last executing test programs: 3m6.777288106s ago: executing program 3 (id=662): lsm_get_self_attr(0x69, 0x0, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000d80)={0x0, &(0x7f0000000dc0)=[@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x10, 0x3}}, @cpuid={0x64, 0x18, {0x3, 0x1}}, @code={0xa, 0x67, {"440f0170f3c744240000800000c744240254fbe0a9c7442406000000000f011c24460f0f793caab8010000000f01d9c4027d78a20090000066baa10066ed66baa10066b9aa6c66ef8f48d8a21e660f01c42e65f30f09"}}, @cpuid={0x64, 0x18, {0x9a8, 0xfffffffe}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c03, 0x5, 0xaae, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0xfec00000, 0x2d21}}, @set_irq_handler={0xc8, 0x20, {0x8a}}, @code={0xa, 0x71, {"c7442400e0000000c744240204000000ff2c2466ba4000b84bf50000ef6741da64ad98c7442400bb000000c744240218000000ff1c24c42229dc7b04c481f82823b805000000b9fbffffff0f01c1f0460fba3abc0fc73d0068000064460f01c8"}}, @nested_amd_invlpga={0x17d, 0x20, {0x9000, 0x3292}}, @nested_vmresume={0x130, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control16=0x2, 0x8000000000000000, 0x4f, 0x6778}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0xa6b5, 0x1, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_load_syzos={0x136, 0x68, {0x2, 0x1, [@out_dx={0x6a, 0x28, {0xb33a, 0x7, 0x7}}, @set_irq_handler={0xc8, 0x20, {0xdf, 0x1}}]}}, @wr_drn={0x68, 0x20, {0x7, 0x7}}, @nested_vmresume={0x130, 0x18}], 0x318}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3m6.769073916s ago: executing program 3 (id=663): r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f00000024c0)='system_u:object_r:crash_device_t:s0\x00', 0xfffffffffffffffa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r0) request_key(&(0x7f0000002480)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, r3) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300120018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) setuid(r5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000380)=0x8, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4ea1, 0x0, @local, 0x3}, 0x1c) r8 = epoll_create1(0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x400455c8, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x800448d3, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 3m4.680556109s ago: executing program 3 (id=684): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x401, 0x4) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000200)={0x11, 0x14, 0x2, 0x44, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast2, @remote, @empty, @rand_addr=' \x01\x00', @mcast2, @private0]}, 0xa8) lseek(r3, 0x3, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = userfaultfd(0x801) capset(0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') read$FUSE(r6, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 3m3.815226518s ago: executing program 3 (id=691): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x5, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000001900)='./file0\x00', 0x4) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x180000) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3, 0x3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x80000000000000a, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e03, @private=0xa010102}, 0x10) fcntl$setown(r5, 0x8, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000080)) r7 = socket(0x10, 0x1, 0x5) sendto$inet6(r7, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 3m1.712518052s ago: executing program 3 (id=701): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r0, &(0x7f0000000240)="a21549ac", 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x6}}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYRES64=r2], 0x0) 3m1.589354576s ago: executing program 3 (id=704): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m1.556744397s ago: executing program 32 (id=704): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.824080088s ago: executing program 1 (id=2433): clock_adjtime(0x0, &(0x7f0000000580)={0x3ff, 0x1000000, 0x4100, 0x80000001, 0x0, 0x3, 0xfffffffffffffffe, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x80, 0x0, 0x9f, 0x2, 0x4000000000014, 0x9, 0x2ffffffffffd, 0xd, 0x8001, 0x1, 0x2, 0x6, 0xc5e3, 0xe}) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1, 0x6) 5.769361959s ago: executing program 1 (id=2434): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x5, 0x82, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x944, 0x200, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x0, 0x90, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x37, 0x7, {0x7, 0x25, 0x1, 0x0, 0x1, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0xb, 0x7}, @as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0xfd, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7, 0x5bbe}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d5f323f6d5c", 0x58}, {&(0x7f0000000140)="6011daffb3bc7ec41548698eff49287316578c3df52177a7ca0e12f21aad6d1c", 0x20}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, r3, 0x0) sigaltstack(&(0x7f0000000000)={0x0}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000740)={'tunl0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x80, 0x20, 0x4, 0xdde, {{0x2f, 0x4, 0x0, 0x6, 0xbc, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, {[@lsrr={0x83, 0x1f, 0x29, [@private=0xa010100, @private=0xa010101, @loopback, @multicast1, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x10}]}, @generic={0x86, 0x10, "fe1602b9a1c63ceec1fa016b0109"}, @timestamp_prespec={0x44, 0xc, 0xfa, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x7}]}, @generic={0x89, 0xa, "cbe850de410a04e7"}, @end, @timestamp_addr={0x44, 0x24, 0xf3, 0x1, 0xa, [{@loopback, 0xff}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast2, 0x80}]}, @end, @timestamp_addr={0x44, 0x3c, 0x1c, 0x1, 0x6, [{@empty, 0x7}, {@private=0xa010100, 0x200}, {@multicast2, 0xfffeffff}, {@broadcast, 0x5}, {@local, 0x400}, {@loopback, 0xc}, {@loopback}]}, @noop]}}}}}) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000780)={@empty, 0x0}, &(0x7f00000007c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000b40)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x75840f8e, 0x9, {{0x7, 0x4, 0x0, 0x1, 0x1c, 0x64, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@end, @generic={0x83, 0x7, "3e35f918af"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000d40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x90, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)=0x4) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)=0x4) recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x12140) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000180)=0x2) 4.60723634s ago: executing program 1 (id=2446): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5, 0x2bafba1}) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x2, '&'}, @local=@item_4={0x3, 0x2, 0x1, "9e7d84ba"}]}}, 0x0}, 0x0) 3.063805693s ago: executing program 1 (id=2462): ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109500, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, 0x0, &(0x7f0000000580)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00'}) syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x4a3001) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000000300), 0x4001) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000180)={0x2, @none={0x0, 0x2}}, 0x14) 2.992782206s ago: executing program 1 (id=2463): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005"], 0x5b0}, 0x20008001) (async) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="b5f675caec6b79e94b06327c057d03f641c212540b37bc883491f830698eb5280604f068b096b0b0168cec6e28f2ff76584619d1508bd0a0dee449bc23cedde5502b00de17f6de726d002bae1c29ac016ffb169801c4776140dfd54e4d38a97edb735468f5fade6e73add4413e749b68527e5562d9eaf82aa1078734d04360e3dacc680eda4df43e7aacae23f2411477dca20935c7201aa0c5e35a78342e5d8f890c12fb7e6219badc979991cf3b6995209dafbe76f380bdc3ee83a0561df359b55baf018b67846f394dd21f6626ddf3fb9b2267b77e8fe818bf512e6d3892aece29b83e8b299700a8e1d26b95805222001d41e75ece9c7df7f2f98264e1b9a04e0e9738e8b7ade0d887112489023146ce33a5817e1ae5256d1b07dc8947a6a068e8e40ebfb5b787571a0e29ced8dea55fc37f945a66583af20c0093eb2417a7a76b2eb2df96dbe2c906d3747f0cfbd85e1dabb679a99b220aa27b9609c4cba254fd036af3da2dc850f63fb1ddccddcb34f9130aca2b7bf95e46b9d7752f62992abc63f2a0e55ffc509f0a8038d2fdb6625d8c2abe0f3a44589c151121e8930c369ced9b43a458c040223d97f8d304a59c2135907377dc16999c97d42ef50959c4a51916bb0adac2df343f53feda99684ead2a698ed02d232e3ee87d1a7baa27a6f71868af6a5c9f4a433ca94f26d1abee69a9562cd75bc86a8f94db3727238d288eabc40e701e8dca307c940389d471b65305a5fdde4231811b4515bfee4a198ab7f988e31c22f832ee0267ae8e28684dc9615db92db1abffcd5842cb484d9915504323154f8c94abd2ab06799d79809dafcaa64cd3665f51449f23da06feb1cfd3e89722f293e6293d1f81130dba0d6467520ea2af63625a4927a94092f5e4cf2462c3a17adc91854bb5e1c974a5bae0448eb37e71853de19a5b2e4f16b84de2623ba3209d81a745844a313acdea03074d35ef60bb05989f15718ad0a252df19f18a2b8b52e54fc36dddd649ca5e5cd71a07f300b4347bc967690f965ebe7335b7bb04b7820fa7d0dd61dbbe2ef386cab02ddf88c90b2182a4bb71d8acb55bb7006528b94591386003206316a1bd442ad84c21b78f2de17c4dd0d2b1f7e28acc6655910c814e7b7f543aac3c9ce246b4ad1fb10673053ab8831d709f403cf7910608ec86512e598cd138edc21e6a4db75737a1f2b1cc8387a4540fe7333ec78e34e8b25ef9b43fe6636828250c4dcde4755566b2071800023019a9c8baad23f6497511c35936bb7d6872f5811e3754a84eb9bc2af9b5ce9e86dfa006e01c4c260ff66d4a59534e44b40edb3a4aef166b8d19b44dbcbf8b4ac01a53f605703f000ab729c98d83568fdfc74e57ae6d86d92cfc5456064b44967d445305ab6489183b0ca8d860b0841bd4e8a1e2941521d1c1e17a13f2c76843e5ee82c4523a2a23b84b7083e1894b44bf3cb444dc52527ded91d89f955c2ad5f8d74f5920fb82ea44ee082b92510d16bba1cfad4b5f3037f7d0e3623aa57db967d15528e6c4883ecd15ce1b6212507df52d6d9771ec2b603a5c34c3e21998e920ad7015e6ab93db621c4511113f97b304385898bca5f51b94dae591a02b365a2c7928167025d785defd3883d4004aef0597c837f122fbec57a62e3f75043688d5aa3e3dceb74da4eb72ce0cb68e60a1498c583e8060b9fcf0b64241b0b9a592e3d7e9e239fbbee953253ba6e0a3e9c96a422e60b013d5a652185ad92df0dd9fb68808e14c933dab3cf09dcf3298d18f4b5e0dc7aa6544cda6ef8b1a5d9e911f770237b79be2f7840c640218949a0cec8e172950ae55427758a7ab2b897a2861b54a0c5696bc6b4407181d2b85e51f98b3ce2019b77cd39cf237efbc5f0d1b747fcb382d6bbf94e8f3fb886671e1755b1b4390841b6c8e386bad9e97278495f4386605194dcca32cc663157a551a7a9c0a84c411d32ad66b2883d3d43ef3bbe484d7ea4f7b46725b7025e766e01cab8a95d8b5c4f8b6da84a48f04ac890eb9ce0c75370974e9b401f4442c806dcf90", 0x5a8}], 0x1}}], 0x1, 0x6008000) (async) sendto$inet6(r0, &(0x7f0000000140)='.Jnz:', 0x5, 0x4080000, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050000b"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_usb_connect(0x1, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705", @ANYRES64], 0x0) 2.425134226s ago: executing program 0 (id=2470): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c40)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000d40)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x130, 0x20, 0x0, 0x0, r1}, {0x0, 0x0, 0xfffffffffffffffe, 0x1000, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x6}, 0x0, 0x6e6bb9, 0x1, 0x0, 0x3}, {{@in=@empty, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x1fd}}, 0xe8) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000019}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa5) r2 = socket(0x1, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x10000008}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x7, 0xff}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xa67, 0x5011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x20, 0xf, 0xd7, 0x2, {0x5, 0x25, 0x1, 0x1, '\''}}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x6d, 0xf7, 0x80, {0x5, 0x25, 0x1, 0x1, ':'}}}]}}}}}]}}, &(0x7f0000000000)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f0800010310"]}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0xb522f000) lremovexattr(0x0, &(0x7f0000001080)=@random={'system.', '\x00'}) pipe(&(0x7f0000000180)) ioctl$BLKRRPART(r6, 0x125f, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.225038507s ago: executing program 0 (id=2481): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00\x00', 0x2, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x101000, 0x100) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x370, 0xa, 0xa, 0x301, 0x70bd2b, 0x25dfdbfd, {0x5, 0x0, 0x4}, [@generic="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"/382, @nested={0x1d9, 0x4d, 0x0, 0x1, [@typed={0x4, 0xd5}, @typed={0xc, 0xfd, 0x0, 0x0, @u64=0xb}, @nested={0x4, 0xf7}, @generic="edcd39b8f6", @typed={0xb1, 0xfc, 0x0, 0x0, @binary="523c100c6848c0191813a2b6760380d524ba5c2bd293710ba27addca37910c1c52d6fa9011a5bc26ea47f3665d9f956add62dfd0c3341b51b6d3d748cebf7762088f4cdd729956da84af8e1fbfc7ebf5bcfadb70b54f3822545077499a65b6b03dde1b1c31cb913aa9141157bf58f270b040556b75c2eb1b3cee62f11a21d41dc217462403a6e460d6e389561b535c2f4d0c43a00b8d555ae574bc69688fd268beb2a4dc974ab6b3ae5ce62ded"}, @nested={0x4, 0x18}, @generic="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", @typed={0x8, 0xba, 0x0, 0x0, @pid=r6}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x44084}, 0x4050) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 1.169326869s ago: executing program 0 (id=2482): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@private=0xa0100fe, @broadcast, 0x0, 0xffffffff, 0x0, 0x10, {@mac=@remote, {[0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x2000, 0x0, 0xffff, 0x4, 'pimreg\x00', 'nr0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf000, 0x4}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, 0xffffff00, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0x1fe, 0xff, 0xff]}}, {@mac=@random="e5a1091340a3", {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0xff81, 0x1, 0x0, 0xb1, 0x3, 'bond0\x00', 'ip6gre0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x5, 0xff03}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rt_sigqueueinfo(r5, 0x21, &(0x7f0000000100)={0x1f}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x30400, 0x0) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f00000004c0)=r5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) mlock(&(0x7f0000131000/0x3000)=nil, 0x3000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.127861911s ago: executing program 0 (id=2484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x32, &(0x7f0000006c40)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000190015000000ffffffffffff02"], 0x1c}], 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) (async) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000000)='syz1\x00') ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) (async) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) (async) write$uinput_user_dev(r2, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x8, 0x9, 0x5}, 0x20, [0x40, 0x6, 0x6, 0x8000, 0x300, 0x4, 0x7, 0x7, 0x1, 0x4, 0x2, 0x7, 0x4, 0x9, 0x10001, 0x677, 0x3, 0x8, 0x5, 0x100, 0x8000, 0xfffffffc, 0x100, 0x7fff, 0x8, 0x80, 0x5f8, 0x6, 0x2, 0x1, 0x9, 0x6, 0x0, 0x24, 0x8, 0x6, 0x9, 0x401, 0x81, 0xcf7d, 0x9, 0xa, 0x95, 0x3, 0x80000001, 0x0, 0x2, 0x8, 0xc4ff, 0x2, 0x1, 0xefe7, 0xb, 0x5, 0x8, 0x1, 0xdd4, 0xfe9, 0x1, 0x4, 0x7d2, 0x2, 0x80000000, 0x6], [0x80, 0x7, 0x6, 0x1, 0x8, 0x3, 0xfff, 0x3, 0x7, 0x9, 0x6, 0xffff, 0x9, 0x8, 0x5, 0x9, 0x5, 0x5, 0x4, 0x2, 0x1ff, 0x200, 0x5c, 0x7, 0x7f, 0xff, 0x7a57c879, 0x2, 0x8, 0x8, 0x2, 0xcbc2, 0x52, 0x2, 0x6, 0x9a3, 0x677, 0x5, 0x80000000, 0xff, 0x7, 0x3ff, 0x80, 0x8, 0x4, 0x1, 0x1ff, 0xb, 0x5, 0xe12, 0xfffffffa, 0x8, 0xffff6ea9, 0x5, 0x0, 0x9, 0x6, 0x4, 0x9, 0x2, 0x9, 0x800000, 0x9, 0x20], [0x631b, 0x3, 0xc, 0x2, 0x1000, 0x5, 0x636, 0xad, 0x7, 0x7, 0x9c36, 0x4, 0x8, 0x52de, 0x2, 0x7, 0xa71, 0xa, 0x5, 0x3, 0x8000, 0x401, 0x1, 0x2, 0x81, 0xfff, 0xe4f, 0x9, 0x1, 0xfbfffffa, 0x8, 0xb, 0x9, 0x7ff, 0x66, 0x2, 0x7, 0x86, 0x3, 0x5, 0x1, 0x400, 0xe, 0xfffffff9, 0xa, 0x0, 0xc39, 0x0, 0x80000000, 0xba, 0x8, 0x0, 0x2, 0x4, 0x8001, 0x6ff8, 0x9, 0x6c9, 0x4, 0x4, 0x8001, 0x2, 0xac7, 0x400], [0x51d1, 0x8, 0x3, 0x3, 0x5, 0x1, 0x45, 0x2064262a, 0xd000, 0xf, 0xf4d, 0x3, 0x6, 0xe, 0x9, 0xc0, 0x40, 0x3, 0x3, 0x9, 0x4, 0x7, 0xbb, 0x20000000, 0x5, 0x56b09c32, 0x209f, 0x5, 0x7, 0x10, 0xb86, 0xfffffffc, 0x5, 0x5, 0x7fff, 0x9, 0x974, 0x7, 0x0, 0xfd, 0x2, 0xa, 0x1, 0x6, 0xff, 0xb, 0x16a2, 0xb, 0xa2cba3d5, 0x27fe, 0x10000, 0x0, 0x8, 0x4, 0x8, 0x747bb767, 0xc, 0x6, 0x9, 0xc, 0x9, 0x40, 0x6, 0x7ff]}, 0x45c) 1.110843281s ago: executing program 2 (id=2485): ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109500, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, 0x0, &(0x7f0000000580)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x2, 0x6, 0xfffa}, 0x80001d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0x3, 0x8001, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x400001, 0x0, 0xfffffffe, 0x6, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x200000a, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x5, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0xe0000000, 0x1005, 0x0, 0xd9b, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfbfffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x5, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xfffffffd, 0x6, 0x1, 0x10080, 0xfffffffe, 0x8, 0x30b1d693, 0x5a2b, 0x2000, 0x7, 0x50000000, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x3, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.057552513s ago: executing program 0 (id=2486): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x700, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.057395573s ago: executing program 2 (id=2487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) read$FUSE(0xffffffffffffffff, &(0x7f0000000c00)={0x2020}, 0x2020) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefb, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200d80, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000140)) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000035000000000000000002000051000000"], 0x14}, 0x1, 0x0, 0x0, 0x40940}, 0x0) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x449) 986.050396ms ago: executing program 2 (id=2488): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) flock(r1, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 972.224446ms ago: executing program 2 (id=2489): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000003800)=""/4093, 0xffd}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x120, 0x0) 959.683147ms ago: executing program 2 (id=2490): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000003800)=""/4093, 0xffd}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x120, 0x0) (fail_nth: 2) 893.481159ms ago: executing program 2 (id=2491): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="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", 0x1000, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000001140)={r1, 0xec, 0x2f}, &(0x7f0000001340)=ANY=[@ANYBLOB="656e233d70036373312068613d7467723136302d67656e657286631000000000000000000000000000000000000000000369b8cbff84aa10c27e449947c59b4a4bc0f38eccec00caf2874f3420000000000000000000000000008c5432f7fbc6e061b6fcc7170eabe7ba9e15245a201eee21e825ad823ac7e73c149ba07a55a1750077db361944a8a1e4b20be1e069c03ea836c4662d83dc0e6ef437467c168f972dfe399c207d9268a2161f54cade768a53073283e4755b0ba50fd5b9b6fa5272073b493e724c0028c4d08ff5"], &(0x7f0000001200)="bcfe1daeed51f7c25e39f9e6f13f8a1ca31eb03f5be44a8c690c6e9eb77c98baad54457b7087c27bed721ea969aa2a41b104608474800dbab2845b30cbfef53f9b9d9b4d9ff3a72342b27ce40b0bd9a184074cdbe32b2e594ab3dbeb3c5c27af031e09d150d9f44af08ab4475bec517566979a8cdab7e0b763854cc30b3b71e437defba26263aefda9f9d23ed1831b184e2e056c01b3552fa20e68ebcfc385b48fa093d25d1f21c8113144ae933afd99c1c2e6c2afd6b632502c2a7905c6017f20bd5fca483cfb8796a9915c3db51a8c8b03ea135de44ae42a9ddb3b7ffdc94f146a28fc43b5aefa1ff0bc16", &(0x7f0000001300)="33e3572000c176d26a6cca877bbf27eb1b94e1fdad1b7de32cf8bc32f3137bb9557266c5ba1691f1ee34c2b7b9bc36") (async) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="60020000100007000000000000000000ac1e0101000000000000000000000000ff0100000000000000000000000000014e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001fffffffd3c0000002001000000000000000000000000000000000000000000000000000000000000820000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a0000000000000000000002000200340000000000000014000e00"], 0x260}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000380)={0x24, &(0x7f0000000200)={0x0, 0x1, 0xc, {0x9, 0x2, "14ea8ea1b439b018e189"}}, 0x0, 0x0, 0x0}, 0x0) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = dup3(r0, r4, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000003900)={0x0, 0xc}) (async) read$FUSE(r5, &(0x7f00000018c0)={0x2020}, 0x2020) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) (async) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000011c0)={r1, 0x45, 0x9b}, &(0x7f00000015c0)={'enc=', 'pkcs1', ' hash=', {'md4\x00'}}, &(0x7f0000001640)="877e7c7fbd8ddc34474d5bba11646e7d73ad27ab0e05e3582040ca12c3a7bf37f0cb9490d9618e0d409c8e988f807042524132bc23e844d9edb7e14f4c2fe696b4e8e821a2", &(0x7f00000016c0)=""/155) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r7 = landlock_create_ruleset(&(0x7f0000001780)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) (async) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000001580)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x15000820}, 0xc, &(0x7f0000001540)={&(0x7f0000001440)={0xf4, 0x464, 0x400, 0x70bd27, 0x25dfdbff, "ccc05e5921ba406adec9eacfe75fe66e6bcfd137236ca0080da6d277dd86cb6de0d5a4279ab1db678170ed899fc320c7a80adcbfb2ef01a1098a2d6e01fb236903105d517ea731703dde4ffc13516d958f59a019a9313e8cff22cef9d2e92d2ba08f071d31f35a095abf75c40f1a158c89493f847297881b4259163048c2cce70c84e10e55365b2878c0c77759893a340f17495dc2864c3af05eb6442745759f18109ba6855857400fc2b2c95abc1fe9360e5bebe8690add7b43a79e3d7a80e7fb82216b8bdade8fb61b666901a0ad023c5c9494e20bc76cab36e71431ed14ebc5", ["", "", "", "", "", ""]}, 0xf4}}, 0x0) landlock_restrict_self(r7, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') truncate(&(0x7f0000000e40)='./file0\x00', 0x3) (async) recvfrom$inet(r5, &(0x7f0000000000)=""/125, 0x7d, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) 521.831462ms ago: executing program 4 (id=2493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 486.637803ms ago: executing program 4 (id=2494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x7, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) 441.836845ms ago: executing program 4 (id=2495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x84ff, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) 341.504018ms ago: executing program 4 (id=2496): ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109500, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, 0x0, &(0x7f0000000580)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) close(r2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x2, 0x6, 0xfffa}, 0x80001d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0x3, 0x8001, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x400001, 0x0, 0xfffffffe, 0x6, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x200000a, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x5, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0xe0000000, 0x1005, 0x0, 0xd9b, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfbfffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x5, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xfffffffd, 0x6, 0x1, 0x10080, 0xfffffffe, 0x8, 0x30b1d693, 0x5a2b, 0x2000, 0x7, 0x50000000, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x3, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 323.844489ms ago: executing program 4 (id=2497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) read$FUSE(0xffffffffffffffff, &(0x7f0000000c00)={0x2020}, 0x2020) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefb, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200d80, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x449) 259.539531ms ago: executing program 4 (id=2498): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x23, &(0x7f0000000380)=@string={0x23, 0x3, "63c8fe74209449dcced47479002976f608e03e34b55d6a00f83372da7f4414f0aa"}}]}) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="4fbcb0eaba53b6603ca724a043e57bf51937346046f21b", 0x17}], 0x1}, 0x40040) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143143, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000004140)={0x1, [{0x1, 0x3008, 0x3, &(0x7f00000008c0)="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"}, {0x2, 0x0, 0x6268e138, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x80, 0x0}, {0x0, 0x0, 0x3dd59c93, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x81, 0x0}, {0x2, 0x0, 0xfffffff9, 0x0}, {0x1, 0x0, 0xd, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x2e9, 0x0}, {0x3, 0x0, 0xc62, 0x0}]}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x8240, 0x93) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)}, 0x20000810) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00') syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x200) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4) 212.735692ms ago: executing program 0 (id=2499): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x19, &(0x7f00000001c0)=ANY=[], 0x1880, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x43f}}]}) 0s ago: executing program 1 (id=2500): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000008309000000200000b3"], 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be", 0xc0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f", 0x35}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1}, 0x2}], 0x2, 0x121, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000000100)={0x3, 0xffffffff, 0x7, 0x40, 0x1, 0x5}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff}, 0x6) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x2, &(0x7f00000001c0)={0x0}) syz_open_procfs(r7, &(0x7f0000000180)='net/rt6_stats\x00') r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200008101e80001dd0000040d000600ea1120000005000000", 0x29}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): der: Read failure Err(EFAULT) in pid:380 [ 222.585377][ T6064] rust_binder: Error while translating object. [ 222.592177][ T6064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 222.598586][ T6064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:380 [ 222.681122][ T10] usb 3-1: device descriptor read/64, error -71 [ 222.703846][ T6071] rust_binder: 688: no such ref 0 [ 222.721555][ T6071] rust_binder: 688: no such ref 0 [ 222.726670][ T6071] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 222.726693][ T6071] rust_binder: Read failure Err(EFAULT) in pid:688 [ 222.739273][ T6071] rust_binder: 688: no such ref 0 [ 222.904053][ T6088] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 222.904080][ T6088] rust_binder: Read failure Err(EFAULT) in pid:1014 [ 222.912579][ T6088] rust_binder: Error while translating object. [ 222.921085][ T6088] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 222.928754][ T6088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1014 [ 222.943383][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 223.021112][ T4624] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 223.060054][ T6099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8191 sclass=netlink_route_socket pid=6099 comm=syz.1.1990 [ 223.074577][ T6099] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 223.082983][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1990'. [ 223.091918][ T10] usb 3-1: device descriptor read/64, error -71 [ 223.104838][ T6101] rust_binder: 1020: no such ref 0 [ 223.112859][ T6101] rust_binder: 1020: no such ref 0 [ 223.172260][ T4624] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.183756][ T4624] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.194395][ T4624] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.207723][ T4624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.214423][ T4624] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 223.223876][ T4624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.237317][ T4624] usb 1-1: config 0 descriptor?? [ 223.251071][ T45] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 223.340514][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 223.347049][ T6113] Bluetooth: hci0: Frame reassembly failed (-84) [ 223.357517][ T6113] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 223.361210][ T10] usb 3-1: device descriptor read/64, error -71 [ 223.367202][ T6113] overlayfs: failed to get uuid (392/file1, err=-13); falling back to uuid=null. [ 223.391103][ T45] usb 5-1: device descriptor read/64, error -71 [ 223.401613][ T6116] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 223.401636][ T6116] rust_binder: Read failure Err(EFAULT) in pid:1035 [ 223.410150][ T6116] rust_binder: Error while translating object. [ 223.416862][ T6116] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 223.423102][ T6116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1035 [ 223.481198][ T10] usb usb3-port1: attempt power cycle [ 223.631136][ T45] usb 5-1: device descriptor read/64, error -71 [ 223.645436][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.652342][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.659029][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.665839][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.672591][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.679309][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.686037][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.692837][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.699531][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.706281][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.713084][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.719778][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.726538][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.733253][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.739953][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.746684][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.753411][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.760113][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.766846][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.773919][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.781263][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.788048][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.794838][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.801674][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.808348][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.815266][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.822011][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.828794][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.835535][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.842272][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 223.849890][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.856715][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.863472][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.870150][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.876934][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.883704][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.890482][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.891062][ T45] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 223.897260][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.911674][ T4624] kye 0003:0458:0087.0029: unknown main item tag 0x0 [ 223.919048][ T10] usb 3-1: device descriptor read/8, error -71 [ 223.925371][ T4624] kye 0003:0458:0087.0029: hidraw0: USB HID v0.0d Device [HID 0458:0087] on usb-dummy_hcd.0-1/input0 [ 223.939262][ T4624] usb 1-1: USB disconnect, device number 44 [ 223.977730][ T6127] rust_binder: 1045: no such ref 0 [ 223.985660][ T6127] rust_binder: 1045: no such ref 0 [ 224.022658][ T6129] FAULT_INJECTION: forcing a failure. [ 224.022658][ T6129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.035924][ T6129] CPU: 0 UID: 0 PID: 6129 Comm: syz.1.2001 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 224.035931][ T45] usb 5-1: device descriptor read/64, error -71 [ 224.035962][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.035976][ T6129] Call Trace: [ 224.035984][ T6129] [ 224.035993][ T6129] __dump_stack+0x21/0x30 [ 224.036016][ T6129] dump_stack_lvl+0x140/0x1c0 [ 224.036031][ T6129] ? __cfi_dump_stack_lvl+0x10/0x10 [ 224.036047][ T6129] ? vsnprintf+0x7b4/0x1ad0 [ 224.036062][ T6129] ? check_stack_object+0x106/0x150 [ 224.036080][ T6129] dump_stack+0x19/0x20 [ 224.036094][ T6129] should_fail_ex+0x3d7/0x530 [ 224.036110][ T6129] should_fail+0xf/0x20 [ 224.036124][ T6129] should_fail_usercopy+0x1e/0x30 [ 224.036140][ T6129] _copy_from_user+0x20/0xa0 [ 224.036154][ T6129] kstrtouint_from_user+0xde/0x170 [ 224.036173][ T6129] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 224.036188][ T6129] ? selinux_file_permission+0x318/0xb60 [ 224.036204][ T6129] ? __cfi_selinux_file_permission+0x10/0x10 [ 224.036219][ T6129] proc_fail_nth_write+0x8f/0x220 [ 224.036234][ T6129] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 224.036249][ T6129] ? bpf_lsm_file_permission+0xd/0x20 [ 224.036263][ T6129] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 224.036277][ T6129] vfs_write+0x3c5/0xf90 [ 224.036293][ T6129] ? __cfi_vfs_write+0x10/0x10 [ 224.036309][ T6129] ? __kasan_check_write+0x18/0x20 [ 224.036325][ T6129] ? mutex_lock+0x97/0x1d0 [ 224.036338][ T6129] ? __cfi_mutex_lock+0x10/0x10 [ 224.036350][ T6129] ? __fget_files+0x2c5/0x340 [ 224.036363][ T6129] ksys_write+0x145/0x260 [ 224.036379][ T6129] ? __cfi_ksys_write+0x10/0x10 [ 224.036410][ T6129] ? __kasan_check_read+0x15/0x20 [ 224.036426][ T6129] __x64_sys_write+0x7f/0x90 [ 224.036442][ T6129] x64_sys_call+0x271c/0x2ee0 [ 224.036459][ T6129] do_syscall_64+0x57/0xf0 [ 224.036475][ T6129] ? clear_bhb_loop+0x50/0xa0 [ 224.036487][ T6129] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 224.036504][ T6129] RIP: 0033:0x7fe7f775d04e [ 224.036516][ T6129] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 224.036528][ T6129] RSP: 002b:00007fe7f8716fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.036544][ T6129] RAX: ffffffffffffffda RBX: 00007fe7f87176c0 RCX: 00007fe7f775d04e [ 224.036554][ T6129] RDX: 0000000000000001 RSI: 00007fe7f87170a0 RDI: 0000000000000004 [ 224.036563][ T6129] RBP: 00007fe7f8717090 R08: 0000000000000000 R09: 0000000000000000 [ 224.036571][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.036580][ T6129] R13: 00007fe7f7a16038 R14: 00007fe7f7a15fa0 R15: 00007ffc36b39df8 [ 224.036597][ T6129] [ 224.271083][ T45] usb 5-1: device descriptor read/64, error -71 [ 224.302130][ T10] usb 3-1: device descriptor read/8, error -71 [ 224.411229][ T45] usb usb5-port1: attempt power cycle [ 224.561099][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 224.590051][ T10] usb 3-1: device descriptor read/8, error -71 [ 224.722308][ T10] usb 3-1: device descriptor read/8, error -71 [ 224.751130][ T45] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 224.772325][ T45] usb 5-1: device descriptor read/8, error -71 [ 224.831167][ T10] usb usb3-port1: unable to enumerate USB device [ 224.902722][ T45] usb 5-1: device descriptor read/8, error -71 [ 225.031078][ T1118] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 225.052073][ T6146] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 225.052100][ T6146] rust_binder: Read failure Err(EFAULT) in pid:1133 [ 225.060471][ T6146] rust_binder: Error while translating object. [ 225.067200][ T6146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 225.073413][ T6146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1133 [ 225.113202][ T6153] rust_binder: 1140: no such ref 0 [ 225.131706][ T6153] rust_binder: 1140: no such ref 0 [ 225.141253][ T45] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 225.162669][ T45] usb 5-1: device descriptor read/8, error -71 [ 225.192140][ T1118] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 32 [ 225.202141][ T1118] usb 1-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.215049][ T1118] usb 1-1: config 1 interface 0 has no altsetting 0 [ 225.223155][ T1118] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.232341][ T1118] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.240344][ T1118] usb 1-1: Product: syz [ 225.244528][ T1118] usb 1-1: Manufacturer: syz [ 225.249129][ T1118] usb 1-1: SerialNumber: syz [ 225.254812][ T6144] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 225.262070][ T6144] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 225.302400][ T45] usb 5-1: device descriptor read/8, error -71 [ 225.411128][ T329] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 225.411137][ T330] Bluetooth: hci0: command 0x1003 tx timeout [ 225.421331][ T45] usb usb5-port1: unable to enumerate USB device [ 225.431086][ T31] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 225.471978][ T1118] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 225.481637][ T1118] usb 1-1: USB disconnect, device number 45 [ 225.521088][ T10] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 225.582174][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.592437][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.605438][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 225.614549][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.623688][ T31] usb 3-1: config 0 descriptor?? [ 225.629517][ T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 225.672181][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.683291][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.693258][ T10] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 225.702516][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.711559][ T10] usb 2-1: config 0 descriptor?? [ 226.104016][ T6166] netlink: 'syz.4.2016': attribute type 27 has an invalid length. [ 226.115263][ T6166] gretap0: left promiscuous mode [ 226.125687][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.150648][ T6157] can0: slcan on ptm0. [ 226.182367][ T2087] cgroup: fork rejected by pids controller in /syz4 [ 226.281075][ T1118] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 226.402346][ T46] bridge_slave_1: left allmulticast mode [ 226.405746][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 226.405764][ T36] audit: type=1400 audit(226.398:1001): avc: denied { mounton } for pid=6186 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 226.408055][ T46] bridge_slave_1: left promiscuous mode [ 226.414276][ T1118] usb 1-1: device descriptor read/64, error -71 [ 226.437366][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.454869][ T46] bridge_slave_0: left allmulticast mode [ 226.460568][ T46] bridge_slave_0: left promiscuous mode [ 226.466219][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.587832][ T46] tipc: Left network mode [ 226.622383][ T6156] can0 (unregistered): slcan off ptm0. [ 226.635318][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 226.650244][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 226.655818][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.661626][ T10] usb 2-1: USB disconnect, device number 90 [ 226.670192][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.680224][ T6186] bridge_slave_0: entered allmulticast mode [ 226.691071][ T1118] usb 1-1: device descriptor read/64, error -71 [ 226.691123][ T6186] bridge_slave_0: entered promiscuous mode [ 226.711973][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.719246][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.727580][ T6186] bridge_slave_1: entered allmulticast mode [ 226.734413][ T6186] bridge_slave_1: entered promiscuous mode [ 226.805690][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.812796][ T6186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.820118][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.827222][ T6186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.856561][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.865028][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.877724][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.884803][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.893455][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.900795][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.926557][ T6186] veth0_vlan: entered promiscuous mode [ 226.932497][ T1118] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 226.939727][ T6186] veth1_macvtap: entered promiscuous mode [ 226.959195][ T36] audit: type=1400 audit(226.948:1002): avc: denied { mounton } for pid=6186 comm="syz-executor" path="/root/syzkaller.p36wUN/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 226.983696][ T36] audit: type=1400 audit(226.948:1003): avc: denied { mounton } for pid=6186 comm="syz-executor" path="/root/syzkaller.p36wUN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 227.010081][ T36] audit: type=1400 audit(226.948:1004): avc: denied { mounton } for pid=6186 comm="syz-executor" path="/root/syzkaller.p36wUN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 227.037968][ T36] audit: type=1400 audit(226.978:1005): avc: denied { mounton } for pid=6186 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 227.059745][ T6220] rust_binder: 4: no such ref 0 [ 227.061240][ T36] audit: type=1400 audit(226.978:1006): avc: denied { mounton } for pid=6186 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 227.090090][ T36] audit: type=1400 audit(226.998:1007): avc: denied { write } for pid=6217 comm="syz.4.2018" path="socket:[47704]" dev="sockfs" ino=47704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.098409][ T6220] rust_binder: 4: no such ref 0 [ 227.113632][ T1118] usb 1-1: device descriptor read/64, error -71 [ 227.259529][ T6227] kvm: emulating exchange as write [ 227.361257][ T1118] usb 1-1: device descriptor read/64, error -71 [ 227.451116][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 227.471138][ T1118] usb usb1-port1: attempt power cycle [ 227.602410][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.610892][ T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 227.621094][ T10] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 227.631872][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 227.640923][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.649023][ T10] usb 5-1: Product: syz [ 227.653279][ T10] usb 5-1: Manufacturer: syz [ 227.658259][ T10] usb 5-1: SerialNumber: syz [ 227.661073][ T45] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 227.811158][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 227.816324][ T1118] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 227.825467][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 227.833976][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.844177][ T45] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 227.853366][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.864011][ T1118] usb 1-1: device descriptor read/8, error -71 [ 227.881094][ T45] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 227.890275][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.898810][ T45] usb 2-1: Product: syz [ 227.903263][ T45] usb 2-1: Manufacturer: syz [ 227.907886][ T45] usb 2-1: SerialNumber: syz [ 227.992162][ T1118] usb 1-1: device descriptor read/8, error -71 [ 228.102149][ T10] usb 5-1: USB disconnect, device number 75 [ 228.122285][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.131005][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.149492][ T45] usb 2-1: USB disconnect, device number 91 [ 228.187986][ T395] usb 3-1: USB disconnect, device number 96 [ 228.241176][ T1118] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 228.262272][ T1118] usb 1-1: device descriptor read/8, error -71 [ 228.332820][ T6246] rust_binder: 1152: no such ref 0 [ 228.340823][ T6246] rust_binder: 1152: no such ref 0 [ 228.392237][ T1118] usb 1-1: device descriptor read/8, error -71 [ 228.501144][ T1118] usb usb1-port1: unable to enumerate USB device [ 228.621083][ T395] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 228.694688][ T36] audit: type=1400 audit(228.688:1008): avc: denied { bind } for pid=6252 comm="syz.1.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.713568][ T36] audit: type=1400 audit(228.688:1009): avc: denied { name_bind } for pid=6252 comm="syz.1.2032" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 228.733885][ T36] audit: type=1400 audit(228.688:1010): avc: denied { node_bind } for pid=6252 comm="syz.1.2032" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 228.772313][ T395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.783283][ T395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.793293][ T395] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 228.802413][ T395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.811435][ T395] usb 3-1: config 0 descriptor?? [ 229.091118][ T4514] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 229.249443][ T4514] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.259729][ T4514] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.272937][ T4514] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 229.282094][ T4514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.291913][ T4514] usb 2-1: config 0 descriptor?? [ 229.300281][ T4514] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 229.423832][ T395] usbhid 3-1:0.0: can't add hid device: -71 [ 229.429896][ T395] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 229.438720][ T395] usb 3-1: USB disconnect, device number 97 [ 229.571223][ T45] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 229.701103][ T45] usb 5-1: device descriptor read/64, error -71 [ 229.934228][ T6273] rust_binder: 1159: no such ref 0 [ 229.941233][ T45] usb 5-1: device descriptor read/64, error -71 [ 229.950310][ T6273] rust_binder: 1159: no such ref 0 [ 229.983921][ T6275] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 229.983941][ T6275] rust_binder: Read failure Err(EFAULT) in pid:400 [ 229.992441][ T6275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:400 [ 230.137608][ T6286] kvm: kvm [6285]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 230.191062][ T45] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 230.321089][ T4514] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 230.341069][ T45] usb 5-1: device descriptor read/64, error -71 [ 230.373281][ T6292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1170 [ 230.462234][ T4514] usb 1-1: device descriptor read/64, error -71 [ 230.581073][ T45] usb 5-1: device descriptor read/64, error -71 [ 230.651072][ T395] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 230.701155][ T45] usb usb5-port1: attempt power cycle [ 230.731059][ T4514] usb 1-1: device descriptor read/64, error -71 [ 230.812104][ T395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.823097][ T395] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.833153][ T395] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 230.842385][ T395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.851564][ T395] usb 3-1: config 0 descriptor?? [ 230.981055][ T4514] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 231.041086][ T45] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 231.062212][ T45] usb 5-1: device descriptor read/8, error -71 [ 231.131082][ T4514] usb 1-1: device descriptor read/64, error -71 [ 231.192090][ T45] usb 5-1: device descriptor read/8, error -71 [ 231.371082][ T4514] usb 1-1: device descriptor read/64, error -71 [ 231.383640][ T395] usbhid 3-1:0.0: can't add hid device: -71 [ 231.389659][ T395] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 231.398338][ T395] usb 3-1: USB disconnect, device number 98 [ 231.431080][ T45] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 231.452070][ T45] usb 5-1: device descriptor read/8, error -71 [ 231.481196][ T4514] usb usb1-port1: attempt power cycle [ 231.582223][ T45] usb 5-1: device descriptor read/8, error -71 [ 231.691977][ T45] usb usb5-port1: unable to enumerate USB device [ 231.821081][ T4514] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 231.842079][ T4514] usb 1-1: device descriptor read/8, error -71 [ 231.863516][ T4624] usb 2-1: USB disconnect, device number 92 [ 231.886678][ T6307] rust_binder: 1090: no such ref 0 [ 231.897940][ T6307] rust_binder: 1090: no such ref 0 [ 231.965452][ T6316] netlink: 'syz.1.2053': attribute type 1 has an invalid length. [ 231.973791][ T4514] usb 1-1: device descriptor read/8, error -71 [ 232.211085][ T4514] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 232.232109][ T4514] usb 1-1: device descriptor read/8, error -71 [ 232.301088][ T45] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 232.362149][ T4514] usb 1-1: device descriptor read/8, error -71 [ 232.462758][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.471264][ T4514] usb usb1-port1: unable to enumerate USB device [ 232.472999][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.492382][ T45] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 232.501475][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.510901][ T45] usb 2-1: config 0 descriptor?? [ 232.518991][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 232.741141][ T4624] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 232.883767][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 232.883786][ T36] audit: type=1400 audit(232.878:1015): avc: denied { create } for pid=6333 comm="syz.2.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 232.901504][ T4624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.909135][ T36] audit: type=1400 audit(232.878:1014): avc: denied { create } for pid=6333 comm="syz.2.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 232.927341][ T4624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.940976][ T36] audit: type=1400 audit(232.878:1016): avc: denied { sys_admin } for pid=6333 comm="syz.2.2060" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 232.957997][ T4624] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 232.979202][ T4624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.980306][ T6341] rust_binder: 1196: no such ref 0 [ 232.996969][ T4624] usb 5-1: config 0 descriptor?? [ 233.006085][ T6341] rust_binder: 1196: no such ref 0 [ 233.177550][ T6352] SELinux: Context ϧ®-·)ç:EØ2¡ÿ­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped). [ 233.192881][ T36] audit: type=1400 audit(233.188:1017): avc: denied { getopt } for pid=6351 comm="syz.2.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.333455][ T4624] usbhid 5-1:0.0: can't add hid device: -71 [ 233.339618][ T4624] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 233.350965][ T4624] usb 5-1: USB disconnect, device number 80 [ 233.439699][ T1118] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 233.501084][ T45] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 233.571113][ T1118] usb 3-1: device descriptor read/64, error -71 [ 233.651079][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 233.657387][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.667664][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.678203][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.687440][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.695698][ T45] usb 1-1: Product: syz [ 233.700134][ T45] usb 1-1: Manufacturer: syz [ 233.705010][ T45] usb 1-1: SerialNumber: syz [ 233.831064][ T1118] usb 3-1: device descriptor read/64, error -71 [ 233.874299][ T6359] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.914108][ T45] usb 1-1: 0:2 : does not exist [ 233.921187][ T45] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 233.934482][ T45] usb 1-1: USB disconnect, device number 54 [ 234.071151][ T1118] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 234.181061][ T4624] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 234.201060][ T1118] usb 3-1: device descriptor read/64, error -71 [ 234.332307][ T4624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.343285][ T4624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.353065][ T4624] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.365978][ T4624] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.375055][ T4624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.383701][ T4624] usb 5-1: config 0 descriptor?? [ 234.431922][ T36] audit: type=1400 audit(234.428:1018): avc: denied { relabelfrom } for pid=6363 comm="syz.0.2069" name="TCPv6" dev="sockfs" ino=49927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 234.431949][ T6364] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 234.447864][ T6366] rust_binder: 411: no such ref 0 [ 234.459904][ T1118] usb 3-1: device descriptor read/64, error -71 [ 234.475642][ T36] audit: type=1400 audit(234.428:1019): avc: denied { relabelto } for pid=6363 comm="syz.0.2069" name="TCPv6" dev="sockfs" ino=49927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:audisp_exec_t:s0" [ 234.479948][ T6366] rust_binder: 411: no such ref 0 [ 234.611164][ T1118] usb usb3-port1: attempt power cycle [ 234.615585][ T6376] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2074'. [ 234.790736][ T4624] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x6 [ 234.798211][ T4624] plantronics 0003:047F:FFFF.002A: unknown global tag 0xd [ 234.805383][ T4624] plantronics 0003:047F:FFFF.002A: item 0 2 1 13 parsing failed [ 234.813296][ T4624] plantronics 0003:047F:FFFF.002A: parse failed [ 234.819559][ T4624] plantronics 0003:047F:FFFF.002A: probe with driver plantronics failed with error -22 [ 234.881071][ T4514] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 234.961126][ T1118] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 234.982113][ T1118] usb 3-1: device descriptor read/8, error -71 [ 234.994198][ T395] usb 5-1: USB disconnect, device number 81 [ 235.032576][ T4514] usb 1-1: unable to get BOS descriptor or descriptor too short [ 235.040347][ T4514] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 235.049279][ T4514] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 235.056956][ T4514] usb 1-1: can't read configurations, error -61 [ 235.065027][ T45] usb 2-1: USB disconnect, device number 93 [ 235.112305][ T1118] usb 3-1: device descriptor read/8, error -71 [ 235.191085][ T4514] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 235.342687][ T4514] usb 1-1: unable to get BOS descriptor or descriptor too short [ 235.350363][ T4514] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 235.359111][ T4514] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 235.361075][ T1118] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 235.366887][ T4514] usb 1-1: can't read configurations, error -61 [ 235.381212][ T4514] usb usb1-port1: attempt power cycle [ 235.392170][ T1118] usb 3-1: device descriptor read/8, error -71 [ 235.512713][ T6389] rust_binder: 30: no such ref 0 [ 235.520619][ T6389] rust_binder: 30: no such ref 0 [ 235.523117][ T1118] usb 3-1: device descriptor read/8, error -71 [ 235.525655][ T6389] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 235.531893][ T6389] rust_binder: Read failure Err(EFAULT) in pid:30 [ 235.648172][ T1118] usb usb3-port1: unable to enumerate USB device [ 235.731147][ T4514] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 235.773088][ T4514] usb 1-1: unable to get BOS descriptor or descriptor too short [ 235.780820][ T4514] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 235.789851][ T4514] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 235.797528][ T4514] usb 1-1: can't read configurations, error -61 [ 235.931124][ T4514] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 235.952965][ T4514] usb 1-1: unable to get BOS descriptor or descriptor too short [ 235.960659][ T4514] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 235.969493][ T4514] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 235.977131][ T4514] usb 1-1: can't read configurations, error -61 [ 235.983602][ T4514] usb usb1-port1: unable to enumerate USB device [ 235.991224][ T1118] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 235.999462][ T45] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 236.152234][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.165181][ T1118] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 236.173889][ T1118] usb 5-1: config 1 has an invalid descriptor of length 25, skipping remainder of the config [ 236.184108][ T45] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 236.193207][ T1118] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.202132][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.210161][ T1118] usb 5-1: config 1 has no interface number 0 [ 236.217105][ T45] usb 2-1: config 0 descriptor?? [ 236.222129][ T1118] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 236.232992][ T1118] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 236.246790][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 236.255443][ T1118] usb 5-1: New USB device found, idVendor=0525, idProduct=a4e1, bcdDevice= 0.37 [ 236.264577][ T1118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.272906][ T1118] usb 5-1: Product: syz [ 236.277097][ T1118] usb 5-1: Manufacturer: syz [ 236.281812][ T1118] usb 5-1: SerialNumber: syz [ 236.288317][ T1118] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 236.295460][ T1118] cdc_ncm 5-1:1.1: bind() failure [ 236.310271][ T36] audit: type=1400 audit(236.298:1020): avc: denied { getopt } for pid=6399 comm="syz.2.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.342755][ T36] audit: type=1400 audit(236.338:1021): avc: denied { write } for pid=6403 comm="syz.2.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 236.489534][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.498096][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.507751][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.516622][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.525212][ T45] usb 5-1: USB disconnect, device number 82 [ 236.601087][ T1118] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 236.751110][ T1118] usb 3-1: Using ep0 maxpacket: 8 [ 236.757229][ T1118] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 236.765604][ T1118] usb 3-1: config 179 has no interface number 0 [ 236.771913][ T1118] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 236.783053][ T1118] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 236.794400][ T1118] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 236.805557][ T1118] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 236.816978][ T1118] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 236.830225][ T1118] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 236.839627][ T1118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.849150][ T6406] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 237.043687][ T6409] rust_binder: 39: no such ref 0 [ 237.051917][ T6409] rust_binder: 39: no such ref 0 [ 237.056923][ T6409] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 237.056941][ T6409] rust_binder: Read failure Err(EFAULT) in pid:39 [ 237.066850][ T1118] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input27 [ 237.154151][ T36] audit: type=1400 audit(237.148:1022): avc: denied { write } for pid=6413 comm="syz.4.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 237.266082][ T4514] usb 3-1: USB disconnect, device number 103 [ 237.266183][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 237.281183][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 237.281255][ T4514] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 237.454863][ T6431] rust_binder: 60: no such ref 0 [ 237.463120][ T6431] rust_binder: 60: no such ref 0 [ 237.468119][ T6431] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 237.468137][ T6431] rust_binder: Read failure Err(EFAULT) in pid:60 [ 237.524091][ T6433] FAULT_INJECTION: forcing a failure. [ 237.524091][ T6433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.543839][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: syz.4.2098 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 237.543870][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.543879][ T6433] Call Trace: [ 237.543884][ T6433] [ 237.543890][ T6433] __dump_stack+0x21/0x30 [ 237.543912][ T6433] dump_stack_lvl+0x140/0x1c0 [ 237.543928][ T6433] ? __cfi_dump_stack_lvl+0x10/0x10 [ 237.543945][ T6433] ? do_vfs_ioctl+0x182d/0x2010 [ 237.543958][ T6433] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 237.543972][ T6433] dump_stack+0x19/0x20 [ 237.543987][ T6433] should_fail_ex+0x3d7/0x530 [ 237.544003][ T6433] should_fail+0xf/0x20 [ 237.544018][ T6433] should_fail_usercopy+0x1e/0x30 [ 237.544034][ T6433] _copy_from_user+0x20/0xa0 [ 237.544046][ T6433] kvm_vm_ioctl+0x72b/0xc60 [ 237.544063][ T6433] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 237.544079][ T6433] ? ioctl_has_perm+0x408/0x500 [ 237.544095][ T6433] ? has_cap_mac_admin+0xd0/0xd0 [ 237.544110][ T6433] ? proc_fail_nth_write+0x184/0x220 [ 237.544125][ T6433] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 237.544140][ T6433] ? selinux_file_ioctl+0x732/0x1480 [ 237.544156][ T6433] ? vfs_write+0x9a4/0xf90 [ 237.544172][ T6433] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 237.544188][ T6433] ? __cfi_vfs_write+0x10/0x10 [ 237.544204][ T6433] ? __kasan_check_write+0x18/0x20 [ 237.544220][ T6433] ? mutex_unlock+0x90/0x240 [ 237.544235][ T6433] ? __cfi_mutex_unlock+0x10/0x10 [ 237.544247][ T6433] ? __fget_files+0x2c5/0x340 [ 237.544260][ T6433] ? __fget_files+0x2c5/0x340 [ 237.544272][ T6433] ? bpf_lsm_file_ioctl+0xd/0x20 [ 237.544286][ T6433] ? security_file_ioctl+0x3e/0x110 [ 237.544301][ T6433] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 237.544316][ T6433] __se_sys_ioctl+0x132/0x1b0 [ 237.544328][ T6433] __x64_sys_ioctl+0x7f/0xa0 [ 237.544340][ T6433] x64_sys_call+0x1878/0x2ee0 [ 237.544357][ T6433] do_syscall_64+0x57/0xf0 [ 237.544374][ T6433] ? clear_bhb_loop+0x50/0xa0 [ 237.544386][ T6433] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 237.544404][ T6433] RIP: 0033:0x7f5c2299c819 [ 237.544416][ T6433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.544427][ T6433] RSP: 002b:00007f5c2385a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.544443][ T6433] RAX: ffffffffffffffda RBX: 00007f5c22c15fa0 RCX: 00007f5c2299c819 [ 237.544453][ T6433] RDX: 00002000000000c0 RSI: 000000004068aea3 RDI: 0000000000000004 [ 237.544463][ T6433] RBP: 00007f5c2385a090 R08: 0000000000000000 R09: 0000000000000000 [ 237.544472][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.544480][ T6433] R13: 00007f5c22c16038 R14: 00007f5c22c15fa0 R15: 00007ffd6cdbf988 [ 237.544491][ T6433] [ 237.904157][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2102'. [ 238.008462][ T36] audit: type=1400 audit(237.998:1023): avc: denied { nlmsg_write } for pid=6447 comm="syz.0.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 238.030695][ T36] audit: type=1400 audit(237.998:1024): avc: denied { nlmsg_read } for pid=6447 comm="syz.0.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 238.070763][ T36] audit: type=1400 audit(238.058:1025): avc: denied { write } for pid=6454 comm="syz.4.2107" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.094069][ T36] audit: type=1400 audit(238.068:1026): avc: denied { map } for pid=6454 comm="syz.4.2107" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.116552][ T36] audit: type=1400 audit(238.068:1027): avc: denied { execute } for pid=6454 comm="syz.4.2107" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.165875][ T36] audit: type=1400 audit(238.158:1028): avc: denied { relabelfrom } for pid=6460 comm="syz.4.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 238.185370][ T36] audit: type=1400 audit(238.158:1029): avc: denied { relabelto } for pid=6460 comm="syz.4.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 238.301192][ T1118] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 238.452678][ T1118] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.463259][ T1118] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.472911][ T1118] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.482300][ T1118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.490305][ T1118] usb 3-1: SerialNumber: syz [ 238.699154][ T1118] usb 3-1: 0:2 : does not exist [ 238.704404][ T1118] usb 3-1: unit 5 not found! [ 238.710651][ T1118] usb 3-1: USB disconnect, device number 104 [ 238.720059][ T2304] udevd[2304]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.760753][ T45] usb 2-1: USB disconnect, device number 94 [ 238.791064][ T4514] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 238.962340][ T4514] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 238.970447][ T4514] usb 5-1: config 1 has no interface number 0 [ 238.976623][ T4514] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x4 has invalid maxpacket 8297, setting to 1024 [ 238.987614][ T4514] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 238.997568][ T4514] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 239.008294][ T4514] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 239.021569][ T4514] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 239.030628][ T4514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.038880][ T4514] usb 5-1: Product: syz [ 239.043086][ T4514] usb 5-1: Manufacturer: syz [ 239.047691][ T4514] usb 5-1: SerialNumber: syz [ 239.056438][ T6471] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 239.063947][ T6471] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 239.171078][ T45] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 239.274032][ T36] audit: type=1400 audit(239.268:1030): avc: denied { write } for pid=6470 comm="syz.4.2113" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 239.321121][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 239.325896][ T6489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1049 sclass=netlink_route_socket pid=6489 comm=syz.4.2113 [ 239.327428][ T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.350162][ T45] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.359984][ T4514] usb 5-1: USB disconnect, device number 83 [ 239.360120][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.372645][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 239.386917][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.395596][ T45] usb 2-1: config 0 descriptor?? [ 239.801060][ T4514] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 239.809796][ T45] hid (null): nested delimiters [ 239.818199][ T45] hid (null): global environment stack underflow [ 239.824622][ T45] hid (null): report_id 1436 is invalid [ 239.830340][ T45] hid (null): invalid report_size 3881 [ 239.836048][ T45] hid (null): report_id 2371374315 is invalid [ 239.843871][ T45] hid (null): unknown global tag 0xe [ 239.849246][ T45] hid (null): unknown global tag 0xd [ 239.854916][ T45] hid (null): unknown global tag 0xd [ 239.897389][ T6501] pim6reg1: entered promiscuous mode [ 239.902872][ T6501] pim6reg1: entered allmulticast mode [ 239.972559][ T4514] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.979034][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2125'. [ 240.007029][ T4514] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 240.016394][ T4514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.032379][ T4514] usb 1-1: config 0 descriptor?? [ 240.035248][ T1118] usb 2-1: USB disconnect, device number 95 [ 240.044212][ T4514] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 240.439370][ T6514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 240.501106][ T31] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 240.600797][ T6530] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 240.653239][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.663420][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.672604][ T31] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.683415][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 240.697031][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.706112][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.714354][ T31] usb 5-1: SerialNumber: syz [ 240.801115][ T4514] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 240.924482][ T31] usb 5-1: 0:2 : does not exist [ 240.929396][ T31] usb 5-1: unit 5 not found! [ 240.935776][ T31] usb 5-1: USB disconnect, device number 84 [ 240.943900][ T2304] udevd[2304]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 240.959962][ T4514] usb 3-1: Using ep0 maxpacket: 32 [ 240.965188][ T4624] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 240.974299][ T4514] usb 3-1: config 0 has no interfaces? [ 240.981745][ T4514] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 240.990883][ T4514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.998968][ T4514] usb 3-1: Product: syz [ 241.003193][ T4514] usb 3-1: Manufacturer: syz [ 241.007806][ T4514] usb 3-1: SerialNumber: syz [ 241.013393][ T4514] usb 3-1: config 0 descriptor?? [ 241.122383][ T4624] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.133756][ T4624] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.143752][ T4624] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.156798][ T4624] usb 2-1: config 0 interface 0 has no altsetting 0 [ 241.163462][ T4624] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 241.172552][ T4624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.181268][ T4624] usb 2-1: config 0 descriptor?? [ 241.222842][ T36] audit: type=1400 audit(241.218:1031): avc: denied { mounton } for pid=6525 comm="syz.2.2134" path="/483/file0/file0" dev="ramfs" ino=51035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 241.223069][ T6526] overlayfs: disabling nfs_export due to verity=require [ 241.252693][ T6526] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 241.259660][ T6526] overlayfs: failed to set xattr on upper [ 241.265691][ T6526] overlayfs: ...falling back to redirect_dir=nofollow. [ 241.272599][ T6526] overlayfs: ...falling back to metacopy=off. [ 241.278783][ T6526] overlayfs: ...falling back to index=off. [ 241.284866][ T6526] overlayfs: ...falling back to uuid=null. [ 241.290874][ T6526] overlayfs: conflicting lowerdir path [ 241.300842][ T4514] usb 3-1: USB disconnect, device number 105 [ 241.590434][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.598340][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.605488][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.612517][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.619390][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.626672][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.633697][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.641199][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.648052][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.655302][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.662510][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.669405][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.676750][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.683750][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.690520][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.698384][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.705301][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.712397][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.719180][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.726248][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.733330][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.740228][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.747230][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.754212][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.760977][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.768067][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.774966][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.781993][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.793120][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.799959][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.807135][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.814062][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.820911][ T36] audit: type=1400 audit(241.808:1032): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 241.840324][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.847721][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.854741][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.862308][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.869148][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.876679][ T4624] kye 0003:0458:0087.002C: unknown main item tag 0x0 [ 241.891144][ T4624] kye 0003:0458:0087.002C: hidraw0: USB HID v0.0d Device [HID 0458:0087] on usb-dummy_hcd.1-1/input0 [ 241.910525][ T4624] usb 2-1: USB disconnect, device number 96 [ 241.930264][ T6546] netlink: 'syz.2.2139': attribute type 3 has an invalid length. [ 241.934334][ T6544] fido_id[6544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 242.422071][ T4624] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 242.478318][ T6565] rust_binder: 107: no such ref 0 [ 242.487813][ T6565] rust_binder: 107: no such ref 0 [ 242.493688][ T6565] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 242.493719][ T6565] rust_binder: Read failure Err(EFAULT) in pid:107 [ 242.571065][ T4624] usb 3-1: Using ep0 maxpacket: 8 [ 242.592338][ T4514] usb 1-1: USB disconnect, device number 59 [ 242.602594][ T4624] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 242.613481][ T4624] usb 3-1: config 179 has no interface number 0 [ 242.617487][ T6573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.619955][ T6573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 242.620743][ T4624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 242.631579][ T6573] x_tables: unsorted underflow at hook 4 [ 242.646620][ T4624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 242.667426][ T4624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.671060][ T31] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 242.678914][ T4624] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 242.697907][ T4624] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 242.711435][ T4624] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 242.720488][ T4624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.729762][ T6559] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.810454][ T6584] rust_binder: 447: no such ref 0 [ 242.825354][ T6584] rust_binder: 447: no such ref 0 [ 242.830534][ T6584] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 242.830553][ T6584] rust_binder: Read failure Err(EFAULT) in pid:447 [ 242.852340][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.869208][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.879088][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.888298][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.896382][ T31] usb 2-1: SerialNumber: syz [ 243.131854][ T31] usb 2-1: skipping empty audio interface (v1) [ 243.142320][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 243.154752][ T31] usb 2-1: USB disconnect, device number 97 [ 243.163344][ T2304] udevd[2304]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 243.473433][ T4624] usb 3-1: USB disconnect, device number 106 [ 243.479548][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 243.479586][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 243.514495][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 243.514516][ T36] audit: type=1400 audit(243.508:1037): avc: denied { connect } for pid=6610 comm="syz.2.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.676484][ T36] audit: type=1326 audit(243.668:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.1.2170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7f779c819 code=0x0 [ 243.698996][ T4514] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 243.743513][ T6611] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.743597][ T6611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1267 [ 243.750558][ T36] audit: type=1400 audit(243.738:1039): avc: denied { ioctl } for pid=6610 comm="syz.2.2168" path="socket:[52731]" dev="sockfs" ino=52731 ioctlcmd=0x6e83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.784722][ T36] audit: type=1400 audit(243.748:1040): avc: denied { read } for pid=6610 comm="syz.2.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.851156][ T4514] usb 1-1: Using ep0 maxpacket: 8 [ 243.859283][ T4514] usb 1-1: unable to get BOS descriptor or descriptor too short [ 243.873515][ T4514] usb 1-1: config 11 has an invalid interface number: 9 but max is 0 [ 243.881806][ T4514] usb 1-1: config 11 has no interface number 0 [ 243.888049][ T4514] usb 1-1: config 11 interface 9 has no altsetting 0 [ 243.901088][ T4514] usb 1-1: New USB device found, idVendor=4d03, idProduct=3a39, bcdDevice=ef.de [ 243.910195][ T4514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.918284][ T4514] usb 1-1: Product: syz [ 243.922652][ T4514] usb 1-1: Manufacturer: syz [ 243.927554][ T4514] usb 1-1: SerialNumber: syz [ 244.821075][ T4624] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 244.881097][ T10] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 244.971071][ T4624] usb 2-1: Using ep0 maxpacket: 16 [ 244.977605][ T4624] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.987988][ T4624] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.998784][ T4624] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.007988][ T4624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.016429][ T4624] usb 2-1: Product: syz [ 245.024475][ T4624] usb 2-1: Manufacturer: syz [ 245.029265][ T4624] usb 2-1: SerialNumber: syz [ 245.035492][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.046070][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.057923][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 245.067146][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.075217][ T10] usb 3-1: SerialNumber: syz [ 245.458079][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.467882][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.479139][ T6644] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 245.498568][ T4624] usb 2-1: cannot find UAC_HEADER [ 245.512905][ T10] usb 3-1: skipping empty audio interface (v1) [ 245.519354][ T4624] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 245.534948][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 245.545795][ T1409] udevd[1409]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 245.561859][ T4624] usb 2-1: USB disconnect, device number 98 [ 245.570982][ T10] usb 3-1: USB disconnect, device number 107 [ 245.587404][ T1605] udevd[1605]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 245.826069][ T6652] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.881777][ T36] audit: type=1400 audit(245.878:1041): avc: denied { append } for pid=6655 comm="syz.2.2181" name="pfkey" dev="proc" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 246.037759][ T36] audit: type=1400 audit(246.028:1042): avc: denied { listen } for pid=6669 comm="syz.1.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 246.131116][ T4624] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 246.235275][ T6690] exfat: Deprecated parameter 'debug' [ 246.241053][ T6690] syz.4.2195: attempt to access beyond end of device [ 246.241053][ T6690] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 246.253980][ T6690] exFAT-fs (loop4): unable to read boot sector [ 246.260191][ T6690] exFAT-fs (loop4): failed to read boot sector [ 246.266569][ T6690] exFAT-fs (loop4): failed to recognize exfat type [ 246.308036][ T4624] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 246.320333][ T4624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 70, changing to 10 [ 246.331536][ T4624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 58097, setting to 1024 [ 246.343026][ T4624] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 246.352181][ T4624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.361610][ T4624] usb 3-1: config 0 descriptor?? [ 246.381706][ T4624] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 246.400071][ T4514] cdc_eem 1-1:11.9: probe with driver cdc_eem failed with error -22 [ 246.415787][ T4514] usb 1-1: USB disconnect, device number 60 [ 246.521175][ T31] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 246.590295][ T4624] usb 3-1: USB disconnect, device number 108 [ 246.681049][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 246.687456][ T31] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 246.696045][ T31] usb 5-1: config 0 has no interface number 0 [ 246.704207][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 246.713525][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.722836][ T31] usb 5-1: Product: syz [ 246.731235][ T31] usb 5-1: Manufacturer: syz [ 246.736197][ T31] usb 5-1: SerialNumber: syz [ 246.742628][ T31] usb 5-1: config 0 descriptor?? [ 246.748574][ T31] smsc95xx v2.0.0 [ 246.861077][ T4514] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 247.011102][ T4514] usb 1-1: Using ep0 maxpacket: 16 [ 247.017877][ T4514] usb 1-1: unable to get BOS descriptor or descriptor too short [ 247.026511][ T4514] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 247.036760][ T4514] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 247.048303][ T4514] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.057521][ T4514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.065560][ T4514] usb 1-1: Product: syz [ 247.069738][ T4514] usb 1-1: Manufacturer: syz [ 247.074364][ T4514] usb 1-1: SerialNumber: syz [ 247.149821][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 247.161136][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 247.263281][ T1118] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 247.286047][ T4514] cdc_ncm 1-1:1.0: bind() failure [ 247.292844][ T4514] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 247.299652][ T4514] cdc_ncm 1-1:1.1: bind() failure [ 247.308696][ T4514] usb 1-1: USB disconnect, device number 61 [ 247.422300][ T1118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.432401][ T1118] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 247.441968][ T1118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.451419][ T1118] usb 2-1: config 0 descriptor?? [ 247.457688][ T1118] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 247.774000][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 247.785430][ T31] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 247.799367][ T31] usb 5-1: USB disconnect, device number 85 [ 248.130027][ T307] Bluetooth: hci0: Frame reassembly failed (-84) [ 248.137466][ T6768] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 248.469092][ T6782] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 248.761056][ T31] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 248.912120][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.922277][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.935238][ T31] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 248.944490][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.953159][ T31] usb 5-1: config 0 descriptor?? [ 248.959224][ T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 248.973392][ T36] audit: type=1400 audit(248.968:1043): avc: denied { mount } for pid=6788 comm="syz.0.2232" name="/" dev="configfs" ino=1346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 248.996309][ T36] audit: type=1400 audit(248.988:1044): avc: denied { search } for pid=6788 comm="syz.0.2232" name="/" dev="configfs" ino=1346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.371100][ T4624] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 249.521051][ T4624] usb 1-1: Using ep0 maxpacket: 8 [ 249.527522][ T4624] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 249.535798][ T4624] usb 1-1: config 0 has no interface number 0 [ 249.543345][ T4624] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 249.552472][ T4624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.560483][ T4624] usb 1-1: Product: syz [ 249.564733][ T4624] usb 1-1: Manufacturer: syz [ 249.569510][ T4624] usb 1-1: SerialNumber: syz [ 249.574967][ T4624] usb 1-1: config 0 descriptor?? [ 249.822314][ T36] audit: type=1400 audit(249.818:1045): avc: denied { ioctl } for pid=6800 comm="syz.0.2237" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.847423][ T36] audit: type=1400 audit(249.828:1046): avc: denied { mount } for pid=6800 comm="syz.0.2237" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 249.869321][ T4624] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 249.875777][ T4624] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 249.884735][ T4624] usb 1-1: Failed to create links for entity 5 [ 249.891101][ T4624] usb 1-1: Failed to register entities (-22). [ 249.900642][ T4624] usb 1-1: USB disconnect, device number 62 [ 250.036821][ T4514] usb 2-1: USB disconnect, device number 99 [ 250.047913][ T6806] tipc: Enabling of bearer rejected, failed to enable media [ 250.085776][ T6813] netlink: 'syz.1.2241': attribute type 3 has an invalid length. [ 250.093733][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2241'. [ 250.114266][ T6815] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 250.121341][ T6815] overlayfs: failed to set xattr on upper [ 250.127509][ T6815] overlayfs: ...falling back to redirect_dir=nofollow. [ 250.134907][ T6815] overlayfs: ...falling back to uuid=null. [ 250.140840][ T6815] overlayfs: ...falling back to xino=off. [ 250.211116][ T329] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 250.213674][ T6820] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 250.217382][ T330] Bluetooth: hci0: command 0x1003 tx timeout [ 250.293345][ T6822] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 250.493330][ T36] audit: type=1326 audit(250.488:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.2252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a6279c819 code=0x0 [ 250.531049][ T31] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 250.682216][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.692397][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 250.701543][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.710882][ T31] usb 2-1: config 0 descriptor?? [ 250.722350][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 250.811102][ T4514] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 250.962296][ T4514] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.974617][ T4514] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.983712][ T4514] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 250.991770][ T4514] usb 3-1: Product: syz [ 250.995947][ T4514] usb 3-1: SerialNumber: syz [ 251.456380][ T6855] netlink: 'syz.0.2257': attribute type 27 has an invalid length. [ 251.564677][ T31] usb 5-1: USB disconnect, device number 86 [ 251.701065][ T4624] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 251.831059][ T4624] usb 1-1: device descriptor read/64, error -71 [ 251.878370][ T36] audit: type=1400 audit(251.868:1048): avc: denied { ioctl } for pid=6856 comm="syz.4.2258" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 252.060951][ T4514] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 252.067846][ T4514] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 252.075284][ T4624] usb 1-1: device descriptor read/64, error -71 [ 252.081637][ T4514] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 252.261385][ T4514] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 252.268551][ T4514] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 252.282032][ T4514] usb 3-1: USB disconnect, device number 109 [ 252.288759][ T4514] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 252.322276][ T4624] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 252.461055][ T4624] usb 1-1: device descriptor read/64, error -71 [ 252.480681][ T6892] netlink: 'syz.4.2262': attribute type 13 has an invalid length. [ 252.711056][ T4624] usb 1-1: device descriptor read/64, error -71 [ 252.721173][ T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 252.778729][ T36] audit: type=1400 audit(252.768:1049): avc: denied { module_load } for pid=6900 comm="syz.2.2263" path="/sys/kernel/fscaps" dev="sysfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 252.821127][ T4624] usb usb1-port1: attempt power cycle [ 252.881074][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 252.889183][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 252.889815][ T6907] FAULT_INJECTION: forcing a failure. [ 252.889815][ T6907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.898631][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 7 [ 252.910226][ T6907] CPU: 1 UID: 0 PID: 6907 Comm: syz.2.2266 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 252.910263][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.910276][ T6907] Call Trace: [ 252.910284][ T6907] [ 252.910293][ T6907] __dump_stack+0x21/0x30 [ 252.910323][ T6907] dump_stack_lvl+0x140/0x1c0 [ 252.910347][ T6907] ? __cfi_dump_stack_lvl+0x10/0x10 [ 252.910380][ T6907] ? check_stack_object+0x12b/0x150 [ 252.910408][ T6907] dump_stack+0x19/0x20 [ 252.910431][ T6907] should_fail_ex+0x3d7/0x530 [ 252.910456][ T6907] should_fail+0xf/0x20 [ 252.910478][ T6907] should_fail_usercopy+0x1e/0x30 [ 252.910502][ T6907] _copy_to_user+0x24/0xa0 [ 252.910521][ T6907] simple_read_from_buffer+0xed/0x160 [ 252.910543][ T6907] proc_fail_nth_read+0x1aa/0x220 [ 252.910566][ T6907] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 252.910589][ T6907] ? bpf_lsm_file_permission+0xd/0x20 [ 252.910610][ T6907] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 252.910633][ T6907] vfs_read+0x289/0xcb0 [ 252.910657][ T6907] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 252.910682][ T6907] ? __cfi_vfs_read+0x10/0x10 [ 252.910706][ T6907] ? __kasan_check_write+0x18/0x20 [ 252.910731][ T6907] ? mutex_lock+0x97/0x1d0 [ 252.910750][ T6907] ? __cfi_mutex_lock+0x10/0x10 [ 252.910770][ T6907] ? __fget_files+0x2c5/0x340 [ 252.910790][ T6907] ksys_read+0x145/0x260 [ 252.910815][ T6907] ? __cfi_ksys_read+0x10/0x10 [ 252.910840][ T6907] ? __kasan_check_read+0x15/0x20 [ 252.910865][ T6907] __x64_sys_read+0x7f/0x90 [ 252.910890][ T6907] x64_sys_call+0x2638/0x2ee0 [ 252.910916][ T6907] do_syscall_64+0x57/0xf0 [ 252.910942][ T6907] ? clear_bhb_loop+0x50/0xa0 [ 252.910959][ T6907] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 252.910986][ T6907] RIP: 0033:0x7f2338b5d04e [ 252.911010][ T6907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.911026][ T6907] RSP: 002b:00007f2339abffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.911049][ T6907] RAX: ffffffffffffffda RBX: 00007f2339ac06c0 RCX: 00007f2338b5d04e [ 252.911065][ T6907] RDX: 000000000000000f RSI: 00007f2339ac00a0 RDI: 0000000000000004 [ 252.911078][ T6907] RBP: 00007f2339ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 252.911092][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.911104][ T6907] R13: 00007f2338e16038 R14: 00007f2338e15fa0 R15: 00007ffcf920c818 [ 252.911121][ T6907] [ 253.169061][ T9] usb 5-1: New USB device found, idVendor=2b73, idProduct=000e, bcdDevice= 0.40 [ 253.178212][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.186304][ T9] usb 5-1: Product: syz [ 253.190490][ T9] usb 5-1: Manufacturer: syz [ 253.195178][ T9] usb 5-1: SerialNumber: syz [ 253.221095][ T4624] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 253.242433][ T4624] usb 1-1: device descriptor read/8, error -71 [ 253.256232][ T31] usb 2-1: USB disconnect, device number 100 [ 253.372406][ T4624] usb 1-1: device descriptor read/8, error -71 [ 253.398713][ T36] audit: type=1400 audit(253.388:1050): avc: denied { create } for pid=6924 comm="syz.2.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 253.432361][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 253.439435][ T9] usb 5-1: 2:1 : unknown format tag 0x7 is detected. processed as MPEG. [ 253.447979][ T9] usb 5-1: found format II with max.bitrate = 65535, frame size=9 [ 253.456081][ T9] usb 5-1: 2:1 : unknown format tag 0x7 is detected. processed as MPEG. [ 253.464854][ T9] usb 5-1: found format II with max.bitrate = 65535, frame size=9 [ 253.481903][ T9] usb 5-1: USB disconnect, device number 87 [ 253.496445][ T5201] udevd[5201]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 253.611081][ T4624] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 253.632124][ T4624] usb 1-1: device descriptor read/8, error -71 [ 253.691110][ T31] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 253.762275][ T4624] usb 1-1: device descriptor read/8, error -71 [ 253.831101][ T1118] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 253.842319][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.852229][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 253.861569][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.870723][ T31] usb 2-1: config 0 descriptor?? [ 253.876819][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 253.881169][ T4624] usb usb1-port1: unable to enumerate USB device [ 253.950563][ T36] audit: type=1326 audit(253.938:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.4.2275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c2299c819 code=0x0 [ 253.992358][ T1118] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 254.000590][ T1118] usb 3-1: config 0 has no interface number 0 [ 254.006914][ T1118] usb 3-1: config 0 interface 41 has no altsetting 0 [ 254.015213][ T1118] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 254.024390][ T1118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.032424][ T1118] usb 3-1: Product: syz [ 254.036608][ T1118] usb 3-1: Manufacturer: syz [ 254.041234][ T1118] usb 3-1: SerialNumber: syz [ 254.046726][ T1118] usb 3-1: config 0 descriptor?? [ 254.308444][ T6956] SELinux: Context system_u:object_r:sshd_var_run_t:s0 is not valid (left unmapped). [ 254.318671][ T36] audit: type=1400 audit(254.308:1052): avc: denied { relabelto } for pid=6954 comm="syz.4.2283" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:sshd_var_run_t:s0" [ 254.345684][ T36] audit: type=1400 audit(254.308:1053): avc: denied { associate } for pid=6954 comm="syz.4.2283" name="001" dev="devtmpfs" ino=108 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sshd_var_run_t:s0" [ 254.381124][ T36] audit: type=1400 audit(254.378:1054): avc: denied { load_policy } for pid=6954 comm="syz.4.2283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 254.381199][ T6956] SELinux: policydb magic number 0xba7343e5 does not match expected magic number 0xf97cff8c [ 254.411134][ T6956] SELinux: failed to load policy [ 254.416685][ T6955] SELinux: policydb magic number 0xba7343e5 does not match expected magic number 0xf97cff8c [ 254.426955][ T6955] SELinux: failed to load policy [ 254.868771][ T1118] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 254.869500][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2274'. [ 255.294077][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.303047][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.415689][ T6980] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 255.471837][ T36] audit: type=1326 audit(255.468:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.0.2292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a6279c819 code=0x0 [ 255.680574][ T6989] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 255.821100][ T31] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 255.921667][ T1118] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 255.932520][ T1118] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 255.942607][ T1118] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 255.952233][ T1118] usb 3-1: USB disconnect, device number 110 [ 255.973792][ T31] usb 1-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 255.983104][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.991474][ T31] usb 1-1: Product: syz [ 255.995692][ T31] usb 1-1: Manufacturer: syz [ 256.000387][ T31] usb 1-1: SerialNumber: syz [ 256.091132][ T9] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 256.109273][ T7007] netlink: 'syz.2.2301': attribute type 46 has an invalid length. [ 256.138938][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 256.174487][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 256.242337][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.253693][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.263697][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 256.276632][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.283366][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 256.292698][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.301908][ T9] usb 5-1: config 0 descriptor?? [ 256.361887][ T1118] usb 2-1: USB disconnect, device number 101 [ 256.421117][ T4624] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 256.572246][ T4624] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 256.581087][ T4624] usb 3-1: config 1 has an invalid descriptor of length 25, skipping remainder of the config [ 256.591864][ T4624] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.600844][ T4624] usb 3-1: config 1 has no interface number 0 [ 256.607023][ T4624] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 256.617894][ T4624] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 256.632506][ T4624] usb 3-1: New USB device found, idVendor=0525, idProduct=a4e1, bcdDevice= 0.37 [ 256.641604][ T4624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.649765][ T4624] usb 3-1: Product: syz [ 256.654020][ T4624] usb 3-1: Manufacturer: syz [ 256.658819][ T4624] usb 3-1: SerialNumber: syz [ 256.665837][ T4624] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 256.671086][ T1118] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 256.673139][ T4624] cdc_ncm 3-1:1.1: bind() failure [ 256.710418][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 256.716568][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 256.725466][ T9] usb 5-1: USB disconnect, device number 88 [ 256.832173][ T1118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.843181][ T1118] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 256.852698][ T1118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.862651][ T1118] usb 2-1: config 0 descriptor?? [ 256.874382][ T7016] incfs: Options parsing error. -22 [ 256.879788][ T7016] incfs: mount failed -22 [ 256.912657][ T9] usb 3-1: USB disconnect, device number 111 [ 257.272862][ T1118] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 257.282558][ T1118] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002D/input/input31 [ 257.355032][ T1118] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 257.476955][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.485867][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.631077][ T1118] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 257.695970][ T9] usb 2-1: USB disconnect, device number 102 [ 257.781058][ T1118] usb 5-1: Using ep0 maxpacket: 16 [ 257.787512][ T1118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.798705][ T1118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.808649][ T313] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 257.816331][ T1118] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.829403][ T1118] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.838549][ T1118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.847477][ T1118] usb 5-1: config 0 descriptor?? [ 257.992203][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.003395][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.013586][ T313] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 258.022770][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.031687][ T313] usb 3-1: config 0 descriptor?? [ 258.255596][ T1118] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 258.264160][ T1118] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 258.271570][ T1118] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 258.279983][ T1118] microsoft 0003:045E:07DA.002E: report is too long [ 258.286649][ T1118] microsoft 0003:045E:07DA.002E: item 0 4 0 8 parsing failed [ 258.294250][ T1118] microsoft 0003:045E:07DA.002E: parse failed [ 258.300374][ T1118] microsoft 0003:045E:07DA.002E: probe with driver microsoft failed with error -22 [ 258.440247][ T313] usbhid 3-1:0.0: can't add hid device: -71 [ 258.446307][ T313] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 258.455601][ T313] usb 3-1: USB disconnect, device number 112 [ 258.464967][ T1118] usb 5-1: USB disconnect, device number 89 [ 258.488851][ T31] usb 1-1: MIDIStreaming interface descriptor not found [ 258.500001][ T31] usb 1-1: USB disconnect, device number 67 [ 258.522430][ T1605] udevd[1605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 258.982119][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.992158][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.000572][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.009426][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.017646][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.026241][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.034382][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.042860][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.050978][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.059643][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.201055][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 259.211196][ T4624] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 259.221111][ T31] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 259.361116][ T4624] usb 3-1: Using ep0 maxpacket: 8 [ 259.367651][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.379095][ T4624] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.379638][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 259.390192][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.406833][ T4624] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.408166][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 259.417055][ T4624] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 259.426166][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.439293][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 259.456094][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.456852][ T31] usb 5-1: Product: syz [ 259.464211][ T4624] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.468695][ T31] usb 5-1: Manufacturer: syz [ 259.475511][ T4624] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 259.480010][ T31] usb 5-1: SerialNumber: syz [ 259.489017][ T9] usb 1-1: config 0 descriptor?? [ 259.498322][ T4624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.508177][ T4624] usb 3-1: config 0 descriptor?? [ 259.710689][ T31] usb 5-1: USB disconnect, device number 90 [ 259.801082][ T1118] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 259.912623][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 259.918894][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 259.928448][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 259.937338][ T9] usb 1-1: USB disconnect, device number 68 [ 259.943345][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 259.950660][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 259.958808][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 259.961067][ T1118] usb 2-1: Using ep0 maxpacket: 32 [ 259.966787][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 259.977307][ T1118] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 259.978916][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 259.988156][ T1118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.995171][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 260.003571][ T1118] usb 2-1: Product: syz [ 260.010719][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 260.021046][ T1118] usb 2-1: Manufacturer: syz [ 260.022053][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 260.027895][ T1118] usb 2-1: SerialNumber: syz [ 260.033933][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 260.045912][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 260.054049][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 260.062005][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 260.069365][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 260.076815][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 260.084496][ T4624] magicmouse 0003:05AC:0265.002F: unknown main item tag 0x0 [ 260.093380][ T4624] magicmouse 0003:05AC:0265.002F: collection stack underflow [ 260.100859][ T4624] magicmouse 0003:05AC:0265.002F: item 0 0 0 12 parsing failed [ 260.108787][ T4624] magicmouse 0003:05AC:0265.002F: magicmouse hid parse failed [ 260.116401][ T4624] magicmouse 0003:05AC:0265.002F: probe with driver magicmouse failed with error -22 [ 260.173815][ T31] usb 3-1: USB disconnect, device number 113 [ 260.253807][ T36] audit: type=1400 audit(260.248:1056): avc: denied { module_load } for pid=7063 comm="syz.1.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 260.253829][ T7064] Invalid ELF header type: 2 != 1 [ 260.262243][ T1118] usb 2-1: MIDIStreaming interface descriptor not found [ 260.287770][ T36] audit: type=1400 audit(260.278:1057): avc: denied { mount } for pid=7065 comm="syz.4.2325" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 260.309748][ T36] audit: type=1400 audit(260.278:1058): avc: denied { execstack } for pid=7065 comm="syz.4.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 260.313423][ T1118] usb 2-1: USB disconnect, device number 103 [ 260.392502][ T36] audit: type=1400 audit(260.388:1059): avc: denied { unmount } for pid=6186 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 260.439710][ T36] audit: type=1400 audit(260.428:1060): avc: denied { connect } for pid=7072 comm="syz.0.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.867672][ T7082] netlink: 'syz.2.2332': attribute type 7 has an invalid length. [ 260.908890][ T7088] /dev/nullb0: Can't lookup blockdev [ 261.131109][ T4624] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 261.171053][ T1118] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 261.282133][ T4624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.293062][ T4624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.302848][ T4624] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.315747][ T4624] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.324843][ T4624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.335960][ T4624] usb 3-1: config 0 descriptor?? [ 261.346347][ T1118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.357469][ T1118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.367282][ T1118] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 261.376514][ T1118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.387214][ T1118] usb 2-1: config 0 descriptor?? [ 261.827803][ T4624] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 261.839676][ T1118] usbhid 2-1:0.0: can't add hid device: -71 [ 261.842007][ T4624] plantronics 0003:047F:FFFF.0030: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 261.851118][ T1118] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 261.869956][ T1118] usb 2-1: USB disconnect, device number 104 [ 262.151091][ T4624] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 262.301086][ T4624] usb 1-1: Using ep0 maxpacket: 32 [ 262.309669][ T4624] usb 1-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 262.318821][ T4624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.326879][ T4624] usb 1-1: Product: syz [ 262.331116][ T4624] usb 1-1: Manufacturer: syz [ 262.335816][ T4624] usb 1-1: SerialNumber: syz [ 262.451104][ T329] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 262.451123][ T330] Bluetooth: hci0: command 0x1003 tx timeout [ 262.607572][ T7132] Invalid ELF header type: 2 != 1 [ 262.672111][ T4624] usb 1-1: MIDIStreaming interface descriptor not found [ 262.684474][ T4624] usb 1-1: USB disconnect, device number 69 [ 262.704384][ T1605] udevd[1605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 263.011119][ T1118] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 263.162153][ T1118] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.172311][ T1118] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.181207][ T1118] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.192011][ T1118] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 263.206772][ T1118] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.216115][ T1118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.224141][ T1118] usb 5-1: SerialNumber: syz [ 263.265455][ T7142] incfs: Options parsing error. -22 [ 263.270748][ T7142] incfs: mount failed -22 [ 263.296784][ T7146] FAULT_INJECTION: forcing a failure. [ 263.296784][ T7146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.309919][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.0.2357 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 263.309955][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.309970][ T7146] Call Trace: [ 263.309979][ T7146] [ 263.309989][ T7146] __dump_stack+0x21/0x30 [ 263.310023][ T7146] dump_stack_lvl+0x140/0x1c0 [ 263.310049][ T7146] ? __cfi_dump_stack_lvl+0x10/0x10 [ 263.310074][ T7146] ? check_stack_object+0x12b/0x150 [ 263.310098][ T7146] dump_stack+0x19/0x20 [ 263.310116][ T7146] should_fail_ex+0x3d7/0x530 [ 263.310143][ T7146] should_fail+0xf/0x20 [ 263.310166][ T7146] should_fail_usercopy+0x1e/0x30 [ 263.310192][ T7146] _copy_to_user+0x24/0xa0 [ 263.310210][ T7146] simple_read_from_buffer+0xed/0x160 [ 263.310225][ T7146] proc_fail_nth_read+0x1aa/0x220 [ 263.310240][ T7146] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 263.310254][ T7146] ? bpf_lsm_file_permission+0xd/0x20 [ 263.310273][ T7146] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 263.310306][ T7146] vfs_read+0x289/0xcb0 [ 263.310339][ T7146] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 263.310363][ T7146] ? __cfi_vfs_read+0x10/0x10 [ 263.310378][ T7146] ? __kasan_check_write+0x18/0x20 [ 263.310394][ T7146] ? mutex_lock+0x97/0x1d0 [ 263.310408][ T7146] ? __cfi_mutex_lock+0x10/0x10 [ 263.310425][ T7146] ? __fget_files+0x2c5/0x340 [ 263.310446][ T7146] ksys_read+0x145/0x260 [ 263.310472][ T7146] ? __cfi_ksys_read+0x10/0x10 [ 263.310498][ T7146] ? __kasan_check_read+0x15/0x20 [ 263.310518][ T7146] __x64_sys_read+0x7f/0x90 [ 263.310537][ T7146] x64_sys_call+0x2638/0x2ee0 [ 263.310561][ T7146] do_syscall_64+0x57/0xf0 [ 263.310586][ T7146] ? clear_bhb_loop+0x50/0xa0 [ 263.310605][ T7146] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 263.310633][ T7146] RIP: 0033:0x7f4a6275d04e [ 263.310651][ T7146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.310666][ T7146] RSP: 002b:00007f4a635e7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.310682][ T7146] RAX: ffffffffffffffda RBX: 00007f4a635e86c0 RCX: 00007f4a6275d04e [ 263.310693][ T7146] RDX: 000000000000000f RSI: 00007f4a635e80a0 RDI: 0000000000000004 [ 263.310701][ T7146] RBP: 00007f4a635e8090 R08: 0000000000000000 R09: 0000000000000000 [ 263.310710][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.310720][ T7146] R13: 00007f4a62a16038 R14: 00007f4a62a15fa0 R15: 00007ffe96311fc8 [ 263.310739][ T7146] [ 263.562633][ T1118] usb 5-1: 0:2 : does not exist [ 263.568070][ T1118] usb 5-1: unit 5 not found! [ 263.577204][ T1118] usb 5-1: USB disconnect, device number 91 [ 263.589322][ T2304] udevd[2304]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 263.681075][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 263.781511][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.833050][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.844272][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.854135][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 263.863456][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.872295][ T9] usb 2-1: config 0 descriptor?? [ 264.241275][ T4624] usb 3-1: reset high-speed USB device number 114 using dummy_hcd [ 264.256129][ T4624] usb 3-1: device reset changed ep0 maxpacket size! [ 264.256409][ T36] audit: type=1400 audit(264.248:1061): avc: denied { create } for pid=7190 comm="syz.0.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 264.282331][ T31] usb 3-1: USB disconnect, device number 114 [ 264.292019][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 264.305638][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 264.330733][ T9] usb 2-1: USB disconnect, device number 105 [ 264.451113][ T31] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 264.611053][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 264.620216][ T31] usb 3-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 264.629905][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.644311][ T31] usb 3-1: Product: syz [ 264.650237][ T31] usb 3-1: Manufacturer: syz [ 264.655611][ T31] usb 3-1: SerialNumber: syz [ 264.813131][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.884608][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 264.909074][ T31] usb 3-1: USB disconnect, device number 115 [ 264.940817][ T7220] overlay: filesystem on ./file0 not supported as upperdir [ 265.190206][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.262149][ T7250] netlink: 'syz.1.2396': attribute type 5 has an invalid length. [ 265.292356][ T7256] SELinux: failed to load policy [ 265.403441][ T7265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.429270][ T7270] bridge_slave_0 (unregistering): left allmulticast mode [ 265.436513][ T7270] bridge_slave_0 (unregistering): left promiscuous mode [ 265.443718][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.477488][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.494200][ T36] audit: type=1400 audit(265.488:1062): avc: denied { create } for pid=7269 comm="syz.1.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 265.549793][ T7279] FAULT_INJECTION: forcing a failure. [ 265.549793][ T7279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.563017][ T7279] CPU: 1 UID: 0 PID: 7279 Comm: syz.2.2408 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 265.563052][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.563066][ T7279] Call Trace: [ 265.563074][ T7279] [ 265.563083][ T7279] __dump_stack+0x21/0x30 [ 265.563105][ T7279] dump_stack_lvl+0x140/0x1c0 [ 265.563121][ T7279] ? __cfi_dump_stack_lvl+0x10/0x10 [ 265.563138][ T7279] dump_stack+0x19/0x20 [ 265.563152][ T7279] should_fail_ex+0x3d7/0x530 [ 265.563168][ T7279] should_fail+0xf/0x20 [ 265.563182][ T7279] should_fail_usercopy+0x1e/0x30 [ 265.563199][ T7279] _copy_from_user+0x20/0xa0 [ 265.563210][ T7279] udmabuf_ioctl+0xfb/0x310 [ 265.563223][ T7279] ? __cfi_mutex_unlock+0x10/0x10 [ 265.563236][ T7279] ? __fget_files+0x2c5/0x340 [ 265.563248][ T7279] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 265.563261][ T7279] ? __fget_files+0x2c5/0x340 [ 265.563273][ T7279] ? bpf_lsm_file_ioctl+0xd/0x20 [ 265.563286][ T7279] ? security_file_ioctl+0x3e/0x110 [ 265.563302][ T7279] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 265.563315][ T7279] __se_sys_ioctl+0x132/0x1b0 [ 265.563327][ T7279] __x64_sys_ioctl+0x7f/0xa0 [ 265.563339][ T7279] x64_sys_call+0x1878/0x2ee0 [ 265.563356][ T7279] do_syscall_64+0x57/0xf0 [ 265.563373][ T7279] ? clear_bhb_loop+0x50/0xa0 [ 265.563384][ T7279] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 265.563402][ T7279] RIP: 0033:0x7f2338b9c819 [ 265.563415][ T7279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.563427][ T7279] RSP: 002b:00007f2339ac0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.563443][ T7279] RAX: ffffffffffffffda RBX: 00007f2338e15fa0 RCX: 00007f2338b9c819 [ 265.563458][ T7279] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 265.563467][ T7279] RBP: 00007f2339ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 265.563476][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.563485][ T7279] R13: 00007f2338e16038 R14: 00007f2338e15fa0 R15: 00007ffcf920c818 [ 265.563496][ T7279] [ 265.911079][ T1118] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 265.916236][ T7290] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.012504][ T36] audit: type=1326 audit(266.008:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.1.2414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7f779c819 code=0x0 [ 266.041235][ T1118] usb 1-1: device descriptor read/64, error -71 [ 266.091132][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 266.242335][ T9] usb 3-1: config 0 has no interfaces? [ 266.249488][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 266.258811][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 266.267467][ T9] usb 3-1: Product: syz [ 266.271952][ T9] usb 3-1: Manufacturer: syz [ 266.276590][ T9] usb 3-1: SerialNumber: syz [ 266.285373][ T9] usb 3-1: config 0 descriptor?? [ 266.291199][ T1118] usb 1-1: device descriptor read/64, error -71 [ 266.303843][ T36] audit: type=1326 audit(266.298:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7299 comm="syz.4.2416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c2299c819 code=0x0 [ 266.351069][ T4624] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 266.360386][ T7301] incfs: Error accessing: ./file0. [ 266.365572][ T7301] incfs: mount failed -20 [ 266.431849][ T7301] kvm: kvm [7299]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 266.501069][ T4624] usb 2-1: Using ep0 maxpacket: 32 [ 266.507523][ T4624] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.519908][ T4624] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 266.529490][ T4624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.537784][ T4624] usb 2-1: Product: syz [ 266.542338][ T4624] usb 2-1: Manufacturer: syz [ 266.546958][ T4624] usb 2-1: SerialNumber: syz [ 266.551059][ T1118] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 266.556175][ T4624] usb 2-1: config 0 descriptor?? [ 266.565118][ T4624] usb 2-1: bad CDC descriptors [ 266.570020][ T4624] usb 2-1: unsupported MDLM descriptors [ 266.681050][ T1118] usb 1-1: device descriptor read/64, error -71 [ 266.694419][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.703009][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.717993][ T7288] can0: slcan on ptm0. [ 266.751684][ T7287] can0 (unregistered): slcan off ptm0. [ 266.813491][ T4624] usb 3-1: USB disconnect, device number 116 [ 266.921365][ T1118] usb 1-1: device descriptor read/64, error -71 [ 267.031204][ T1118] usb usb1-port1: attempt power cycle [ 267.371074][ T1118] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 267.392080][ T1118] usb 1-1: device descriptor read/8, error -71 [ 267.401065][ T4624] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 267.522320][ T1118] usb 1-1: device descriptor read/8, error -71 [ 267.552385][ T4624] usb 5-1: unable to get BOS descriptor or descriptor too short [ 267.560501][ T4624] usb 5-1: not running at top speed; connect to a high speed hub [ 267.561061][ T313] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 267.569314][ T4624] usb 5-1: config 1 interface 0 has no altsetting 0 [ 267.584216][ T4624] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 267.593536][ T4624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.601659][ T4624] usb 5-1: Product: syz [ 267.605841][ T4624] usb 5-1: Manufacturer: syz [ 267.610439][ T4624] usb 5-1: SerialNumber: syz [ 267.722669][ T313] usb 3-1: unable to get BOS descriptor or descriptor too short [ 267.732969][ T313] usb 3-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 267.742129][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.750165][ T313] usb 3-1: Product: syz [ 267.754407][ T313] usb 3-1: Manufacturer: syz [ 267.759035][ T313] usb 3-1: SerialNumber: syz [ 267.763881][ T1118] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 267.792158][ T1118] usb 1-1: device descriptor read/8, error -71 [ 267.818200][ T4624] hub 5-1:1.0: Invalid hub with more than one config or interface [ 267.826449][ T4624] hub 5-1:1.0: probe with driver hub failed with error -22 [ 267.837876][ T4624] usb 5-1: USB disconnect, device number 92 [ 267.923701][ T1118] usb 1-1: device descriptor read/8, error -71 [ 268.031219][ T1118] usb usb1-port1: unable to enumerate USB device [ 268.038344][ T313] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 268.045408][ T313] usb 3-1: unit 1 not found! [ 268.050088][ T313] usb 3-1: unit 17 not found! [ 268.055280][ T313] usb 3-1: unit 4 not found! [ 268.059872][ T313] usb 3-1: unit 2 not found! [ 268.067944][ T313] usb 3-1: USB disconnect, device number 117 [ 268.452177][ T7317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.585648][ T36] audit: type=1400 audit(268.578:1065): avc: denied { connect } for pid=7330 comm="syz.0.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 268.605894][ T36] audit: type=1400 audit(268.578:1066): avc: denied { setopt } for pid=7330 comm="syz.0.2427" laddr=::1 lport=7 faddr=::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 268.845667][ T7342] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 268.847830][ T7342] bridge0: entered promiscuous mode [ 268.861030][ T7342] bridge0: entered allmulticast mode [ 268.891053][ T313] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 268.984931][ T395] usb 2-1: USB disconnect, device number 106 [ 269.042204][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.053161][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.062971][ T313] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 269.072306][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.080934][ T313] usb 1-1: config 0 descriptor?? [ 269.288563][ T313] hid-led 0003:27B8:01ED.0031: unknown main item tag 0x0 [ 269.295715][ T313] hid-led 0003:27B8:01ED.0031: unknown main item tag 0x0 [ 269.302960][ T313] hid-led 0003:27B8:01ED.0031: unknown main item tag 0x0 [ 269.310010][ T313] hid-led 0003:27B8:01ED.0031: unknown main item tag 0x0 [ 269.317071][ T313] hid-led 0003:27B8:01ED.0031: unknown main item tag 0x0 [ 269.421039][ T395] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 269.487761][ T313] hid-led 0003:27B8:01ED.0031: probe with driver hid-led failed with error -71 [ 269.498219][ T313] usb 1-1: USB disconnect, device number 74 [ 269.571079][ T395] usb 2-1: Using ep0 maxpacket: 16 [ 269.578086][ T395] usb 2-1: unable to get BOS descriptor or descriptor too short [ 269.588337][ T395] usb 2-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 269.597571][ T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.605703][ T395] usb 2-1: Product: syz [ 269.609972][ T395] usb 2-1: Manufacturer: syz [ 269.614599][ T395] usb 2-1: SerialNumber: syz [ 269.631088][ T4624] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 269.781051][ T4624] usb 5-1: Using ep0 maxpacket: 16 [ 269.787655][ T4624] usb 5-1: unable to get BOS descriptor or descriptor too short [ 269.796225][ T4624] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 269.809037][ T4624] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 269.818153][ T4624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.826230][ T4624] usb 5-1: Product: syz [ 269.830537][ T4624] usb 5-1: Manufacturer: syz [ 269.835196][ T4624] usb 5-1: SerialNumber: syz [ 269.873019][ T395] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 269.880174][ T395] usb 2-1: found format II with max.bitrate = 5, frame size=11 [ 269.887976][ T395] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 269.896928][ T395] usb 2-1: USB disconnect, device number 107 [ 269.906585][ T2304] udevd[2304]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 270.042306][ T4624] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 270.050570][ T4624] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 270.133704][ T7371] netlink: 'syz.0.2442': attribute type 12 has an invalid length. [ 270.240598][ T4624] usb 5-1: 2:1 : can't get High Capability descriptor [ 270.443657][ T7358] netlink: 'syz.4.2437': attribute type 27 has an invalid length. [ 270.458790][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.549041][ T395] usb 5-1: USB disconnect, device number 93 [ 270.616331][ T4624] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 270.766354][ T4624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.777341][ T4624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.787125][ T4624] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 270.796251][ T4624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.805219][ T4624] usb 2-1: config 0 descriptor?? [ 271.211893][ T4624] hkems 0003:2006:0118.0032: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 271.235723][ T4624] hkems 0003:2006:0118.0032: no inputs found [ 271.242375][ T4624] hkems 0003:2006:0118.0032: force feedback init failed [ 271.269302][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2455'. [ 271.409675][ T313] usb 2-1: USB disconnect, device number 108 [ 271.430058][ T395] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 271.578872][ T395] usb 1-1: Using ep0 maxpacket: 16 [ 271.585858][ T395] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.596220][ T395] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.606415][ T395] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.615535][ T395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.623845][ T395] usb 1-1: Product: syz [ 271.628042][ T395] usb 1-1: Manufacturer: syz [ 271.632694][ T395] usb 1-1: SerialNumber: syz [ 271.697965][ T1118] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 271.839272][ T395] usb 1-1: 0:2 : does not exist [ 271.846040][ T395] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 271.854394][ T1118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.865510][ T1118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.875355][ T1118] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.888411][ T1118] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.897650][ T1118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.908003][ T395] usb 1-1: USB disconnect, device number 75 [ 271.916569][ T1118] usb 5-1: config 0 descriptor?? [ 271.931082][ T2304] udevd[2304]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 272.233919][ T4624] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 272.323650][ T1118] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 272.333301][ T1118] plantronics 0003:047F:FFFF.0033: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 272.383860][ T4624] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 272.394755][ T4624] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.407722][ T4624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 272.418625][ T4624] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.646617][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'. [ 272.789736][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 272.938513][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 272.946728][ T9] usb 1-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 272.955968][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.964304][ T9] usb 1-1: Product: syz [ 272.968570][ T9] usb 1-1: Manufacturer: syz [ 272.973359][ T9] usb 1-1: SerialNumber: syz [ 273.193114][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 273.205597][ T9] usb 1-1: USB disconnect, device number 76 [ 273.217562][ T1605] udevd[1605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 273.864091][ T7481] input: syz1 as /devices/virtual/input/input34 [ 274.030709][ T7495] FAULT_INJECTION: forcing a failure. [ 274.030709][ T7495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.044170][ T7495] CPU: 0 UID: 0 PID: 7495 Comm: syz.2.2490 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 274.044204][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.044213][ T7495] Call Trace: [ 274.044219][ T7495] [ 274.044226][ T7495] __dump_stack+0x21/0x30 [ 274.044248][ T7495] dump_stack_lvl+0x140/0x1c0 [ 274.044264][ T7495] ? __cfi_dump_stack_lvl+0x10/0x10 [ 274.044285][ T7495] dump_stack+0x19/0x20 [ 274.044300][ T7495] should_fail_ex+0x3d7/0x530 [ 274.044316][ T7495] should_fail+0xf/0x20 [ 274.044330][ T7495] should_fail_usercopy+0x1e/0x30 [ 274.044346][ T7495] _copy_to_iter+0x3b8/0x1510 [ 274.044366][ T7495] ? __cfi__copy_to_iter+0x10/0x10 [ 274.044382][ T7495] ? __check_object_size+0x527/0x830 [ 274.044407][ T7495] ? __cfi___check_object_size+0x10/0x10 [ 274.044435][ T7495] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 274.044457][ T7495] __skb_datagram_iter+0x103/0x930 [ 274.044479][ T7495] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 274.044496][ T7495] skb_copy_datagram_iter+0x44/0x160 [ 274.044512][ T7495] netlink_recvmsg+0x2d4/0xe60 [ 274.044529][ T7495] ? __cfi_netlink_recvmsg+0x10/0x10 [ 274.044545][ T7495] ? __cfi_selinux_file_open+0x10/0x10 [ 274.044562][ T7495] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 274.044581][ T7495] ? security_socket_recvmsg+0x44/0x130 [ 274.044594][ T7495] ? __cfi_netlink_recvmsg+0x10/0x10 [ 274.044610][ T7495] sock_recvmsg+0x216/0x270 [ 274.044624][ T7495] ____sys_recvmsg+0x1e7/0x4a0 [ 274.044641][ T7495] ? __sys_recvmsg_sock+0x60/0x60 [ 274.044661][ T7495] ? import_iovec+0x80/0xb0 [ 274.044673][ T7495] ___sys_recvmsg+0x216/0x590 [ 274.044690][ T7495] ? __sys_recvmsg+0x290/0x290 [ 274.044707][ T7495] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 274.044722][ T7495] ? selinux_file_permission+0x318/0xb60 [ 274.044739][ T7495] ? __fget_files+0x2c5/0x340 [ 274.044751][ T7495] do_recvmmsg+0x380/0x830 [ 274.044768][ T7495] ? __sys_recvmmsg+0x2a0/0x2a0 [ 274.044785][ T7495] ? __cfi_vfs_write+0x10/0x10 [ 274.044802][ T7495] ? fput+0x1a4/0x240 [ 274.044815][ T7495] __x64_sys_recvmmsg+0x199/0x250 [ 274.044833][ T7495] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 274.044850][ T7495] ? __kasan_check_read+0x15/0x20 [ 274.044867][ T7495] x64_sys_call+0x292c/0x2ee0 [ 274.044883][ T7495] do_syscall_64+0x57/0xf0 [ 274.044900][ T7495] ? clear_bhb_loop+0x50/0xa0 [ 274.044911][ T7495] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 274.044929][ T7495] RIP: 0033:0x7f2338b9c819 [ 274.044941][ T7495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.044952][ T7495] RSP: 002b:00007f2339ac0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 274.044968][ T7495] RAX: ffffffffffffffda RBX: 00007f2338e15fa0 RCX: 00007f2338b9c819 [ 274.044979][ T7495] RDX: 0000000000000004 RSI: 0000200000006a40 RDI: 0000000000000003 [ 274.044988][ T7495] RBP: 00007f2339ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 274.044997][ T7495] R10: 0000000000000120 R11: 0000000000000246 R12: 0000000000000001 [ 274.045005][ T7495] R13: 00007f2338e16038 R14: 00007f2338e15fa0 R15: 00007ffcf920c818 [ 274.045016][ T7495] [ 274.366781][ T7497] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2491'. [ 274.388511][ T7501] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 274.549496][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2495'. [ 274.558679][ T7509] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2495'. [ 274.567968][ T7509] netlink: 'syz.4.2495': attribute type 3 has an invalid length. [ 274.575860][ T7509] netlink: 'syz.4.2495': attribute type 2 has an invalid length. [ 274.575956][ T1118] usb 5-1: USB disconnect, device number 94 [ 274.583691][ T7509] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2495'. [ 274.607199][ T313] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 274.755210][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 274.761620][ T313] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.772960][ T313] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.784267][ T313] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 274.793465][ T313] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 274.801871][ T313] usb 3-1: Product: syz [ 274.806204][ T313] usb 3-1: Manufacturer: syz [ 274.812773][ T313] hub 3-1:4.0: USB hub found [ 274.963552][ T395] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 274.983064][ T4624] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 274.991791][ T7519] rust_binder: Error while translating object. [ 274.992564][ C1] BUG: TASK stack guard page was hit at ffffc90001a37f78 (stack is ffffc90001a38000..ffffc90001a40000) [ 274.992592][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 274.992615][ C1] CPU: 1 UID: 0 PID: 7519 Comm: syz.1.2500 Not tainted syzkaller #0 43b6d7f3e817ec535415847ac2d00a46ab6e4796 [ 274.992640][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.992656][ C1] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 274.992688][ C1] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 274.992703][ C1] RSP: 0018:ffffc90001a37f80 EFLAGS: 00010a02 [ 274.992723][ C1] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff9200034702c [ 274.992740][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 274.992754][ C1] RBP: ffffc90001a38250 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 274.992769][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: dffffc0000000000 [ 274.992783][ C1] R13: dffffc0000000000 R14: 1ffff92000347050 R15: ffffc90001a382f0 [ 274.992780][ T36] audit: type=1400 audit(531.012:1067): avc: denied { transfer } for pid=7518 comm="syz.1.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 274.992799][ C1] FS: 00007fe7f87176c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 274.992819][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.992832][ C1] CR2: ffffc90001a37f78 CR3: 000000011bd9c000 CR4: 00000000003526b0 [ 274.992852][ C1] Call Trace: [ 274.992860][ C1] [ 274.992872][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 274.992895][ C1] ? static_key_count+0x45/0x70 [ 274.992914][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 274.992939][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 274.992964][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 274.992984][ C1] ? unwind_next_frame+0x3c1/0x750 [ 274.993006][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 274.993026][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 274.993064][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 274.993084][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 274.993116][ C1] ? stack_depot_save_flags+0x672/0x800 [ 274.993140][ C1] ? stack_depot_save+0x12/0x20 [ 274.993161][ C1] ? save_stack+0x133/0x240 [ 274.993179][ C1] ? free_contig_range+0x260/0x260 [ 274.993201][ C1] ? __reset_page_owner+0x450/0x450 [ 274.993218][ C1] ? zone_page_state_add+0x43/0x90 [ 274.993251][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 274.993269][ C1] ? prep_new_page+0x20/0x120 [ 274.993286][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 274.993306][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 274.993326][ C1] ? stack_depot_save_flags+0x672/0x800 [ 274.993348][ C1] ? kasan_save_track+0x4f/0x80 [ 274.993372][ C1] ? kasan_save_free_info+0x4a/0x60 [ 274.993393][ C1] ? __kasan_slab_free+0x5f/0x80 [ 274.993409][ C1] ? kfree+0x158/0x440 [ 274.993430][ C1] ? krealloc_noprof+0xfa/0x130 [ 274.993454][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 274.993511][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 274.993539][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 274.993569][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 274.993601][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 274.993629][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 274.993660][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 274.993681][ C1] ? sched_clock_noinstr+0xd/0x30 [ 274.993700][ C1] ? __set_page_owner+0x8e/0x600 [ 274.993717][ C1] ? __zone_watermark_ok+0x134/0x630 [ 274.993738][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 274.993757][ C1] ? kasan_unpoison+0x4a/0x70 [ 274.993779][ C1] ? post_alloc_hook+0x3b8/0x3f0 [ 274.993798][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 274.993816][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 274.993839][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 274.993862][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 274.993886][ C1] ? prep_new_page+0x20/0x120 [ 274.993904][ C1] ? get_page_from_freelist+0x496e/0x4a20 [ 274.993930][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 274.993950][ C1] ? static_key_count+0x45/0x70 [ 274.993968][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 274.993991][ C1] ? lruvec_init+0x1d1/0x280 [ 274.994016][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 274.994036][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 274.994055][ C1] ? unwind_get_return_address+0x51/0x90 [ 274.994075][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 274.994094][ C1] ? arch_stack_walk+0x10a/0x170 [ 274.994119][ C1] ? stack_trace_save+0xaa/0x100 [ 274.994136][ C1] ? stack_depot_save_flags+0x672/0x800 [ 274.994160][ C1] ? kasan_save_track+0x4f/0x80 [ 274.994184][ C1] ? kasan_save_track+0x3e/0x80 [ 274.994207][ C1] ? kasan_save_free_info+0x4a/0x60 [ 274.994228][ C1] ? __kasan_slab_free+0x5f/0x80 [ 274.994256][ C1] ? kfree+0x158/0x440 [ 274.994277][ C1] ? krealloc_noprof+0xfa/0x130 [ 274.994300][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 274.994352][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 274.994380][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 274.994410][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 274.994441][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 274.994469][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 274.994500][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 274.994530][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x19d1/0xaf80 [ 274.994555][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 274.994575][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 274.994592][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 274.994608][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 274.994632][ C1] ? do_syscall_64+0x57/0xf0 [ 274.994655][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 274.994684][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 274.994711][ C1] ? kasan_save_free_info+0x4a/0x60 [ 274.994732][ C1] ? __kasan_slab_free+0x5f/0x80 [ 274.994748][ C1] ? kfree+0x158/0x440 [ 274.994768][ C1] ? krealloc_noprof+0xfa/0x130 [ 274.994793][ C1] ? krealloc_noprof+0xfa/0x130 [ 274.994816][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x114/0x360 [ 274.994870][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel5alloc4kbox3BoxINtNtNtB4_3mem12maybe_uninit11MaybeUninitINtNtBN_6rbtree4NodemINtNtNtBN_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EEENtNtBL_9allocator7KmallocEEB2S_+0x10/0x10 [ 274.994921][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 274.994961][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 274.995001][ C1] ? __kasan_check_write+0x18/0x20 [ 274.995023][ C1] ? _raw_spin_lock+0x92/0x120 [ 274.995045][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 274.995069][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x16c0/0x2660 [ 274.995100][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process10update_ref+0x10/0x10 [ 274.995134][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 274.995165][ C1] ? __asan_memcpy+0x5a/0x80 [ 274.995187][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 274.995216][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 274.995252][ C1] ? __kasan_check_write+0x18/0x20 [ 274.995274][ C1] ? _raw_spin_lock+0x92/0x120 [ 274.995296][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 274.995319][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 274.995351][ C1] ? __asan_memcpy+0x5a/0x80 [ 274.995373][ C1] ? _RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 274.995406][ C1] ? __cfi__RINvMs4_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 274.995438][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 274.995467][ C1] ? __asan_memcpy+0x5a/0x80 [ 274.995488][ C1] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 274.995516][ C1] ? __kasan_check_write+0x18/0x20 [ 274.995538][ C1] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 274.995568][ C1] ? __kasan_check_write+0x18/0x20 [ 274.995590][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 274.995613][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x308/0x5c60 [ 274.995644][ C1] ? __asan_memcpy+0x5a/0x80 [ 274.995666][ C1] ? _RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x16ed/0x5c60 [ 274.995702][ C1] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 274.995732][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node16insert_node_info+0x3e0/0x500 [ 274.995761][ C1] ? __cfi__RNvXs_NtCskDQVOo9v79Q_16rust_binder_main10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 274.995792][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 274.995831][ C1] ? __kasan_check_write+0x18/0x20 [ 274.995853][ C1] ? mutex_unlock+0x90/0x240 [ 274.995870][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 274.995889][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 274.995908][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x1930/0x32e0 [ 274.995940][ C1] ? resched_curr+0xb0/0x440 [ 274.995964][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process23insert_or_update_handle+0x10/0x10 [ 274.995994][ C1] ? __update_load_avg_se+0x5bf/0xec0 [ 274.996036][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 274.996066][ C1] ? __asan_memcpy+0x5a/0x80 [ 274.996088][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 274.996118][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 274.996148][ C1] ? __enqueue_entity+0x58a/0x630 [ 274.996173][ C1] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 274.996203][ C1] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 274.996233][ C1] ? desc_read+0x202/0x3e0 [ 274.996257][ C1] ? __kasan_check_write+0x18/0x20 [ 274.996279][ C1] ? desc_read+0x1ab/0x3e0 [ 274.996295][ C1] ? prb_first_seq+0x109/0x1d0 [ 274.996312][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 274.996329][ C1] ? __kasan_check_write+0x18/0x20 [ 274.996350][ C1] ? desc_read+0x1ab/0x3e0 [ 274.996366][ C1] ? __kasan_check_read+0x15/0x20 [ 274.996388][ C1] ? this_cpu_in_panic+0x56/0x90 [ 274.996405][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 274.996423][ C1] ? __asan_memcpy+0x5a/0x80 [ 274.996446][ C1] ? prb_read_valid+0x80/0x80 [ 274.996463][ C1] ? data_alloc+0x4d0/0x7e0 [ 274.996479][ C1] ? desc_read+0x202/0x3e0 [ 274.996496][ C1] ? __kasan_check_write+0x18/0x20 [ 274.996518][ C1] ? desc_read+0x1ab/0x3e0 [ 274.996534][ C1] ? prb_first_seq+0x109/0x1d0 [ 274.996551][ C1] ? __cfi_prb_first_seq+0x10/0x10 [ 274.996568][ C1] ? __kasan_check_write+0x18/0x20 [ 274.996589][ C1] ? desc_read+0x1ab/0x3e0 [ 274.996605][ C1] ? __kasan_check_read+0x15/0x20 [ 274.996626][ C1] ? this_cpu_in_panic+0x56/0x90 [ 274.996643][ C1] ? _prb_read_valid+0x9f3/0xa80 [ 274.996661][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 274.996685][ C1] ? prb_read_valid+0x80/0x80 [ 274.996701][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 274.996725][ C1] ? up+0x10a/0x1b0 [ 274.996743][ C1] ? __cfi_up+0x10/0x10 [ 274.996762][ C1] ? __kasan_check_write+0x18/0x20 [ 274.996783][ C1] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 274.996808][ C1] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 274.996833][ C1] ? __cfi_llist_add_batch+0x10/0x10 [ 274.996852][ C1] ? console_unlock+0x247/0x2c0 [ 274.996871][ C1] ? __cfi_console_unlock+0x10/0x10 [ 274.996891][ C1] ? krealloc_noprof+0xfa/0x130 [ 274.996914][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 274.996936][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 274.996971][ C1] ? irq_work_queue+0xc2/0x160 [ 274.996992][ C1] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCskDQVOo9v79Q_16rust_binder_main6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 274.997027][ C1] ? vprintk_emit+0x3e3/0x650 [ 274.997046][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 274.997066][ C1] ? _RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 274.997095][ C1] ? __cfi__RINvMNtCskDQVOo9v79Q_16rust_binder_main10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 274.997125][ C1] ? vprintk_default+0x2a/0x40 [ 274.997144][ C1] ? vprintk+0x93/0xa0 [ 274.997166][ C1] ? _printk+0xde/0x140 [ 274.997184][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCskDQVOo9v79Q_16rust_binder_main7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 274.997224][ C1] ? __cfi__printk+0x10/0x10 [ 274.997248][ C1] ? mutex_unlock+0x90/0x240 [ 274.997265][ C1] ? _copy_from_user+0x87/0xa0 [ 274.997282][ C1] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCskDQVOo9v79Q_16rust_binder_main10allocation10AllocationEBK_+0x1a/0xf0 [ 274.997313][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a48/0x9130 [ 274.997341][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x7a55/0x9130 [ 274.997378][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 274.997475][ C1] ? _RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x3c7/0x2810 [ 274.997509][ C1] ? __cfi__RNvMNtCskDQVOo9v79Q_16rust_binder_main11transactionNtB2_11Transaction3new+0x10/0x10 [ 274.997543][ C1] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x41a/0x8e0 [ 274.997568][ C1] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 274.997593][ C1] ? __kasan_check_write+0x18/0x20 [ 274.997615][ C1] ? _raw_spin_lock+0x92/0x120 [ 274.997637][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 274.997659][ C1] ? __kasan_check_write+0x18/0x20 [ 274.997681][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 274.997706][ C1] ? __asan_memcpy+0x5a/0x80 [ 274.997728][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 274.997752][ C1] ? avc_has_perm+0x155/0x240 [ 274.997776][ C1] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 274.997798][ C1] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 274.997821][ C1] ? selinux_binder_transaction+0x165/0x1d0 [ 274.997839][ C1] ? bpf_lsm_binder_transaction+0xd/0x20 [ 274.997860][ C1] ? _RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x323/0xd40 [ 274.997893][ C1] ? __cfi__RINvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB6_6Thread11transactionNvB2_24oneway_transaction_innerEB8_+0x10/0x10 [ 274.997925][ C1] ? __kasan_check_write+0x18/0x20 [ 274.997947][ C1] ? _raw_spin_lock+0x92/0x120 [ 274.997969][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 274.997992][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0xfc0/0xaf80 [ 274.998016][ C1] ? __asan_memcpy+0x5a/0x80 [ 274.998038][ C1] ? _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x19d1/0xaf80 [ 274.998074][ C1] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 274.998144][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 274.998166][ C1] ? kernel_text_address+0xa9/0xe0 [ 274.998193][ C1] ? __kernel_text_address+0x11/0x40 [ 274.998213][ C1] ? unwind_get_return_address+0x51/0x90 [ 274.998232][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 274.998257][ C1] ? arch_stack_walk+0x10a/0x170 [ 274.998286][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 274.998309][ C1] ? kernel_text_address+0xa9/0xe0 [ 274.998329][ C1] ? __kernel_text_address+0x11/0x40 [ 274.998349][ C1] ? unwind_get_return_address+0x51/0x90 [ 274.998369][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 274.998387][ C1] ? arch_stack_walk+0x10a/0x170 [ 274.998412][ C1] ? stack_depot_save_flags+0x38/0x800 [ 274.998436][ C1] ? kasan_save_track+0x4f/0x80 [ 274.998460][ C1] ? kasan_save_track+0x3e/0x80 [ 274.998483][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 274.998504][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 274.998521][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 274.998545][ C1] ? krealloc_noprof+0x8d/0x130 [ 274.998568][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x84c/0x1d80 [ 274.998593][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x3e3/0x5c20 [ 274.998613][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 274.998629][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 274.998645][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 274.998668][ C1] ? do_syscall_64+0x57/0xf0 [ 274.998691][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 274.998720][ C1] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 274.998752][ C1] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCskDQVOo9v79Q_16rust_binder_main6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 274.998785][ C1] ? __kasan_check_write+0x18/0x20 [ 274.998806][ C1] ? _raw_spin_lock+0x92/0x120 [ 274.998829][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 274.998852][ C1] ? _raw_spin_unlock+0x45/0x60 [ 274.998875][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 274.998894][ C1] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x102f/0x1d80 [ 274.998922][ C1] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 274.998950][ C1] ? avc_has_perm_noaudit+0x26c/0x360 [ 274.998974][ C1] ? __asan_memcpy+0x5a/0x80 [ 274.999000][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 274.999025][ C1] ? kernel_text_address+0xa9/0xe0 [ 274.999046][ C1] ? __kernel_text_address+0x11/0x40 [ 274.999066][ C1] ? unwind_get_return_address+0x51/0x90 [ 274.999086][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 274.999104][ C1] ? arch_stack_walk+0x10a/0x170 [ 274.999130][ C1] ? stack_trace_save+0xaa/0x100 [ 274.999149][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x113c/0x5c20 [ 274.999170][ C1] ? __asan_memcpy+0x5a/0x80 [ 274.999193][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x1192/0x5c20 [ 274.999214][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 274.999245][ C1] ? _raw_spin_unlock+0x45/0x60 [ 274.999267][ C1] ? call_rcu_nocb+0x6d7/0xc80 [ 274.999289][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 274.999311][ C1] ? swake_up_one_online_ipi+0x30/0x30 [ 274.999333][ C1] ? __cfi_mt_free_rcu+0x10/0x10 [ 274.999359][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 274.999382][ C1] ? kernel_text_address+0xa9/0xe0 [ 274.999402][ C1] ? __kernel_text_address+0x11/0x40 [ 274.999423][ C1] ? unwind_get_return_address+0x51/0x90 [ 274.999442][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 274.999461][ C1] ? arch_stack_walk+0x10a/0x170 [ 274.999485][ C1] ? stack_trace_save+0xaa/0x100 [ 274.999504][ C1] ? stack_depot_save_flags+0x38/0x800 [ 274.999527][ C1] ? kasan_save_track+0x4f/0x80 [ 274.999550][ C1] ? kasan_save_track+0x3e/0x80 [ 274.999574][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 274.999595][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 274.999611][ C1] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 274.999635][ C1] ? krealloc_noprof+0x8d/0x130 [ 274.999658][ C1] ? kvrealloc_noprof+0x59/0x120 [ 274.999679][ C1] ? _RNvCskDQVOo9v79Q_16rust_binder_main16rust_binder_mmap+0x78b/0x11f0 [ 274.999700][ C1] ? mmap_region+0x157c/0x1d60 [ 274.999722][ C1] ? do_mmap+0xb85/0x13c0 [ 274.999743][ C1] ? vm_mmap_pgoff+0x36e/0x4b0 [ 274.999768][ C1] ? cgroup_rstat_updated+0x141/0x810 [ 274.999785][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 274.999802][ C1] ? __kernel_text_address+0x11/0x40 [ 274.999823][ C1] ? unwind_get_return_address+0x51/0x90 [ 274.999842][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 274.999861][ C1] ? __cgroup_account_cputime+0xa5/0xd0 [ 274.999880][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 274.999902][ C1] ? update_curr+0x50c/0x9e0 [ 274.999926][ C1] ? update_load_avg+0x506/0x1990 [ 274.999946][ C1] ? __calc_delta+0x280/0x280 [ 274.999969][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 274.999992][ C1] ? dequeue_entity+0x809/0x1380 [ 275.000014][ C1] ? tg_unthrottle_up+0x9a0/0x9a0 [ 275.000035][ C1] ? dequeue_entities+0x1d7/0x1400 [ 275.000057][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 275.000079][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 275.000099][ C1] ? sched_clock_noinstr+0xd/0x30 [ 275.000117][ C1] ? xfd_validate_state+0x68/0x140 [ 275.000139][ C1] ? save_fpregs_to_fpstate+0x196/0x220 [ 275.000158][ C1] ? __kasan_check_write+0x18/0x20 [ 275.000180][ C1] ? __switch_to+0xc4f/0x1300 [ 275.000204][ C1] ? __cfi___switch_to+0x10/0x10 [ 275.000226][ C1] ? psi_task_switch+0x59e/0xa10 [ 275.000254][ C1] ? _raw_spin_unlock+0x45/0x60 [ 275.000277][ C1] ? finish_task_switch+0x139/0x760 [ 275.000296][ C1] ? __switch_to_asm+0x3d/0x70 [ 275.000320][ C1] ? __schedule+0x13a1/0x1fa0 [ 275.000336][ C1] ? avc_has_extended_perms+0x80b/0xe70 [ 275.000361][ C1] ? __asan_memcpy+0x5a/0x80 [ 275.000383][ C1] ? avc_has_extended_perms+0x969/0xe70 [ 275.000408][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 275.000428][ C1] ? do_vfs_ioctl+0x182d/0x2010 [ 275.000445][ C1] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 275.000463][ C1] ? schedule+0xc5/0x240 [ 275.000479][ C1] ? futex_unqueue+0x136/0x160 [ 275.000502][ C1] ? ioctl_has_perm+0x39a/0x500 [ 275.000523][ C1] ? __kasan_check_read+0x15/0x20 [ 275.000546][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 275.000567][ C1] ? futex_wait+0x2ac/0x7b0 [ 275.000590][ C1] ? __cfi_futex_wait+0x10/0x10 [ 275.000614][ C1] ? selinux_file_ioctl+0x732/0x1480 [ 275.000634][ C1] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 275.000660][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 275.000681][ C1] ? do_futex+0x32a/0x510 [ 275.000702][ C1] ? __cfi_do_futex+0x10/0x10 [ 275.000722][ C1] ? vm_mmap_pgoff+0x153/0x4b0 [ 275.000744][ C1] ? __fget_files+0x2c5/0x340 [ 275.000762][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 275.000780][ C1] ? security_file_ioctl+0x3e/0x110 [ 275.000801][ C1] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 275.000822][ C1] ? __se_sys_ioctl+0x132/0x1b0 [ 275.000839][ C1] ? __x64_sys_ioctl+0x7f/0xa0 [ 275.000855][ C1] ? x64_sys_call+0x1878/0x2ee0 [ 275.000879][ C1] ? do_syscall_64+0x57/0xf0 [ 275.000901][ C1] ? clear_bhb_loop+0x50/0xa0 [ 275.000917][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 275.000943][ C1] [ 275.000950][ C1] Modules linked in: [ 275.000963][ C1] ---[ end trace 0000000000000000 ]--- [ 275.000973][ C1] RIP: 0010:get_page_from_freelist+0x8e/0x4a20 [ 275.000997][ C1] Code: 81 48 8d 8c 24 e0 01 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 21 48 b8 f8 f2 f8 f2 f8 f2 f8 f2 4a 89 44 21 08 <48> 89 4c 24 38 42 c7 44 21 10 f8 f3 f3 f3 49 8d 7f 10 4d 8d 77 1c [ 275.001013][ C1] RSP: 0018:ffffc90001a37f80 EFLAGS: 00010a02 [ 275.001029][ C1] RAX: f2f8f2f8f2f8f2f8 RBX: 0000000000000002 RCX: 1ffff9200034702c [ 275.001043][ C1] RDX: 0000000000000101 RSI: 0000000000000002 RDI: 0000000000192000 [ 275.001056][ C1] RBP: ffffc90001a38250 R08: ffffffff876aace3 R09: 1ffffffff0ed559c [ 275.001069][ C1] R10: dffffc0000000000 R11: fffffbfff0ed559d R12: dffffc0000000000 [ 275.001083][ C1] R13: dffffc0000000000 R14: 1ffff92000347050 R15: ffffc90001a382f0 [ 275.001097][ C1] FS: 00007fe7f87176c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 275.001113][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.001126][ C1] CR2: ffffc90001a37f78 CR3: 000000011bd9c000 CR4: 00000000003526b0 [ 275.001147][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 275.010724][ C1] Kernel Offset: disabled