142.207348][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 142.207381][ C0] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x7b2/0x1030 [ 142.207418][ C0] ? stack_depot_save_flags+0x38/0x800 [ 142.207450][ C0] ? kasan_save_track+0x4f/0x80 [ 142.207481][ C0] ? kasan_save_track+0x3e/0x80 [ 142.207512][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 142.207539][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 142.207559][ C0] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 142.207589][ C0] ? avc_alloc_node+0x8e/0x530 [ 142.207619][ C0] ? avc_compute_av+0xeb/0x760 [ 142.207651][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 142.207686][ C0] ? __asan_memcpy+0x5a/0x80 [ 142.207715][ C0] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 142.207746][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 142.207776][ C0] ? __kasan_check_write+0x18/0x20 [ 142.207805][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 142.207837][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 142.207869][ C0] ? avc_alloc_node+0x8e/0x530 [ 142.207900][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 142.207934][ C0] ? __kasan_check_write+0x18/0x20 [ 142.207962][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 142.207994][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 142.208031][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 142.208069][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 142.208099][ C0] ? kernel_text_address+0xa9/0xe0 [ 142.208126][ C0] ? __kernel_text_address+0x11/0x40 [ 142.208151][ C0] ? unwind_get_return_address+0x51/0x90 [ 142.208177][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 142.208201][ C0] ? arch_stack_walk+0x10a/0x170 [ 142.208236][ C0] ? stack_trace_save+0xaa/0x100 [ 142.208257][ C0] ? stack_depot_save_flags+0x38/0x800 [ 142.208287][ C0] ? ttwu_queue_wakelist+0x324/0x500 [ 142.208310][ C0] ? native_send_call_func_single_ipi+0x12/0x20 [ 142.208335][ C0] ? audit_log_end+0x1f1/0x240 [ 142.208366][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 142.208397][ C0] ? slow_avc_audit+0x19f/0x220 [ 142.208427][ C0] ? avc_has_extended_perms+0x8e1/0xe70 [ 142.208458][ C0] ? ioctl_has_perm+0x39a/0x500 [ 142.208485][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 142.208511][ C0] ? security_file_ioctl+0x87/0x110 [ 142.208536][ C0] ? __se_sys_ioctl+0x53/0x1b0 [ 142.208557][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 142.208576][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 142.208607][ C0] ? do_syscall_64+0x57/0xf0 [ 142.208640][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.208688][ C0] ? __kasan_slab_free+0x6a/0x80 [ 142.208708][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 142.208738][ C0] ? __wake_up+0x169/0x190 [ 142.208758][ C0] ? audit_log_end+0x1f1/0x240 [ 142.208789][ C0] ? audit_log_end+0x1f1/0x240 [ 142.208820][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 142.208853][ C0] ? common_lsm_audit+0x14fe/0x18e0 [ 142.208884][ C0] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 142.208917][ C0] ? __cfi_common_lsm_audit+0x10/0x10 [ 142.208948][ C0] ? __kasan_slab_free+0x6a/0x80 [ 142.208969][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 142.208999][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 142.209031][ C0] ? avc_node_kill+0x29e/0x2f0 [ 142.209064][ C0] ? slow_avc_audit+0x19f/0x220 [ 142.209095][ C0] ? __cfi_slow_avc_audit+0x10/0x10 [ 142.209128][ C0] ? avc_denied+0x112/0x180 [ 142.209159][ C0] ? avc_has_extended_perms+0x8e1/0xe70 [ 142.209191][ C0] ? avc_has_extended_perms+0x962/0xe70 [ 142.209225][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 142.209251][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 142.209272][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 142.209295][ C0] ? schedule+0xc5/0x240 [ 142.209316][ C0] ? futex_unqueue+0x136/0x160 [ 142.209345][ C0] ? ioctl_has_perm+0x39a/0x500 [ 142.209373][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 142.209401][ C0] ? futex_wait+0x2ac/0x7b0 [ 142.209432][ C0] ? __cfi_futex_wait+0x10/0x10 [ 142.209463][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 142.209491][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 142.209519][ C0] ? do_futex+0x32a/0x510 [ 142.209545][ C0] ? __cfi_do_futex+0x10/0x10 [ 142.209572][ C0] ? __fget_files+0x2c5/0x340 [ 142.209592][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 142.209614][ C0] ? security_file_ioctl+0x3e/0x110 [ 142.209641][ C0] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 142.209675][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 142.209696][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 142.209716][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 142.209747][ C0] ? do_syscall_64+0x57/0xf0 [ 142.209778][ C0] ? clear_bhb_loop+0x50/0xa0 [ 142.209800][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.209835][ C0] [ 142.209844][ C0] Modules linked in: [ 142.209873][ C0] ---[ end trace 0000000000000000 ]--- [ 142.209885][ C0] RIP: 0010:get_page_from_freelist+0x1f/0x4a20 [ 142.209916][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 02 00 00 49 89 cf <89> bc 24 a0 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 84 24 80 02 [ 142.209937][ C0] RSP: 0018:ffffc9000feafee0 EFLAGS: 00010282 [ 142.209956][ C0] RAX: 0000000000000100 RBX: 0000000000000002 RCX: ffffc9000feb0250 [ 142.209972][ C0] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 142.209986][ C0] RBP: ffffc9000feb01b0 R08: ffffffff876aade3 R09: 1ffffffff0ed55bc [ 142.210003][ C0] R10: dffffc0000000000 R11: fffffbfff0ed55bd R12: 0000000000000680 [ 142.210020][ C0] R13: dffffc0000000000 R14: 1ffff92001fd603c R15: ffffc9000feb0250 [ 142.210037][ C0] FS: 00007f531a2716c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 142.210057][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.210073][ C0] CR2: ffffc9000feafed8 CR3: 0000000115c0a000 CR4: 00000000003526b0 [ 142.210093][ C0] DR0: 00000000ea2b0e2c DR1: 0000000000000000 DR2: 0000000000000000 [ 142.210107][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 142.210129][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 142.210726][ C0] Kernel Offset: disabled