last executing test programs: 6.691305756s ago: executing program 3 (id=966): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26, 0x80000000}, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000002440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') io_setup(0x9, &(0x7f00000016c0)) io_setup(0x81, &(0x7f0000001700)) io_setup(0x80, &(0x7f0000001940)) io_setup(0x2, &(0x7f0000001980)) io_setup(0xd6, &(0x7f0000001a80)) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x84) 6.618726159s ago: executing program 3 (id=967): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x1, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x125d, 0x0) 6.544992052s ago: executing program 3 (id=968): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "856a757d"}]}}, 0x0}, 0x0) 5.716851542s ago: executing program 1 (id=983): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019b000000a40500204000010203010902240001010c3005ff07000000000000f3092102000901225f00090581039cf1040601"], &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7, 0x8, 0x6, 0xff, 0x8}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40d}}]}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x5c04c, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000a40)={{0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x480882, &(0x7f00000001c0)={@align=0x2, {0x800, 0x6, 0x200, 0x7}}, 0x3ff, &(0x7f0000000240), &(0x7f0000000300)=0x8}, 0x7, &(0x7f0000000940)=[{0x1, 0x0, &(0x7f0000000340)='ns/mnt\x00', &(0x7f0000000b80)="6069a9862507d6fd09ef4b9b9d5e8cd9156043d15c", 0x15, 0x22}, {0x1, 0x4ab, &(0x7f00000003c0)='n\x964\xb6\x8f\vn', &(0x7f0000000400)="58b3f8894777343cca2f117d898b298b567cafcd796991bdb49d28a33543f16e827c5740f74ab78ee8405ddf6605ffe81469f7740ca5c3b9566d148cd7e21ceab1795f270208851262ae17ce33804180db2643b12384000ca2afd1f33746abd0d7873883a64d9d43d6cd74301601ba9fe02b2c6e1a65e55fd38b09c63f1b4b7f8aadb7db41921a118490482430", 0x8d, 0x12}, {0x1, 0x10001, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)="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", 0xfe, 0x2}, {0x3, 0x0, &(0x7f0000000080)='%\\]{\x0e\x00\x00\x00-&)\x00/\a\xdd', &(0x7f0000000680)="cb15480ea35956eba4c7308094e3a8d3e3d33a9ed169d665693694aa6d7fc98fe28f678958e13c0598fdd65d30a6a99b3a0c044b4c901dc85f2e77435d6367fcbebfe4b8cd3cb16905e48d57475fb5ee7be74c4d61f99793ea7906c5cdfa30831e11a6070270ce3a8dac192d2373e80ae555e7d8164bf44263cdd84d0d564a0b15ec4d8fbce16212b0f31ae48686c2fb1a140ccdf0e2a52a0164bd8a2828c11041e252b098fd5c7d0de43bb7689d73ddbcff4be6c2bb57298de6bb42502f82ec2523e712aaddf3e8babaf53f6d6a84e286aeff1b16721f8bcfb7", 0xda, 0xb}, {0x3, 0x6, &(0x7f0000000780)=')/&^:\x00', &(0x7f00000007c0)="a2e53445a140a9f1", 0x8, 0x8}, {0x3, 0xffffe2af, &(0x7f0000000800)=')\x00', &(0x7f0000000840)="82c288e556d08ed0723af414c13305d8ae773fab97fcf690acc1425e4e605188fc043b055de5", 0x26, 0x3a}, {0x0, 0x39b, &(0x7f0000000880)='^!:\x00', &(0x7f00000008c0)="3f93b04490bc812000f4d9e9a17842a5c3ea531fcd5eea6392779832060c5cdd5fc64834be426c1f0de846dd34847fad76d03db410b5d7df14ac6798db8871ad1df435ea6f01f51acfecbc41", 0x4c, 0x10}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001d002106000000000000000007d5"], 0x34}}, 0x0) bind$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e24, 0x5, @local, 0x1}, 0x1c) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchmodat(r2, &(0x7f00000002c0)='./file0/../file0\x00', 0x160) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000b40)={0xe, 0x18, '\x00', 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_BALANCE(r3, 0xb703, 0x2000000) fstat(r2, &(0x7f0000000100)) fcntl$notify(r3, 0x402, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc293, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xab, 0x20, 0xf6, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x9, 0xe, 0x1, {0x22, 0xe45}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x310, 0xff, 0x43, 0x5, 0x8}, 0x19, &(0x7f0000000c00)={0x5, 0xf, 0x19, 0x1, [@ext_cap={0x0, 0x10, 0x2, 0x4, 0x4, 0x8, 0x6}]}, 0x9, [{0xb2, &(0x7f0000000c40)=@lang_id={0x0, 0x3, 0x430}}, {0x40, &(0x7f0000000d00)=@string={0x40, 0x3, "3b95d2964adc3db7daec8d186b48f137c8cef1b2b393122a0ebcef910ecb1e5fb870266fedee298a0d0d2f11252099ede481ca00de5051a4e9be44dd0f40"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x1404}}, {0xb4, &(0x7f0000000dc0)=@string={0xb4, 0x3, "0c4d3da82f75211ee37f8c4a60e09b52212cbe07c918192b16a80f211c7d38be97bf3612b8ae9216f4b99beee0fa928e7b57369192bab587ad91fff2866e673b8d0663d69ac265c66c5b5bf06bbefbb0f1f459847e4d984d1ba406fb8aeded6ecd7b1c7f6fcce2049332678eea7883096e706e0de5658ef39590fa511ae0c65a586d75eefb961f493eba9a983e0041b17e307ee6c63f2ababfd7d4debc97deb6d4e6ea830f8237052fac4307aa4745c46a86"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x5c00}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x2, 0x3, 0x444}}, {0xc5, &(0x7f0000001000)=@string={0xc5, 0x3, "0fdf90c2043981a761d30868d09b1825a87d7fa74d7e364ac6e81c933432dce9a0a780f0006e800b355fa36c94815e8fb638821f54eaf1261bca023ffb190409615017d2e5c5bbdbd3525e4d5c2f6d6495b12cf5fde91ced7e19897387aa827d525f91b792e09c0e94ab7ccdd15b19ccd733e66e53852213f80e8d7d89affbe174b51fabb2d4d7fb53b97a84993858db70a4e42e006b38b0000c595555fcab8088ef528e54a69c94fc0d3ec92321aa81d913e697c5d9b787fdedc0a0829153803f5bb0"}}]}) 4.917671901s ago: executing program 3 (id=984): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x51, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce0b2"}]}}, 0x0}, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, &(0x7f0000000100)=@xdp={0x2c, 0x1, r2, 0x2b}, 0x80) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x4, "be143d32"}, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, 0x0) 2.500982329s ago: executing program 1 (id=993): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8a400, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x300000b, 0x11, r4, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x8, 0x1, 0x0, 0x2, {{0x1c, 0x4, 0x0, 0x37, 0x70, 0x66, 0x4, 0x40, 0x2f, 0x0, @multicast1, @remote, {[@end, @timestamp_prespec={0x44, 0x44, 0xb7, 0x3, 0x2, [{@remote, 0x8}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010101, 0x5c}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010100, 0x3}, {@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0xfe, 0x0}, 0x6}]}, @ssrr={0x89, 0xf, 0x71, [@local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0xf4, [@private=0xa010102]}]}}}}}) 2.500641369s ago: executing program 1 (id=994): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x11, r1, 0xf28c1000) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setpgid(0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0xffffffffffffffe1, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2b}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @fd}, &(0x7f0000000740)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 2.4741122s ago: executing program 1 (id=995): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) unshare(0x2000400) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000000180)=0x4, 0x4) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 2.46074927s ago: executing program 1 (id=996): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x1, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x125d, 0x0) 2.258885178s ago: executing program 1 (id=998): r0 = socket$packet(0x11, 0x2, 0x300) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2.215500929s ago: executing program 32 (id=998): r0 = socket$packet(0x11, 0x2, 0x300) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.660939829s ago: executing program 3 (id=1003): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000013c0)=0x7f) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x2000009, 0x255, 0x1000009, 0xfffffffb, 0xa, "972d595029c59b1506000000000000004c8672"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xe, 0xdc, 0xf59, 0x4, 0x14, "de619b2e9b16af892c24cf68ec495a8a614f94"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @fd}, &(0x7f0000000740)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 1.66079184s ago: executing program 3 (id=1004): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d4ec79d0, 0x31, 0xffffffffffffffff, 0xcee90000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x81, 0x0, 0x0, 0x400}}) 1.333116551s ago: executing program 2 (id=1013): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fsopen(&(0x7f00000003c0)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002480)="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", 0x2000, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000040)=""/123, 0x7b}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0xffffffffffffffe1, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2b}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @fd}, &(0x7f0000000740)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000100)={0x0, 0x2, 0x7, 0xffffffffffff8000}) syz_kvm_add_vcpu$x86(r5, &(0x7f00000001c0)={0x0, &(0x7f0000000e80)=[@out_dx={0x6a, 0x28, {0xd71c, 0x3, 0x5}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x187}}, @nested_amd_invlpga={0x17d, 0x20, {0xf000, 0xf1ec}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0x50, {0x1, 0x81, [@nested_create_vm={0x12d, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0xa1c}}]}}, @set_irq_handler={0xc8, 0x20, {0xc3, 0x2}}, @rdmsr={0x66, 0x18, {0xb59}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_load_code={0x12e, 0x79, {0x0, "48b807000000000000000f23d80f21f835000000000f23f80f1d7d00b9800000c00f3235002000000f303636420f01c448b8eccd1f98000000000f23c80f21f8350400a0000f23f845dae90f01c5f321c52e4e0fc76f003e660f38818f399e5104"}}, @set_irq_handler={0xc8, 0x20, {0x2d, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x98, 0x3, 0x92, 0xfffffffffffffffa}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xa, 0x9, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xba, 0x1, 0x401}}, @rdmsr={0x66, 0x18, {0x2c7}}, @cpuid={0x64, 0x18, {0x800, 0x8a}}, @uexit={0x0, 0x18, 0x84e}, @wr_drn={0x68, 0x20, {0x6, 0x1}}, @nested_amd_clgi={0x17f, 0x10}], 0x341}) 1.318127722s ago: executing program 0 (id=1014): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x62b9, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x3d) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1.231013775s ago: executing program 0 (id=1015): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x1, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x125d, 0x0) 1.164929367s ago: executing program 0 (id=1016): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) (async) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000c) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001111204600000a60c6eec00be12442cfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) unshare(0x60000600) 1.164715687s ago: executing program 2 (id=1017): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="10030600e0ff020004004788aa96a13bf1000011ca1a0009e5b0d533503aef4737ff6eb00cdc2fa1e2a752675903e547af97c4cb3e5dbf54c3873b5464b0327749d475cc83f36ebc3977c5eada8e79d293acb59a31a2dccd5a9f219c246ff19ea914974cefb39519e6903008c2", 0x6d, 0x0, &(0x7f0000000140)={0x11, 0x0, r0}, 0x14) 1.164207547s ago: executing program 2 (id=1018): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_secret(0x80000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.07922621s ago: executing program 0 (id=1019): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000000)=""/78, 0x4e) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) recvfrom$inet(r3, 0x0, 0x0, 0x40000022, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8936, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0x8, 0xf, 0x5, 0x6, 0x42, 0x7, 0x0, 0x34, 0x19}, {0x100000, 0x7000, 0xc, 0x2, 0x1, 0x43, 0x8, 0x6, 0x9, 0x6, 0x83, 0x2b}, {0xdddd0000, 0x80a0000, 0xb, 0x6, 0x80, 0x7, 0x0, 0x9, 0xff, 0xb, 0x8, 0x5}, {0x200000, 0x8080000, 0x10, 0x6, 0x3, 0xff, 0xfd, 0x0, 0xa, 0xa0, 0x9, 0xe}, {0x0, 0x2000, 0x8, 0x6, 0x5, 0x2, 0xab, 0x4, 0xf, 0x83, 0xf7, 0x5}, {0xeeef0000, 0x191bd000, 0xc, 0x7, 0xf7, 0x6, 0x1, 0x4, 0x80, 0x13, 0x5}, {0x6000, 0xeeee8000, 0xb, 0x5, 0x0, 0x0, 0x4, 0x3, 0x3, 0x7d, 0x2, 0x70}, {0xeeee0000, 0x25000, 0xf, 0x2, 0xf, 0x7, 0x6a, 0x9, 0xff, 0x8, 0xf0, 0x9}, {0x0, 0x5}, {0x2000, 0x2}, 0x80000031, 0x0, 0x41000, 0x42064, 0x400000006, 0x9000, 0xf000, [0x400000000000a2, 0x800ffc, 0x400000000063, 0x7]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f00000000c0)={0xa000, 0xf000, 0x2, 0x7, 0x6}) (async) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f00000000c0)={0xa000, 0xf000, 0x2, 0x7, 0x6}) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f00000000c0)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x3) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f00000000c0)=0x3be, 0x4) (async) setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f00000000c0)=0x3be, 0x4) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, 0x0, 0x0) close_range(r2, r2, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000300)=0x1e) getsockopt$inet6_int(r9, 0x29, 0x4c, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 1.032566762s ago: executing program 2 (id=1020): getgroups(0x0, 0x0) (async) prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir_on}, {@redirect_dir_follow}], [], 0x2c}) (async) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x49d, 0x82083) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x6000, 0xfffffff8, 0x7, 0x400, 0x0, [{0x8, 0x8, 0x9, '\x00', 0xc}, {0x60, 0x0, 0x0, '\x00', 0x9}, {0x1, 0x0, 0x1, '\x00', 0x55}, {0x7, 0x7, 0x40, '\x00', 0xe7}, {0xc8, 0x4, 0x7, '\x00', 0x4}, {0x7, 0xb2, 0xcd, '\x00', 0x61}, {0x7, 0x62, 0x2, '\x00', 0x1}, {0x8, 0x1, 0x2, '\x00', 0x9}, {0xae, 0x3, 0xc, '\x00', 0x5}, {0x0, 0xa, 0x8, '\x00', 0x11}, {0x36, 0xc2, 0x5, '\x00', 0xec}, {0x3e, 0x1, 0xed, '\x00', 0x5}, {0x3, 0x56, 0x4, '\x00', 0x5}, {0xca, 0x2, 0x8a, '\x00', 0x7}, {0xb, 0x1, 0x7, '\x00', 0x1}, {0xde, 0x6, 0x1, '\x00', 0x29}, {0x6, 0x81, 0xa, '\x00', 0x80}, {0x9, 0x36, 0x0, '\x00', 0x4}, {0x2, 0x3, 0xe3, '\x00', 0x5}, {0x10, 0x39, 0x8, '\x00', 0x2}, {0xff, 0x10, 0x4, '\x00', 0x4}, {0x1, 0xb, 0x6, '\x00', 0x5}, {0x2, 0x6, 0xf, '\x00', 0xa0}, {0x9, 0x40, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000002, 0x20, 0x0, 0x800000002, 0x106e, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) setuid(0xee01) tkill(r1, 0x12) (async) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000025000/0x400000)=nil) (async) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) (async) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) (async) mount$overlay(0x0, 0x0, 0x0, 0x21, 0x0) (async) listxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/71, 0x47) (async) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000200)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x2) (async) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000007c0)={0x0, 0x0, 0xf440, 0x0, 0x0, "95bff5627804ada2"}) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) pwritev2(r6, &(0x7f0000000000)=[{&(0x7f0000000500)="002e2e0000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0) (async) chdir(&(0x7f0000000300)='./file1\x00') 868.838958ms ago: executing program 2 (id=1021): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x50, 0xffffffffffffffff, 0x89bca000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(0x3) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f00000000c0)=0x4, 0xfffffffffffffd93) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_int(r3, &(0x7f0000001500)=0xffffffffffffffff, 0x12) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000007540)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x8001, @mcast2, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00%\x00'/32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x8080) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$BTRFS_IOC_ENCODED_READ(r3, 0x80809440, &(0x7f0000000b00)={&(0x7f0000000740)=[{&(0x7f0000000180)="5458bacbe5eba3f4d4ad776a3b30f5147a5c47e2f9d91b67161aea2fd048a974f70a3b218181365f745ce43793ca8fd1c5b6769fa55a53f261c4f85b70aea072b2fccd510c0bccdf2c5a57fbacd57dc4a8ca0ae900443008aab4e8b19d13b4de9c56d8a2fa99e2dbc570d692a589f0f449e773928543c232f8862ea21e5f", 0x7e}, {&(0x7f0000000500)="7cef6696f66e47e5b93e2e21e9530edfa6c11f89566bbae1ee47837943a9413b1b2b4ffd94c557a128151454457977397aad8192371f52207eda7ac412c05b9ad0fbd0a6c24f4a22c91acc794f910db74c09e6e6c10676a246352fd636b6c0895b01aa7d0c5207fb1236ad2bf91c3e63f86449e285aeb89619483e34939315e7ce74c2a2f8aafb8191e2b36936441929c45f0e28b89cebbb0f7fa10b68485b", 0x9f}, {&(0x7f0000000280)="a0888e27c55d9f1a50cc7265a9245e8a136c9e35bd47ff9e58cd7bc878131cbfa30d64a247e30c0da03e362249f2eb0e626e9f13fbcd10ce5751f3d19cace747501b6fa8b75771f47173def346af6ccfdc4859", 0x53}, {&(0x7f00000007c0)="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", 0x15d}, {&(0x7f00000003c0)="268024273e10a213be8d96b476a2adb6f34e1293e7a8457b0a8847084cf8f3ca412936d7bed241a1c4ba1c52ea51eb8e505d7eb93b3cbbb31a2b94b9b76dda7508ae2084cfe9309ec903c150f253fc12427f9c91c59f44f2f2b7299c28a22907d615a084150794ac920eec", 0x6b}, {&(0x7f0000000a40)="7295902329ed51b7114ab3735885940874507d13c4a46999f74511d8248255c31a365a5f301d5971abfb920c25ab0b61c33db39782583b54eebdca62067936ad1fb1dc8b7ec055540f0c4a83b893dd31a38c9b3d97d0b1588d85661a50447b965bae64093287cbc616b667ec58abbed0a94c109a9f912405a6f0b29e95c35200d309b72d1a4ce2b8ffc007", 0x8b}, {&(0x7f0000000bc0)="d51c23989715b89ad987e30acb3d085dc18096f40d1e2a20a9cff2567cf4d1b0de3a02bbdfaceafe4ff728e78672d0a2a5d14b9452cf51fc345eec926d3620c67649dcfefaef923c013bda138096f30dccd42d7d826c506867dcf6d1ddff250a42dd615e81e192985fd56e9b44e689c54910ea7a2345be58dc86fc061f7001332ccb5a4edeeaea09c4cd3e7150", 0x8d}], 0x7, 0x4, 0x0, 0x9, 0x1e000000000, 0x57bf, 0x1, 0x5}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28131, 0xffffffffffffffff, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r6, 0x7, &(0x7f0000001140)={0x0, 0x2, 0x6, 0x5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 868.613808ms ago: executing program 0 (id=1022): r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) tkill(r0, 0x12) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x100000001, 0xfe60) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) 868.310898ms ago: executing program 0 (id=1023): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r3, &(0x7f00000000c0)='./cgroup\x00', 0x1000, 0x4, 0x0) r4 = openat(r3, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r4, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) preadv(r9, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'gretap0\x00', 0x1800}) 336.108957ms ago: executing program 4 (id=1024): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x1, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x125d, 0x0) 276.22187ms ago: executing program 4 (id=1025): socket(0x10, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x40000000202, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffff6, 0x25, &(0x7f0000000080)={0x20, 0x3, 0x10, 0xfffd}, 0x8, 0x0, 0x4, 0x0, 0x1000010, 0x20004, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) setpriority(0x1, 0xffffffffffffffff, 0xd1f4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000500)=@x86={0x36, 0x1, 0x4, 0x0, 0x7, 0x0, 0xfd, 0x84, 0x9, 0x3, 0x4, 0x0, 0x0, 0xfffffffc, 0x7, 0x3, 0x14, 0xf8, 0x2a, '\x00', 0xd, 0x2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, 0x400000, 0xfffffffd}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x64}}, 0x0) r8 = epoll_create1(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000580)="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") syz_genetlink_get_family_id$smc(&(0x7f0000000140), r9) ioctl$FS_IOC_SETFLAGS(r8, 0x40088a01, &(0x7f0000000000)) 138.514054ms ago: executing program 4 (id=1026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x80000021, 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0xffffffffffffffe1, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2b}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @fd}, &(0x7f0000000740)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 72.981067ms ago: executing program 4 (id=1027): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="10030600e0ff020004004788aa96a13bf1000011ca1a0009e5b0d533503aef4737ff6eb00cdc2fa1e2a752675903e547af97c4cb3e5dbf54c3873b5464b0327749d475cc83f36ebc3977c5eada8e79d293acb59a31a2dccd5a9f219c246ff19ea914974cefb39519e6903008c2", 0x6d, 0x0, &(0x7f0000000140)={0x11, 0x0, r0}, 0x14) 72.429677ms ago: executing program 4 (id=1028): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/3\x00') read$ptp(r0, &(0x7f00000026c0)=""/231, 0xe7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) (async) getsockopt$MRT(r1, 0x0, 0xd0, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x14) (async) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000020006000000000002"], 0x50}}, 0x200c405a) (async) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000180)='./file0\x00', 0x1000) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) unlink(&(0x7f0000000340)='./file0\x00') 72.260107ms ago: executing program 4 (id=1029): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = epoll_create1(0x80000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x11, 0x0, 0xa4ff) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r5, &(0x7f0000000000), 0x8, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000140)={0xa0000001}) epoll_wait(r7, &(0x7f0000000280)=[{}], 0x1, 0x4004002) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f00000000c0)={0x3, 0x1, 0x1000, &(0x7f0000000440)=""/4096}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) epoll_pwait2(r7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000200), &(0x7f0000000240)={[0x7]}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000380), 0xffff, 0x800) ioctl$BLKREPORTZONE(r9, 0xc0101282, &(0x7f0000001440)={0x6, 0x7, 0x0, [{0xc, 0x1, 0x0, 0xb9, 0x1, 0xa, 0xbb, '\x00', 0x101}, {0x2, 0x10000, 0x100000000, 0xb0, 0xa, 0x9, 0x80, '\x00', 0x1}, {0x2, 0x4, 0x7fffffffffffffff, 0x4, 0x1, 0x3, 0x4, '\x00', 0x40}, {0xc00d, 0x200, 0x1, 0x6, 0x3, 0xcf, 0x3, '\x00', 0xffffffffffffff01}, {0xfffffffffffffffe, 0x100, 0x4, 0x8, 0x9, 0x0, 0x7f, '\x00', 0x1}, {0xfffffffffffffffd, 0x5, 0x5d, 0x3, 0x6, 0x2, 0x5, '\x00', 0x2}, {0x2, 0x2, 0x4, 0xdd, 0xb, 0x7f, 0x3, '\x00', 0xa}]}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100030000002035120c804000010203010902690003010900020881000924012000050900fc0904010000010220000904010101010220000905010920000004050825018000018f000904020000010220000904020101010220000905820910000608050825018000fe0200"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x7f, 0x9}}, 0x30) 0s ago: executing program 2 (id=1030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000040)={0x20, 0x8, 0x2, {0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4008010}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000001c0)={r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000002c0)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @fd, @flat=@handle={0x73682a85, 0x1, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 7 [ 82.250007][ T307] usb 3-1: New USB device found, idVendor=0499, idProduct=1042, bcdDevice= 0.40 [ 82.266235][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.284815][ T307] usb 3-1: Product: syz [ 82.289227][ T307] usb 3-1: Manufacturer: syz [ 82.299436][ T339] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 82.307225][ T307] usb 3-1: SerialNumber: syz [ 82.472933][ T339] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 82.481546][ T339] usb 4-1: can't read configurations, error -71 [ 82.528991][ T307] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 82.538810][ T307] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 82.550000][ T307] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 82.559842][ T307] usb 3-1: USB disconnect, device number 35 [ 82.565779][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.855411][ T1947] overlayfs: missing 'workdir' [ 82.870214][ T1949] netlink: 57 bytes leftover after parsing attributes in process `syz.0.529'. [ 82.876374][ T1950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.888904][ T1950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.074168][ T1959] netlink: 'syz.2.532': attribute type 39 has an invalid length. [ 83.082763][ T1959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1959 comm=syz.2.532 [ 83.365193][ T1885] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 83.440225][ T1965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.448744][ T1965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.525053][ T1885] usb 3-1: Using ep0 maxpacket: 16 [ 83.531288][ T1885] usb 3-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 83.541744][ T1885] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 83.550929][ T1885] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.565391][ T1885] usb 3-1: New USB device found, idVendor=17cc, idProduct=0000, bcdDevice= 0.00 [ 83.574450][ T1885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.582446][ T1885] usb 3-1: Product: syz [ 83.586588][ T1885] usb 3-1: Manufacturer: syz [ 83.591190][ T1885] usb 3-1: SerialNumber: syz [ 83.817276][ T1885] usb 3-1: 0:2 : does not exist [ 83.824276][ T1885] usb 3-1: USB disconnect, device number 36 [ 83.833875][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.191602][ T1985] overlayfs: upper fs does not support tmpfile. [ 84.217018][ T1989] netlink: 228 bytes leftover after parsing attributes in process `syz.0.543'. [ 84.316874][ T1994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=1994 comm=syz.0.545 [ 84.329402][ T1994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=1994 comm=syz.0.545 [ 84.344357][ T1994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=1994 comm=syz.0.545 [ 84.356841][ T307] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 84.520301][ T307] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 84.530897][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 84.542320][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 84.553697][ T307] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 84.564049][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.572176][ T307] usb 2-1: Product: syz [ 84.576344][ T307] usb 2-1: Manufacturer: syz [ 84.581090][ T307] usb 2-1: SerialNumber: syz [ 84.586393][ T307] usb 2-1: config 0 descriptor?? [ 84.806434][ T307] usb 2-1: USB disconnect, device number 43 [ 84.964029][ T402] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 85.123890][ T402] usb 3-1: Using ep0 maxpacket: 8 [ 85.130429][ T402] usb 3-1: unable to get BOS descriptor or descriptor too short [ 85.138933][ T402] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.148634][ T402] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 85.161759][ T402] usb 3-1: string descriptor 0 read error: -22 [ 85.168007][ T402] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.177036][ T402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.301273][ T2021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.310294][ T2021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.416125][ T2024] cgroup: fork rejected by pids controller in /syz1 [ 85.427543][ T2017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.437187][ T2017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.522059][ T402] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 85.547667][ T402] usb 3-1: USB disconnect, device number 37 [ 85.863655][ T2096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.872345][ T2096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.065888][ T2100] rust_binder: Write failure EFAULT in pid:366 [ 86.328324][ T402] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 86.412640][ T2108] cgroup: subsys name conflicts with all [ 86.467679][ T2113] kvm: user requested TSC rate below hardware speed [ 86.475242][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 86.475256][ T36] audit: type=1326 audit(1775012954.866:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.0.561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1c0b9c819 code=0x0 [ 86.498839][ T402] usb 3-1: Using ep0 maxpacket: 16 [ 86.512017][ T402] usb 3-1: unable to get BOS descriptor or descriptor too short [ 86.522858][ T402] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 86.533219][ T402] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 86.543745][ T402] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 86.552847][ T402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.560828][ T402] usb 3-1: Product: syz [ 86.565033][ T402] usb 3-1: Manufacturer: syz [ 86.569624][ T402] usb 3-1: SerialNumber: syz [ 86.582349][ T2122] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 86.625576][ T36] audit: type=1400 audit(1775012955.006:366): avc: denied { bind } for pid=2124 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.645455][ T36] audit: type=1400 audit(1775012955.006:367): avc: denied { name_bind } for pid=2124 comm="syz.1.564" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 86.666148][ T36] audit: type=1400 audit(1775012955.006:368): avc: denied { node_bind } for pid=2124 comm="syz.1.564" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 86.786675][ T1885] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 86.796313][ T402] usb 3-1: 0:2 : does not exist [ 86.804320][ T402] usb 3-1: USB disconnect, device number 38 [ 86.812636][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.947639][ T1885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.957822][ T1885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.967487][ T1885] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.976647][ T1885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.984688][ T1885] usb 4-1: SerialNumber: syz [ 87.205927][ T1885] usb 4-1: 0:2 : does not exist [ 87.212352][ T1885] usb 4-1: USB disconnect, device number 38 [ 87.221667][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.649988][ T1885] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 87.788731][ T36] audit: type=1400 audit(1775012956.104:369): avc: denied { connect } for pid=2145 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.813066][ T1885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.824409][ T1885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.834610][ T1885] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 87.843696][ T1885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.852578][ T1885] usb 3-1: config 0 descriptor?? [ 87.971279][ T36] audit: type=1400 audit(1775012956.273:370): avc: denied { read } for pid=2167 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.246866][ T351] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 88.267628][ T2172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.276345][ T2172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.287449][ T2138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.296021][ T2138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.304502][ T36] audit: type=1400 audit(1775012956.582:371): avc: denied { bind } for pid=2137 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.306297][ T1885] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 88.323666][ T36] audit: type=1400 audit(1775012956.582:372): avc: denied { name_bind } for pid=2137 comm="syz.2.569" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 88.333249][ T1885] playstation 0003:054C:0DF2.0008: item fetching failed at offset 4/5 [ 88.351696][ T36] audit: type=1400 audit(1775012956.582:373): avc: denied { node_bind } for pid=2137 comm="syz.2.569" saddr=ff02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 88.360465][ T1885] playstation 0003:054C:0DF2.0008: Parse failed [ 88.388353][ T1885] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 88.407837][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.418919][ T351] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.428719][ T351] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 88.437820][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.455190][ T351] usb 4-1: config 0 descriptor?? [ 88.455458][ T2174] tmpfs: Unknown parameter 'usrquota_Vnodehardlimit' [ 88.561265][ T1885] usb 3-1: USB disconnect, device number 39 [ 88.577379][ T36] audit: type=1400 audit(1775012956.845:374): avc: denied { setcheckreqprot } for pid=2189 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.110483][ T351] hid-generic 0003:04F3:0755.0009: item fetching failed at offset 0/5 [ 89.117008][ T2202] overlay: Unknown parameter '/' [ 89.121124][ T351] hid-generic 0003:04F3:0755.0009: probe with driver hid-generic failed with error -22 [ 89.173391][ T2206] veth0_virt_wifi: entered allmulticast mode [ 89.261150][ T2205] veth0_virt_wifi: left allmulticast mode [ 89.325181][ T1885] usb 4-1: USB disconnect, device number 39 [ 89.568564][ T351] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 89.728437][ T351] usb 3-1: Using ep0 maxpacket: 32 [ 89.737386][ T351] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 89.742789][ T2227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.749874][ T351] usb 3-1: config 0 has no interface number 0 [ 89.754600][ T2227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.761091][ T351] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 89.779468][ T351] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 89.789842][ T351] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.803036][ T351] usb 3-1: config 0 interface 196 has no altsetting 0 [ 89.811303][ T351] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 89.820472][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.828500][ T351] usb 3-1: Product: syz [ 89.832662][ T351] usb 3-1: Manufacturer: syz [ 89.837271][ T351] usb 3-1: SerialNumber: syz [ 89.842599][ T351] usb 3-1: config 0 descriptor?? [ 89.847894][ T2219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 89.871766][ T2229] netlink: 68 bytes leftover after parsing attributes in process `syz.3.599'. [ 90.070583][ T351] ipheth 3-1:0.196: Unable to find endpoints [ 90.078396][ T351] usb 3-1: USB disconnect, device number 40 [ 90.144147][ T1885] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 90.305426][ T1885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.314229][ T1885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 90.326086][ T2233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.327991][ T1885] usb 4-1: can't read configurations, error -61 [ 90.334711][ T2233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.350955][ T2233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.359615][ T2233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.439277][ T2236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.447855][ T2236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.463890][ T1885] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 90.625190][ T1885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.634466][ T1885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 90.642269][ T1885] usb 4-1: can't read configurations, error -61 [ 90.648798][ T1885] usb usb4-port1: attempt power cycle [ 90.687725][ T351] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 90.848657][ T351] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.858806][ T351] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 90.867646][ T351] usb 2-1: config 1 has no interface number 0 [ 90.873739][ T351] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.884705][ T351] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 90.895664][ T351] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 90.904895][ T351] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 90.919850][ T351] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.929103][ T351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.937553][ T351] usb 2-1: Product: syz [ 90.941736][ T351] usb 2-1: Manufacturer: syz [ 90.946757][ T351] usb 2-1: SerialNumber: syz [ 90.955822][ T2235] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.007505][ T1885] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 91.030670][ T1885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.039884][ T1885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 91.047638][ T1885] usb 4-1: can't read configurations, error -61 [ 91.179870][ T351] cdc_ncm 2-1:1.1: bind() failure [ 91.186105][ T351] usb 2-1: USB disconnect, device number 44 [ 91.192085][ T1885] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 91.222444][ T1885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.231213][ T1885] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 91.238841][ T1885] usb 4-1: can't read configurations, error -61 [ 91.245376][ T1885] usb usb4-port1: unable to enumerate USB device [ 91.741387][ T2255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 91.741418][ T2255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:505 [ 91.752649][ T2255] netlink: 36 bytes leftover after parsing attributes in process `syz.1.610'. [ 91.772927][ T2255] can0: slcan on ptm0. [ 91.778077][ T2255] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.820703][ T2254] can0 (unregistered): slcan off ptm0. [ 91.838851][ T402] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 91.985996][ T2288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.987421][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 91.987439][ T36] audit: type=1400 audit(1775012960.035:379): avc: denied { bind } for pid=2287 comm="syz.0.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.994837][ T2288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.001970][ T36] audit: type=1400 audit(1775012960.035:380): avc: denied { append } for pid=2287 comm="syz.0.612" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.059542][ T402] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.069575][ T402] usb 3-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice= 0.40 [ 92.079155][ T402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.094373][ T402] usb 3-1: Product: syz [ 92.098597][ T402] usb 3-1: Manufacturer: syz [ 92.103225][ T402] usb 3-1: SerialNumber: syz [ 92.110202][ T402] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 92.119849][ T402] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 92.131201][ T402] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 92.146977][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.325640][ T351] usb 3-1: USB disconnect, device number 41 [ 92.393115][ T307] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 92.554337][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.562897][ T307] usb 2-1: not running at top speed; connect to a high speed hub [ 92.573791][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.584035][ T307] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.594950][ T307] usb 2-1: string descriptor 0 read error: -22 [ 92.601258][ T307] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.610426][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.620538][ T307] usb 2-1: 0:2 : does not exist [ 92.937323][ T36] audit: type=1400 audit(1775012960.936:381): avc: denied { getopt } for pid=2303 comm="syz.2.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.512328][ T402] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 93.673292][ T402] usb 4-1: LPM exit latency is zeroed, disabling LPM. [ 93.680870][ T402] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 93.695926][ T402] usb 4-1: string descriptor 0 read error: -22 [ 93.702135][ T402] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.711959][ T402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.721399][ T2313] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.728879][ T2313] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 93.737283][ T402] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 93.781011][ T36] audit: type=1400 audit(1775012961.724:382): avc: denied { read } for pid=2317 comm="syz.2.621" name="file2" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.803452][ T36] audit: type=1400 audit(1775012961.724:383): avc: denied { open } for pid=2317 comm="syz.2.621" path="/135/file2" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.826307][ T36] audit: type=1400 audit(1775012961.724:384): avc: denied { ioctl } for pid=2317 comm="syz.2.621" path="/135/file2" dev="tmpfs" ino=732 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.850691][ T36] audit: type=1400 audit(1775012961.752:385): avc: denied { accept } for pid=2320 comm="syz.2.622" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.860646][ T307] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 93.880721][ T307] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 93.892333][ T307] usb 2-1: USB disconnect, device number 45 [ 93.950388][ T2313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.958853][ T2313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.968188][ T1885] usb 4-1: USB disconnect, device number 44 [ 94.066575][ T402] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 94.227542][ T402] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 94.235793][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.247764][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.257575][ T402] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.270919][ T402] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.280531][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.289144][ T402] usb 3-1: config 0 descriptor?? [ 94.489582][ T36] audit: type=1400 audit(1775012962.381:386): avc: denied { mount } for pid=2329 comm="syz.1.626" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 94.517295][ T36] audit: type=1400 audit(1775012962.399:387): avc: denied { mounton } for pid=2329 comm="syz.1.626" path="/156/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 94.541564][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.552023][ T36] audit: type=1400 audit(1775012962.446:388): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 94.557428][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.604166][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.636785][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.644663][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.676392][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.688977][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.696897][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.714537][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.722075][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.739361][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.763903][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.771865][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.779275][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.786677][ T402] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 94.794301][ T402] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 94.808816][ T402] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 94.972947][ T2332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.984658][ T2321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.994326][ T2332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.996245][ T2321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.061653][ T2380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'. [ 95.071772][ T2380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.080403][ T2380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.093288][ T2380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.101937][ T2380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.111123][ T351] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 95.270949][ T351] usb 2-1: Using ep0 maxpacket: 8 [ 95.277293][ T351] usb 2-1: config 1 has an invalid interface number: 172 but max is 2 [ 95.285560][ T351] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 95.296198][ T351] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.305222][ T351] usb 2-1: config 1 has no interface number 0 [ 95.311587][ T351] usb 2-1: config 1 interface 172 has no altsetting 0 [ 95.320444][ T351] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 95.329674][ T351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.337706][ T351] usb 2-1: Product: syz [ 95.341885][ T351] usb 2-1: Manufacturer: syz [ 95.346678][ T351] usb 2-1: SerialNumber: syz [ 95.566670][ T2362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 95.581225][ T2363] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 95.581233][ T2362] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 95.609459][ T2363] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 95.719274][ T2390] netlink: 'syz.0.647': attribute type 16 has an invalid length. [ 95.727182][ T2390] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.647'. [ 95.748829][ T2392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.757387][ T2392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.765989][ T2392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.774581][ T2392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.788570][ T2392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.797232][ T2392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.931813][ T402] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 96.092920][ T402] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 96.101256][ T402] usb 4-1: config 0 has no interface number 0 [ 96.107412][ T402] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 96.119916][ T402] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 96.129097][ T402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.137139][ T402] usb 4-1: Product: syz [ 96.141786][ T402] usb 4-1: Manufacturer: syz [ 96.146451][ T402] usb 4-1: SerialNumber: syz [ 96.151700][ T402] usb 4-1: config 0 descriptor?? [ 96.156999][ T2384] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 96.169322][ T402] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 96:0e:ae:cb:26:c6 [ 96.169461][ T351] usb 2-1: unknown interface protocol 0x60, assuming v1 [ 96.189642][ T351] usb 2-1: cannot find UAC_HEADER [ 96.201266][ T351] snd-usb-audio 2-1:1.172: probe with driver snd-usb-audio failed with error -22 [ 96.226894][ T351] usb 2-1: USB disconnect, device number 46 [ 96.231831][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.172/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.342024][ T2410] SELinux: policydb table sizes (32,20) do not match mine (8,7) [ 96.349859][ T2410] SELinux: failed to load policy [ 96.594610][ T2384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.603290][ T2384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.611646][ T402] usb 4-1: USB disconnect, device number 45 [ 96.621193][ T402] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 96.912900][ T1885] usb 3-1: USB disconnect, device number 42 [ 97.226360][ T2459] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 97.621777][ T2497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.630675][ T2497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.698367][ T305] tipc: Subscription rejected, illegal request [ 97.699980][ T2502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.713445][ T2501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.722005][ T2502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.725708][ T2501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.764114][ T2508] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 97.773185][ T2508] overlayfs: missing 'lowerdir' [ 97.956978][ T402] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 98.031564][ T339] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 98.117951][ T402] usb 2-1: config 2 has an invalid interface number: 210 but max is 1 [ 98.126352][ T402] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 98.135100][ T402] usb 2-1: config 2 has an invalid descriptor of length 237, skipping remainder of the config [ 98.145476][ T402] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 98.154369][ T402] usb 2-1: config 2 has no interface number 0 [ 98.160560][ T402] usb 2-1: config 2 interface 210 altsetting 0 endpoint 0x8 has invalid maxpacket 12394, setting to 1024 [ 98.171955][ T402] usb 2-1: config 2 interface 210 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 98.182386][ T402] usb 2-1: config 2 interface 210 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 98.197089][ T402] usb 2-1: New USB device found, idVendor=2040, idProduct=d8d3, bcdDevice=80.57 [ 98.206365][ T339] usb 3-1: Using ep0 maxpacket: 16 [ 98.211706][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.220163][ T402] usb 2-1: Product: syz [ 98.224642][ T402] usb 2-1: Manufacturer: syz [ 98.229326][ T402] usb 2-1: SerialNumber: syz [ 98.234542][ T339] usb 3-1: config 8 has an invalid interface number: 216 but max is 0 [ 98.242977][ T339] usb 3-1: config 8 has no interface number 0 [ 98.249243][ T339] usb 3-1: config 8 interface 216 has no altsetting 0 [ 98.256715][ T2503] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 98.259056][ T339] usb 3-1: New USB device found, idVendor=0ace, idProduct=2011, bcdDevice= 1.01 [ 98.273522][ T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.282232][ T339] usb 3-1: Product: syz [ 98.286473][ T339] usb 3-1: Manufacturer: syz [ 98.291167][ T339] usb 3-1: SerialNumber: syz [ 98.354971][ T2512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.363607][ T2512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.486451][ T2522] rust_binder: Write failure EINVAL in pid:470 [ 98.494359][ T402] usb 2-1: USB disconnect, device number 47 [ 98.514834][ T339] usb-storage 3-1:8.216: USB Mass Storage device detected [ 98.528859][ T339] usb-storage 3-1:8.216: device ignored [ 98.579217][ T339] usb 3-1: USB disconnect, device number 43 [ 98.918775][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 98.918791][ T36] audit: type=1400 audit(1775012966.546:396): avc: denied { execute } for pid=2538 comm="syz.0.689" path="/selinux/status" dev="selinuxfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 98.968248][ T2545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.978540][ T2545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.385224][ T402] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 99.481177][ T351] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 99.523112][ T2565] SELinux: policydb string length -1627389944 does not match expected length 8 [ 99.530925][ T402] usb 2-1: device descriptor read/64, error -71 [ 99.532214][ T2565] SELinux: failed to load policy [ 99.628256][ T36] audit: type=1400 audit(1775012967.203:397): avc: denied { lock } for pid=2571 comm="syz.0.700" path="socket:[19342]" dev="sockfs" ino=19342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 99.653479][ T351] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.663699][ T351] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 99.667881][ T36] audit: type=1400 audit(1775012967.240:398): avc: denied { read } for pid=2574 comm="syz.0.701" path="socket:[20159]" dev="sockfs" ino=20159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.675339][ T351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 99.698727][ T2575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.709388][ T351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 99.719509][ T2575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.731130][ T351] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.749462][ T351] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 99.758580][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 99.766683][ T351] usb 3-1: Product: syz [ 99.770924][ T351] usb 3-1: Manufacturer: syz [ 99.775547][ T351] usb 3-1: SerialNumber: syz [ 99.780706][ T351] usb 3-1: config 0 descriptor?? [ 99.790278][ T402] usb 2-1: device descriptor read/64, error -71 [ 100.046082][ T402] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 100.171187][ T351] usb 3-1: USB disconnect, device number 44 [ 100.195304][ T402] usb 2-1: device descriptor read/64, error -71 [ 100.279686][ T2588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.288222][ T2588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.297461][ T2588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.306338][ T2588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.461749][ T402] usb 2-1: device descriptor read/64, error -71 [ 100.579104][ T402] usb usb2-port1: attempt power cycle [ 100.738918][ T339] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 100.871800][ T2594] 9pnet: Unknown protocol version 9 [ 100.905159][ T339] usb 4-1: not running at top speed; connect to a high speed hub [ 100.912976][ T36] audit: type=1400 audit(1775012968.404:399): avc: denied { create } for pid=2600 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.928485][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.933027][ T339] usb 4-1: config 0 has an invalid interface number: 76 but max is 0 [ 100.941962][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.948975][ T402] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 100.962660][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.964588][ T339] usb 4-1: config 0 has no interface number 0 [ 100.974160][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.979057][ T339] usb 4-1: config 0 interface 76 has no altsetting 0 [ 100.994549][ T339] usb 4-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 101.003675][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.011751][ T339] usb 4-1: Product: 륗뉏蔟渑瞗閏ঊꘪ뵞筷޽㖂約붽琩쥂节蜰ㅋ拙뭧ꈇ䱭著홄酇ᕇ쮣㳡솰ꡭ눡愌€㫏䙪涇䞲旼߈戊梩㜫뽲ݣ⴪㙘碛៨ꫂ䋥ఛ↴ꊲ㔜퉈ꁽꁏ蠶뺌㪾ꯓࠁạ鞎뾦㳠騛⢍ꀥ㙻ཏ㛧ඁ蒙橍㹎캓⟭噾఩헡᭱孮ﮋ큜ȣ醍 [ 101.041456][ T339] usb 4-1: Manufacturer: 猪꾣觻㽙ዸӜ鈪䠈湒ﮐᓖ刕뫷ꊊ幸쩔뛞洠㱪韹℣ט촀㡜㨼ퟚ쏦䃦ݼ⽐灗慙짳橘怙獦왕顥ﵼὲㄶ᫘苠詽剒샄鏅쥓⊐施胣⦓㼛彊羞㪮뼆暫䮚 [ 101.063824][ T339] usb 4-1: SerialNumber: syz [ 101.070284][ T339] usb 4-1: config 0 descriptor?? [ 101.075445][ T402] usb 2-1: device descriptor read/8, error -71 [ 101.106138][ T2608] fuse: Bad value for 'fd' [ 101.219530][ T402] usb 2-1: device descriptor read/8, error -71 [ 101.297413][ T36] audit: type=1326 audit(1775012968.770:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2589 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5a19c819 code=0x50000 [ 101.320478][ T36] audit: type=1326 audit(1775012968.770:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2589 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5a19c819 code=0x50000 [ 101.343492][ T36] audit: type=1326 audit(1775012968.770:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2589 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5a19c819 code=0x50000 [ 101.366640][ T36] audit: type=1326 audit(1775012968.770:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2589 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5a19c819 code=0x50000 [ 101.389872][ T36] audit: type=1326 audit(1775012968.770:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2589 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5a19c819 code=0x50000 [ 101.412882][ T36] audit: type=1326 audit(1775012968.770:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2589 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5a19c819 code=0x50000 [ 101.474327][ T351] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 101.495712][ T402] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 101.528629][ T402] usb 2-1: device descriptor read/8, error -71 [ 101.635233][ T351] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 101.649305][ T351] usb 3-1: config 0 has no interface number 0 [ 101.655676][ T351] usb 3-1: config 0 interface 41 has no altsetting 0 [ 101.667179][ T402] usb 2-1: device descriptor read/8, error -71 [ 101.667507][ T351] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 101.687466][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.695615][ T351] usb 3-1: Product: syz [ 101.706344][ T351] usb 3-1: Manufacturer: syz [ 101.711005][ T351] usb 3-1: SerialNumber: syz [ 101.717279][ T351] usb 3-1: config 0 descriptor?? [ 101.783525][ T402] usb usb2-port1: unable to enumerate USB device [ 101.798825][ T2614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.816000][ T2614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.487922][ T2626] rust_binder: Write failure EFAULT in pid:568 [ 102.584002][ T351] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 103.035766][ T351] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 103.048237][ T351] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 103.062315][ T351] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 103.085187][ T351] usb 3-1: USB disconnect, device number 45 [ 103.697342][ T339] usb-storage 4-1:0.76: USB Mass Storage device detected [ 103.732836][ T339] usb 4-1: USB disconnect, device number 46 [ 103.963771][ T2644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 104.572727][ T2650] incfs: Can't find or create .index dir in ./cgroup [ 104.579929][ T2650] incfs: mount failed -22 [ 105.194206][ T351] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 105.354095][ T351] usb 4-1: Using ep0 maxpacket: 16 [ 105.360465][ T351] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.371845][ T351] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.381816][ T351] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.388735][ T1885] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 105.396280][ T351] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 105.406158][ T351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.416570][ T351] usb 4-1: config 0 descriptor?? [ 105.568756][ T1885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.577379][ T1885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.588078][ T1885] usb 3-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 105.599404][ T1885] usb 3-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 105.613094][ T1885] usb 3-1: config 1 interface 0 has no altsetting 0 [ 105.622259][ T1885] usb 3-1: string descriptor 0 read error: -22 [ 105.628686][ T1885] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.639788][ T1885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.652669][ T1885] usb 3-1: bad CDC descriptors [ 105.854711][ T2658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.864027][ T2658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.881764][ T36] kauditd_printk_skb: 24840 callbacks suppressed [ 105.881993][ T36] audit: type=1400 audit(1775012973.076:25246): avc: denied { create } for pid=2657 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.916394][ T351] hid (null): invalid report_count 917005432 [ 105.922642][ T351] hid (null): unknown global tag 0xd1 [ 105.928284][ T351] hid (null): invalid report_size -246142364 [ 105.942157][ T1885] usb 3-1: USB disconnect, device number 46 [ 106.127304][ T2658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.136012][ T2658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.178878][ T2658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.188300][ T2658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.293356][ T1885] usb 4-1: USB disconnect, device number 47 [ 106.499935][ T36] audit: type=1400 audit(1775012973.658:25247): avc: denied { create } for pid=2686 comm="syz.2.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.539872][ T2689] netlink: 'syz.2.739': attribute type 1 has an invalid length. [ 106.824995][ T1885] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 106.908854][ T36] audit: type=1400 audit(1775012974.033:25248): avc: denied { read } for pid=2695 comm="syz.3.741" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.929914][ T2697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 106.943712][ T2697] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.968140][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.981323][ T2699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.990180][ T2699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.999828][ T1885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.016869][ T1885] usb 3-1: not running at top speed; connect to a high speed hub [ 107.025433][ T1885] usb 3-1: config 1 has an invalid interface number: 20 but max is 2 [ 107.033610][ T1885] usb 3-1: config 1 has no interface number 0 [ 107.039997][ T1885] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 107.051435][ T1885] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 236, changing to 4 [ 107.069666][ T1885] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 107.078964][ T1885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.087428][ T1885] usb 3-1: Product: syz [ 107.092693][ T1885] usb 3-1: Manufacturer: syz [ 107.094806][ T2713] netlink: 60 bytes leftover after parsing attributes in process `syz.0.747'. [ 107.097305][ T1885] usb 3-1: SerialNumber: syz [ 107.143103][ T36] audit: type=1400 audit(1775012974.258:25249): avc: denied { sqpoll } for pid=2717 comm="syz.0.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.330982][ T1885] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 107.341410][ T1885] snd-usb-audio 3-1:1.20: probe with driver snd-usb-audio failed with error -22 [ 107.353070][ T1885] usb 3-1: USB disconnect, device number 47 [ 107.353839][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.20/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.848232][ T402] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 108.009171][ T402] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 108.017458][ T402] usb 2-1: config 0 has no interface number 0 [ 108.025339][ T402] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 108.035278][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.043548][ T402] usb 2-1: Product: syz [ 108.047781][ T402] usb 2-1: Manufacturer: syz [ 108.052408][ T402] usb 2-1: SerialNumber: syz [ 108.057902][ T402] usb 2-1: config 0 descriptor?? [ 108.088815][ T2741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 108.109020][ T2743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.118269][ T2743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.209708][ T36] audit: type=1400 audit(1775012975.253:25250): avc: denied { map } for pid=2746 comm="syz.2.757" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 108.261810][ T2753] input: syz1 as /devices/virtual/input/input17 [ 108.280939][ T402] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 108.287848][ T402] usb 2-1: No valid video chain found. [ 108.295266][ T402] usb 2-1: USB disconnect, device number 52 [ 108.783754][ T2765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.792448][ T2765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.802421][ T2765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.811011][ T2765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.900377][ T2785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.771'. [ 108.914246][ T2786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.922858][ T2786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.084642][ T1885] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 109.095336][ T720] Bluetooth: hci0: command 0x1003 tx timeout [ 109.095353][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.107516][ T402] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 109.245634][ T1885] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 109.254315][ T1885] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 109.263264][ T1885] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 109.273571][ T1885] usb 2-1: config 220 has no interface number 2 [ 109.276477][ T402] usb 3-1: Using ep0 maxpacket: 32 [ 109.280022][ T1885] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 109.298382][ T1885] usb 2-1: config 220 interface 0 has no altsetting 0 [ 109.299516][ T402] usb 3-1: config 6 has an invalid interface number: 251 but max is 1 [ 109.305282][ T1885] usb 2-1: config 220 interface 76 has no altsetting 0 [ 109.320594][ T1885] usb 2-1: config 220 interface 1 has no altsetting 0 [ 109.324365][ T402] usb 3-1: config 6 has an invalid interface number: 9 but max is 1 [ 109.335659][ T402] usb 3-1: config 6 has no interface number 0 [ 109.336958][ T1885] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 109.341757][ T402] usb 3-1: config 6 has no interface number 1 [ 109.341794][ T402] usb 3-1: config 6 interface 251 has no altsetting 0 [ 109.350848][ T1885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.357033][ T402] usb 3-1: config 6 interface 9 has no altsetting 0 [ 109.380142][ T402] usb 3-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=e9.d2 [ 109.389487][ T402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.397683][ T402] usb 3-1: Product: syz [ 109.402033][ T402] usb 3-1: Manufacturer: syz [ 109.404636][ T1885] usb 2-1: Product: syz [ 109.406701][ T402] usb 3-1: SerialNumber: syz [ 109.410780][ T1885] usb 2-1: Manufacturer: syz [ 109.410800][ T1885] usb 2-1: SerialNumber: syz [ 109.492177][ T2792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.501862][ T2792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.512576][ T2792] fuse: Bad value for 'fd' [ 109.519004][ T2792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.519375][ T36] audit: type=1400 audit(1775012976.482:25251): avc: denied { mounton } for pid=2791 comm="syz.0.773" path="/241/file0" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.528082][ T2792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.645577][ T1885] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 109.647616][ T402] asix 3-1:6.251: probe with driver asix failed with error -22 [ 109.653299][ T1885] usb 2-1: No valid video chain found. [ 109.661557][ T402] asix 3-1:6.9: probe with driver asix failed with error -22 [ 109.665651][ T1885] usb 2-1: selecting invalid altsetting 0 [ 109.689117][ T1885] usb 2-1: USB disconnect, device number 53 [ 109.691444][ T402] usb 3-1: USB disconnect, device number 48 [ 110.057402][ T36] audit: type=1400 audit(1775012976.998:25252): avc: denied { create } for pid=2793 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 110.077818][ T36] audit: type=1400 audit(1775012976.998:25253): avc: denied { create } for pid=2793 comm="syz.3.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 110.153095][ T36] audit: type=1400 audit(1775012977.082:25254): avc: denied { create } for pid=2813 comm="syz.3.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 110.352500][ T36] audit: type=1400 audit(1775012977.260:25255): avc: denied { map } for pid=2831 comm="syz.0.787" path="socket:[22195]" dev="sockfs" ino=22195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.384726][ T2834] futex_wake_op: syz.0.788 tries to shift op by 144; fix this program [ 110.491592][ T402] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 110.523565][ T339] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 110.576877][ T840] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 110.652760][ T402] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.663539][ T402] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.675171][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 110.686995][ T402] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.699889][ T339] usb 2-1: Using ep0 maxpacket: 8 [ 110.706046][ T339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.716267][ T339] usb 2-1: config 0 has no interfaces? [ 110.721874][ T402] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 110.731036][ T402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.739196][ T840] usb 4-1: Using ep0 maxpacket: 16 [ 110.744411][ T402] usb 3-1: Product: syz [ 110.748646][ T402] usb 3-1: Manufacturer: syz [ 110.753346][ T402] usb 3-1: SerialNumber: syz [ 110.758496][ T339] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 110.767569][ T339] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 110.775864][ T840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.786999][ T402] usb 3-1: config 0 descriptor?? [ 110.792031][ T339] usb 2-1: Product: syz [ 110.796199][ T339] usb 2-1: Manufacturer: syz [ 110.796291][ T2821] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 110.800860][ T840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.818531][ T402] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 110.828346][ T339] usb 2-1: SerialNumber: syz [ 110.833598][ T339] usb 2-1: config 0 descriptor?? [ 110.838788][ T840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 110.847275][ T840] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 110.856400][ T840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.865368][ T840] usb 4-1: config 0 descriptor?? [ 111.034571][ T339] usb 3-1: USB disconnect, device number 49 [ 111.062742][ T2824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.071402][ T2824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.106007][ T2848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.115279][ T2848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.145434][ T2859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.154179][ T2859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.254975][ T840] usbhid 4-1:0.0: can't add hid device: -71 [ 111.261008][ T840] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 111.270312][ T840] usb 4-1: USB disconnect, device number 48 [ 111.845293][ T840] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 112.071519][ T2875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.080081][ T2875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.154365][ T1885] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 112.155421][ T840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.173365][ T840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.183885][ T840] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 112.192951][ T840] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 112.200976][ T840] usb 3-1: Manufacturer: syz [ 112.206140][ T840] usb 3-1: config 0 descriptor?? [ 112.314260][ T1885] usb 4-1: Using ep0 maxpacket: 16 [ 112.320499][ T1885] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.335120][ T1885] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 112.344773][ T1885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.352791][ T1885] usb 4-1: Product: syz [ 112.356991][ T1885] usb 4-1: Manufacturer: syz [ 112.361604][ T1885] usb 4-1: SerialNumber: syz [ 112.586902][ T2889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.596191][ T2889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.604783][ T2889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.613392][ T2889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.691112][ T1885] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 112.701878][ T1885] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 112.716474][ T1885] usb 4-1: USB disconnect, device number 49 [ 112.727048][ T1069] udevd[1069]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 112.741526][ T2893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.752219][ T2893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.853488][ T2861] 9pnet_fd: Insufficient options for proto=fd [ 113.073816][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 113.073833][ T36] audit: type=1400 audit(1775012979.822:25257): avc: denied { map } for pid=2860 comm="syz.2.798" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.077093][ T840] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input19 [ 113.114639][ T840] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input20 [ 113.126167][ T840] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input21 [ 113.138744][ T840] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000C/input/input22 [ 113.151044][ T840] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 113.298118][ T2861] netlink: 'syz.2.798': attribute type 8 has an invalid length. [ 113.309710][ T1885] usb 3-1: USB disconnect, device number 50 [ 113.334928][ T2903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.344460][ T2903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.424858][ T339] usb 2-1: USB disconnect, device number 54 [ 113.689184][ T840] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 113.996218][ T2917] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 114.012479][ T2917] kvm: requested 51123 ns i8254 timer period limited to 200000 ns [ 114.028978][ T2917] kvm: requested 57828 ns i8254 timer period limited to 200000 ns [ 114.402599][ T2931] netlink: 'syz.1.821': attribute type 8 has an invalid length. [ 114.607261][ T840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.888012][ T840] usb 4-1: config 1 interface 0 has no altsetting 0 [ 114.896505][ T840] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 114.915001][ T840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.927756][ T840] usb 4-1: Product: syz [ 114.936246][ T840] usb 4-1: Manufacturer: syz [ 114.945671][ T840] usb 4-1: SerialNumber: syz [ 115.169849][ T36] audit: type=1400 audit(1775012981.783:25258): avc: denied { setopt } for pid=2910 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.177922][ T840] usbhid 4-1:1.0: can't add hid device: -71 [ 115.202759][ T840] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 115.222636][ T840] usb 4-1: USB disconnect, device number 50 [ 115.394742][ T2945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:539 [ 115.394827][ T2945] can: request_module (can-proto-0) failed. [ 115.410199][ T2945] 9pnet_fd: Insufficient options for proto=fd [ 115.795083][ T2961] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 115.874225][ T840] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 116.045511][ T840] usb 2-1: not running at top speed; connect to a high speed hub [ 116.061950][ T840] usb 2-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 116.086036][ T840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.094330][ T840] usb 2-1: Product: syz [ 116.098532][ T840] usb 2-1: Manufacturer: syz [ 116.103139][ T840] usb 2-1: SerialNumber: syz [ 116.339325][ T840] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 116.365285][ T840] usb 2-1: USB disconnect, device number 55 [ 116.377646][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 116.427766][ T2964] rust_binder: Failed to allocate buffer. len:1112, is_oneway:true [ 116.722866][ T2978] cgroup: noprefix used incorrectly [ 116.812023][ T36] audit: type=1400 audit(1775012983.321:25259): avc: denied { lock } for pid=2980 comm="syz.0.839" path="socket:[23846]" dev="sockfs" ino=23846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 116.867306][ T2982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.884562][ T2983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.884680][ T2982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.897589][ T2983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.004059][ T339] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 117.174607][ T339] usb 4-1: Using ep0 maxpacket: 32 [ 117.181131][ T339] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.191518][ T339] usb 4-1: config 0 has no interfaces? [ 117.197141][ T339] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 117.206476][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.216115][ T339] usb 4-1: config 0 descriptor?? [ 117.436974][ T10] usb 4-1: USB disconnect, device number 51 [ 117.492392][ T2996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.500999][ T2996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.739502][ T1885] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 117.833860][ T2999] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 117.842619][ T2999] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 117.878060][ T1885] usb 3-1: device descriptor read/64, error -71 [ 118.023346][ T3012] rust_binder: Failed to allocate buffer. len:1112, is_oneway:true [ 118.144982][ T1885] usb 3-1: device descriptor read/64, error -71 [ 118.293774][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 118.421670][ T1885] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 118.465779][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.474456][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.484969][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 118.494161][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 118.507165][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 118.516500][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.524879][ T10] usb 4-1: Product: syz [ 118.529341][ T10] usb 4-1: Manufacturer: syz [ 118.534006][ T10] usb 4-1: SerialNumber: syz [ 118.560266][ T1885] usb 3-1: device descriptor read/64, error -71 [ 118.756431][ T3014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.766343][ T3015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.775862][ T3014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.784745][ T3015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.794020][ T3014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.804043][ T3015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.813550][ T3014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.822314][ T3015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.827062][ T3014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.830932][ T1885] usb 3-1: device descriptor read/64, error -71 [ 118.850315][ T3014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.868181][ T10] usb 4-1: Can't get UAC3 power state for id 10 [ 118.876820][ T10] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 118.886469][ T10] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 118.896755][ T10] usb 4-1: USB disconnect, device number 52 [ 118.926240][ T3017] sock: sock_timestamping_bind_phc: sock not bind to device [ 118.954726][ T1885] usb usb3-port1: attempt power cycle [ 119.189114][ T339] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 119.317010][ T1885] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 119.339457][ T1885] usb 3-1: device descriptor read/8, error -71 [ 119.350478][ T339] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.358764][ T339] usb 2-1: not running at top speed; connect to a high speed hub [ 119.367564][ T339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.377716][ T339] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.386730][ T339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 119.398948][ T339] usb 2-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 119.408130][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.416156][ T339] usb 2-1: Product: syz [ 119.420330][ T339] usb 2-1: Manufacturer: syz [ 119.425146][ T339] usb 2-1: SerialNumber: syz [ 119.478302][ T1885] usb 3-1: device descriptor read/8, error -71 [ 119.650165][ T339] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 119.658256][ T339] usb 2-1: 1:1 : format type 13 is not supported yet [ 119.665235][ T339] usb 2-1: unit 2 not found! [ 119.669942][ T339] usb 2-1: unit 8 not found! [ 119.676377][ T339] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 119.686707][ T339] usb 2-1: USB disconnect, device number 56 [ 119.693522][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.732721][ T1885] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 119.755025][ T1885] usb 3-1: device descriptor read/8, error -71 [ 119.893758][ T1885] usb 3-1: device descriptor read/8, error -71 [ 120.009964][ T1885] usb usb3-port1: unable to enumerate USB device [ 120.045743][ T3031] tipc: Started in network mode [ 120.050778][ T3031] tipc: Node identity 0300000000000000c593be39, cluster identity 4711 [ 120.170944][ T36] audit: type=1400 audit(1775012986.483:25260): avc: denied { setattr } for pid=3039 comm="syz.0.860" name="/" dev="configfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.233636][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 120.310336][ T3050] netlink: 'syz.1.863': attribute type 6 has an invalid length. [ 120.318321][ T3051] netlink: 'syz.1.863': attribute type 6 has an invalid length. [ 120.327711][ T3050] netlink: 100 bytes leftover after parsing attributes in process `syz.1.863'. [ 120.357249][ T3053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3053 comm=syz.0.864 [ 120.395581][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 120.404455][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 120.411919][ T3056] fuse: Bad value for 'group_id' [ 120.413606][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 120.418672][ T3056] fuse: Bad value for 'group_id' [ 120.429299][ T10] usb 4-1: config 220 has no interface number 2 [ 120.440409][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 120.454489][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 120.461609][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 120.468890][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 120.477411][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 120.486712][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.492772][ T3060] tipc: Enabling of bearer rejected, failed to enable media [ 120.495053][ T10] usb 4-1: Product: syz [ 120.507503][ T10] usb 4-1: Manufacturer: syz [ 120.512132][ T10] usb 4-1: SerialNumber: syz [ 120.585447][ T1885] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 120.734168][ T10] usb 4-1: selecting invalid altsetting 0 [ 120.740834][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 120.747620][ T1885] usb 2-1: Using ep0 maxpacket: 32 [ 120.752887][ T10] usb 4-1: No valid video chain found. [ 120.760319][ T1885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.773502][ T10] usb 4-1: USB disconnect, device number 53 [ 120.779522][ T1885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.790237][ T1885] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 120.800125][ T1885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.810888][ T1885] usb 2-1: config 0 descriptor?? [ 120.907200][ T36] audit: type=1400 audit(1791790432.178:25261): avc: granted { setsecparam } for pid=3064 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 121.048126][ T3069] netlink: 'syz.0.871': attribute type 27 has an invalid length. [ 121.067041][ T3071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.075575][ T3071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.083846][ T3072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.092413][ T3071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.093192][ T3072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.101573][ T3071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.245901][ T1885] savu 0003:1E7D:2D5A.000D: item fetching failed at offset 7/8 [ 121.253663][ T1885] savu 0003:1E7D:2D5A.000D: parse failed [ 121.259358][ T1885] savu 0003:1E7D:2D5A.000D: probe with driver savu failed with error -22 [ 121.492143][ T3077] fuse: Bad value for 'group_id' [ 121.497110][ T3077] fuse: Bad value for 'group_id' [ 121.597951][ T402] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 121.721770][ T3085] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 121.732123][ T3085] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 121.740588][ T3085] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 121.757520][ T3085] can0: slcan on ttyS3. [ 121.766376][ T402] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 121.775013][ T402] usb 4-1: config 0 has no interface number 0 [ 121.781399][ T402] usb 4-1: config 0 interface 41 has no altsetting 0 [ 121.789675][ T402] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 121.799597][ T3084] can0 (unregistered): slcan off ttyS3. [ 121.799596][ T402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.799619][ T402] usb 4-1: Product: syz [ 121.817989][ T402] usb 4-1: Manufacturer: syz [ 121.822943][ T402] usb 4-1: SerialNumber: syz [ 121.828442][ T402] usb 4-1: config 0 descriptor?? [ 122.415327][ T3098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.430172][ T3098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.517180][ T339] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 122.525585][ T339] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.602001][ T3105] fuse: Bad value for 'group_id' [ 122.606975][ T3105] fuse: Bad value for 'group_id' [ 122.664788][ T3107] kvm: kvm [3106]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 122.673865][ T3107] kvm: kvm [3106]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 122.688790][ T402] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 122.962296][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 123.007398][ T36] audit: type=1400 audit(1791790434.141:25262): avc: denied { accept } for pid=3113 comm="syz.0.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.123298][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 185, changing to 11 [ 123.144713][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49152, setting to 1024 [ 123.165807][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 123.179529][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 123.190728][ T10] usb 3-1: Manufacturer: syz [ 123.197293][ T10] usb 3-1: config 0 descriptor?? [ 123.236754][ T3125] incfs: Backing dir is not set, filesystem can't be mounted. [ 123.236796][ T3126] incfs: Backing dir is not set, filesystem can't be mounted. [ 123.244415][ T3125] incfs: mount failed -2 [ 123.256298][ T3126] incfs: mount failed -2 [ 123.521198][ T427] usb 2-1: USB disconnect, device number 57 [ 123.610026][ T3133] netlink: 104 bytes leftover after parsing attributes in process `syz.1.891'. [ 123.974840][ T427] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 124.113424][ T427] usb 2-1: device descriptor read/64, error -71 [ 124.275204][ T10] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000F/input/input23 [ 124.296049][ T10] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 124.369223][ T427] usb 2-1: device descriptor read/64, error -71 [ 124.459840][ T3145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.468877][ T3145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.488057][ T840] usb 3-1: USB disconnect, device number 55 [ 124.552332][ T402] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 124.563157][ T402] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 124.572655][ T402] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 124.584261][ T402] usb 4-1: USB disconnect, device number 54 [ 124.625043][ T427] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 124.639255][ T3151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.898'. [ 124.697991][ T3163] FAULT_INJECTION: forcing a failure. [ 124.697991][ T3163] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.711140][ T3163] CPU: 1 UID: 0 PID: 3163 Comm: syz.3.902 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 124.711168][ T3163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.711181][ T3163] Call Trace: [ 124.711187][ T3163] [ 124.711193][ T3163] __dump_stack+0x21/0x30 [ 124.711218][ T3163] dump_stack_lvl+0x140/0x1c0 [ 124.711238][ T3163] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.711258][ T3163] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x10/0x10 [ 124.711287][ T3163] dump_stack+0x19/0x20 [ 124.711307][ T3163] should_fail_ex+0x3d7/0x530 [ 124.711327][ T3163] should_fail+0xf/0x20 [ 124.711346][ T3163] should_fail_usercopy+0x1e/0x30 [ 124.711383][ T3163] _copy_from_user+0x20/0xa0 [ 124.711399][ T3163] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0xa67/0x5c20 [ 124.711421][ T3163] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 124.711448][ T3163] ? is_bpf_text_address+0x17b/0x1a0 [ 124.711471][ T3163] ? is_bpf_text_address+0x17b/0x1a0 [ 124.711490][ T3163] ? kernel_text_address+0xa9/0xe0 [ 124.711508][ T3163] ? __kernel_text_address+0x11/0x40 [ 124.711526][ T3163] ? unwind_get_return_address+0x51/0x90 [ 124.711544][ T3163] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 124.711563][ T3163] ? arch_stack_walk+0x10a/0x170 [ 124.711591][ T3163] ? is_bpf_text_address+0x17b/0x1a0 [ 124.711611][ T3163] ? kernel_text_address+0xa9/0xe0 [ 124.711628][ T3163] ? __kernel_text_address+0x11/0x40 [ 124.711645][ T3163] ? unwind_get_return_address+0x51/0x90 [ 124.711662][ T3163] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 124.711680][ T3163] ? arch_stack_walk+0x10a/0x170 [ 124.711704][ T3163] ? stack_depot_save_flags+0x38/0x800 [ 124.711725][ T3163] ? stack_trace_save+0xaa/0x100 [ 124.711742][ T3163] ? kasan_save_track+0x4f/0x80 [ 124.711776][ T3163] ? kasan_save_track+0x3e/0x80 [ 124.711799][ T3163] ? kasan_save_alloc_info+0x40/0x50 [ 124.711821][ T3163] ? __kasan_slab_alloc+0x73/0x90 [ 124.711838][ T3163] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 124.711862][ T3163] ? security_inode_alloc+0x51/0x230 [ 124.711886][ T3163] ? inode_init_always_gfp+0x756/0x9e0 [ 124.711912][ T3163] ? alloc_inode+0xc5/0x270 [ 124.711929][ T3163] ? new_inode+0x25/0x1e0 [ 124.711945][ T3163] ? proc_pid_make_inode+0x25/0x140 [ 124.711970][ T3163] ? proc_pident_instantiate+0x6d/0x2c0 [ 124.711987][ T3163] ? proc_pident_lookup+0x1c7/0x270 [ 124.712003][ T3163] ? proc_tid_base_lookup+0x2f/0x40 [ 124.712024][ T3163] ? path_openat+0x1315/0x34f0 [ 124.712041][ T3163] ? do_filp_open+0x1f5/0x440 [ 124.712059][ T3163] ? do_sys_openat2+0x134/0x1d0 [ 124.712077][ T3163] ? __x64_sys_openat+0x13a/0x170 [ 124.712095][ T3163] ? x64_sys_call+0xe69/0x2ee0 [ 124.712115][ T3163] ? do_syscall_64+0x57/0xf0 [ 124.712138][ T3163] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.712165][ T3163] ? avc_has_perm_noaudit+0x26c/0x360 [ 124.712189][ T3163] ? __asan_memcpy+0x5a/0x80 [ 124.712211][ T3163] ? avc_has_perm_noaudit+0x28a/0x360 [ 124.712236][ T3163] ? avc_has_perm+0x155/0x240 [ 124.712260][ T3163] ? __cfi_avc_has_perm+0x10/0x10 [ 124.712283][ T3163] ? kasan_save_alloc_info+0x40/0x50 [ 124.712306][ T3163] ? selinux_file_open+0x46c/0x630 [ 124.712325][ T3163] ? __cfi_selinux_file_open+0x10/0x10 [ 124.712344][ T3163] ? avc_has_extended_perms+0x80b/0xe70 [ 124.712374][ T3163] ? __asan_memcpy+0x5a/0x80 [ 124.712394][ T3163] ? avc_has_extended_perms+0x969/0xe70 [ 124.712419][ T3163] ? __asan_set_shadow_00+0x12/0x20 [ 124.712435][ T3163] ? do_vfs_ioctl+0x182d/0x2010 [ 124.712450][ T3163] ? arch_stack_walk+0x10a/0x170 [ 124.712470][ T3163] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 124.712487][ T3163] ? _parse_integer+0x2e/0x40 [ 124.712510][ T3163] ? ioctl_has_perm+0x39a/0x500 [ 124.712532][ T3163] ? has_cap_mac_admin+0xd0/0xd0 [ 124.712552][ T3163] ? proc_fail_nth_write+0x184/0x220 [ 124.712572][ T3163] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 124.712593][ T3163] ? selinux_file_ioctl+0x732/0x1480 [ 124.712613][ T3163] ? vfs_write+0x9a4/0xf90 [ 124.712633][ T3163] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 124.712654][ T3163] ? __cfi_vfs_write+0x10/0x10 [ 124.712676][ T3163] ? __kasan_check_write+0x18/0x20 [ 124.712696][ T3163] ? mutex_unlock+0x90/0x240 [ 124.712714][ T3163] ? __cfi_mutex_unlock+0x10/0x10 [ 124.712731][ T3163] ? __fget_files+0x2c5/0x340 [ 124.712749][ T3163] ? __fget_files+0x2c5/0x340 [ 124.712765][ T3163] ? bpf_lsm_file_ioctl+0xd/0x20 [ 124.712782][ T3163] ? security_file_ioctl+0x3e/0x110 [ 124.712803][ T3163] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 124.712909][ T3163] __se_sys_ioctl+0x132/0x1b0 [ 124.712939][ T3163] __x64_sys_ioctl+0x7f/0xa0 [ 124.712955][ T3163] x64_sys_call+0x1878/0x2ee0 [ 124.712978][ T3163] do_syscall_64+0x57/0xf0 [ 124.713000][ T3163] ? clear_bhb_loop+0x50/0xa0 [ 124.713015][ T3163] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.713037][ T3163] RIP: 0033:0x7f8c5a19c819 [ 124.713064][ T3163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.713077][ T3163] RSP: 002b:00007f8c5b080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.713095][ T3163] RAX: ffffffffffffffda RBX: 00007f8c5a415fa0 RCX: 00007f8c5a19c819 [ 124.713106][ T3163] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 124.713116][ T3163] RBP: 00007f8c5b080090 R08: 0000000000000000 R09: 0000000000000000 [ 124.713127][ T3163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.713147][ T3163] R13: 00007f8c5a416038 R14: 00007f8c5a415fa0 R15: 00007ffc4f428338 [ 124.713160][ T3163] [ 124.774372][ T427] usb 2-1: device descriptor read/64, error -71 [ 124.800022][ T3165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=3165 comm=syz.3.903 [ 125.062063][ T427] usb 2-1: device descriptor read/64, error -71 [ 125.158577][ T3170] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 125.286111][ T427] usb usb2-port1: attempt power cycle [ 125.377949][ T36] audit: type=1400 audit(1791790436.364:25263): avc: denied { write } for pid=3173 comm="syz.2.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.431324][ T3178] kvm: kvm [3177]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0x5 [ 125.439805][ T3178] kvm: kvm [3177]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0x5 [ 125.450152][ T3178] kvm: kvm [3177]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x5 [ 125.460718][ T3178] kvm: kvm [3177]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0x5 [ 125.469795][ T3178] kvm: kvm [3177]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0x5 [ 125.477736][ T402] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 125.480287][ T3178] kvm_intel: kvm [3177]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x1d9) = 0x5 [ 125.637590][ T402] usb 4-1: Using ep0 maxpacket: 16 [ 125.643864][ T402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.655041][ T402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.664876][ T402] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 125.666064][ T3184] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 125.673951][ T402] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.674637][ T402] usb 4-1: config 0 descriptor?? [ 125.682412][ T427] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 125.700750][ T36] audit: type=1400 audit(1791790436.664:25264): avc: denied { setopt } for pid=3181 comm="syz.0.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.724038][ T427] usb 2-1: device descriptor read/8, error -71 [ 125.862506][ T427] usb 2-1: device descriptor read/8, error -71 [ 126.117264][ T427] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 126.120855][ T402] ntrig 0003:1B96:0008.0010: item fetching failed at offset 5/7 [ 126.132986][ T402] ntrig 0003:1B96:0008.0010: parse failed [ 126.138766][ T402] ntrig 0003:1B96:0008.0010: probe with driver ntrig failed with error -22 [ 126.139835][ T427] usb 2-1: device descriptor read/8, error -71 [ 126.288711][ T427] usb 2-1: device descriptor read/8, error -71 [ 126.338542][ T3165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15353 sclass=netlink_route_socket pid=3165 comm=syz.3.903 [ 126.355359][ T402] usb 4-1: USB disconnect, device number 55 [ 126.416008][ T427] usb usb2-port1: unable to enumerate USB device [ 126.445050][ T3200] FAULT_INJECTION: forcing a failure. [ 126.445050][ T3200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.458532][ T3200] CPU: 0 UID: 0 PID: 3200 Comm: syz.3.913 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 126.458561][ T3200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.458572][ T3200] Call Trace: [ 126.458578][ T3200] [ 126.458585][ T3200] __dump_stack+0x21/0x30 [ 126.458611][ T3200] dump_stack_lvl+0x140/0x1c0 [ 126.458632][ T3200] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.458654][ T3200] dump_stack+0x19/0x20 [ 126.458673][ T3200] should_fail_ex+0x3d7/0x530 [ 126.458694][ T3200] should_fail+0xf/0x20 [ 126.458713][ T3200] should_fail_usercopy+0x1e/0x30 [ 126.458735][ T3200] _copy_from_user+0x20/0xa0 [ 126.458750][ T3200] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x8ba/0xaf80 [ 126.458788][ T3200] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 126.458859][ T3200] ? is_bpf_text_address+0x17b/0x1a0 [ 126.458880][ T3200] ? kernel_text_address+0xa9/0xe0 [ 126.458900][ T3200] ? __kernel_text_address+0x11/0x40 [ 126.458919][ T3200] ? unwind_get_return_address+0x51/0x90 [ 126.458939][ T3200] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 126.458957][ T3200] ? arch_stack_walk+0x10a/0x170 [ 126.458981][ T3200] ? stack_depot_save_flags+0x38/0x800 [ 126.459002][ T3200] ? kasan_save_track+0x4f/0x80 [ 126.459024][ T3200] ? kasan_save_track+0x3e/0x80 [ 126.459044][ T3200] ? kasan_save_alloc_info+0x40/0x50 [ 126.459063][ T3200] ? __kasan_kmalloc+0x96/0xb0 [ 126.459076][ T3200] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 126.459098][ T3200] ? krealloc_noprof+0x8d/0x130 [ 126.459128][ T3200] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x914/0x1bb0 [ 126.459158][ T3200] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 126.459190][ T3200] ? __se_sys_ioctl+0x132/0x1b0 [ 126.459208][ T3200] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 126.459239][ T3200] ? __kasan_check_write+0x18/0x20 [ 126.459261][ T3200] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x502/0xee0 [ 126.459299][ T3200] ? __kasan_check_write+0x18/0x20 [ 126.459321][ T3200] ? _raw_spin_lock+0x92/0x120 [ 126.459361][ T3200] ? __cfi__raw_spin_lock+0x10/0x10 [ 126.459384][ T3200] ? _raw_spin_unlock+0x45/0x60 [ 126.459406][ T3200] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x5ec/0x950 [ 126.459445][ T3200] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 126.459490][ T3200] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 126.459523][ T3200] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 126.459556][ T3200] ? __kasan_check_write+0x18/0x20 [ 126.459578][ T3200] ? _raw_spin_lock+0x92/0x120 [ 126.459599][ T3200] ? __cfi__raw_spin_lock+0x10/0x10 [ 126.459621][ T3200] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x125c/0x1bb0 [ 126.459649][ T3200] ? __asan_memcpy+0x5a/0x80 [ 126.459671][ T3200] ? __asan_set_shadow_00+0x12/0x20 [ 126.459690][ T3200] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x12e9/0x1bb0 [ 126.459723][ T3200] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x10/0x10 [ 126.459751][ T3200] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 126.459782][ T3200] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 126.459814][ T3200] ? __kasan_check_write+0x18/0x20 [ 126.459835][ T3200] ? _raw_spin_lock+0x92/0x120 [ 126.459857][ T3200] ? __cfi__raw_spin_lock+0x10/0x10 [ 126.459880][ T3200] ? _raw_spin_unlock+0x45/0x60 [ 126.459902][ T3200] ? __asan_set_shadow_00+0x12/0x20 [ 126.459921][ T3200] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 126.459949][ T3200] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 126.459977][ T3200] ? avc_has_perm_noaudit+0x26c/0x360 [ 126.460002][ T3200] ? __asan_memcpy+0x5a/0x80 [ 126.460024][ T3200] ? __kasan_check_write+0x18/0x20 [ 126.460044][ T3200] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 126.460079][ T3200] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 126.460112][ T3200] ? avc_has_perm+0x155/0x240 [ 126.460135][ T3200] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 126.460158][ T3200] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 126.460180][ T3200] ? __kasan_check_write+0x18/0x20 [ 126.460201][ T3200] ? _raw_spin_lock+0x92/0x120 [ 126.460223][ T3200] ? __cfi__raw_spin_lock+0x10/0x10 [ 126.460245][ T3200] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0xb14/0x1030 [ 126.460270][ T3200] ? __asan_memcpy+0x5a/0x80 [ 126.460299][ T3200] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0xd14/0x1030 [ 126.460327][ T3200] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x10/0x10 [ 126.460354][ T3200] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 126.460375][ T3200] ? __asan_memcpy+0x5a/0x80 [ 126.460396][ T3200] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 126.460421][ T3200] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 126.460450][ T3200] ? is_bpf_text_address+0x17b/0x1a0 [ 126.460477][ T3200] ? is_bpf_text_address+0x17b/0x1a0 [ 126.460499][ T3200] ? kernel_text_address+0xa9/0xe0 [ 126.460520][ T3200] ? __kernel_text_address+0x11/0x40 [ 126.460540][ T3200] ? unwind_get_return_address+0x51/0x90 [ 126.460560][ T3200] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 126.460579][ T3200] ? arch_stack_walk+0x10a/0x170 [ 126.460607][ T3200] ? is_bpf_text_address+0x17b/0x1a0 [ 126.460629][ T3200] ? kernel_text_address+0xa9/0xe0 [ 126.460648][ T3200] ? __kernel_text_address+0x11/0x40 [ 126.460667][ T3200] ? unwind_get_return_address+0x51/0x90 [ 126.460685][ T3200] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 126.460703][ T3200] ? stack_depot_save_flags+0x38/0x800 [ 126.460725][ T3200] ? stack_trace_save+0xaa/0x100 [ 126.460742][ T3200] ? kasan_save_track+0x4f/0x80 [ 126.460764][ T3200] ? kasan_save_track+0x3e/0x80 [ 126.460787][ T3200] ? kasan_save_alloc_info+0x40/0x50 [ 126.460807][ T3200] ? __kasan_slab_alloc+0x73/0x90 [ 126.460822][ T3200] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 126.460845][ T3200] ? security_inode_alloc+0x51/0x230 [ 126.460868][ T3200] ? inode_init_always_gfp+0x756/0x9e0 [ 126.460893][ T3200] ? alloc_inode+0xc5/0x270 [ 126.460908][ T3200] ? new_inode+0x25/0x1e0 [ 126.460924][ T3200] ? proc_pid_make_inode+0x25/0x140 [ 126.460947][ T3200] ? proc_pident_instantiate+0x6d/0x2c0 [ 126.460963][ T3200] ? proc_pident_lookup+0x1c7/0x270 [ 126.460976][ T3200] ? proc_tid_base_lookup+0x2f/0x40 [ 126.460993][ T3200] ? do_filp_open+0x1f5/0x440 [ 126.461010][ T3200] ? avc_has_perm_noaudit+0x26c/0x360 [ 126.461031][ T3200] ? __asan_memcpy+0x5a/0x80 [ 126.461049][ T3200] ? avc_has_perm_noaudit+0x28a/0x360 [ 126.461071][ T3200] ? avc_has_perm+0x155/0x240 [ 126.461092][ T3200] ? __cfi_avc_has_perm+0x10/0x10 [ 126.461112][ T3200] ? kasan_save_alloc_info+0x40/0x50 [ 126.461134][ T3200] ? selinux_file_open+0x46c/0x630 [ 126.461155][ T3200] ? __cfi_selinux_file_open+0x10/0x10 [ 126.461179][ T3200] ? avc_has_extended_perms+0x80b/0xe70 [ 126.461203][ T3200] ? __asan_memcpy+0x5a/0x80 [ 126.461224][ T3200] ? avc_has_extended_perms+0x969/0xe70 [ 126.461248][ T3200] ? __asan_set_shadow_00+0x12/0x20 [ 126.461267][ T3200] ? do_vfs_ioctl+0x182d/0x2010 [ 126.461288][ T3200] ? arch_stack_walk+0x10a/0x170 [ 126.461311][ T3200] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 126.461330][ T3200] ? _parse_integer+0x2e/0x40 [ 126.461353][ T3200] ? ioctl_has_perm+0x39a/0x500 [ 126.461374][ T3200] ? has_cap_mac_admin+0xd0/0xd0 [ 126.461396][ T3200] ? proc_fail_nth_write+0x184/0x220 [ 126.461415][ T3200] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 126.461433][ T3200] ? selinux_file_ioctl+0x732/0x1480 [ 126.461452][ T3200] ? vfs_write+0x9a4/0xf90 [ 126.461472][ T3200] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 126.461492][ T3200] ? __cfi_vfs_write+0x10/0x10 [ 126.461513][ T3200] ? __kasan_check_write+0x18/0x20 [ 126.461533][ T3200] ? mutex_unlock+0x90/0x240 [ 126.461552][ T3200] ? __cfi_mutex_unlock+0x10/0x10 [ 126.461568][ T3200] ? __fget_files+0x2c5/0x340 [ 126.461586][ T3200] ? __fget_files+0x2c5/0x340 [ 126.461602][ T3200] ? bpf_lsm_file_ioctl+0xd/0x20 [ 126.461621][ T3200] ? security_file_ioctl+0x3e/0x110 [ 126.461641][ T3200] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 126.461660][ T3200] __se_sys_ioctl+0x132/0x1b0 [ 126.461675][ T3200] __x64_sys_ioctl+0x7f/0xa0 [ 126.461690][ T3200] x64_sys_call+0x1878/0x2ee0 [ 126.461713][ T3200] do_syscall_64+0x57/0xf0 [ 126.461734][ T3200] ? clear_bhb_loop+0x50/0xa0 [ 126.461750][ T3200] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.461773][ T3200] RIP: 0033:0x7f8c5a19c819 [ 126.461788][ T3200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.461803][ T3200] RSP: 002b:00007f8c5b080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.461822][ T3200] RAX: ffffffffffffffda RBX: 00007f8c5a415fa0 RCX: 00007f8c5a19c819 [ 126.461836][ T3200] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 126.461848][ T3200] RBP: 00007f8c5b080090 R08: 0000000000000000 R09: 0000000000000000 [ 126.461860][ T3200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.461871][ T3200] R13: 00007f8c5a416038 R14: 00007f8c5a415fa0 R15: 00007ffc4f428338 [ 126.461887][ T3200] [ 126.462026][ T3200] rust_binder: Write failure EFAULT in pid:645 [ 126.884921][ T3204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 127.471713][ T3204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:652 [ 127.492059][ T3210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.511465][ T3210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.559629][ T3217] netlink: 'syz.3.919': attribute type 5 has an invalid length. [ 127.567456][ T3217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 127.576318][ T3216] netlink: 'syz.3.919': attribute type 5 has an invalid length. [ 127.585208][ T3216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 127.595189][ T3218] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.604200][ T3218] bridge_slave_0 (unregistering): left allmulticast mode [ 127.611769][ T3218] bridge_slave_0 (unregistering): left promiscuous mode [ 127.618732][ T3218] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.696464][ T3228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 127.777216][ T3246] input: syz1 as /devices/virtual/input/input24 [ 127.982505][ T427] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 128.142380][ T427] usb 2-1: Using ep0 maxpacket: 32 [ 128.149725][ T427] usb 2-1: unable to get BOS descriptor or descriptor too short [ 128.158443][ T427] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 113, changing to 7 [ 128.173918][ T427] usb 2-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 128.183370][ T427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.194222][ T427] usb 2-1: Product: syz [ 128.199038][ T427] usb 2-1: Manufacturer: syz [ 128.203727][ T427] usb 2-1: SerialNumber: syz [ 128.354685][ T3266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.364140][ T3266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.429080][ T427] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 128.440478][ T427] usb 2-1: USB disconnect, device number 62 [ 128.458823][ T806] udevd[806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.683277][ T3278] tipc: Started in network mode [ 128.688319][ T3278] tipc: Node identity 0300000000000000c593be39, cluster identity 4711 [ 128.703125][ T3278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 128.703161][ T3278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:600 [ 128.804441][ T3286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.941'. [ 128.917916][ T3292] kvm_intel: kvm [3291]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff000000000c0002 [ 128.966573][ T3296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.975019][ T3298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.975028][ T840] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 128.984314][ T3296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.004963][ T3298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.091081][ T339] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 129.145239][ T3305] FAULT_INJECTION: forcing a failure. [ 129.145239][ T3305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.158555][ T3305] CPU: 0 UID: 0 PID: 3305 Comm: syz.1.948 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 129.158586][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.158594][ T3305] Call Trace: [ 129.158598][ T3305] [ 129.158602][ T3305] __dump_stack+0x21/0x30 [ 129.158620][ T3305] dump_stack_lvl+0x140/0x1c0 [ 129.158632][ T3305] ? __cfi_dump_stack_lvl+0x10/0x10 [ 129.158644][ T3305] dump_stack+0x19/0x20 [ 129.158655][ T3305] should_fail_ex+0x3d7/0x530 [ 129.158670][ T3305] should_fail+0xf/0x20 [ 129.158688][ T3305] should_fail_usercopy+0x1e/0x30 [ 129.158708][ T3305] __kvm_read_guest_page+0x177/0x210 [ 129.158724][ T3305] kvm_vcpu_read_guest+0x3a6/0x510 [ 129.158740][ T3305] read_and_check_msr_entry+0x3b/0x3a0 [ 129.158763][ T3305] nested_vmx_vmexit+0xd90/0x27c0 [ 129.158782][ T3305] ? kvm_release_page_clean+0x10a/0x150 [ 129.158794][ T3305] ? kvm_mmu_do_page_fault+0x4f3/0x660 [ 129.158805][ T3305] ? __cfi_nested_vmx_vmexit+0x10/0x10 [ 129.158817][ T3305] nested_vmx_reflect_vmexit+0x2976/0x3ae0 [ 129.158828][ T3305] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 129.158841][ T3305] ? __cfi_nested_vmx_reflect_vmexit+0x10/0x10 [ 129.158852][ T3305] ? clear_bhb_loop+0x50/0xa0 [ 129.158861][ T3305] ? clear_bhb_loop+0x50/0xa0 [ 129.158869][ T3305] ? clear_bhb_loop+0x50/0xa0 [ 129.158877][ T3305] ? clear_bhb_loop+0x12/0xa0 [ 129.158884][ T3305] ? __vmx_complete_interrupts+0xf3/0x660 [ 129.158898][ T3305] ? vmx_vcpu_run+0x10eb/0x1f70 [ 129.158910][ T3305] ? nested_mark_vmcs12_pages_dirty+0x137/0x290 [ 129.158924][ T3305] vmx_handle_exit+0xa05/0x1b10 [ 129.158935][ T3305] ? kvm_deliver_exception_payload+0xd7/0x200 [ 129.158950][ T3305] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 129.158962][ T3305] ? vmx_handle_exit_irqoff+0xe9/0x780 [ 129.158974][ T3305] vcpu_run+0x49f7/0x7840 [ 129.158991][ T3305] ? signal_pending+0xc0/0xc0 [ 129.159007][ T3305] ? __kasan_check_write+0x18/0x20 [ 129.159020][ T3305] ? xfd_validate_state+0x68/0x140 [ 129.159032][ T3305] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 129.159041][ T3305] ? __kasan_check_write+0x18/0x20 [ 129.159052][ T3305] ? fpregs_mark_activate+0x68/0x160 [ 129.159062][ T3305] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 129.159071][ T3305] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 129.159081][ T3305] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 129.159093][ T3305] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 129.159105][ T3305] ? kstrtoull+0x13b/0x1e0 [ 129.159119][ T3305] ? kstrtouint+0x78/0xf0 [ 129.159129][ T3305] ? ioctl_has_perm+0x1bc/0x500 [ 129.159141][ T3305] ? __asan_memcpy+0x5a/0x80 [ 129.159152][ T3305] ? ioctl_has_perm+0x408/0x500 [ 129.159163][ T3305] ? has_cap_mac_admin+0xd0/0xd0 [ 129.159174][ T3305] ? __kasan_check_write+0x18/0x20 [ 129.159185][ T3305] ? mutex_lock_killable+0x97/0x1d0 [ 129.159195][ T3305] ? __cfi_mutex_lock_killable+0x10/0x10 [ 129.159205][ T3305] ? proc_fail_nth_write+0x184/0x220 [ 129.159216][ T3305] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 129.159227][ T3305] kvm_vcpu_ioctl+0xa48/0x1000 [ 129.159240][ T3305] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 129.159252][ T3305] ? __cfi_vfs_write+0x10/0x10 [ 129.159264][ T3305] ? __kasan_check_write+0x18/0x20 [ 129.159275][ T3305] ? mutex_unlock+0x90/0x240 [ 129.159285][ T3305] ? __cfi_mutex_unlock+0x10/0x10 [ 129.159293][ T3305] ? __fget_files+0x2c5/0x340 [ 129.159303][ T3305] ? __fget_files+0x2c5/0x340 [ 129.159311][ T3305] ? bpf_lsm_file_ioctl+0xd/0x20 [ 129.159322][ T3305] ? security_file_ioctl+0x3e/0x110 [ 129.159333][ T3305] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 129.159345][ T3305] __se_sys_ioctl+0x132/0x1b0 [ 129.159354][ T3305] __x64_sys_ioctl+0x7f/0xa0 [ 129.159362][ T3305] x64_sys_call+0x1878/0x2ee0 [ 129.159375][ T3305] do_syscall_64+0x57/0xf0 [ 129.159387][ T3305] ? clear_bhb_loop+0x50/0xa0 [ 129.159395][ T3305] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 129.159407][ T3305] RIP: 0033:0x7f89b359c819 [ 129.159418][ T3305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.159427][ T3305] RSP: 002b:00007f89b44a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.159438][ T3305] RAX: ffffffffffffffda RBX: 00007f89b3815fa0 RCX: 00007f89b359c819 [ 129.159446][ T3305] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 129.159452][ T3305] RBP: 00007f89b44a3090 R08: 0000000000000000 R09: 0000000000000000 [ 129.159459][ T3305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.159465][ T3305] R13: 00007f89b3816038 R14: 00007f89b3815fa0 R15: 00007fff65d15588 [ 129.159473][ T3305] [ 129.177533][ T840] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 129.566537][ T3308] fuse: Unknown parameter 'grou00000000000000000000' [ 129.570635][ T840] usb 3-1: config 0 has no interface number 0 [ 129.634635][ T36] audit: type=1400 audit(1791790440.361:25265): avc: denied { mount } for pid=3311 comm="syz.0.951" name="/" dev="ramfs" ino=27234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 129.635217][ T840] usb 3-1: config 0 interface 41 has no altsetting 0 [ 129.666841][ T339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.676955][ T339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.686650][ T840] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 129.695965][ T339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.707438][ T840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.715474][ T339] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.725260][ T840] usb 3-1: Product: syz [ 129.729422][ T840] usb 3-1: Manufacturer: syz [ 129.734510][ T339] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 129.744039][ T840] usb 3-1: SerialNumber: syz [ 129.749019][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.757505][ T840] usb 3-1: config 0 descriptor?? [ 129.771307][ T339] hub 4-1:1.0: bad descriptor, ignoring hub [ 129.779488][ T339] hub 4-1:1.0: probe with driver hub failed with error -5 [ 129.788715][ T339] cdc_wdm 4-1:1.0: skipping garbage [ 129.793984][ T339] cdc_wdm 4-1:1.0: skipping garbage [ 129.805313][ T339] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 129.813894][ T339] cdc_wdm 4-1:1.0: Unknown control protocol [ 129.820023][ T36] audit: type=1400 audit(1791790440.520:25266): avc: denied { read write } for pid=3320 comm="syz.1.954" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.846354][ T36] audit: type=1400 audit(1791790440.520:25267): avc: denied { open } for pid=3320 comm="syz.1.954" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.870466][ T36] audit: type=1400 audit(1791790440.520:25268): avc: denied { ioctl } for pid=3320 comm="syz.1.954" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.014899][ T36] audit: type=1400 audit(1791790440.717:25269): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 130.071619][ T427] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 130.100841][ T10] usb 4-1: USB disconnect, device number 56 [ 130.242593][ T427] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 130.256366][ T427] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 130.265861][ T427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.276547][ T427] usb 2-1: config 0 descriptor?? [ 130.498845][ T427] usb 2-1: USB disconnect, device number 63 [ 130.950536][ T3332] fuse: Unknown parameter 'grou00000000000000000000' [ 131.037247][ T3337] overlay: Unknown parameter 'subj_role' [ 131.043948][ T3337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.053144][ T3337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.064140][ T3337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.072678][ T3337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.109120][ T3339] FAULT_INJECTION: forcing a failure. [ 131.109120][ T3339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.122719][ T3339] CPU: 1 UID: 0 PID: 3339 Comm: syz.1.961 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 131.122740][ T3339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.122747][ T3339] Call Trace: [ 131.122752][ T3339] [ 131.122758][ T3339] __dump_stack+0x21/0x30 [ 131.122774][ T3339] dump_stack_lvl+0x140/0x1c0 [ 131.122786][ T3339] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.122798][ T3339] ? check_stack_object+0x12b/0x150 [ 131.122812][ T3339] dump_stack+0x19/0x20 [ 131.122822][ T3339] should_fail_ex+0x3d7/0x530 [ 131.122839][ T3339] should_fail+0xf/0x20 [ 131.122849][ T3339] should_fail_usercopy+0x1e/0x30 [ 131.122861][ T3339] _copy_to_user+0x24/0xa0 [ 131.122869][ T3339] simple_read_from_buffer+0xed/0x160 [ 131.122880][ T3339] proc_fail_nth_read+0x1aa/0x220 [ 131.122892][ T3339] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 131.122903][ T3339] ? bpf_lsm_file_permission+0xd/0x20 [ 131.122913][ T3339] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 131.122924][ T3339] vfs_read+0x289/0xcb0 [ 131.122936][ T3339] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 131.122950][ T3339] ? __cfi_vfs_read+0x10/0x10 [ 131.122960][ T3339] ? __kasan_check_write+0x18/0x20 [ 131.122975][ T3339] ? mutex_lock+0x97/0x1d0 [ 131.122985][ T3339] ? __cfi_mutex_lock+0x10/0x10 [ 131.122994][ T3339] ? __fget_files+0x2c5/0x340 [ 131.123004][ T3339] ksys_read+0x145/0x260 [ 131.123016][ T3339] ? __cfi_ksys_read+0x10/0x10 [ 131.123027][ T3339] ? __kasan_check_read+0x15/0x20 [ 131.123039][ T3339] __x64_sys_read+0x7f/0x90 [ 131.123055][ T3339] x64_sys_call+0x2638/0x2ee0 [ 131.123077][ T3339] do_syscall_64+0x57/0xf0 [ 131.123098][ T3339] ? clear_bhb_loop+0x50/0xa0 [ 131.123108][ T3339] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.123122][ T3339] RIP: 0033:0x7f89b355d04e [ 131.123132][ T3339] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.123141][ T3339] RSP: 002b:00007f89b44a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.123153][ T3339] RAX: ffffffffffffffda RBX: 00007f89b44a36c0 RCX: 00007f89b355d04e [ 131.123160][ T3339] RDX: 000000000000000f RSI: 00007f89b44a30a0 RDI: 0000000000000007 [ 131.123167][ T3339] RBP: 00007f89b44a3090 R08: 0000000000000000 R09: 0000000000000000 [ 131.123173][ T3339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.123179][ T3339] R13: 00007f89b3816038 R14: 00007f89b3815fa0 R15: 00007fff65d15588 [ 131.123192][ T3339] [ 131.474896][ T3345] rust_binder: Write failure EINVAL in pid:678 [ 131.475199][ T3345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:678 [ 131.639808][ T3355] fuse: Unknown parameter 'grou00000000000000000000' [ 131.915574][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 131.933360][ T840] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 131.944549][ T840] usb 3-1: USB disconnect, device number 56 [ 131.951034][ T3359] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 131.973086][ T3361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 131.973118][ T3361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:607 [ 132.016024][ T3367] KVM: debugfs: duplicate directory 3367-7 [ 132.086173][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 132.092449][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.103441][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.113214][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.122373][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.131135][ T10] usb 4-1: config 0 descriptor?? [ 132.136966][ T10] hub 4-1:0.0: USB hub found [ 132.310965][ T3373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 132.310995][ T3373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:619 [ 132.350393][ T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 132.386780][ T3376] fuse: Unknown parameter 'group_i00000000000000000000' [ 132.448573][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.455205][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.465280][ T3389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 132.465312][ T3389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:699 [ 132.583875][ T10] hid-generic 0003:046D:C31C.0011: item fetching failed at offset 0/1 [ 132.601892][ T10] hid-generic 0003:046D:C31C.0011: probe with driver hid-generic failed with error -22 [ 132.757619][ T840] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 132.896187][ T840] usb 2-1: device descriptor read/64, error -71 [ 132.906936][ T10] usb 4-1: USB disconnect, device number 57 [ 133.152014][ T840] usb 2-1: device descriptor read/64, error -71 [ 133.407794][ T840] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 133.546352][ T840] usb 2-1: device descriptor read/64, error -71 [ 133.588992][ T307] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 133.749973][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.761160][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.771010][ T307] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.784005][ T307] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.793082][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.801600][ T307] usb 4-1: config 0 descriptor?? [ 133.806611][ T840] usb 2-1: device descriptor read/64, error -71 [ 133.930155][ T840] usb usb2-port1: attempt power cycle [ 134.220413][ T3398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.229113][ T3398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.239274][ T3398] rust_binder: Write failure EINVAL in pid:891 [ 134.241861][ T307] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 134.256855][ T307] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 134.292465][ T840] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 134.314809][ T840] usb 2-1: device descriptor read/8, error -71 [ 134.453388][ T840] usb 2-1: device descriptor read/8, error -71 [ 134.590948][ T720] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.590960][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 134.603241][ T3386] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 134.708164][ T840] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 134.730604][ T840] usb 2-1: device descriptor read/8, error -71 [ 134.784779][ T3401] fuse: Unknown parameter 'group_i00000000000000000000' [ 134.801480][ T3403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.810064][ T3403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.869025][ T840] usb 2-1: device descriptor read/8, error -71 [ 134.985366][ T840] usb usb2-port1: unable to enumerate USB device [ 135.374026][ T3410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 135.383656][ T3410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 135.422294][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 135.477120][ T3410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 135.545984][ T3415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.554715][ T3415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.582280][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 135.588680][ T10] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 135.597009][ T10] usb 3-1: config 0 has no interface number 0 [ 135.603158][ T10] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 135.614644][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 135.623701][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.631818][ T10] usb 3-1: Product: syz [ 135.636005][ T10] usb 3-1: Manufacturer: syz [ 135.640596][ T10] usb 3-1: SerialNumber: syz [ 135.645919][ T10] usb 3-1: config 0 descriptor?? [ 135.651210][ T3406] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 135.716034][ T36] audit: type=1400 audit(1791790446.065:25270): avc: denied { append } for pid=3416 comm="syz.1.993" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 135.751342][ T36] audit: type=1400 audit(1791790446.093:25271): avc: denied { execute } for pid=3418 comm="syz.1.994" path="/224/net_prio.prioidx" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.872304][ T3406] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 135.888330][ T10] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 135.905050][ T10] asix 3-1:0.188: probe with driver asix failed with error -71 [ 135.918602][ T10] usb 3-1: USB disconnect, device number 57 [ 135.994848][ T13] vlan0: left allmulticast mode [ 135.999851][ T13] veth0_vlan: left allmulticast mode [ 136.005396][ T13] vlan0: left promiscuous mode [ 136.010525][ T13] bridge0: port 3(vlan0) entered disabled state [ 136.017970][ T13] bridge_slave_1: left allmulticast mode [ 136.024125][ T13] bridge_slave_1: left promiscuous mode [ 136.030084][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.093373][ T36] audit: type=1400 audit(1791790446.412:25272): avc: denied { mounton } for pid=3430 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 136.153306][ T3434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.162376][ T3434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.167948][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.177345][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.184680][ T3430] bridge_slave_0: entered allmulticast mode [ 136.191047][ T3430] bridge_slave_0: entered promiscuous mode [ 136.197965][ T13] veth1_macvtap: left promiscuous mode [ 136.203663][ T13] veth0_vlan: left promiscuous mode [ 136.234310][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.241409][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.248507][ T3430] bridge_slave_1: entered allmulticast mode [ 136.255223][ T3430] bridge_slave_1: entered promiscuous mode [ 136.296686][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.303757][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.311054][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.318105][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.337415][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.344934][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.354084][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.361400][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.370380][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.377500][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.400791][ T3430] veth0_vlan: entered promiscuous mode [ 136.411003][ T3430] veth1_macvtap: entered promiscuous mode [ 136.555722][ T3443] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 136.712088][ T307] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 136.733025][ T3450] fuse: Unknown parameter 'group_id00000000000000000000' [ 136.826938][ T3457] incfs: Error accessing: ./file0. [ 136.832369][ T3457] incfs: mount failed -20 [ 136.837119][ T3457] incfs: Error accessing: ./file0. [ 136.842371][ T3457] incfs: mount failed -20 [ 136.847108][ T3457] overlay: ./file0 is not a directory [ 136.893209][ T339] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 136.901050][ T307] usb 5-1: Using ep0 maxpacket: 8 [ 136.909044][ T307] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 136.927385][ T307] usb 5-1: config 179 has no interface number 0 [ 136.934551][ T307] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 136.938679][ T3468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 136.946076][ T3468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:641 [ 136.946129][ T307] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 136.976547][ T307] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.988444][ T307] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.003241][ T307] usb 5-1: config 179 interface 65 has no altsetting 0 [ 137.010147][ T307] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 137.025701][ T3471] fuse: Unknown parameter 'group_id00000000000000000000' [ 137.033179][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.048295][ T307] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input25 [ 137.067010][ T339] usb 4-1: device firmware changed [ 137.076338][ T427] usb 4-1: USB disconnect, device number 58 [ 137.128008][ T95] input input25: unable to receive magic message: -110 [ 137.145826][ T95] input input25: unable to receive magic message: -32 [ 137.153314][ T95] input input25: unable to receive magic message: -32 [ 137.244939][ T427] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 137.392805][ T36] audit: type=1400 audit(1791790447.632:25273): avc: denied { getattr } for pid=3496 comm="syz.0.1023" path="cgroup:[4026532296]" dev="nsfs" ino=4026532296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 137.442916][ T427] usb 4-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 137.453371][ T427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.464669][ T427] usb 4-1: config 0 descriptor?? [ 137.470811][ T427] usb-storage 4-1:0.0: USB Mass Storage device detected [ 137.479333][ T427] usb-storage 4-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 137.479333][ T427] Please send a copy of this message to and [ 137.753390][ T10] usb 4-1: USB disconnect, device number 59 [ 137.897244][ T307] usb 5-1: USB disconnect, device number 2 [ 137.897289][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 137.912082][ T307] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 137.928448][ T3506] fuse: Unknown parameter 'group_id00000000000000000000' [ 137.948830][ T3508] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 138.121136][ T3511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 138.121166][ T3511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:11 [ 138.259177][ T36] audit: type=1400 audit(1791790448.458:25274): avc: denied { transfer } for pid=3522 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 138.259191][ T3523] rust_binder: Error while translating object. [ 138.259267][ C1] BUG: TASK stack guard page was hit at ffffc9000f417f78 (stack is ffffc9000f418000..ffffc9000f420000) [ 138.259297][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 138.259320][ C1] CPU: 1 UID: 0 PID: 3523 Comm: syz.2.1030 Not tainted syzkaller #0 f39b5fd6571327469eae9f28eb29c870797b656b [ 138.259341][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.259351][ C1] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 138.259375][ C1] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 138.259388][ C1] RSP: 0018:ffffc9000f417f80 EFLAGS: 00010a02 [ 138.259404][ C1] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92001e8302c [ 138.259416][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 138.259425][ C1] RBP: ffffc9000f418250 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 138.259438][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: dffffc0000000000 [ 138.259454][ C1] R13: dffffc0000000000 R14: 1ffff92001e83050 R15: ffffc9000f4182f0 [ 138.259467][ C1] FS: 00007ff6549316c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 138.259481][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.259493][ C1] CR2: ffffc9000f417f78 CR3: 00000001208ee000 CR4: 00000000003526b0 [ 138.259516][ C1] Call Trace: [ 138.259523][ C1] [ 138.259534][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 138.259553][ C1] ? static_key_count+0x45/0x70 [ 138.259571][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 138.259592][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 138.259614][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 138.259631][ C1] ? unwind_next_frame+0x3c1/0x750 [ 138.259650][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 138.259668][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 138.259701][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 138.259720][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 138.259749][ C1] ? stack_depot_save_flags+0x672/0x800 [ 138.259771][ C1] ? stack_depot_save+0x12/0x20 [ 138.259790][ C1] ? save_stack+0x133/0x240 [ 138.259805][ C1] ? free_contig_range+0x260/0x260 [ 138.259824][ C1] ? __reset_page_owner+0x450/0x450 [ 138.259839][ C1] ? zone_page_state_add+0x43/0x90 [ 138.259861][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 138.259877][ C1] ? prep_new_page+0x20/0x120 [ 138.259892][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 138.259910][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 138.259928][ C1] ? stack_depot_save_flags+0x672/0x800 [ 138.259947][ C1] ? kasan_save_track+0x4f/0x80 [ 138.259969][ C1] ? kasan_save_free_info+0x4a/0x60 [ 138.259987][ C1] ? __kasan_slab_free+0x5f/0x80 [ 138.260001][ C1] ? kfree+0x158/0x440 [ 138.260019][ C1] ? krealloc_noprof+0xfa/0x130 [ 138.260040][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 138.260081][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 138.260106][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 138.260133][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 138.260162][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 138.260186][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 138.260215][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 138.260232][ C1] ? sched_clock_noinstr+0xd/0x30 [ 138.260249][ C1] ? __set_page_owner+0x8e/0x600 [ 138.260264][ C1] ? __zone_watermark_ok+0x134/0x630 [ 138.260282][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 138.260298][ C1] ? kasan_unpoison+0x4a/0x70 [ 138.260317][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 138.260334][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 138.260350][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 138.260370][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 138.260390][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 138.260411][ C1] ? prep_new_page+0x20/0x120 [ 138.260427][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 138.260451][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 138.260468][ C1] ? static_key_count+0x45/0x70 [ 138.260485][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 138.260510][ C1] ? lruvec_init+0x1d1/0x280 [ 138.260532][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 138.260550][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 138.260567][ C1] ? unwind_get_return_address+0x51/0x90 [ 138.260584][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 138.260600][ C1] ? arch_stack_walk+0x10a/0x170 [ 138.260623][ C1] ? stack_trace_save+0xaa/0x100 [ 138.260638][ C1] ? stack_depot_save_flags+0x672/0x800 [ 138.260659][ C1] ? kasan_save_track+0x4f/0x80 [ 138.260680][ C1] ? kasan_save_track+0x3e/0x80 [ 138.260701][ C1] ? kasan_save_free_info+0x4a/0x60 [ 138.260719][ C1] ? __kasan_slab_free+0x5f/0x80 [ 138.260734][ C1] ? kfree+0x158/0x440 [ 138.260753][ C1] ? krealloc_noprof+0xfa/0x130 [ 138.260773][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 138.260812][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 138.260838][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 138.260865][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 138.260894][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 138.260919][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 138.260947][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 138.260973][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x19d1/0xaf80 [ 138.260995][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 138.261013][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 138.261028][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 138.261042][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 138.261063][ C1] ? do_syscall_64+0x57/0xf0 [ 138.261083][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 138.261110][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 138.261133][ C1] ? kasan_save_free_info+0x4a/0x60 [ 138.261151][ C1] ? __kasan_slab_free+0x5f/0x80 [ 138.261166][ C1] ? kfree+0x158/0x440 [ 138.261184][ C1] ? krealloc_noprof+0xfa/0x130 [ 138.261204][ C1] ? krealloc_noprof+0xfa/0x130 [ 138.261225][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x114/0x360 [ 138.261265][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodejmEENtNtBL_9allocator7KmallocEECskDQVOo9v79Q_16rust_binder_main+0x10/0x10 [ 138.261306][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 138.261349][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 138.261386][ C1] ? __kasan_check_write+0x18/0x20 [ 138.261405][ C1] ? _raw_spin_lock+0x92/0x120 [ 138.261425][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 138.261446][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x18b7/0x2660 [ 138.261475][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 138.261512][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 138.261541][ C1] ? __asan_memcpy+0x5a/0x80 [ 138.261565][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 138.261591][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 138.261617][ C1] ? __kasan_check_write+0x18/0x20 [ 138.261636][ C1] ? _raw_spin_lock+0x92/0x120 [ 138.261656][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 138.261676][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 138.261706][ C1] ? __asan_memcpy+0x5a/0x80 [ 138.261725][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 138.261755][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 138.261784][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 138.261809][ C1] ? __asan_memcpy+0x5a/0x80 [ 138.261828][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 138.261852][ C1] ? __kasan_check_write+0x18/0x20 [ 138.261872][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 138.261898][ C1] ? __kasan_check_write+0x18/0x20 [ 138.261918][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 138.261938][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 138.261966][ C1] ? __asan_memcpy+0x5a/0x80 [ 138.261985][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 138.262017][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 138.262043][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 138.262070][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 138.262098][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 138.262134][ C1] ? __kasan_check_write+0x18/0x20 [ 138.262153][ C1] ? mutex_unlock+0x90/0x240 [ 138.262174][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 138.262197][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 138.262214][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 138.262245][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 138.262274][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 138.262301][ C1] ? __asan_memcpy+0x5a/0x80 [ 138.262321][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 138.262349][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 138.262377][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 138.262402][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 138.262431][ C1] ? _RNvNtCsb7ts3l0a5c3_4core3fmt5write+0x9cd/0xc10 [ 138.262456][ C1] ? _RNvNtCsb7ts3l0a5c3_4core3fmt5write+0x9cd/0xc10 [ 138.262479][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 138.262498][ C1] ? __cfi__RNvNtCsb7ts3l0a5c3_4core3fmt5write+0x10/0x10 [ 138.262528][ C1] ? __kasan_check_read+0x15/0x20 [ 138.262547][ C1] ? data_push_tail+0x608/0x660 [ 138.262563][ C1] ? rust_fmt_argument+0x204/0x2a0 [ 138.262582][ C1] ? __asan_memcpy+0x5a/0x80 [ 138.262601][ C1] ? rust_fmt_argument+0x21b/0x2a0 [ 138.262621][ C1] ? __cfi_rust_fmt_argument+0x10/0x10 [ 138.262641][ C1] ? data_alloc+0x4d0/0x7e0 [ 138.262655][ C1] ? prb_reserve_in_last+0x17d0/0x17d0 [ 138.262670][ C1] ? security_binder_transfer_binder+0x54/0xf0 [ 138.262691][ C1] ? pointer+0x77a/0xe20 [ 138.262711][ C1] ? prb_reserve+0xd80/0x11b0 [ 138.262725][ C1] ? string+0x2c0/0x2c0 [ 138.262744][ C1] ? __kasan_check_write+0x18/0x20 [ 138.262763][ C1] ? _prb_commit+0x208/0x2b0 [ 138.262777][ C1] ? prb_reserve+0x11b0/0x11b0 [ 138.262791][ C1] ? vsnprintf+0x19ef/0x1ad0 [ 138.262811][ C1] ? __kasan_check_read+0x15/0x20 [ 138.262830][ C1] ? prb_commit+0xfa/0x2a0 [ 138.262844][ C1] ? __cfi_prb_commit+0x10/0x10 [ 138.262858][ C1] ? __asan_memmove+0x5a/0x80 [ 138.262877][ C1] ? printk_sprint+0x2a7/0x3f0 [ 138.262895][ C1] ? vprintk_store+0xa5e/0x1100 [ 138.262912][ C1] ? __kasan_check_write+0x18/0x20 [ 138.262931][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 138.262952][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 138.262972][ C1] ? __kasan_check_write+0x18/0x20 [ 138.262992][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 138.263015][ C1] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 138.263037][ C1] ? __cfi_llist_add_batch+0x10/0x10 [ 138.263057][ C1] ? krealloc_noprof+0xfa/0x130 [ 138.263076][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 138.263097][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 138.263128][ C1] ? irq_work_queue+0xc2/0x160 [ 138.263146][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 138.263177][ C1] ? vprintk_emit+0x3e3/0x650 [ 138.263194][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 138.263211][ C1] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 138.263238][ C1] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 138.263264][ C1] ? vprintk_default+0x2a/0x40 [ 138.263282][ C1] ? vprintk+0x93/0xa0 [ 138.263300][ C1] ? _printk+0xde/0x140 [ 138.263316][ C1] ? __cfi___check_object_size+0x10/0x10 [ 138.263338][ C1] ? __cfi__printk+0x10/0x10 [ 138.263355][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 138.263383][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 138.263409][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 138.263443][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 138.263523][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 138.263543][ C1] ? kernel_text_address+0xa9/0xe0 [ 138.263561][ C1] ? __kernel_text_address+0x11/0x40 [ 138.263579][ C1] ? unwind_get_return_address+0x51/0x90 [ 138.263596][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 138.263612][ C1] ? arch_stack_walk+0x10a/0x170 [ 138.263637][ C1] ? kasan_save_track+0x4f/0x80 [ 138.263659][ C1] ? kasan_save_track+0x3e/0x80 [ 138.263680][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 138.263698][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 138.263713][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 138.263734][ C1] ? krealloc_noprof+0x8d/0x130 [ 138.263754][ C1] ? _RNvMsi_NtNtCs1ewLyjEZ7Le_6kernel4sync3arcINtB5_9UniqueArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtBW_11transaction11TransactionEE10new_uninitBW_+0x102/0x4c0 [ 138.263785][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x13b1/0x2810 [ 138.263813][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 138.263840][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x19d1/0xaf80 [ 138.263862][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 138.263880][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 138.263894][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 138.263908][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 138.263927][ C1] ? do_syscall_64+0x57/0xf0 [ 138.263956][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 138.263975][ C1] ? kernel_text_address+0xa9/0xe0 [ 138.263994][ C1] ? core_kernel_text+0x51/0xa0 [ 138.264011][ C1] ? unwind_get_return_address+0x51/0x90 [ 138.264028][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 138.264048][ C1] ? __kasan_check_write+0x18/0x20 [ 138.264067][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 138.264096][ C1] ? krealloc_noprof+0x8d/0x130 [ 138.264115][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x67d/0xd40 [ 138.264145][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 138.264177][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 138.264205][ C1] ? _raw_spin_lock+0x92/0x120 [ 138.264224][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 138.264245][ C1] ? __kasan_check_write+0x18/0x20 [ 138.264264][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction6submit+0x242a/0x2950 [ 138.264293][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 138.264312][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0 [ 138.264341][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 138.264364][ C1] ? __kasan_check_write+0x18/0x20 [ 138.264383][ C1] ? _raw_spin_lock+0x92/0x120 [ 138.264402][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 138.264422][ C1] ? __kasan_check_write+0x18/0x20 [ 138.264441][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 138.264462][ C1] ? __asan_memcpy+0x5a/0x80 [ 138.264482][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 138.264508][ C1] ? avc_has_perm+0x155/0x240 [ 138.264529][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 138.264549][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 138.264573][ C1] ? __kasan_check_write+0x18/0x20 [ 138.264592][ C1] ? _raw_spin_lock+0x92/0x120 [ 138.264611][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 138.264626][ C1] ? bpf_lsm_binder_transaction+0xd/0x20 [ 138.264650][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 138.264680][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x10/0x10 [ 138.264709][ C1] ? __kasan_check_write+0x18/0x20 [ 138.264729][ C1] ? _raw_spin_lock+0x92/0x120 [ 138.264748][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 138.264770][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0xfc0/0xaf80 [ 138.264792][ C1] ? __asan_memcpy+0x5a/0x80 [ 138.264813][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x19d1/0xaf80 [ 138.264848][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 138.264919][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 138.264938][ C1] ? kernel_text_address+0xa9/0xe0 [ 138.264958][ C1] ? __kernel_text_address+0x11/0x40 [ 138.264976][ C1] ? unwind_get_return_address+0x51/0x90 [ 138.264993][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 138.265010][ C1] ? arch_stack_walk+0x10a/0x170 [ 138.265038][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 138.265058][ C1] ? kernel_text_address+0xa9/0xe0 [ 138.265081][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 138.265102][ C1] ? kernel_text_address+0xa9/0xe0 [ 138.265120][ C1] ? __kernel_text_address+0x11/0x40 [ 138.265139][ C1] ? __kasan_check_write+0x18/0x20 [ 138.265163][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 138.265185][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 138.265216][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 138.265237][ C1] ? kernel_text_address+0xa9/0xe0 [ 138.265259][ C1] ? __kasan_check_write+0x18/0x20 [ 138.265303][ C1] ? __kasan_check_write+0x18/0x20 [ 138.265323][ C1] ? _raw_spin_lock+0x92/0x120 [ 138.265355][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 138.265377][ C1] ? _raw_spin_unlock+0x45/0x60 [ 138.265397][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 138.265419][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 138.265454][ C1] ? kasan_save_track+0x4f/0x80 [ 138.265489][ C1] ? kasan_save_free_info+0x4a/0x60 [ 138.265602][ C1] ? __kasan_slab_free+0x5f/0x80 [ 138.265624][ C1] ? kfree+0x158/0x440 [ 138.265644][ C1] ? krealloc_noprof+0xfa/0x130 [ 138.265773][ C1] ? kvrealloc_noprof+0x59/0x120 [ 138.265804][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kvec8IntoIterINtNtNtBN_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7context7ContextENtNtBL_9allocator8KVmallocEEB1T_+0x2e2/0x590 [ 138.265858][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x20b0/0x5c20 [ 138.265885][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 138.265916][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 138.265936][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 138.265960][ C1] ? do_syscall_64+0x57/0xf0 [ 138.265984][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 138.266027][ C1] ? __kasan_slab_free+0x6a/0x80 [ 138.266044][ C1] ? kfree+0x158/0x440 [ 138.266063][ C1] ? krealloc_noprof+0xfa/0x130 [ 138.266086][ C1] ? krealloc_noprof+0xfa/0x130 [ 138.266108][ C1] ? kvrealloc_noprof+0x66/0x120 [ 138.266129][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 138.266153][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kvec8IntoIterINtNtNtBN_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7context7ContextENtNtBL_9allocator8KVmallocEEB1T_+0x311/0x590 [ 138.266189][ C1] ? _RNvNtCskDQVOo9v79Q_16rust_binder_main7context16get_all_contexts+0x3fb/0x640 [ 138.266209][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kvec8IntoIterINtNtNtBN_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main7context7ContextENtNtBL_9allocator8KVmallocEEB1T_+0x10/0x10 [ 138.266239][ C1] ? __cfi__RNvNtCskDQVOo9v79Q_16rust_binder_main7context16get_all_contexts+0x10/0x10 [ 138.266263][ C1] ? stack_trace_save+0xaa/0x100 [ 138.266282][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 138.266302][ C1] ? __asan_memcpy+0x5a/0x80 [ 138.266323][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 138.266345][ C1] ? _raw_spin_unlock+0x45/0x60 [ 138.266367][ C1] ? call_rcu_nocb+0x6d7/0xc80 [ 138.266388][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 138.266408][ C1] ? swake_up_one_online_ipi+0x30/0x30 [ 138.266429][ C1] ? __cfi_mt_free_rcu+0x10/0x10 [ 138.266472][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 138.266495][ C1] ? kernel_text_address+0xa9/0xe0 [ 138.266515][ C1] ? __kernel_text_address+0x11/0x40 [ 138.266534][ C1] ? unwind_get_return_address+0x51/0x90 [ 138.266554][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 138.266572][ C1] ? arch_stack_walk+0x10a/0x170 [ 138.266603][ C1] ? stack_trace_save+0xaa/0x100 [ 138.266620][ C1] ? stack_depot_save_flags+0x38/0x800 [ 138.266643][ C1] ? kasan_save_track+0x4f/0x80 [ 138.266666][ C1] ? kasan_save_track+0x3e/0x80 [ 138.266688][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 138.266707][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 138.266722][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 138.266744][ C1] ? krealloc_noprof+0x8d/0x130 [ 138.266773][ C1] ? kvrealloc_noprof+0x59/0x120 [ 138.266792][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_mmap+0x78b/0x11f0 [ 138.266834][ C1] ? mmap_region+0x157c/0x1d60 [ 138.266854][ C1] ? do_mmap+0xb85/0x13c0 [ 138.266877][ C1] ? vm_mmap_pgoff+0x36e/0x4b0 [ 138.266898][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 138.266914][ C1] ? sched_balance_rq+0x4636/0x4ce0 [ 138.266932][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 138.266949][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 138.266967][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 138.266992][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 138.267012][ C1] ? update_curr+0x6c1/0x9e0 [ 138.267034][ C1] ? detach_entity_load_avg+0x7b0/0x7b0 [ 138.267058][ C1] ? __calc_delta+0x280/0x280 [ 138.267079][ C1] ? update_entity_lag+0x28f/0x2c0 [ 138.267102][ C1] ? dequeue_entity+0x809/0x1380 [ 138.267123][ C1] ? tg_unthrottle_up+0x9a0/0x9a0 [ 138.267141][ C1] ? sched_clock+0x44/0x60 [ 138.267159][ C1] ? __kasan_check_write+0x18/0x20 [ 138.267180][ C1] ? __cfi_update_misfit_status+0x10/0x10 [ 138.267197][ C1] ? dequeue_entities+0x1d7/0x1400 [ 138.267217][ C1] ? sched_balance_newidle+0x31a/0xab0 [ 138.267238][ C1] ? __kasan_check_read+0x15/0x20 [ 138.267258][ C1] ? __perf_event_task_sched_in+0x1190/0x1370 [ 138.267275][ C1] ? __kasan_check_write+0x18/0x20 [ 138.267296][ C1] ? __switch_to+0xc4f/0x1300 [ 138.267317][ C1] ? __perf_event_task_sched_out+0x1d9/0xb90 [ 138.267334][ C1] ? __cfi___perf_event_task_sched_in+0x10/0x10 [ 138.267351][ C1] ? __cfi___switch_to+0x10/0x10 [ 138.267371][ C1] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 138.267386][ C1] ? psi_task_switch+0x4f2/0xa10 [ 138.267406][ C1] ? __kasan_check_write+0x18/0x20 [ 138.267426][ C1] ? finish_task_switch+0x1d9/0x760 [ 138.267452][ C1] ? __switch_to_asm+0x3d/0x70 [ 138.267475][ C1] ? __schedule+0x13a1/0x1fa0 [ 138.267492][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 138.267515][ C1] ? __asan_memcpy+0x5a/0x80 [ 138.267535][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 138.267560][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 138.267579][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 138.267595][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 138.267612][ C1] ? schedule+0xc5/0x240 [ 138.267626][ C1] ? futex_unqueue+0x136/0x160 [ 138.267647][ C1] ? ioctl_has_perm+0x39a/0x500 [ 138.267666][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 138.267686][ C1] ? futex_wait+0x2ac/0x7b0 [ 138.267707][ C1] ? __cfi_futex_wait+0x10/0x10 [ 138.267728][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 138.267747][ C1] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 138.267770][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 138.267790][ C1] ? do_futex+0x32a/0x510 [ 138.267816][ C1] ? __cfi_do_futex+0x10/0x10 [ 138.267834][ C1] ? vm_mmap_pgoff+0x153/0x4b0 [ 138.267855][ C1] ? __fget_files+0x2c5/0x340 [ 138.267875][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 138.267893][ C1] ? security_file_ioctl+0x3e/0x110 [ 138.267912][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 138.267931][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 138.267946][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 138.267962][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 138.267984][ C1] ? do_syscall_64+0x57/0xf0 [ 138.268004][ C1] ? clear_bhb_loop+0x50/0xa0 [ 138.268020][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 138.268044][ C1] [ 138.268051][ C1] Modules linked in: [ 138.268080][ C1] ---[ end trace 0000000000000000 ]--- [ 138.268089][ C1] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 138.268112][ C1] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 138.268126][ C1] RSP: 0018:ffffc9000f417f80 EFLAGS: 00010a02 [ 138.268140][ C1] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff92001e8302c [ 138.268153][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 138.268164][ C1] RBP: ffffc9000f418250 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 138.268177][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: dffffc0000000000 [ 138.268189][ C1] R13: dffffc0000000000 R14: 1ffff92001e83050 R15: ffffc9000f4182f0 [ 138.268202][ C1] FS: 00007ff6549316c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 138.268217][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.268229][ C1] CR2: ffffc9000f417f78 CR3: 00000001208ee000 CR4: 00000000003526b0 [ 138.268253][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 138.269194][ C1] Kernel Offset: disabled