last executing test programs: 29.509362857s ago: executing program 3 (id=111): io_setup(0x8, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x7}, 0x18) mount$9p_fd(0x0, &(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c00010000803cf404190000000000002b1b865ec5d28dc9a219d9a90c461e16809f59c9566fb99e8f6e62f11b614590e631dbc3254885c8bbed782b6b1b6fa8708468eddcc0ee188f3e4328"]) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x20) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r7, 0x0, 0x0, 0x8, 0x0, 0x2}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = eventfd2(0x3, 0x80001) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ERR(r10, 0x4008af22, &(0x7f0000000580)={0x0, r7}) r11 = accept$nfc_llcp(r3, 0x0, &(0x7f00000000c0)) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x9, r11, &(0x7f0000000440)="d48491a54cd82fa1e6dd71fe6b28e7ac9ee1b5e8f8b60d2bc06a6ac7fc1d8d3d50180d62b9fb9105db39d395da94f2904257d45d4342f25e1e71352539e051bb13c5b9a387035b33e4f53c3bb9a266ce69ec071a7558a702d7a258ea908e6f9126a7b38b91bdda17", 0x68, 0x5}]) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x104, r8, 0x0, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xc, r8, &(0x7f0000000340)="9426b3d00ecd348dde7ac62858c7480e52c7e7fbaf6e7ef12c9c04c1cf6fe32122d9897d35f15fc0e5cd01fc63cc2d62ecec87444364df2b9107c457b7866a14ff03265f317bb84709baba31e6d70505cee8bf98060a686622a94507e4aaeb382c37a1c9080788332c4b7420234517d6b7cea8c0e6eccb92bbdfd0f2077aad684292a7dcbe0b4c12f1534693c16f22f47ffa02", 0x93, 0x7fffffffffffffff, 0x0, 0x2, r9}]) r12 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r12, &(0x7f00000001c0)="ab1baf4a4765681cd71ed4c4749c3d9069d60deb78676bfab9139f8bcdd7675a85886f2f", 0x24) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 29.411333739s ago: executing program 3 (id=114): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902810003013140070904000000010120"], &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0}) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14) 28.174552479s ago: executing program 3 (id=123): sched_yield() r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xfb8, 0x1109, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x8d}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000240)=[@exit_looper, @decrefs], 0x0, 0x0, 0x0}) 27.011346027s ago: executing program 3 (id=153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x9eb1eb0c17f2eba7, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008030}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x3c, r4, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x18}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x7}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x200050d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x8, 0x6, @random="4d74e99b4b5f"}, 0xd) getpeername(r5, 0x0, &(0x7f0000000080)) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) r7 = openat$incfs(r6, &(0x7f00000022c0)='.pending_reads\x00', 0x303002, 0x1ea) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000500)=""/191, 0xbf}, {&(0x7f0000000000)=""/258, 0x102}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/125, 0x7d}], 0x8}, 0x81}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x58, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x66}], 0x7, 0x2100, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x541c, &(0x7f0000002280)) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x1c, "ffffffff00000004ddb49a000000000000000000f8e500080000010000000000000000040000ff000000000000ffffffff00000000000000299b00", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x2, 0x6, 0x2}}, 0x30) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x6) syz_fuse_handle_req(r7, &(0x7f0000000280)="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", 0x2000, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x13) 27.005898147s ago: executing program 3 (id=156): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x404c001}, 0x20000000) r3 = socket(0x10, 0x803, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000150a0100000508ca0402e6b3c2a8d7cae61bbf42da00034000000002ad20605fc500ad0687b12e9d1f9971d5a5d0638df6e3e9f7f17b9f596eed836efd402d6b00df714b8e21470c57c463c6cb0c3d10151adc7ed46ead00000000000000000000989b3309e91a62"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = eventfd(0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(r4, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x30, 0x0, 0x2, r6, 0x0, 0x0, 0x10001, 0x0, 0x1, r5}]) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001fc0)={0x1358, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-[}&]*}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff800}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5710}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x184}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/--]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x666}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '--)$:{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}]}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',-&]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_WOL_MODES={0x1130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4e, 0x4, "5a0432e669271695e5ae367306acb4942ede90fa7683a81586486f85170bbe621ccdf72d6a2168117207393f6b138508b12e128eb96cab7ecf6dcebcf6e15fd044a898e390a411879952"}, @ETHTOOL_A_BITSET_MASK={0x17, 0x5, "9dbe9c1a7b3248a7f869272ecd6f11d44dd134"}, @ETHTOOL_A_BITSET_MASK={0x10, 0x5, "410baa0c9bcd0eb1cce50baa"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xaf, 0x4, "ee8f5ff5e61238d96d6c03f0a5cbeef84958ae6da3e5eae7aa9837b35c4c98d4a021f061fbec6144d2876275d01c6d31cb0320d721687a23ccf989b9ba7dc5867bf53ae666b3a4c7af341cc496b7add2383ad0f4c89cbd37adb38d7004ce04fe24083d8490de58ed1af33d988de8eb76bb53a28d58b7dd27389b515464b97c0dab7069f2b0fa7ac905490ff4d34c50ddfe3b3c7a3e0aabfd0a95e21868f4a27b2c8b39a9ff557fb4fae453"}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x200420c1}, 0x20008000) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 26.856216449s ago: executing program 3 (id=160): mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0xfffffffb) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r0, &(0x7f00000002c0)='u', 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x1a, 0x800, 0x3ff) write(r2, &(0x7f0000000040), 0x0) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000100)={'veth0_vlan\x00', 0x3e}) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020, 0x0, 0x0}, 0x2020) getpid() write$FUSE_LK(r3, &(0x7f0000000100)={0x10, 0x0, r4, {{0x4, 0x67d, 0x3}}}, 0x28) syz_clone(0x40008000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x801) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) r8 = epoll_create(0x8) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x80088a02, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) 26.766216871s ago: executing program 32 (id=160): mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0xfffffffb) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r0, &(0x7f00000002c0)='u', 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x1a, 0x800, 0x3ff) write(r2, &(0x7f0000000040), 0x0) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000100)={'veth0_vlan\x00', 0x3e}) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020, 0x0, 0x0}, 0x2020) getpid() write$FUSE_LK(r3, &(0x7f0000000100)={0x10, 0x0, r4, {{0x4, 0x67d, 0x3}}}, 0x28) syz_clone(0x40008000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x801) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) r8 = epoll_create(0x8) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x80088a02, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) 5.361040316s ago: executing program 4 (id=375): syz_io_uring_setup(0xefd, &(0x7f0000000080)={0x0, 0x0, 0x2000, 0x0, 0x2e3}, 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) 5.290402818s ago: executing program 4 (id=376): sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000400)={{0xf, 0x5, 0x21, 0x232, 0x2, 0xff, 0x2f3, 0xd}, "d7ff2d58fa78a1b3d4536a1c7eb01924bbf7be9845bcf698a973b89b1e1f41b6b618e37fc12ab4e67c4fc23cdd3b05cdedd7414318f0ce3ad8ec7eb25da7f03e7d8b8b63227dfd87a5e69e2efbab6ec051c5ff9711374e36d8728e529538cdc10c459a33fd4d624ed822fb1c1d4e666e44dff1ccf35f647393c556630a6f58e144f06c4230fdb8981660ac4115a51edbbe5bccc048565e26c794ca4dda202329bd94d57b778b4764d64ee11316ea48d64532f0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8d3) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r2 = syz_open_pts(r0, 0x8182) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x5) 4.47889999s ago: executing program 4 (id=402): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, 0x1}], 0xfffffffffffffe6b, 0x0, 0x0}) r2 = epoll_create(0x3) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) 4.440594431s ago: executing program 4 (id=403): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0xb2}, {0x0}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000280)=""/23, 0x17}], 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) pipe2$9p(&(0x7f0000000100), 0x84000) write(r1, &(0x7f0000000240)="94", 0x1) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000005304000128bd7000ffdbdf2558f000001256094dea06276ad7b4323fb1c95faa66164b5f15ec4df8e4e28e5ee260f817c108641f68e72de75558629f7ea20b1ebc1e979e79eec2b84268512ab6769811aecfafbe9dd2dd0699ccde8becdd6edca37291f861890674f713e1c1df8b922c95dbb95ca44cf0844f12aa16c865d5fcee6d4d459fe4407f1b11a0004d09aa4d804fd507f14c35f2e665ae7aa94a6cd4c4fe8c2980d3e3c9e79975a37aa4"], 0x14}}, 0x400d0) close(r5) tee(r0, r6, 0x8f5, 0x0) write$binfmt_script(r6, 0x0, 0xd9) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @private=0xa010101}, 0x10) write(r3, 0x0, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000080)={@private0, r10}, 0x14) r11 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r11) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r11) sendto$inet6(r9, &(0x7f0000000380)="a2b5b2307a6288ea245c23c1a1af86a2f430cf1591e423dce9e75d49ee82f669111beeb09294fe6164f6582421c5bb384d30489511a14768137dbce4bd6be8f05c75c1b3d89626cbdc5c98a1518af5fe389b4431b124f8fe2f88c2ec84bb12c1c139bc2337887d9070d57dcbc7456dc739bbf9d2a66180690b1c02d86f8228275cb2e39d6d65b25a715868792dee9f3802ad46311ddf635af916055ca78b57b82b331b64583bb54a827a7a041743f4f3014a67be826841b42bbc74898d5903c545b44f9a0bfc71361e924a286c6e527dd43bd3f54da5a44f776679805a4770b94606230ab038dffdab7b420eaddb4bcd7200614e5beb4de94e", 0xf9, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @loopback}, 0x1c) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x615, @mcast1, 0x4}, 0x1c) 3.590604044s ago: executing program 4 (id=414): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) kcmp(r4, r3, 0x0, r2, r2) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2001"], 0x0}) syz_usb_control_io(r6, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000c40)=@x86={0xa9, 0xd, 0x18, 0x0, 0x500, 0x9, 0x9, 0x0, 0x40, 0x3, 0xc, 0xfd, 0x0, 0x1, 0xa, 0x8a, 0x7, 0x13, 0x33, '\x00', 0x8, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 2.814319956s ago: executing program 4 (id=424): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x802, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000020ac05250200000000000109022400010000000009040000010300000009210000000122050009058103000010c600a2d586a6985d3617e916f5f7b9805da0e25941edba77ec"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x31, 0x8, {0x8, 0x32, "f0662c67fb99"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x20, 0x11, 0x98, {0x98, 0x2, "3fc2b758f3e8918ae2e946d7fddbff4488f01578fe96838e37017d49f964899ed90d8bc623920f69fe89554ddf6be194456366dbd30a91858edbaabd4e4a9613fbbe83b46fa271caa2d7dbe682c88f78027b2d34b16c0da9c17dece9e2f6c8f79dfbe241437e05f505dddf22765b87dedd5ac3c6c82ea75d6d5fc0121cb29810829da3b4be8fd8c994504ee488e9289cefae85ae8185"}}, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x40, 0xff00, 0x281, [0xc0, 0x3f, 0x3f00, 0xc000, 0x3f0f, 0xbf80]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x2, 0x1, 0x4f, 0x1000, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x10, 0x9, 0xb, 0x57}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0xbf, 0x60, 0x3f, 0x2, "e5f5f439", "7b0c51ff"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x40, 0x14, 0xfe, 0x8, 0x8d6}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x20, 0x6, 0xd2, "64d6f01624ce9fec882036cef92c238d5b62611b1c21a5d02ea6dc5cbce7167dee3886115fd22d2d4ebae89cba91acf6b653b4f1d6d59b1c2fab94cfa712e4ce3fd40c20277f1d37b873cd4f0c24fe8b87ca5c2627df910b363c02eda4703239a38c479be413b1c3ea5b5e70d405ee69b06d8388d5b37ef3f8a03e8a2e713a31d82f28a0f6a8695fd14c5c7caf945b02d3687e89051b0daed81f74ee25fbc632a97f16135f8ebd1c3f11f2070fa49fc658b5601abe74fecaf4437725bf6225a067c0035cfd3ff5ccb854d37b304d70cacb0f"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x16}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x1c00, 0x2, [0x780]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x865}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0xb, 0x2, "da3f"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xfd}, &(0x7f0000000780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000800)={0x40, 0x19, 0x2, "b7c5"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4f}, &(0x7f00000008c0)={0x40, 0x1e, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x5}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x7fffffff}) write$selinux_access(0xffffffffffffffff, 0x0, 0x5f) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 2.236547875s ago: executing program 2 (id=429): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc286, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 1.566237466s ago: executing program 0 (id=440): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) (async) r1 = socket(0x1000000000000010, 0x80802, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x12}]}, 0x24}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe801100080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x580, 0x9, {{0xc, 0x4, 0x0, 0x8, 0x30, 0x66, 0x0, 0x7f, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}, {[@end, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x13, 0xc9, [@rand_addr=0x64010100, @remote, @broadcast, @remote]}]}}}}}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=@allocspi={0x270, 0x16, 0xf05, 0x70bd29, 0x25dfdbff, {{{@in=@multicast2, @in6=@loopback, 0x4e23, 0x3, 0x4e21, 0x8, 0xa, 0x0, 0xe7f693709724cd1a, 0x84, r3, r4}, {@in=@private=0xa010100, 0x4d2, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x1, 0x4, 0xffffffffffff5f6f, 0x9, 0x40, 0x7, 0x80000000, 0x7}, {0x6, 0x6, 0xb, 0x4}, {0x7fffffff, 0x7fff, 0x40}, 0x70bd25, 0x3503, 0xa, 0x1, 0x2, 0x4}, 0x3, 0x7f}, [@algo_auth={0xea, 0x1, {{'rmd160\x00'}, 0x510, "dbc3d4121d545071320ff88c5043b65451d1c64bab547cfefcd341e57b9b15fabdc3490e3ca44113ba12405ead39be49129cbc108a38031069a3ed249a16a800d7ccc851af1ae0e014fd8f4e6b666ec6758848d16bbd57b6a1b2c95bd3877d26d1ece31297a7cc1dda7d4b339062e7c85f8a71fd3447906040a42beb0039e0c6c1331d75d36aed51fb77d016731aad401266b34c0bd6543fc6c07951ed2d88ba211a"}}, @algo_auth={0x84, 0x1, {{'ghash-generic\x00'}, 0x1e0, "6811e512a2e9619dc4f8127ee47efadc7dfdd1e3e1c1a4bcd928a1c7461f84ceb775f84054632a6ec5647d1d805a3e67bb916684901413f11a5bb536"}}, @tfcpad={0x8, 0x16, 0x200}]}, 0x270}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x3000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 1.563971226s ago: executing program 0 (id=441): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r1, 0xffffffffffffffff, 0x0) keyctl$invalidate(0x15, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r5, &(0x7f0000011480)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x2, 0x100005) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x2e, "f42a97b96d02faffffff75fdda624457697e22bd14ad3d5c3638f76f623a43edba52ff8d5cde1d3b8ad78583afe1"}}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000b40)={0x8, 0x0, [{0x341, 0x0, 0x1ff}, {0x2f5, 0x0, 0x4}, {0x2a4, 0x0, 0x6}, {0x304, 0x0, 0x6}, {0xbbf, 0x0, 0x2}, {0xb5c, 0x0, 0xa}, {0x45, 0x0, 0x8}, {0xb03, 0x0, 0x6}]}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000100)={0x0, 0x5, 0x93, {0x93, 0x6, "257fb392c1d3a577544b7b4f346c27649670be7327cd89bd22dd07eb8ecfc430a8225afbfab250fb382a0c123f5f355707690279aeb28a3d0c87ab28af68028d2f467f04f645051280c6d4cd339eee1dffc7d67c8d5a11d2fb1049339d81d5582ea632d9e0204ab33971c6a085ec26d54ec31d1757c1d2f9f0ea4ef986405e3565055f7c94553211dfdbcaf2b1369b73db"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2400}}, &(0x7f0000000080)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x36, 0x2, 0xd, 0x5, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "715d18fd17f288cc90058688370a34a4"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x6, 0x9, "c2b80415", "46c64cc7"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x3, 0x4c, 0x2, 0x3, 0x1000, 0x9}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000280)={0x20, 0x17, 0xc, "d472ccc15bfc13a2b390a78b"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000340)={0x20, 0x0, 0x4}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x120, 0x20}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x9295}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000000840)={0x40, 0xb, 0x2, "dfb7"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000008c0)={0x40, 0x13, 0x6}, &(0x7f0000000900)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "fcc5"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0xfd}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0xff}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.478260187s ago: executing program 0 (id=442): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="8001000010000100fdfffffffddbdf25e0000002000000000000000000000000ac1414aa000000000000000000000000ffff0000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000000006c000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000df0b000000000800ffffff7f030000000b00000027bd7000fc3f00000a0004004400000000000000480003"], 0x180}, 0x1, 0x0, 0x1a00000000000000}, 0x0) 1.465918157s ago: executing program 0 (id=443): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = socket$pptp(0x18, 0x1, 0x2) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffd, 0x3, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0xc0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f00000001c0)) 1.333280149s ago: executing program 0 (id=445): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) fcntl$addseals(r0, 0x409, 0x7) r1 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9bA\xdb\x00b\xe1br\xb6\x00\x00\x00\x00\x00\x00\x00\x002\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc3W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x806\xf5\xb0.\x81\x9b\xf5R\xb3\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\r\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9dH\xd9\xbd\xd9\xaf\x00\x00\x00\x00\x00', 0x0) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) ftruncate(r2, 0x87) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028d0003010000000904000000010100000a24010000000201020624040000520b2405000053f11ee5f7260b24050000133b9bda531c090501000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240209000200018b7e8e0724010000000009058209ff"], 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f00000000c0)='./file0\x00', r5, 0x0) mount$binderfs(&(0x7f0000000180), &(0x7f0000000240)='./binderfs2\x00', &(0x7f0000000280), 0x41000, &(0x7f00000002c0)=ANY=[@ANYBLOB='stats=global,uid=', @ANYRESDEC=0x0, @ANYBLOB=',rootcontext=root,fnwner=', @ANYRESDEC=r5, @ANYBLOB=',obj_type=/dev/vhost-vsock\x00,appraise,\x00']) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r7, &(0x7f0000000100)="120000001200e7ef007b00000000000000a115dff8913ea472911be7b6cb4d41ab87a63df2f55b59be0ac58ff89e8ed37567b9524a9cf9c1892c68f46988ccd735b0bcb4dafaeda2fa567974e1553e48dc8ef0800debbe58", 0x58, 0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r7, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/24, 0x18}, 0x40}], 0x1, 0x10002, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "e15e53bd0aa31921", "24ed7a02c2e14b71fc2208bcd0b94e28", "c2266bbc", "9120efde690ed3d9"}, 0x28) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f0000000200)=0xfbfe) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x4) close_range(r4, r6, 0x0) 797.918368ms ago: executing program 2 (id=447): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0xd6, &(0x7f00000004c0)={0x5, 0xf, 0xd6, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7fffff9, 0xf000, 0x0, [0x1013f0f, 0x1800f, 0x0, 0x7, 0x3f00, 0xf]}, @generic={0x6b, 0x10, 0xa, "51426fe02bb39a227ab0fce579b905dc7e657032b1e936485d482dfa7b185a9359a33760413a6ff5e85da6f00c14fd3a8529127d11466a87f70e1d838b88e8f4d2d73ac46f70287b6b6a56670c80980614c6b0e61b34b5df3c9d88e9ac39a7649108ffbdc84639cf"}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x3, 0xff0f, 0xfff, [0x30, 0x0, 0xff30, 0xff0000, 0x30]}, @generic={0x22, 0x10, 0x4, "397998ab274886087e9882c1aab537e59ec62d3b9274d68f9a098ac370dda0"}]}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000400000000ddfd99685c0000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c000000020000"], 0x23c}}, 0x0) 390.466544ms ago: executing program 1 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4008481) ioctl$KVM_RUN(r2, 0xae80, 0x0) 370.227824ms ago: executing program 1 (id=452): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$update(0x2, r0, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 280.153606ms ago: executing program 2 (id=453): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x15\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\xff\x12\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\x00\x00\x00') 222.450397ms ago: executing program 2 (id=454): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a070000003b9b701f40000400000000120000000000", 0x1d) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r2, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030241d2418"]) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000100)=""/190, &(0x7f0000000040)=0xbe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 222.140897ms ago: executing program 1 (id=455): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x6}, 0xa) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000080), 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x30}, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000140)="0f98b7b4003e652e0f01ca66b9800000c00f326635000800000f30baf80c66b80cc2798066efbafc0ced66b8008000000f23c00f21f86635000003000f23f8660fdf223e0f001766b80500000066b9007000000f01c10f015b7cb8aa000f00d8", 0x60}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 221.472207ms ago: executing program 2 (id=456): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) read(r4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 145.772638ms ago: executing program 2 (id=457): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x38, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xe, 0x20, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 126.534308ms ago: executing program 1 (id=458): unshare(0x400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x5, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000845000/0x4000)=nil, &(0x7f0000137000/0xa000)=nil, 0x4000}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000140018000080007564703a73797a32064c710b"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1a42409, &(0x7f0000000640)=ANY=[@ANYBLOB="19eaf337aed3261662ee56c08b4a98c5b6fc8c536890813ebc99e71c7ea2ea966be5fbc44742c621ed6974fcacbe55e8518394a8224c52c458661fc04a3c2cfe5fd53b579c210a0ddd093de94db0b1a349f59b6f52c43bebecbb00d1e1db5ea65f213adee23f9148aa608ac00ba420435b6246695b9638238235af7e1f6742a8150dc47a951947f1bdbdcf5940a0511c1795ca50c395fce4786857186c9173eaf8cf2499f0027dd9210453dcc967d4c1a9f33f22d09e2c8066a441c9dad5340a6dc11c47b05557c7", @ANYRES64=r1, @ANYRES8=r10, @ANYRESDEC=r8, @ANYRES32=r2, @ANYRESOCT=r9, @ANYRESDEC, @ANYRES64=r3]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x126) close_range(r3, 0xffffffffffffffff, 0x0) 46.55331ms ago: executing program 1 (id=459): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='lock m'], 0xc) fadvise64(r0, 0x10000001003, 0x9, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7dfff000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setuid(0xee00) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), r2) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="afa227bd7000fcdbdf250e00"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x3d7c3000) 45.27758ms ago: executing program 1 (id=460): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_pid(r2, 0x0, 0x2d) socket$inet6(0xa, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x77, &(0x7f00000000c0)="27833780ac0231bd4e82d997", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="54010000310010002cbd7000fedbdf250800320064010102c4dc79aed99628c44d40563beaf490b6c2cd2ab9d4403ee95feabe0edfcfa92f7fcca643a748107e92c65edbc65b08c34b27012c836162caca57601e36ff55d162b6d39984fc8805c602408a4e660b30abca6961039ccc48b808768b37fad7de49d8147ca7df59df13c9ae6d661abb81776bc8e245f22b3ad3573ba08468921310ffa90bf70a2155bc79243207767dba28d6fb44c37f77123560bd01ebc03180bcac4e86ad685ad1c600db8463b65b28fa11182d5f9977d1993eb2584e5ff82b7b692c5ad8a07e18b947dabf"], 0x154}], 0x1, 0x0, 0x0, 0x4010}, 0xc000) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="54010000310010002cbd7000fedbdf250800320064010102c4dc79aed99628c44d40563beaf490b6c2cd2ab9d4403ee95feabe0edfcfa92f7fcca643a748107e92c65edbc65b08c34b27012c836162caca57601e36ff55d162b6d39984fc8805c602408a4e660b30abca6961039ccc48b808768b37fad7de49d8147ca7df59df13c9ae6d661abb81776bc8e245f22b3ad3573ba08468921310ffa90bf70a2155bc79243207767dba28d6fb44c37f77123560bd01ebc03180bcac4e86ad685ad1c600db8463b65b28fa11182d5f9977d1993eb2584e5ff82b7b692c5ad8a07e18b947dabf"], 0x154}], 0x1, 0x0, 0x0, 0x4010}, 0xc000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0xff2e) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r8]) (async) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r8]) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r8]) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x40106726, &(0x7f00000000c0)) (async) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x40106726, &(0x7f00000000c0)) fcntl$setstatus(r3, 0x4, 0x400) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) (async) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000440)={"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"}) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 0 (id=461): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0xd6, &(0x7f00000004c0)={0x5, 0xf, 0xd6, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7fffff9, 0xf000, 0x0, [0x1013f0f, 0x1800f, 0x0, 0x7, 0x3f00, 0xf]}, @generic={0x6b, 0x10, 0xa, "51426fe02bb39a227ab0fce579b905dc7e657032b1e936485d482dfa7b185a9359a33760413a6ff5e85da6f00c14fd3a8529127d11466a87f70e1d838b88e8f4d2d73ac46f70287b6b6a56670c80980614c6b0e61b34b5df3c9d88e9ac39a7649108ffbdc84639cf"}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x3, 0xff0f, 0xfff, [0x30, 0x0, 0xff30, 0xff0000, 0x30]}, @generic={0x22, 0x10, 0x4, "397998ab274886087e9882c1aab537e59ec62d3b9274d68f9a098ac370dda0"}]}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000000000000000000000000000000000ffffff8000000000ddfd99685c0000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c000000020000"], 0x23c}}, 0x0) kernel console output (not intermixed with test programs): T36] audit: type=1400 audit(1751376002.930:180): avc: denied { read write } for pid=436 comm="syz.0.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.817586][ T441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.826283][ T428] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.896731][ T444] rust_binder: Write failure EINVAL in pid:45 [ 27.981229][ T428] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 28.003295][ T428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.011661][ T428] usb 2-1: Product: syz [ 28.015862][ T428] usb 2-1: Manufacturer: syz [ 28.020522][ T428] usb 2-1: SerialNumber: syz [ 28.053530][ T36] audit: type=1400 audit(1751376003.260:181): avc: denied { mounton } for pid=452 comm="syz.3.47" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 28.053753][ T453] exFAT-fs (rnullb0): invalid boot record signature [ 28.083809][ T453] exFAT-fs (rnullb0): failed to read boot sector [ 28.090200][ T453] exFAT-fs (rnullb0): failed to recognize exfat type [ 28.108323][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.204985][ T36] audit: type=1400 audit(1751376003.410:182): avc: denied { create } for pid=457 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 28.228616][ T306] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.279468][ T45] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 28.288191][ T45] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 28.298614][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 28.307574][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 28.328012][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 28.340257][ T45] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 28.349406][ T45] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 28.357420][ T45] usb 3-1: Product: syz [ 28.361621][ T45] usb 3-1: Manufacturer: syz [ 28.368141][ T45] cdc_wdm 3-1:1.0: skipping garbage [ 28.373596][ T45] cdc_wdm 3-1:1.0: skipping garbage [ 28.379295][ T45] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 28.385204][ T45] cdc_wdm 3-1:1.0: Unknown control protocol [ 28.388349][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 28.402322][ T306] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 28.411662][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.419686][ T306] usb 1-1: Product: syz [ 28.423865][ T306] usb 1-1: Manufacturer: syz [ 28.428532][ T306] usb 1-1: SerialNumber: syz [ 28.433816][ T306] usb 1-1: config 0 descriptor?? [ 28.439877][ T306] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 28.447699][ T306] usb 1-1: Detected FT-X [ 28.458348][ T428] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.588391][ T428] usb 4-1: device descriptor read/64, error -71 [ 28.693893][ T306] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 28.701025][ T306] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 28.708084][ T306] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 28.716236][ T306] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 28.725422][ T306] usb 1-1: USB disconnect, device number 3 [ 28.732105][ T306] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 28.741691][ T306] ftdi_sio 1-1:0.0: device disconnected [ 28.828348][ T428] usb 4-1: device descriptor read/64, error -71 [ 29.068417][ T428] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.081515][ T306] usb 3-1: USB disconnect, device number 3 [ 29.198345][ T428] usb 4-1: device descriptor read/64, error -71 [ 29.214692][ T464] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.214719][ T464] rust_binder: Read failure Err(EFAULT) in pid:55 [ 29.223242][ T464] ======================================================= [ 29.223242][ T464] WARNING: The mand mount option has been deprecated and [ 29.223242][ T464] and is ignored by this kernel. Remove the mand [ 29.223242][ T464] option from the mount to silence this warning. [ 29.223242][ T464] ======================================================= [ 29.264645][ T464] binder: Unknown parameter 'contextÀfs/binder0' [ 29.438329][ T428] usb 4-1: device descriptor read/64, error -71 [ 29.558413][ T428] usb usb4-port1: attempt power cycle [ 29.702588][ T500] binder: Unknown parameter 'euid<00000000000000060928' [ 29.918341][ T428] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.940971][ T428] usb 4-1: device descriptor read/8, error -71 [ 29.968347][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.975504][ T511] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.976051][ T511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 30.069547][ T428] usb 4-1: device descriptor read/8, error -71 [ 30.119546][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 30.129534][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 30.141159][ T45] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 30.150418][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.158644][ T45] usb 1-1: Product: syz [ 30.163148][ T45] usb 1-1: Manufacturer: syz [ 30.167782][ T45] usb 1-1: SerialNumber: syz [ 30.174074][ T45] usb 1-1: config 0 descriptor?? [ 30.179529][ T506] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.186920][ T506] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.318411][ T428] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.339456][ T428] usb 4-1: device descriptor read/8, error -71 [ 30.395947][ T504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.403896][ T504] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.469655][ T428] usb 4-1: device descriptor read/8, error -71 [ 30.566612][ T306] usb 2-1: USB disconnect, device number 2 [ 30.579110][ T428] usb usb4-port1: unable to enumerate USB device [ 30.636456][ T45] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 30.647696][ T45] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, f0:86:73:e3:13:cb [ 30.662161][ T45] usb 1-1: USB disconnect, device number 4 [ 30.669264][ T45] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 31.144611][ T535] netlink: 88 bytes leftover after parsing attributes in process `syz.1.77'. [ 31.224922][ T544] rust_binder: Write failure EFAULT in pid:34 [ 31.401379][ T568] netlink: 88 bytes leftover after parsing attributes in process `syz.3.86'. [ 31.503767][ T582] __vm_enough_memory: pid: 582, comm: syz.3.90, bytes: 70373039144960 not enough memory for the allocation [ 31.601603][ T588] FAULT_INJECTION: forcing a failure. [ 31.601603][ T588] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.614870][ T588] CPU: 0 UID: 0 PID: 588 Comm: syz.3.93 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 31.614905][ T588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.614919][ T588] Call Trace: [ 31.614924][ T588] [ 31.614931][ T588] __dump_stack+0x21/0x30 [ 31.614959][ T588] dump_stack_lvl+0x10c/0x190 [ 31.614978][ T588] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.614998][ T588] ? vfs_write+0x8ba/0xe80 [ 31.615019][ T588] dump_stack+0x19/0x20 [ 31.615037][ T588] should_fail_ex+0x3d9/0x530 [ 31.615056][ T588] should_fail+0xf/0x20 [ 31.615073][ T588] should_fail_usercopy+0x1e/0x30 [ 31.615094][ T588] _copy_from_user+0x22/0xb0 [ 31.615117][ T588] __sys_bind+0x1de/0x3f0 [ 31.615142][ T588] ? __cfi___sys_bind+0x10/0x10 [ 31.615168][ T588] ? __kasan_check_read+0x15/0x20 [ 31.615188][ T588] __x64_sys_bind+0x7e/0x90 [ 31.615212][ T588] x64_sys_call+0x1ffd/0x2ee0 [ 31.615234][ T588] do_syscall_64+0x58/0xf0 [ 31.615248][ T588] ? clear_bhb_loop+0x50/0xa0 [ 31.615267][ T588] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.615285][ T588] RIP: 0033:0x7fdc64b8e929 [ 31.615302][ T588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.615315][ T588] RSP: 002b:00007fdc649eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 31.615338][ T588] RAX: ffffffffffffffda RBX: 00007fdc64db5fa0 RCX: 00007fdc64b8e929 [ 31.615351][ T588] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000004 [ 31.615362][ T588] RBP: 00007fdc649eb090 R08: 0000000000000000 R09: 0000000000000000 [ 31.615372][ T588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.615382][ T588] R13: 0000000000000000 R14: 00007fdc64db5fa0 R15: 00007ffeb247e6c8 [ 31.615395][ T588] [ 31.748361][ T513] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 31.834808][ T601] rust_binder: Error in use_page_slow: ESRCH [ 31.834834][ T601] rust_binder: use_range failure ESRCH [ 31.845852][ T601] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 31.851645][ T601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 31.855701][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 31.855726][ T36] audit: type=1400 audit(1751376007.070:205): avc: denied { create } for pid=602 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.859995][ T601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:67 [ 31.900203][ T601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.902127][ T36] audit: type=1400 audit(1751376007.110:206): avc: denied { ioctl } for pid=600 comm="syz.3.98" path="socket:[5689]" dev="sockfs" ino=5689 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.945368][ T36] audit: type=1400 audit(1751376007.110:207): avc: denied { write } for pid=600 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.990593][ T615] 9pnet_fd: Insufficient options for proto=fd [ 32.018499][ T36] audit: type=1400 audit(1751376007.220:208): avc: denied { remount } for pid=617 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.035367][ T621] FAULT_INJECTION: forcing a failure. [ 32.035367][ T621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.047409][ T622] cgroup: subsys name conflicts with all [ 32.051511][ T621] CPU: 1 UID: 0 PID: 621 Comm: syz.1.105 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 32.051549][ T621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.051563][ T621] Call Trace: [ 32.051571][ T621] [ 32.051580][ T621] __dump_stack+0x21/0x30 [ 32.051617][ T621] dump_stack_lvl+0x10c/0x190 [ 32.051646][ T621] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.051679][ T621] dump_stack+0x19/0x20 [ 32.051707][ T621] should_fail_ex+0x3d9/0x530 [ 32.051739][ T621] should_fail+0xf/0x20 [ 32.051765][ T621] should_fail_usercopy+0x1e/0x30 [ 32.051804][ T621] _copy_to_user+0x24/0xa0 [ 32.051840][ T621] simple_read_from_buffer+0xed/0x160 [ 32.051867][ T621] proc_fail_nth_read+0x19e/0x210 [ 32.051894][ T621] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 32.051920][ T621] ? bpf_lsm_file_permission+0xd/0x20 [ 32.051949][ T621] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 32.051975][ T621] vfs_read+0x278/0xb60 [ 32.052005][ T621] ? __cfi_raw_bind+0x10/0x10 [ 32.052037][ T621] ? __cfi_vfs_read+0x10/0x10 [ 32.052066][ T621] ? __kasan_check_write+0x18/0x20 [ 32.052097][ T621] ? mutex_lock+0x92/0x1c0 [ 32.052125][ T621] ? __cfi_mutex_lock+0x10/0x10 [ 32.052153][ T621] ? __fget_files+0x2c5/0x340 [ 32.052191][ T621] ksys_read+0x141/0x250 [ 32.052221][ T621] ? __cfi_ksys_read+0x10/0x10 [ 32.052253][ T621] ? __kasan_check_read+0x15/0x20 [ 32.052282][ T621] __x64_sys_read+0x7f/0x90 [ 32.052314][ T621] x64_sys_call+0x2638/0x2ee0 [ 32.052346][ T621] do_syscall_64+0x58/0xf0 [ 32.052369][ T621] ? clear_bhb_loop+0x50/0xa0 [ 32.052402][ T621] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.052429][ T621] RIP: 0033:0x7f2a3a38d33c [ 32.052451][ T621] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 32.052471][ T621] RSP: 002b:00007f2a3b200030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 32.052499][ T621] RAX: ffffffffffffffda RBX: 00007f2a3a5b5fa0 RCX: 00007f2a3a38d33c [ 32.052519][ T621] RDX: 000000000000000f RSI: 00007f2a3b2000a0 RDI: 0000000000000003 [ 32.052536][ T621] RBP: 00007f2a3b200090 R08: 0000000000000000 R09: 0000000000000000 [ 32.052551][ T621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.052567][ T621] R13: 0000000000000000 R14: 00007f2a3a5b5fa0 R15: 00007ffd47842d18 [ 32.052590][ T621] [ 32.070677][ T624] batadv_slave_1: entered promiscuous mode [ 32.100127][ T622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:80 [ 32.102329][ T513] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.111579][ T624] batadv_slave_1: left promiscuous mode [ 32.114025][ T513] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 32.338842][ T513] usb 3-1: config 0 interface 0 has no altsetting 0 [ 32.345487][ T513] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 32.354789][ T513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.358346][ T307] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.363902][ T513] usb 3-1: config 0 descriptor?? [ 32.377342][ T574] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 32.381551][ T36] audit: type=1400 audit(1751376007.590:209): avc: denied { write } for pid=626 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.404749][ T428] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.413236][ T36] audit: type=1400 audit(1751376007.620:210): avc: denied { watch watch_reads } for pid=626 comm="syz.1.108" path="/19" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.442384][ T36] audit: type=1400 audit(1751376007.650:211): avc: denied { setopt } for pid=626 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.463017][ T36] audit: type=1400 audit(1751376007.650:212): avc: denied { read } for pid=626 comm="syz.1.108" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.485594][ T36] audit: type=1400 audit(1751376007.650:213): avc: denied { open } for pid=626 comm="syz.1.108" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.508475][ T36] audit: type=1400 audit(1751376007.650:214): avc: denied { ioctl } for pid=626 comm="syz.1.108" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.559422][ T428] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.559466][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.570575][ T428] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.581431][ T307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.590968][ T428] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.600733][ T307] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 32.612309][ T428] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.628924][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 32.637456][ T428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.641696][ T307] usb 4-1: SerialNumber: syz [ 32.654801][ T428] usb 1-1: config 0 descriptor?? [ 32.822280][ T513] usbhid 3-1:0.0: can't add hid device: -71 [ 32.828359][ T513] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 32.838159][ T513] usb 3-1: USB disconnect, device number 4 [ 32.857654][ T307] usb 4-1: MIDIStreaming interface descriptor not found [ 32.871227][ T307] usb 4-1: USB disconnect, device number 6 [ 32.918326][ T306] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 33.066550][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.070223][ T306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.074189][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.082283][ T306] usb 2-1: not running at top speed; connect to a high speed hub [ 33.089214][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.098360][ T306] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 33.104388][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.117188][ T306] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.122651][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.132051][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.139106][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.147456][ T306] usb 2-1: Product: syz [ 33.154488][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.159007][ T306] usb 2-1: Manufacturer: syz [ 33.166034][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.171030][ T306] usb 2-1: SerialNumber: syz [ 33.178047][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.190108][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.197522][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.204986][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.212445][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.219892][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.227281][ T428] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 33.234938][ T428] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 33.244199][ T428] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 33.390291][ T629] Zero length message leads to an empty skb [ 33.412253][ T306] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 33.424461][ T306] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 33.438808][ T306] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 33.452562][ T635] exFAT-fs (rnullb0): invalid boot record signature [ 33.456017][ T306] usb 2-1: USB disconnect, device number 3 [ 33.459249][ T635] exFAT-fs (rnullb0): failed to read boot sector [ 33.471615][ T635] exFAT-fs (rnullb0): failed to recognize exfat type [ 33.768330][ T428] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 33.929757][ T428] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.937836][ T428] usb 4-1: not running at top speed; connect to a high speed hub [ 33.946436][ T428] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.956754][ T428] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.967195][ T428] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.976349][ T428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.984466][ T428] usb 4-1: Product: syz [ 33.988817][ T428] usb 4-1: Manufacturer: syz [ 33.993474][ T428] usb 4-1: SerialNumber: syz [ 34.200417][ T642] Unsupported ieee802154 address type: 0 [ 34.210073][ T428] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 34.220230][ T428] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.230277][ T428] usb 4-1: USB disconnect, device number 7 [ 34.237582][ T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.348369][ T306] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 34.499822][ T306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 34.508210][ T306] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 34.516960][ T306] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 34.527079][ T306] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.548733][ T306] usb 2-1: string descriptor 0 read error: -22 [ 34.554954][ T306] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.564059][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.574611][ T306] usb 2-1: 0:2 : does not exist [ 34.688335][ T664] netlink: 88 bytes leftover after parsing attributes in process `syz.2.122'. [ 34.774971][ T651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.825815][ T652] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 34.832797][ T673] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.834128][ T652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.841671][ T673] rust_binder: Got transaction with invalid offset. [ 34.847403][ T652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.855621][ T673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.869918][ T673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 34.885156][ T10] usb 2-1: USB disconnect, device number 4 [ 34.930992][ T361] usb 1-1: USB disconnect, device number 5 [ 34.992444][ T681] rust_binder: 681: no such ref 0 [ 34.997572][ T681] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.997592][ T681] rust_binder: Read failure Err(EFAULT) in pid:79 [ 35.006429][ T681] rust_binder: Write failure EINVAL in pid:79 [ 35.015568][ T681] rust_binder: Write failure EINVAL in pid:79 [ 35.021802][ T683] rust_binder: 683: no such ref 0 [ 35.033505][ T683] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.033526][ T683] rust_binder: Read failure Err(EFAULT) in pid:79 [ 35.072117][ T686] mmap: syz.1.128 (686) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.106864][ T689] fuse: Bad value for 'group_id' [ 35.117396][ T689] fuse: Bad value for 'group_id' [ 35.168348][ T428] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.338821][ T668] rust_binder: 668: no such ref 0 [ 35.344854][ T702] tipc: Started in network mode [ 35.346284][ T428] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.350110][ T702] tipc: Node identity 5e64265b2c1b, cluster identity 4711 [ 35.361419][ T428] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 35.375496][ T702] tipc: Enabled bearer , priority 0 [ 35.386935][ T428] usb 4-1: can't read configurations, error -71 [ 35.387092][ T702] tipc: Disabling bearer [ 35.433405][ T710] rust_binder: Error while translating object. [ 35.433435][ T710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.439770][ T710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 35.465723][ T713] batadv_slave_1: entered promiscuous mode [ 35.482330][ T715] SELinux: security_context_str_to_sid () failed with errno=-22 [ 35.483174][ T713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 35.501011][ T713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 35.579269][ T730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.773288][ T712] batadv_slave_1: left promiscuous mode [ 35.812713][ T753] rust_binder: 753: no such ref 7 [ 35.914567][ T766] netlink: 88 bytes leftover after parsing attributes in process `syz.2.155'. [ 36.029649][ T46] bridge_slave_1: left allmulticast mode [ 36.037592][ T46] bridge_slave_1: left promiscuous mode [ 36.043537][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.051488][ T46] bridge_slave_0: left allmulticast mode [ 36.057188][ T46] bridge_slave_0: left promiscuous mode [ 36.063178][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.180250][ T786] FAULT_INJECTION: forcing a failure. [ 36.180250][ T786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.208470][ T786] CPU: 0 UID: 0 PID: 786 Comm: syz.0.162 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 36.208505][ T786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.208519][ T786] Call Trace: [ 36.208525][ T786] [ 36.208532][ T786] __dump_stack+0x21/0x30 [ 36.208562][ T786] dump_stack_lvl+0x10c/0x190 [ 36.208584][ T786] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.208607][ T786] ? vfs_write+0x8ba/0xe80 [ 36.208632][ T786] dump_stack+0x19/0x20 [ 36.208653][ T786] should_fail_ex+0x3d9/0x530 [ 36.208676][ T786] should_fail+0xf/0x20 [ 36.208696][ T786] should_fail_usercopy+0x1e/0x30 [ 36.208719][ T786] _copy_from_user+0x22/0xb0 [ 36.208746][ T786] __sys_bind+0x1de/0x3f0 [ 36.208775][ T786] ? __cfi___sys_bind+0x10/0x10 [ 36.208805][ T786] ? __kasan_check_read+0x15/0x20 [ 36.208828][ T786] __x64_sys_bind+0x7e/0x90 [ 36.208855][ T786] x64_sys_call+0x1ffd/0x2ee0 [ 36.208880][ T786] do_syscall_64+0x58/0xf0 [ 36.208897][ T786] ? clear_bhb_loop+0x50/0xa0 [ 36.208919][ T786] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.208940][ T786] RIP: 0033:0x7fe604f8e929 [ 36.208956][ T786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.208972][ T786] RSP: 002b:00007fe605d3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 36.208993][ T786] RAX: ffffffffffffffda RBX: 00007fe6051b5fa0 RCX: 00007fe604f8e929 [ 36.209008][ T786] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 36.209021][ T786] RBP: 00007fe605d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 36.209033][ T786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.209045][ T786] R13: 0000000000000000 R14: 00007fe6051b5fa0 R15: 00007ffdb7f902b8 [ 36.209061][ T786] [ 36.492620][ T787] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.499776][ T787] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.506881][ T787] bridge_slave_0: entered allmulticast mode [ 36.519625][ T787] bridge_slave_0: entered promiscuous mode [ 36.526173][ T787] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.533304][ T787] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.542440][ T787] bridge_slave_1: entered allmulticast mode [ 36.548911][ T787] bridge_slave_1: entered promiscuous mode [ 36.567299][ T46] veth1_macvtap: left promiscuous mode [ 36.578561][ T46] veth0_vlan: left promiscuous mode [ 36.677873][ T811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.677911][ T811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 36.800322][ T787] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.816587][ T787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.823945][ T787] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.831036][ T787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.868637][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.878702][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.924000][ T818] FAULT_INJECTION: forcing a failure. [ 36.924000][ T818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.958411][ T818] CPU: 0 UID: 0 PID: 818 Comm: syz.2.171 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 36.958447][ T818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.958461][ T818] Call Trace: [ 36.958468][ T818] [ 36.958477][ T818] __dump_stack+0x21/0x30 [ 36.958510][ T818] dump_stack_lvl+0x10c/0x190 [ 36.958536][ T818] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.958564][ T818] dump_stack+0x19/0x20 [ 36.958589][ T818] should_fail_ex+0x3d9/0x530 [ 36.958615][ T818] should_fail+0xf/0x20 [ 36.958638][ T818] should_fail_usercopy+0x1e/0x30 [ 36.958665][ T818] _copy_to_user+0x24/0xa0 [ 36.958697][ T818] simple_read_from_buffer+0xed/0x160 [ 36.958720][ T818] proc_fail_nth_read+0x19e/0x210 [ 36.958743][ T818] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 36.958766][ T818] ? ping_bind+0x340/0xf50 [ 36.958798][ T818] ? bpf_lsm_file_permission+0xd/0x20 [ 36.958824][ T818] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 36.958846][ T818] vfs_read+0x278/0xb60 [ 36.958874][ T818] ? __cfi_inet6_bind_sk+0x10/0x10 [ 36.958896][ T818] ? __cfi_vfs_read+0x10/0x10 [ 36.958922][ T818] ? __kasan_check_write+0x18/0x20 [ 36.958949][ T818] ? mutex_lock+0x92/0x1c0 [ 36.958974][ T818] ? __cfi_mutex_lock+0x10/0x10 [ 36.958999][ T818] ? __fget_files+0x2c5/0x340 [ 36.959030][ T818] ksys_read+0x141/0x250 [ 36.959056][ T818] ? __cfi_ksys_read+0x10/0x10 [ 36.959084][ T818] ? __kasan_check_read+0x15/0x20 [ 36.959111][ T818] __x64_sys_read+0x7f/0x90 [ 36.959139][ T818] x64_sys_call+0x2638/0x2ee0 [ 36.959168][ T818] do_syscall_64+0x58/0xf0 [ 36.959187][ T818] ? clear_bhb_loop+0x50/0xa0 [ 36.959213][ T818] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.959236][ T818] RIP: 0033:0x7f331b78d33c [ 36.959253][ T818] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 36.959271][ T818] RSP: 002b:00007f331c670030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.959294][ T818] RAX: ffffffffffffffda RBX: 00007f331b9b5fa0 RCX: 00007f331b78d33c [ 36.959312][ T818] RDX: 000000000000000f RSI: 00007f331c6700a0 RDI: 0000000000000004 [ 36.959326][ T818] RBP: 00007f331c670090 R08: 0000000000000000 R09: 0000000000000000 [ 36.959341][ T818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.959353][ T818] R13: 0000000000000000 R14: 00007f331b9b5fa0 R15: 00007ffe24fa6de8 [ 36.959385][ T818] [ 37.014651][ T787] veth0_vlan: entered promiscuous mode [ 37.226606][ T825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.229479][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 37.229509][ T36] audit: type=1400 audit(1751376012.430:245): avc: denied { shutdown } for pid=822 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.260138][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.268953][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.278693][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.285791][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.289624][ T829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.295894][ T829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130 [ 37.323892][ T787] veth1_macvtap: entered promiscuous mode [ 37.398342][ T361] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.500119][ T840] overlayfs: failed to resolve '?': -2 [ 37.506476][ T840] 9pnet_fd: Insufficient options for proto=fd [ 37.540462][ T36] audit: type=1400 audit(1751376012.750:246): avc: denied { lock } for pid=834 comm="syz.4.161" path="socket:[7887]" dev="sockfs" ino=7887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 37.565534][ T361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.576506][ T361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.578362][ T843] SELinux: security_context_str_to_sid () failed with errno=-22 [ 37.586746][ T361] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.607459][ T361] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.616606][ T361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.635432][ T361] usb 2-1: config 0 descriptor?? [ 37.878336][ T513] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 38.028358][ T513] usb 3-1: Using ep0 maxpacket: 32 [ 38.034637][ T513] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.045763][ T513] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.055644][ T513] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 38.065755][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.073268][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.080743][ T513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.088814][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.096218][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.104058][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.111749][ T513] usb 3-1: config 0 descriptor?? [ 38.116881][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.124478][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.128347][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.132677][ T513] hub 3-1:0.0: USB hub found [ 38.144146][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.152059][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.159518][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.166940][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.174415][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.181852][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.189320][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.196744][ T361] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 38.204360][ T361] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 38.213655][ T361] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 38.251232][ T36] audit: type=1400 audit(1751376013.460:247): avc: denied { setopt } for pid=852 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.274720][ T306] usb 2-1: USB disconnect, device number 5 [ 38.288989][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 38.297231][ T10] usb 1-1: config 0 has no interfaces? [ 38.305493][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.314963][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.323021][ T10] usb 1-1: Product: syz [ 38.327208][ T10] usb 1-1: Manufacturer: syz [ 38.333118][ T10] usb 1-1: SerialNumber: syz [ 38.338644][ T10] usb 1-1: config 0 descriptor?? [ 38.344082][ T513] hub 3-1:0.0: 1 port detected [ 38.346559][ T856] fuse: Unknown parameter 'ÿ0x00000000000000080000000000000000000600000000000000000000' [ 38.359833][ T36] audit: type=1400 audit(1751376013.570:248): avc: denied { name_bind } for pid=854 comm="syz.4.184" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 38.546163][ T36] audit: type=1400 audit(1751376013.750:249): avc: denied { mounton } for pid=848 comm="syz.0.182" path="/proc/177/task" dev="proc" ino=8569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 38.547379][ T361] usb 1-1: USB disconnect, device number 6 [ 38.799834][ T36] audit: type=1400 audit(1751376014.010:250): avc: denied { nlmsg_read } for pid=858 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 38.821274][ T36] audit: type=1400 audit(1751376014.010:251): avc: denied { bind } for pid=858 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.840651][ T36] audit: type=1400 audit(1751376014.010:252): avc: denied { listen } for pid=858 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.946571][ T513] hub 3-1:0.0: activate --> -90 [ 39.086938][ T867] rust_binder: Failed copying remainder into alloc: EFAULT [ 39.086957][ T867] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 39.094371][ T867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 39.102823][ T867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:180 [ 39.118367][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 39.142483][ T36] audit: type=1400 audit(1751376014.350:253): avc: denied { setopt } for pid=868 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.162008][ T36] audit: type=1400 audit(1751376014.350:254): avc: denied { getopt } for pid=868 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.280954][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.289618][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 39.298149][ T10] usb 2-1: config 129 has an invalid interface number: 61 but max is 0 [ 39.306475][ T10] usb 2-1: config 129 has no interface number 0 [ 39.312810][ T10] usb 2-1: config 129 interface 61 has no altsetting 0 [ 39.321232][ T10] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=fb.92 [ 39.330368][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.338401][ T10] usb 2-1: Product: syz [ 39.342626][ T10] usb 2-1: Manufacturer: syz [ 39.347234][ T10] usb 2-1: SerialNumber: syz [ 39.409994][ T361] usb 3-1: USB disconnect, device number 5 [ 39.518435][ T428] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 39.628390][ T513] usb 3-1-port1: config error [ 39.651748][ T10] snd-usb-audio 2-1:129.61: probe with driver snd-usb-audio failed with error -71 [ 39.661995][ T10] usb 2-1: USB disconnect, device number 6 [ 39.669499][ T428] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.680637][ T428] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 39.691322][ T428] usb 1-1: config 0 interface 0 has no altsetting 0 [ 39.698042][ T428] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 39.707129][ T428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.716557][ T428] usb 1-1: config 0 descriptor?? [ 39.721967][ T873] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 39.945081][ T880] overlayfs: failed to resolve './file0': -2 [ 40.131979][ T428] logitech 0003:046D:C286.0003: unknown main item tag 0x6 [ 40.139788][ T428] logitech 0003:046D:C286.0003: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 40.151309][ T428] logitech 0003:046D:C286.0003: no inputs found [ 40.197326][ T889] netlink: 88 bytes leftover after parsing attributes in process `syz.1.197'. [ 40.225105][ T892] rust_binder: Write failure EINVAL in pid:124 [ 40.332355][ T873] netlink: 'syz.0.192': attribute type 11 has an invalid length. [ 40.346351][ T873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 40.356165][ T896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.364871][ T896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.379417][ T361] usb 1-1: USB disconnect, device number 7 [ 40.488360][ T428] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.603286][ T907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 40.638373][ T428] usb 2-1: Using ep0 maxpacket: 16 [ 40.645349][ T428] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.654000][ T428] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.664191][ T428] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 40.673248][ T428] usb 2-1: too many endpoints for config 1 interface 1 altsetting 71: 240, using maximum allowed: 30 [ 40.685873][ T428] usb 2-1: config 1 interface 1 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 240 [ 40.699086][ T428] usb 2-1: config 1 interface 1 has no altsetting 0 [ 40.707686][ T428] usb 2-1: string descriptor 0 read error: -22 [ 40.714015][ T428] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.723123][ T428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.738473][ T428] usb 2-1: 0:2 : does not exist [ 40.752112][ T428] hub 2-1:1.1: Invalid hub with more than one config or interface [ 40.770839][ T428] hub 2-1:1.1: probe with driver hub failed with error -22 [ 40.844967][ T919] netlink: 88 bytes leftover after parsing attributes in process `syz.0.206'. [ 40.923081][ T928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.923118][ T928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 40.940043][ T895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.949578][ T895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 40.956531][ T895] rust_binder: Error while translating object. [ 40.965818][ T895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.972258][ T895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 40.982553][ T10] usb 2-1: USB disconnect, device number 7 [ 41.336062][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.370450][ T306] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.389697][ T828] Bluetooth: hci1: Frame reassembly failed (-84) [ 41.403676][ T943] incfs: Options parsing error. -22 [ 41.409160][ T943] incfs: mount failed -22 [ 41.435793][ T946] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.538326][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 41.544518][ T306] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 41.553374][ T306] usb 1-1: config 1 has no interface number 0 [ 41.559557][ T306] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 41.569698][ T306] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 41.580825][ T306] usb 1-1: config 1 interface 105 has no altsetting 0 [ 41.589844][ T306] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 41.600670][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.608785][ T306] usb 1-1: Product: syz [ 41.612970][ T306] usb 1-1: Manufacturer: syz [ 41.617557][ T306] usb 1-1: SerialNumber: syz [ 41.623251][ T935] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 41.630469][ T935] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 41.838354][ T428] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 41.988327][ T428] usb 3-1: Using ep0 maxpacket: 8 [ 41.994496][ T428] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.005515][ T428] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.015296][ T428] usb 3-1: config 0 interface 0 has no altsetting 0 [ 42.021993][ T428] usb 3-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 42.031080][ T428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.039908][ T428] usb 3-1: config 0 descriptor?? [ 42.042459][ T935] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 42.052268][ T935] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 42.376465][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 42.376484][ T36] audit: type=1400 audit(1751376017.580:268): avc: denied { load_policy } for pid=955 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 42.376503][ T956] SELinux: policydb string length 5 does not match expected length 8 [ 42.410817][ T956] SELinux: failed to load policy [ 42.418393][ T956] fuse: Unknown parameter 'ro' [ 42.424165][ T956] sit0: entered promiscuous mode [ 42.430992][ T956] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 42.438746][ T956] netlink: 1 bytes leftover after parsing attributes in process `syz.1.218'. [ 42.450587][ T428] logitech-hidpp-device 0003:046D:C08A.0004: item fetching failed at offset 6/7 [ 42.466005][ T428] logitech-hidpp-device 0003:046D:C08A.0004: hidpp_probe:parse failed [ 42.468316][ T36] audit: type=1400 audit(1751376017.670:269): avc: denied { write } for pid=934 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.474431][ T428] logitech-hidpp-device 0003:046D:C08A.0004: probe with driver logitech-hidpp-device failed with error -22 [ 42.505601][ T935] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=935 comm=syz.0.212 [ 42.550183][ T36] audit: type=1400 audit(1751376017.760:270): avc: denied { write } for pid=964 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.581248][ T306] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 42.593676][ T306] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 42.598623][ T36] audit: type=1400 audit(1751376017.800:271): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.605032][ T306] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 42.637417][ T306] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 1a:3f:12:74:e7:76 [ 42.651896][ T306] usb 1-1: USB disconnect, device number 8 [ 42.656722][ T428] usb 3-1: USB disconnect, device number 6 [ 42.658482][ T306] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 42.729701][ T306] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 42.739186][ T306] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 42.748601][ T306] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 43.183893][ T973] overlay: ./file0 is not a directory [ 43.212296][ T975] netlink: 88 bytes leftover after parsing attributes in process `syz.1.226'. [ 43.328350][ T306] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 43.334549][ T988] incfs: Backing dir is not set, filesystem can't be mounted. [ 43.343478][ T988] incfs: mount failed -2 [ 43.348330][ T941] Bluetooth: hci0: command 0x1003 tx timeout [ 43.349320][ T938] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.438384][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 43.438734][ T938] Bluetooth: hci1: command 0x1003 tx timeout [ 43.478369][ T306] usb 1-1: Using ep0 maxpacket: 32 [ 43.484589][ T306] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 43.496174][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 43.507590][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 43.519020][ T306] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 43.528099][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.536989][ T306] usb 1-1: config 0 descriptor?? [ 43.539656][ T994] FAULT_INJECTION: forcing a failure. [ 43.539656][ T994] name failslab, interval 1, probability 0, space 0, times 1 [ 43.545484][ T971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.554735][ T994] CPU: 1 UID: 0 PID: 994 Comm: syz.4.232 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 43.554773][ T994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.554789][ T994] Call Trace: [ 43.554798][ T994] [ 43.554816][ T994] __dump_stack+0x21/0x30 [ 43.554852][ T994] dump_stack_lvl+0x10c/0x190 [ 43.554882][ T994] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.554913][ T994] dump_stack+0x19/0x20 [ 43.554939][ T994] should_fail_ex+0x3d9/0x530 [ 43.554970][ T994] should_failslab+0xac/0x100 [ 43.555008][ T994] __kmalloc_noprof+0x69/0x450 [ 43.555038][ T994] ? genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 43.555093][ T994] genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 43.555128][ T994] genl_family_rcv_msg_doit+0xcd/0x330 [ 43.555162][ T994] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 43.555194][ T994] ? selinux_capable+0x38/0x50 [ 43.555225][ T994] ? bpf_lsm_capable+0xd/0x20 [ 43.555258][ T994] ? security_capable+0xcf/0xf0 [ 43.555285][ T994] ? ns_capable+0x91/0xf0 [ 43.555317][ T994] genl_rcv_msg+0x609/0x7a0 [ 43.555348][ T994] ? __cfi_genl_rcv_msg+0x10/0x10 [ 43.555380][ T994] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 43.555418][ T994] netlink_rcv_skb+0x22e/0x4a0 [ 43.555444][ T994] ? __cfi_genl_rcv_msg+0x10/0x10 [ 43.555474][ T994] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 43.555499][ T994] ? rwsem_read_trylock+0x2b1/0x660 [ 43.555529][ T994] ? down_read+0x79/0xe0 [ 43.555559][ T994] ? __cfi_down_read+0x10/0x10 [ 43.555590][ T994] ? is_vmalloc_addr+0x11/0x40 [ 43.555613][ T994] genl_rcv+0x2c/0x40 [ 43.555641][ T994] netlink_unicast+0x8c6/0xa60 [ 43.555667][ T994] netlink_sendmsg+0x7f0/0xaf0 [ 43.555695][ T994] ? __cfi_netlink_sendmsg+0x10/0x10 [ 43.555723][ T994] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 43.555748][ T994] ? security_socket_sendmsg+0x33/0xd0 [ 43.555780][ T994] ? __cfi_netlink_sendmsg+0x10/0x10 [ 43.555812][ T994] ____sys_sendmsg+0xa15/0xa70 [ 43.555843][ T994] ? __sys_sendmsg_sock+0x50/0x50 [ 43.555871][ T994] ? import_iovec+0x81/0xb0 [ 43.555893][ T994] ___sys_sendmsg+0x220/0x2a0 [ 43.555921][ T994] ? __sys_sendmsg+0x280/0x280 [ 43.555948][ T994] ? proc_fail_nth_write+0x17e/0x210 [ 43.555975][ T994] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 43.556009][ T994] __x64_sys_sendmsg+0x1eb/0x2c0 [ 43.556039][ T994] ? fput+0x1a5/0x240 [ 43.556063][ T994] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 43.556092][ T994] ? ksys_write+0x1ef/0x250 [ 43.556127][ T994] ? __kasan_check_read+0x15/0x20 [ 43.556159][ T994] x64_sys_call+0x2a4c/0x2ee0 [ 43.556193][ T994] do_syscall_64+0x58/0xf0 [ 43.556214][ T994] ? clear_bhb_loop+0x50/0xa0 [ 43.556243][ T994] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.556272][ T994] RIP: 0033:0x7f2f5298e929 [ 43.556292][ T994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.556313][ T994] RSP: 002b:00007f2f50ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.556352][ T994] RAX: ffffffffffffffda RBX: 00007f2f52bb5fa0 RCX: 00007f2f5298e929 [ 43.556370][ T994] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 43.556387][ T994] RBP: 00007f2f50ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.556403][ T994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.556418][ T994] R13: 0000000000000000 R14: 00007f2f52bb5fa0 R15: 00007fffcd440408 [ 43.556439][ T994] [ 43.638402][ T361] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.642455][ T306] hub 1-1:0.0: USB hub found [ 43.647618][ T428] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 43.857170][ T306] hub 1-1:0.0: 2 ports detected [ 44.018330][ T361] usb 3-1: Using ep0 maxpacket: 32 [ 44.024774][ T428] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.035868][ T361] usb 3-1: config 37 has an invalid interface number: 83 but max is 0 [ 44.044303][ T361] usb 3-1: config 37 contains an unexpected descriptor of type 0x1, skipping [ 44.053190][ T428] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 44.063997][ T361] usb 3-1: config 37 has no interface number 0 [ 44.070306][ T428] usb 2-1: config 0 interface 0 has no altsetting 0 [ 44.079379][ T361] usb 3-1: config 37 interface 83 altsetting 14 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 44.088503][ T971] binder: Unknown parameter 'fscoôtext' [ 44.090655][ T428] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 44.106922][ T361] usb 3-1: config 37 interface 83 altsetting 14 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 44.118107][ T428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.126287][ T361] usb 3-1: config 37 interface 83 altsetting 14 has a duplicate endpoint with address 0xC, skipping [ 44.137663][ T361] usb 3-1: config 37 interface 83 altsetting 14 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 44.149109][ T428] usb 2-1: config 0 descriptor?? [ 44.157793][ T361] usb 3-1: config 37 interface 83 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 44.168945][ T992] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 44.182063][ T361] usb 3-1: config 37 interface 83 altsetting 14 bulk endpoint 0x4 has invalid maxpacket 8 [ 44.192326][ T361] usb 3-1: config 37 interface 83 has no altsetting 0 [ 44.204169][ T361] usb 3-1: New USB device found, idVendor=0403, idProduct=fc82, bcdDevice=87.0b [ 44.216284][ T361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.224417][ T361] usb 3-1: Product: ᇠ[ 44.228773][ T361] usb 3-1: Manufacturer: ã° [ 44.228942][ T306] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 44.233438][ T361] usb 3-1: SerialNumber: 《 [ 44.247389][ T988] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 44.250614][ T306] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 44.279755][ T306] usbhid 1-1:0.0: can't add hid device: -71 [ 44.285768][ T306] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 44.309255][ T306] usb 1-1: USB disconnect, device number 9 [ 44.449440][ T998] SELinux: policydb version -1199368090 does not match my version range 15-33 [ 44.458534][ T998] SELinux: failed to load policy [ 44.461188][ T361] ftdi_sio 3-1:37.83: FTDI USB Serial Device converter detected [ 44.472051][ T361] ftdi_sio ttyUSB0: unknown device type: 0x870b [ 44.482669][ T361] usb 3-1: USB disconnect, device number 7 [ 44.512620][ T361] ftdi_sio 3-1:37.83: device disconnected [ 44.587943][ T992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.596550][ T992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.641990][ T1007] netlink: 88 bytes leftover after parsing attributes in process `syz.4.237'. [ 44.768078][ T1016] FAULT_INJECTION: forcing a failure. [ 44.768078][ T1016] name failslab, interval 1, probability 0, space 0, times 0 [ 44.780763][ T1016] CPU: 0 UID: 0 PID: 1016 Comm: syz.0.241 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 44.780800][ T1016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.780814][ T1016] Call Trace: [ 44.780822][ T1016] [ 44.780831][ T1016] __dump_stack+0x21/0x30 [ 44.780864][ T1016] dump_stack_lvl+0x10c/0x190 [ 44.780884][ T1016] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.780915][ T1016] ? pointer+0xdd0/0xdd0 [ 44.780947][ T1016] dump_stack+0x19/0x20 [ 44.780973][ T1016] should_fail_ex+0x3d9/0x530 [ 44.780993][ T1016] should_failslab+0xac/0x100 [ 44.781016][ T1016] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 44.781043][ T1016] ? kvasprintf_const+0xf6/0x250 [ 44.781067][ T1016] kvasprintf+0xdf/0x240 [ 44.781088][ T1016] ? __cfi_kvasprintf+0x10/0x10 [ 44.781109][ T1016] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 44.781143][ T1016] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 44.781177][ T1016] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 44.781200][ T1016] ? stack_depot_save_flags+0x399/0x800 [ 44.781228][ T1016] kvasprintf_const+0xf6/0x250 [ 44.781250][ T1016] kobject_set_name_vargs+0x65/0x120 [ 44.781280][ T1016] kobject_init_and_add+0xde/0x190 [ 44.781304][ T1016] ? net_rx_queue_update_kobjects+0x17d/0x5a0 [ 44.781327][ T1016] ? veth_set_channels+0x31a/0xcb0 [ 44.781362][ T1016] ? ethnl_set_channels+0x808/0x8b0 [ 44.781385][ T1016] ? ethnl_default_set_doit+0x646/0x900 [ 44.781415][ T1016] ? genl_family_rcv_msg_doit+0x22f/0x330 [ 44.781436][ T1016] ? __cfi_kobject_init_and_add+0x10/0x10 [ 44.781468][ T1016] ? ____sys_sendmsg+0xa15/0xa70 [ 44.781497][ T1016] ? do_syscall_64+0x58/0xf0 [ 44.781518][ T1016] net_rx_queue_update_kobjects+0x1f5/0x5a0 [ 44.781546][ T1016] netif_set_real_num_rx_queues+0x10b/0x200 [ 44.781574][ T1016] veth_set_channels+0x31a/0xcb0 [ 44.781600][ T1016] ethnl_set_channels+0x808/0x8b0 [ 44.781622][ T1016] ? __cfi_ethnl_set_channels+0x10/0x10 [ 44.781647][ T1016] ? mutex_lock+0x92/0x1c0 [ 44.781675][ T1016] ethnl_default_set_doit+0x646/0x900 [ 44.781707][ T1016] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 44.781741][ T1016] ? genl_family_rcv_msg_attrs_parse+0x213/0x390 [ 44.781774][ T1016] genl_family_rcv_msg_doit+0x22f/0x330 [ 44.781806][ T1016] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 44.781835][ T1016] ? selinux_capable+0x38/0x50 [ 44.781859][ T1016] ? ns_capable+0x91/0xf0 [ 44.781879][ T1016] genl_rcv_msg+0x609/0x7a0 [ 44.781904][ T1016] ? __cfi_genl_rcv_msg+0x10/0x10 [ 44.781933][ T1016] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 44.781966][ T1016] netlink_rcv_skb+0x22e/0x4a0 [ 44.781989][ T1016] ? __cfi_genl_rcv_msg+0x10/0x10 [ 44.782010][ T1016] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 44.782026][ T1016] ? rwsem_read_trylock+0x2b1/0x660 [ 44.782047][ T1016] ? down_read+0x79/0xe0 [ 44.782078][ T1016] ? __cfi_down_read+0x10/0x10 [ 44.782105][ T1016] ? is_vmalloc_addr+0x11/0x40 [ 44.782125][ T1016] genl_rcv+0x2c/0x40 [ 44.782147][ T1016] netlink_unicast+0x8c6/0xa60 [ 44.782163][ T1016] netlink_sendmsg+0x7f0/0xaf0 [ 44.782182][ T1016] ? __cfi_netlink_sendmsg+0x10/0x10 [ 44.782206][ T1016] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 44.782229][ T1016] ? security_socket_sendmsg+0x33/0xd0 [ 44.782257][ T1016] ? __cfi_netlink_sendmsg+0x10/0x10 [ 44.782281][ T1016] ____sys_sendmsg+0xa15/0xa70 [ 44.782300][ T1016] ? __sys_sendmsg_sock+0x50/0x50 [ 44.782319][ T1016] ? import_iovec+0x81/0xb0 [ 44.782333][ T1016] ___sys_sendmsg+0x220/0x2a0 [ 44.782360][ T1016] ? __sys_sendmsg+0x280/0x280 [ 44.782385][ T1016] ? proc_fail_nth_write+0x17e/0x210 [ 44.782408][ T1016] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 44.782437][ T1016] __x64_sys_sendmsg+0x1eb/0x2c0 [ 44.782460][ T1016] ? fput+0x1a5/0x240 [ 44.782475][ T1016] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 44.782499][ T1016] ? ksys_write+0x1ef/0x250 [ 44.782530][ T1016] ? __kasan_check_read+0x15/0x20 [ 44.782557][ T1016] x64_sys_call+0x2a4c/0x2ee0 [ 44.782585][ T1016] do_syscall_64+0x58/0xf0 [ 44.782599][ T1016] ? clear_bhb_loop+0x50/0xa0 [ 44.782618][ T1016] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.782640][ T1016] RIP: 0033:0x7fe604f8e929 [ 44.782660][ T1016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.782680][ T1016] RSP: 002b:00007fe605d3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.782704][ T1016] RAX: ffffffffffffffda RBX: 00007fe6051b5fa0 RCX: 00007fe604f8e929 [ 44.782723][ T1016] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 44.782734][ T1016] RBP: 00007fe605d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 44.782745][ T1016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.782755][ T1016] R13: 0000000000000000 R14: 00007fe6051b5fa0 R15: 00007ffdb7f902b8 [ 44.782768][ T1016] [ 44.782776][ T1016] kobject: can not set name properly! [ 44.938314][ T361] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.027811][ T36] audit: type=1400 audit(1751376020.220:272): avc: denied { write } for pid=1017 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.189670][ T361] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 45.298162][ T361] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 45.307176][ T361] usb 5-1: config 1 has no interface number 0 [ 45.313408][ T361] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.324367][ T361] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 45.333524][ T361] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x61, changing to 0x1 [ 45.345009][ T361] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 45.361843][ T361] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 45.379038][ T1027] rust_binder: Error while translating object. [ 45.379074][ T1027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 45.385400][ T1027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:228 [ 45.395062][ T361] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.426157][ T428] usbhid 2-1:0.0: can't add hid device: -71 [ 45.432363][ T428] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 45.441169][ T36] audit: type=1400 audit(1751376020.660:273): avc: denied { write } for pid=1024 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.445867][ T428] usb 2-1: USB disconnect, device number 8 [ 45.464451][ T1029] netlink: 88 bytes leftover after parsing attributes in process `syz.0.246'. [ 45.468807][ T361] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.485048][ T361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.503995][ T361] usb 5-1: Product: syz [ 45.508255][ T361] usb 5-1: Manufacturer: syz [ 45.512001][ T36] audit: type=1400 audit(1751376020.720:274): avc: denied { mount } for pid=1032 comm="syz.0.247" name="/" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.513062][ T361] usb 5-1: SerialNumber: syz [ 45.545286][ T36] audit: type=1400 audit(1751376020.750:275): avc: denied { search } for pid=1032 comm="syz.0.247" name="/" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.567519][ T36] audit: type=1400 audit(1751376020.750:276): avc: denied { read } for pid=1032 comm="syz.0.247" name="/" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.589579][ T36] audit: type=1400 audit(1751376020.750:277): avc: denied { open } for pid=1032 comm="syz.0.247" path="/" dev="configfs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.630654][ T1037] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 45.639551][ T1037] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 45.648009][ T1037] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 45.658162][ T1037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.249'. [ 45.675969][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.693924][ T1037] bridge_slave_1 (unregistering): left allmulticast mode [ 45.713463][ T1037] bridge_slave_1 (unregistering): left promiscuous mode [ 45.728471][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.986797][ T1057] netlink: 88 bytes leftover after parsing attributes in process `syz.1.255'. [ 46.094330][ T1071] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.094993][ T1071] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 46.102618][ T1071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 46.110858][ T1071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:162 [ 46.144297][ T1075] tmpfs: Unknown parameter 'r_buos' [ 46.173807][ T361] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 46.193099][ T361] cdc_ncm 5-1:1.1: bind() failure [ 46.239020][ T361] usb 5-1: USB disconnect, device number 2 [ 46.355443][ T1094] netlink: 88 bytes leftover after parsing attributes in process `syz.1.270'. [ 46.404933][ T1101] tmpfs: Unknown parameter 'noswap,3ev/o¿full' [ 46.638334][ T428] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 46.688338][ T630] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 46.788344][ T428] usb 3-1: Using ep0 maxpacket: 32 [ 46.794649][ T428] usb 3-1: descriptor type invalid, skip [ 46.801125][ T428] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 46.810968][ T428] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.823863][ T428] usb 3-1: config 1 interface 0 has no altsetting 0 [ 46.828343][ T630] usb 2-1: device descriptor read/64, error -71 [ 46.832313][ T428] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 46.846003][ T428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.854031][ T428] usb 3-1: Product: syz [ 46.858218][ T428] usb 3-1: Manufacturer: syz [ 46.862854][ T428] usb 3-1: SerialNumber: syz [ 46.868888][ T1098] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 47.068358][ T630] usb 2-1: device descriptor read/64, error -71 [ 47.263468][ T428] usb 3-1: USB disconnect, device number 8 [ 47.308354][ T630] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 47.438327][ T630] usb 2-1: device descriptor read/64, error -71 [ 47.538373][ T306] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 47.678391][ T630] usb 2-1: device descriptor read/64, error -71 [ 47.689447][ T306] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.702206][ T1127] netlink: 'syz.4.280': attribute type 12 has an invalid length. [ 47.706682][ T306] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 47.711352][ T1127] rust_binder: Error while translating object. [ 47.720733][ T306] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 47.721031][ T1127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 47.726966][ T306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 47.727002][ T306] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 47.738118][ T1127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:47 [ 47.747180][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.791082][ T630] usb usb2-port1: attempt power cycle [ 47.805615][ T306] usb 1-1: config 0 descriptor?? [ 47.810922][ T1123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 47.812344][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 47.812364][ T36] audit: type=1400 audit(1751376023.010:281): avc: denied { ioctl } for pid=1132 comm="syz.2.283" path="socket:[10166]" dev="sockfs" ino=10166 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 47.818176][ T1123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 47.885653][ T1138] vcan0: entered allmulticast mode [ 47.991128][ T1146] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 47.999626][ T1146] overlayfs: missing 'lowerdir' [ 48.138333][ T630] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 48.159291][ T630] usb 2-1: device descriptor read/8, error -71 [ 48.225162][ T306] usbhid 1-1:0.0: can't add hid device: -71 [ 48.231497][ T307] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.239088][ T306] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 48.243516][ T1150] FAULT_INJECTION: forcing a failure. [ 48.243516][ T1150] name failslab, interval 1, probability 0, space 0, times 0 [ 48.260266][ T306] usb 1-1: USB disconnect, device number 10 [ 48.263948][ T1150] CPU: 1 UID: 0 PID: 1150 Comm: syz.0.288 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 48.263991][ T1150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.264008][ T1150] Call Trace: [ 48.264017][ T1150] [ 48.264026][ T1150] __dump_stack+0x21/0x30 [ 48.264074][ T1150] dump_stack_lvl+0x10c/0x190 [ 48.264105][ T1150] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.264135][ T1150] ? stack_depot_save_flags+0x38/0x800 [ 48.264169][ T1150] dump_stack+0x19/0x20 [ 48.264197][ T1150] should_fail_ex+0x3d9/0x530 [ 48.264227][ T1150] should_failslab+0xac/0x100 [ 48.264266][ T1150] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 48.264299][ T1150] ? netlink_sendmsg+0x7f0/0xaf0 [ 48.264326][ T1150] ? kstrdup_const+0x45/0x60 [ 48.264354][ T1150] ? __x64_sys_sendmsg+0x1eb/0x2c0 [ 48.264384][ T1150] kstrdup+0x4d/0x140 [ 48.264410][ T1150] ? kstrdup_const+0x3a/0x60 [ 48.264439][ T1150] kstrdup_const+0x45/0x60 [ 48.264466][ T1150] __kernfs_new_node+0x9d/0x700 [ 48.264505][ T1150] ? kernfs_new_node+0x280/0x280 [ 48.264539][ T1150] ? make_kgid+0x1ba/0x650 [ 48.264574][ T1150] ? __cfi_make_kgid+0x10/0x10 [ 48.264610][ T1150] kernfs_new_node+0x154/0x280 [ 48.264646][ T1150] kernfs_create_dir_ns+0x4b/0x130 [ 48.264687][ T1150] sysfs_create_dir_ns+0x11b/0x200 [ 48.264717][ T1150] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 48.264748][ T1150] ? _raw_spin_lock+0x8c/0x120 [ 48.264786][ T1150] ? stack_depot_save_flags+0x38/0x800 [ 48.264825][ T1150] kobject_add_internal+0x703/0xc20 [ 48.264852][ T1150] kobject_init_and_add+0x126/0x190 [ 48.264891][ T1150] ? net_rx_queue_update_kobjects+0x17d/0x5a0 [ 48.264920][ T1150] ? veth_set_channels+0x31a/0xcb0 [ 48.264958][ T1150] ? ethnl_set_channels+0x808/0x8b0 [ 48.264985][ T1150] ? ethnl_default_set_doit+0x646/0x900 [ 48.265020][ T1150] ? genl_family_rcv_msg_doit+0x22f/0x330 [ 48.265060][ T1150] ? __cfi_kobject_init_and_add+0x10/0x10 [ 48.265098][ T1150] ? ____sys_sendmsg+0xa15/0xa70 [ 48.265126][ T1150] ? do_syscall_64+0x58/0xf0 [ 48.265147][ T1150] ? ethnl_default_set_doit+0x646/0x900 [ 48.265183][ T1150] ? genl_family_rcv_msg_doit+0x22f/0x330 [ 48.265215][ T1150] ? genl_rcv_msg+0x609/0x7a0 [ 48.265247][ T1150] ? netlink_rcv_skb+0x22e/0x4a0 [ 48.265271][ T1150] ? netlink_unicast+0x8c6/0xa60 [ 48.265293][ T1150] ? netlink_sendmsg+0x7f0/0xaf0 [ 48.265319][ T1150] net_rx_queue_update_kobjects+0x1f5/0x5a0 [ 48.265352][ T1150] netif_set_real_num_rx_queues+0x10b/0x200 [ 48.265388][ T1150] veth_set_channels+0x31a/0xcb0 [ 48.265428][ T1150] ethnl_set_channels+0x808/0x8b0 [ 48.265458][ T1150] ? __cfi_ethnl_set_channels+0x10/0x10 [ 48.265485][ T1150] ? mutex_lock+0x92/0x1c0 [ 48.265516][ T1150] ethnl_default_set_doit+0x646/0x900 [ 48.265551][ T1150] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 48.265587][ T1150] ? genl_family_rcv_msg_attrs_parse+0x213/0x390 [ 48.265624][ T1150] genl_family_rcv_msg_doit+0x22f/0x330 [ 48.265658][ T1150] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 48.265692][ T1150] ? selinux_capable+0x38/0x50 [ 48.265725][ T1150] ? ns_capable+0x91/0xf0 [ 48.265756][ T1150] genl_rcv_msg+0x609/0x7a0 [ 48.265789][ T1150] ? __cfi_genl_rcv_msg+0x10/0x10 [ 48.265819][ T1150] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 48.265857][ T1150] netlink_rcv_skb+0x22e/0x4a0 [ 48.265883][ T1150] ? __cfi_genl_rcv_msg+0x10/0x10 [ 48.265915][ T1150] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 48.265941][ T1150] ? rwsem_read_trylock+0x2b1/0x660 [ 48.265973][ T1150] ? down_read+0x79/0xe0 [ 48.266003][ T1150] ? __cfi_down_read+0x10/0x10 [ 48.266046][ T1150] ? is_vmalloc_addr+0x11/0x40 [ 48.266076][ T1150] genl_rcv+0x2c/0x40 [ 48.266103][ T1150] netlink_unicast+0x8c6/0xa60 [ 48.266128][ T1150] netlink_sendmsg+0x7f0/0xaf0 [ 48.266155][ T1150] ? __cfi_netlink_sendmsg+0x10/0x10 [ 48.266182][ T1150] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 48.266205][ T1150] ? security_socket_sendmsg+0x33/0xd0 [ 48.266234][ T1150] ? __cfi_netlink_sendmsg+0x10/0x10 [ 48.266262][ T1150] ____sys_sendmsg+0xa15/0xa70 [ 48.266292][ T1150] ? __sys_sendmsg_sock+0x50/0x50 [ 48.266320][ T1150] ? import_iovec+0x81/0xb0 [ 48.266342][ T1150] ___sys_sendmsg+0x220/0x2a0 [ 48.266371][ T1150] ? __sys_sendmsg+0x280/0x280 [ 48.266398][ T1150] ? proc_fail_nth_write+0x17e/0x210 [ 48.266423][ T1150] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 48.266457][ T1150] __x64_sys_sendmsg+0x1eb/0x2c0 [ 48.266483][ T1150] ? fput+0x1a5/0x240 [ 48.266507][ T1150] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 48.266534][ T1150] ? ksys_write+0x1ef/0x250 [ 48.266567][ T1150] ? __kasan_check_read+0x15/0x20 [ 48.266597][ T1150] x64_sys_call+0x2a4c/0x2ee0 [ 48.266629][ T1150] do_syscall_64+0x58/0xf0 [ 48.266650][ T1150] ? clear_bhb_loop+0x50/0xa0 [ 48.266679][ T1150] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.266706][ T1150] RIP: 0033:0x7fe604f8e929 [ 48.266726][ T1150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.266747][ T1150] RSP: 002b:00007fe605d3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.266774][ T1150] RAX: ffffffffffffffda RBX: 00007fe6051b5fa0 RCX: 00007fe604f8e929 [ 48.266795][ T1150] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 48.266812][ T1150] RBP: 00007fe605d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 48.266829][ T1150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.266844][ T1150] R13: 0000000000000000 R14: 00007fe6051b5fa0 R15: 00007ffdb7f902b8 [ 48.266866][ T1150] [ 48.266924][ T1150] kobject: kobject_add_internal failed for rx-1 (error: -12 parent: queues) [ 48.309424][ T630] usb 2-1: device descriptor read/8, error -71 [ 48.898368][ T307] usb 5-1: Using ep0 maxpacket: 16 [ 48.904930][ T307] usb 5-1: unable to get BOS descriptor or descriptor too short [ 48.913572][ T307] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.923909][ T307] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 48.933430][ T307] usb 5-1: config 1 has no interface number 1 [ 48.939851][ T307] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 48.952390][ T307] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.961652][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.969857][ T307] usb 5-1: Product: syz [ 48.974108][ T307] usb 5-1: Manufacturer: syz [ 48.978836][ T307] usb 5-1: SerialNumber: syz [ 49.068380][ T630] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 49.089316][ T630] usb 2-1: device descriptor read/8, error -71 [ 49.178332][ T428] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 49.190307][ T307] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 49.198629][ T306] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 49.209753][ T307] usb 5-1: USB disconnect, device number 3 [ 49.220459][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.223583][ T630] usb 2-1: device descriptor read/8, error -71 [ 49.328334][ T428] usb 3-1: Using ep0 maxpacket: 8 [ 49.333770][ T428] usb 3-1: too many configurations: 26, using maximum allowed: 8 [ 49.348696][ T630] usb usb2-port1: unable to enumerate USB device [ 49.348756][ T428] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 49.357617][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.364188][ T428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.375474][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.383376][ T428] usb 3-1: Product: syz [ 49.393533][ T306] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.397276][ T428] usb 3-1: Manufacturer: syz [ 49.410061][ T306] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.415050][ T428] usb 3-1: SerialNumber: syz [ 49.423760][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.436877][ T428] usb 3-1: config 0 descriptor?? [ 49.437345][ T306] usb 1-1: config 0 descriptor?? [ 49.447527][ T428] hub 3-1:0.0: Invalid hub with more than one config or interface [ 49.460023][ T428] hub 3-1:0.0: probe with driver hub failed with error -22 [ 49.612095][ T36] audit: type=1400 audit(1751376024.820:282): avc: denied { create } for pid=1165 comm="syz.1.293" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.624201][ T1166] fuse: Bad value for 'fd' [ 49.632928][ T36] audit: type=1400 audit(1751376024.830:283): avc: denied { mounton } for pid=1165 comm="syz.1.293" path="/62/file0" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.660229][ T36] audit: type=1400 audit(1751376024.850:284): avc: denied { append } for pid=1165 comm="syz.1.293" name="file0" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.671184][ T1159] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 49.682887][ T36] audit: type=1400 audit(1751376024.850:285): avc: denied { open } for pid=1165 comm="syz.1.293" path="/62/file0" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.694622][ T361] usb 3-1: USB disconnect, device number 9 [ 49.712991][ T36] audit: type=1400 audit(1751376024.850:286): avc: denied { write } for pid=1165 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.754895][ T36] audit: type=1400 audit(1751376024.960:287): avc: denied { unlink } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.849365][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 49.856954][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 49.864492][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 49.873822][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 49.885714][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 49.894061][ T1178] FAULT_INJECTION: forcing a failure. [ 49.894061][ T1178] name failslab, interval 1, probability 0, space 0, times 0 [ 49.906782][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 49.907563][ T1178] CPU: 1 UID: 0 PID: 1178 Comm: syz.1.297 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 49.907605][ T1178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.907622][ T1178] Call Trace: [ 49.907629][ T1178] [ 49.907640][ T1178] __dump_stack+0x21/0x30 [ 49.907676][ T1178] dump_stack_lvl+0x10c/0x190 [ 49.907705][ T1178] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.907735][ T1178] ? selinux_kernfs_init_security+0x12e/0x4a0 [ 49.907777][ T1178] ? __cfi_selinux_kernfs_init_security+0x10/0x10 [ 49.907816][ T1178] dump_stack+0x19/0x20 [ 49.907843][ T1178] should_fail_ex+0x3d9/0x530 [ 49.907875][ T1178] should_failslab+0xac/0x100 [ 49.907927][ T1178] kmem_cache_alloc_noprof+0x42/0x3a0 [ 49.908075][ T1178] ? __kernfs_new_node+0xe4/0x700 [ 49.908113][ T1178] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 49.908144][ T1178] __kernfs_new_node+0xe4/0x700 [ 49.908186][ T1178] ? __kasan_check_write+0x18/0x20 [ 49.908216][ T1178] ? kernfs_new_node+0x280/0x280 [ 49.908250][ T1178] ? down_write+0xe9/0x2a0 [ 49.908283][ T1178] ? __kasan_check_write+0x18/0x20 [ 49.908314][ T1178] ? up_write+0x66/0x280 [ 49.908341][ T1178] ? kernfs_activate+0x1ee/0x200 [ 49.908380][ T1178] kernfs_new_node+0x154/0x280 [ 49.908418][ T1178] __kernfs_create_file+0x52/0x280 [ 49.908445][ T1178] sysfs_add_file_mode_ns+0x1d2/0x280 [ 49.908474][ T1178] internal_create_group+0x675/0xe80 [ 49.908510][ T1178] ? sysfs_create_group+0x40/0x40 [ 49.908541][ T1178] ? sysfs_create_dir_ns+0x153/0x200 [ 49.908573][ T1178] ? _raw_spin_lock+0x8c/0x120 [ 49.908612][ T1178] sysfs_create_groups+0x5c/0x130 [ 49.908645][ T1178] kobject_add_internal+0x74c/0xc20 [ 49.908671][ T1178] kobject_init_and_add+0x126/0x190 [ 49.908709][ T1178] ? net_rx_queue_update_kobjects+0x17d/0x5a0 [ 49.908741][ T1178] ? veth_set_channels+0x31a/0xcb0 [ 49.908779][ T1178] ? ethnl_set_channels+0x808/0x8b0 [ 49.908807][ T1178] ? ethnl_default_set_doit+0x646/0x900 [ 49.908842][ T1178] ? genl_family_rcv_msg_doit+0x22f/0x330 [ 49.908876][ T1178] ? __cfi_kobject_init_and_add+0x10/0x10 [ 49.908913][ T1178] ? ____sys_sendmsg+0xa15/0xa70 [ 49.908942][ T1178] ? do_syscall_64+0x58/0xf0 [ 49.908967][ T1178] net_rx_queue_update_kobjects+0x1f5/0x5a0 [ 49.909015][ T1178] netif_set_real_num_rx_queues+0x10b/0x200 [ 49.909051][ T1178] veth_set_channels+0x31a/0xcb0 [ 49.909091][ T1178] ethnl_set_channels+0x808/0x8b0 [ 49.909121][ T1178] ? __cfi_ethnl_set_channels+0x10/0x10 [ 49.909148][ T1178] ? mutex_lock+0x92/0x1c0 [ 49.909180][ T1178] ethnl_default_set_doit+0x646/0x900 [ 49.909216][ T1178] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 49.909254][ T1178] ? genl_family_rcv_msg_attrs_parse+0x213/0x390 [ 49.909291][ T1178] genl_family_rcv_msg_doit+0x22f/0x330 [ 49.909326][ T1178] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 49.909360][ T1178] ? selinux_capable+0x38/0x50 [ 49.909391][ T1178] ? ns_capable+0x91/0xf0 [ 49.909424][ T1178] genl_rcv_msg+0x609/0x7a0 [ 49.909457][ T1178] ? __cfi_genl_rcv_msg+0x10/0x10 [ 49.909489][ T1178] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 49.909540][ T1178] netlink_rcv_skb+0x22e/0x4a0 [ 49.909566][ T1178] ? __cfi_genl_rcv_msg+0x10/0x10 [ 49.909628][ T1178] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 49.909653][ T1178] ? rwsem_read_trylock+0x2b1/0x660 [ 49.909683][ T1178] ? down_read+0x79/0xe0 [ 49.909714][ T1178] ? __cfi_down_read+0x10/0x10 [ 49.909746][ T1178] ? is_vmalloc_addr+0x11/0x40 [ 49.909769][ T1178] genl_rcv+0x2c/0x40 [ 49.909799][ T1178] netlink_unicast+0x8c6/0xa60 [ 49.909822][ T1178] netlink_sendmsg+0x7f0/0xaf0 [ 49.909850][ T1178] ? __cfi_netlink_sendmsg+0x10/0x10 [ 49.909879][ T1178] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 49.909903][ T1178] ? security_socket_sendmsg+0x33/0xd0 [ 49.909935][ T1178] ? __cfi_netlink_sendmsg+0x10/0x10 [ 49.909961][ T1178] ____sys_sendmsg+0xa15/0xa70 [ 49.909997][ T1178] ? __sys_sendmsg_sock+0x50/0x50 [ 49.910027][ T1178] ? import_iovec+0x81/0xb0 [ 49.910048][ T1178] ___sys_sendmsg+0x220/0x2a0 [ 49.910075][ T1178] ? __sys_sendmsg+0x280/0x280 [ 49.910102][ T1178] ? proc_fail_nth_write+0x17e/0x210 [ 49.910128][ T1178] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 49.910163][ T1178] __x64_sys_sendmsg+0x1eb/0x2c0 [ 49.910192][ T1178] ? fput+0x1a5/0x240 [ 49.910215][ T1178] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 49.910243][ T1178] ? ksys_write+0x1ef/0x250 [ 49.910277][ T1178] ? __kasan_check_read+0x15/0x20 [ 49.910306][ T1178] x64_sys_call+0x2a4c/0x2ee0 [ 49.910339][ T1178] do_syscall_64+0x58/0xf0 [ 49.910361][ T1178] ? clear_bhb_loop+0x50/0xa0 [ 49.910391][ T1178] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.910418][ T1178] RIP: 0033:0x7f2a3a38e929 [ 49.910439][ T1178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.910462][ T1178] RSP: 002b:00007f2a3b200038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.910491][ T1178] RAX: ffffffffffffffda RBX: 00007f2a3a5b5fa0 RCX: 00007f2a3a38e929 [ 49.910510][ T1178] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 49.910527][ T1178] RBP: 00007f2a3b200090 R08: 0000000000000000 R09: 0000000000000000 [ 49.910544][ T1178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.910560][ T1178] R13: 0000000000000000 R14: 00007f2a3a5b5fa0 R15: 00007ffd47842d18 [ 49.910582][ T1178] [ 49.912958][ T1178] kobject: kobject_add_internal failed for rx-1 (error: -12 parent: queues) [ 49.914277][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 50.452531][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 50.460095][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 50.467528][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 50.475032][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 50.482493][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 50.490004][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 50.497605][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 50.505294][ T306] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 50.513113][ T306] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 50.527521][ T1185] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 50.533732][ T306] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 50.578474][ T306] usb 1-1: USB disconnect, device number 11 [ 50.591515][ T1189] fido_id[1189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 50.918428][ T630] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 51.000606][ T1215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.000638][ T1215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.005513][ T1213] FAULT_INJECTION: forcing a failure. [ 51.005513][ T1213] name failslab, interval 1, probability 0, space 0, times 0 [ 51.007204][ T1215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.013603][ T1213] CPU: 0 UID: 0 PID: 1213 Comm: syz.4.308 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 51.013646][ T1213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.013665][ T1213] Call Trace: [ 51.013674][ T1213] [ 51.013685][ T1213] __dump_stack+0x21/0x30 [ 51.013725][ T1213] dump_stack_lvl+0x10c/0x190 [ 51.013755][ T1213] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.013786][ T1213] ? _raw_spin_lock+0x8c/0x120 [ 51.013826][ T1213] dump_stack+0x19/0x20 [ 51.013853][ T1213] should_fail_ex+0x3d9/0x530 [ 51.013884][ T1213] should_failslab+0xac/0x100 [ 51.013928][ T1213] __kmalloc_cache_noprof+0x41/0x3c0 [ 51.013962][ T1213] ? net_rx_queue_update_kobjects+0x17d/0x5a0 [ 51.013991][ T1213] ? kobject_uevent_env+0x2a3/0x7e0 [ 51.014017][ T1213] ? veth_set_channels+0x31a/0xcb0 [ 51.014056][ T1213] kobject_uevent_env+0x2a3/0x7e0 [ 51.014084][ T1213] kobject_uevent+0x21/0x40 [ 51.014110][ T1213] net_rx_queue_update_kobjects+0x327/0x5a0 [ 51.014143][ T1213] netif_set_real_num_rx_queues+0x10b/0x200 [ 51.014177][ T1213] veth_set_channels+0x31a/0xcb0 [ 51.014218][ T1213] ethnl_set_channels+0x808/0x8b0 [ 51.014247][ T1213] ? __cfi_ethnl_set_channels+0x10/0x10 [ 51.014275][ T1213] ? mutex_lock+0x92/0x1c0 [ 51.014307][ T1213] ethnl_default_set_doit+0x646/0x900 [ 51.014343][ T1213] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 51.014380][ T1213] ? genl_family_rcv_msg_attrs_parse+0x213/0x390 [ 51.014417][ T1213] genl_family_rcv_msg_doit+0x22f/0x330 [ 51.014451][ T1213] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 51.014483][ T1213] ? selinux_capable+0x38/0x50 [ 51.014516][ T1213] ? ns_capable+0x91/0xf0 [ 51.014550][ T1213] genl_rcv_msg+0x609/0x7a0 [ 51.014581][ T1213] ? __cfi_genl_rcv_msg+0x10/0x10 [ 51.014613][ T1213] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 51.014652][ T1213] netlink_rcv_skb+0x22e/0x4a0 [ 51.014677][ T1213] ? __cfi_genl_rcv_msg+0x10/0x10 [ 51.014710][ T1213] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 51.014734][ T1213] ? rwsem_read_trylock+0x2b1/0x660 [ 51.014766][ T1213] ? down_read+0x79/0xe0 [ 51.014796][ T1213] ? __cfi_down_read+0x10/0x10 [ 51.014828][ T1213] ? is_vmalloc_addr+0x11/0x40 [ 51.014850][ T1213] genl_rcv+0x2c/0x40 [ 51.014879][ T1213] netlink_unicast+0x8c6/0xa60 [ 51.014905][ T1213] netlink_sendmsg+0x7f0/0xaf0 [ 51.014941][ T1213] ? __cfi_netlink_sendmsg+0x10/0x10 [ 51.014969][ T1213] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 51.014994][ T1213] ? security_socket_sendmsg+0x33/0xd0 [ 51.015028][ T1213] ? __cfi_netlink_sendmsg+0x10/0x10 [ 51.015057][ T1213] ____sys_sendmsg+0xa15/0xa70 [ 51.015089][ T1213] ? __sys_sendmsg_sock+0x50/0x50 [ 51.015120][ T1213] ? import_iovec+0x81/0xb0 [ 51.015144][ T1213] ___sys_sendmsg+0x220/0x2a0 [ 51.015171][ T1213] ? __sys_sendmsg+0x280/0x280 [ 51.015199][ T1213] ? proc_fail_nth_write+0x17e/0x210 [ 51.015225][ T1213] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 51.015261][ T1213] __x64_sys_sendmsg+0x1eb/0x2c0 [ 51.015288][ T1213] ? fput+0x1a5/0x240 [ 51.015312][ T1213] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 51.015340][ T1213] ? ksys_write+0x1ef/0x250 [ 51.015375][ T1213] ? __kasan_check_read+0x15/0x20 [ 51.015405][ T1213] x64_sys_call+0x2a4c/0x2ee0 [ 51.015439][ T1213] do_syscall_64+0x58/0xf0 [ 51.015460][ T1213] ? clear_bhb_loop+0x50/0xa0 [ 51.015490][ T1213] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.015519][ T1213] RIP: 0033:0x7f2f5298e929 [ 51.015539][ T1213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.015561][ T1213] RSP: 002b:00007f2f50ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.015590][ T1213] RAX: ffffffffffffffda RBX: 00007f2f52bb5fa0 RCX: 00007f2f5298e929 [ 51.015610][ T1213] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 51.015629][ T1213] RBP: 00007f2f50ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.015646][ T1213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.015662][ T1213] R13: 0000000000000000 R14: 00007f2f52bb5fa0 R15: 00007fffcd440408 [ 51.015683][ T1213] [ 51.068333][ T630] usb 3-1: Using ep0 maxpacket: 16 [ 51.103296][ T36] audit: type=1400 audit(1751376026.320:288): avc: denied { mount } for pid=1219 comm="syz.1.310" name="/" dev="pstore" ino=1433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 51.107692][ T1220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 51.462968][ T1220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:200 [ 51.463395][ T630] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 51.489809][ T630] usb 3-1: config 8 has no interface number 0 [ 51.495985][ T630] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 51.507634][ T630] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 51.517606][ T630] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 51.527811][ T630] usb 3-1: config 8 interface 39 has no altsetting 0 [ 51.541035][ T630] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 51.550441][ T630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.564960][ T630] usb 3-1: Product: syz [ 51.569381][ T630] usb 3-1: Manufacturer: syz [ 51.574021][ T630] usb 3-1: SerialNumber: syz [ 51.772789][ T36] audit: type=1400 audit(1751376026.980:289): avc: denied { create } for pid=1249 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.799424][ T630] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 51.804915][ T1255] FAULT_INJECTION: forcing a failure. [ 51.804915][ T1255] name failslab, interval 1, probability 0, space 0, times 0 [ 51.818202][ T630] ipheth 3-1:8.39: probe with driver ipheth failed with error -22 [ 51.821511][ T1255] CPU: 1 UID: 0 PID: 1255 Comm: syz.1.320 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 51.821550][ T1255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.821565][ T1255] Call Trace: [ 51.821573][ T1255] [ 51.821582][ T1255] __dump_stack+0x21/0x30 [ 51.821618][ T1255] dump_stack_lvl+0x10c/0x190 [ 51.821648][ T1255] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.821676][ T1255] ? selinux_kernfs_init_security+0x12e/0x4a0 [ 51.821717][ T1255] ? __cfi_selinux_kernfs_init_security+0x10/0x10 [ 51.821755][ T1255] dump_stack+0x19/0x20 [ 51.821782][ T1255] should_fail_ex+0x3d9/0x530 [ 51.821812][ T1255] should_failslab+0xac/0x100 [ 51.821857][ T1255] kmem_cache_alloc_noprof+0x42/0x3a0 [ 51.821886][ T1255] ? __kernfs_new_node+0xe4/0x700 [ 51.821922][ T1255] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 51.821953][ T1255] __kernfs_new_node+0xe4/0x700 [ 51.821987][ T1255] ? __kasan_check_write+0x18/0x20 [ 51.822017][ T1255] ? kernfs_new_node+0x280/0x280 [ 51.822050][ T1255] ? down_write+0xe9/0x2a0 [ 51.822084][ T1255] ? __kasan_check_write+0x18/0x20 [ 51.822112][ T1255] ? up_write+0x66/0x280 [ 51.822138][ T1255] ? kernfs_activate+0x1ee/0x200 [ 51.822174][ T1255] kernfs_new_node+0x154/0x280 [ 51.822209][ T1255] __kernfs_create_file+0x52/0x280 [ 51.822235][ T1255] sysfs_add_file_mode_ns+0x1d2/0x280 [ 51.822264][ T1255] internal_create_group+0x675/0xe80 [ 51.822298][ T1255] ? sysfs_create_group+0x40/0x40 [ 51.822330][ T1255] ? sysfs_create_dir_ns+0x153/0x200 [ 51.822360][ T1255] ? _raw_spin_lock+0x8c/0x120 [ 51.822397][ T1255] sysfs_create_groups+0x5c/0x130 [ 51.822429][ T1255] kobject_add_internal+0x74c/0xc20 [ 51.822453][ T1255] kobject_init_and_add+0x126/0x190 [ 51.822489][ T1255] ? net_rx_queue_update_kobjects+0x17d/0x5a0 [ 51.822519][ T1255] ? veth_set_channels+0x31a/0xcb0 [ 51.822555][ T1255] ? ethnl_set_channels+0x808/0x8b0 [ 51.822583][ T1255] ? ethnl_default_set_doit+0x646/0x900 [ 51.822616][ T1255] ? genl_family_rcv_msg_doit+0x22f/0x330 [ 51.822650][ T1255] ? __cfi_kobject_init_and_add+0x10/0x10 [ 51.822687][ T1255] ? ____sys_sendmsg+0xa15/0xa70 [ 51.822715][ T1255] ? do_syscall_64+0x58/0xf0 [ 51.822738][ T1255] ? genl_family_rcv_msg_doit+0x22f/0x330 [ 51.822771][ T1255] ? genl_rcv_msg+0x609/0x7a0 [ 51.822802][ T1255] ? netlink_rcv_skb+0x22e/0x4a0 [ 51.822828][ T1255] ? netlink_unicast+0x8c6/0xa60 [ 51.822857][ T1255] ? netlink_sendmsg+0x7f0/0xaf0 [ 51.822883][ T1255] net_rx_queue_update_kobjects+0x1f5/0x5a0 [ 51.822934][ T1255] netif_set_real_num_rx_queues+0x10b/0x200 [ 51.822969][ T1255] veth_set_channels+0x31a/0xcb0 [ 51.823010][ T1255] ethnl_set_channels+0x808/0x8b0 [ 51.823039][ T1255] ? __cfi_ethnl_set_channels+0x10/0x10 [ 51.823066][ T1255] ? mutex_lock+0x92/0x1c0 [ 51.823096][ T1255] ethnl_default_set_doit+0x646/0x900 [ 51.823133][ T1255] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 51.823170][ T1255] ? genl_family_rcv_msg_attrs_parse+0x213/0x390 [ 51.823206][ T1255] genl_family_rcv_msg_doit+0x22f/0x330 [ 51.823241][ T1255] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 51.823275][ T1255] ? selinux_capable+0x38/0x50 [ 51.823307][ T1255] ? ns_capable+0x91/0xf0 [ 51.823338][ T1255] genl_rcv_msg+0x609/0x7a0 [ 51.823371][ T1255] ? __cfi_genl_rcv_msg+0x10/0x10 [ 51.823401][ T1255] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 51.823439][ T1255] netlink_rcv_skb+0x22e/0x4a0 [ 51.823465][ T1255] ? __cfi_genl_rcv_msg+0x10/0x10 [ 51.823497][ T1255] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 51.823521][ T1255] ? rwsem_read_trylock+0x2b1/0x660 [ 51.823552][ T1255] ? down_read+0x79/0xe0 [ 51.823582][ T1255] ? __cfi_down_read+0x10/0x10 [ 51.823615][ T1255] ? is_vmalloc_addr+0x11/0x40 [ 51.823637][ T1255] genl_rcv+0x2c/0x40 [ 51.823668][ T1255] netlink_unicast+0x8c6/0xa60 [ 51.823692][ T1255] netlink_sendmsg+0x7f0/0xaf0 [ 51.823722][ T1255] ? __cfi_netlink_sendmsg+0x10/0x10 [ 51.823749][ T1255] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 51.823775][ T1255] ? security_socket_sendmsg+0x33/0xd0 [ 51.823806][ T1255] ? __cfi_netlink_sendmsg+0x10/0x10 [ 51.823833][ T1255] ____sys_sendmsg+0xa15/0xa70 [ 51.823869][ T1255] ? __sys_sendmsg_sock+0x50/0x50 [ 51.823898][ T1255] ? import_iovec+0x81/0xb0 [ 51.823922][ T1255] ___sys_sendmsg+0x220/0x2a0 [ 51.823950][ T1255] ? __sys_sendmsg+0x280/0x280 [ 51.823978][ T1255] ? proc_fail_nth_write+0x17e/0x210 [ 51.824004][ T1255] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 51.824039][ T1255] __x64_sys_sendmsg+0x1eb/0x2c0 [ 51.824067][ T1255] ? fput+0x1a5/0x240 [ 51.824090][ T1255] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 51.824118][ T1255] ? ksys_write+0x1ef/0x250 [ 51.824152][ T1255] ? __kasan_check_read+0x15/0x20 [ 51.824185][ T1255] x64_sys_call+0x2a4c/0x2ee0 [ 51.824221][ T1255] do_syscall_64+0x58/0xf0 [ 51.824244][ T1255] ? clear_bhb_loop+0x50/0xa0 [ 51.824273][ T1255] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.824301][ T1255] RIP: 0033:0x7f2a3a38e929 [ 51.824322][ T1255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.824356][ T1255] RSP: 002b:00007f2a3b200038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.824384][ T1255] RAX: ffffffffffffffda RBX: 00007f2a3a5b5fa0 RCX: 00007f2a3a38e929 [ 51.824403][ T1255] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 51.824420][ T1255] RBP: 00007f2a3b200090 R08: 0000000000000000 R09: 0000000000000000 [ 51.824437][ T1255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.824453][ T1255] R13: 0000000000000000 R14: 00007f2a3a5b5fa0 R15: 00007ffd47842d18 [ 51.824473][ T1255] [ 51.824514][ T1255] kobject: kobject_add_internal failed for rx-1 (error: -12 parent: queues) [ 52.008783][ T1199] binder: Unknown parameter 'defcontext01777777777777777777777' [ 52.394959][ T306] usb 3-1: USB disconnect, device number 10 [ 52.603867][ T36] audit: type=1400 audit(1751376027.810:290): avc: denied { read } for pid=94 comm="acpid" name="event8" dev="devtmpfs" ino=543 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 52.649269][ T1275] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 4096) [ 52.649298][ T1275] rust_binder: Error while translating object. [ 52.660299][ T1275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.667612][ T1275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:308 [ 52.978977][ T630] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 52.995875][ T306] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 53.149574][ T630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.160593][ T306] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.172111][ T630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.181922][ T306] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 53.192591][ T630] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 53.201719][ T306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.208434][ T306] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 53.217500][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.225569][ T630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.234969][ T306] usb 1-1: config 0 descriptor?? [ 53.240284][ T630] usb 2-1: config 0 descriptor?? [ 53.245518][ T1287] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 53.273450][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 53.273469][ T36] audit: type=1400 audit(1751376028.480:296): avc: denied { create } for pid=1298 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 53.498783][ T36] audit: type=1400 audit(1751376028.710:297): avc: denied { watch } for pid=1310 comm="syz.2.341" path="/86/file0" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.655546][ T306] logitech 0003:046D:C286.0006: unknown main item tag 0x6 [ 53.664371][ T630] belkin 0003:1020:0006.0007: unknown main item tag 0x3 [ 53.672366][ T306] logitech 0003:046D:C286.0006: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 53.692704][ T630] belkin 0003:1020:0006.0007: hidraw1: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 53.706742][ T1321] rust_binder: Write failure EFAULT in pid:256 [ 53.710805][ T306] logitech 0003:046D:C286.0006: no inputs found [ 53.737428][ T630] usb 2-1: USB disconnect, device number 13 [ 53.849417][ T1332] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 53.857848][ T1332] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 54.158336][ T361] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.308308][ T361] usb 5-1: Using ep0 maxpacket: 32 [ 54.314658][ T361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.325875][ T361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.335842][ T361] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 54.344961][ T361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.353894][ T361] usb 5-1: config 0 descriptor?? [ 54.361886][ T428] usb 1-1: USB disconnect, device number 12 [ 54.370351][ T361] hub 5-1:0.0: USB hub found [ 54.508350][ T630] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 54.570938][ T361] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 54.658317][ T630] usb 2-1: Using ep0 maxpacket: 8 [ 54.666037][ T630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.687265][ T630] usb 2-1: New USB device found, idVendor=046e, idProduct=5577, bcdDevice= 0.00 [ 54.696602][ T630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.706099][ T630] usb 2-1: config 0 descriptor?? [ 54.726293][ T1356] FAULT_INJECTION: forcing a failure. [ 54.726293][ T1356] name failslab, interval 1, probability 0, space 0, times 0 [ 54.739186][ T1356] CPU: 0 UID: 0 PID: 1356 Comm: syz.0.355 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 54.739228][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.739242][ T1356] Call Trace: [ 54.739249][ T1356] [ 54.739258][ T1356] __dump_stack+0x21/0x30 [ 54.739290][ T1356] dump_stack_lvl+0x10c/0x190 [ 54.739314][ T1356] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.739342][ T1356] dump_stack+0x19/0x20 [ 54.739366][ T1356] should_fail_ex+0x3d9/0x530 [ 54.739393][ T1356] should_failslab+0xac/0x100 [ 54.739426][ T1356] __kmalloc_noprof+0x69/0x450 [ 54.739454][ T1356] ? kobject_get_path+0xc3/0x2d0 [ 54.739488][ T1356] kobject_get_path+0xc3/0x2d0 [ 54.739527][ T1356] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 54.739569][ T1356] kobject_uevent_env+0x2bc/0x7e0 [ 54.739591][ T1356] ? netlink_rcv_skb+0x22e/0x4a0 [ 54.739615][ T1356] kobject_uevent+0x21/0x40 [ 54.739636][ T1356] net_rx_queue_update_kobjects+0x327/0x5a0 [ 54.739657][ T1356] netif_set_real_num_rx_queues+0x10b/0x200 [ 54.739680][ T1356] veth_set_channels+0x31a/0xcb0 [ 54.739716][ T1356] ethnl_set_channels+0x808/0x8b0 [ 54.739741][ T1356] ? __cfi_ethnl_set_channels+0x10/0x10 [ 54.739764][ T1356] ? mutex_lock+0x92/0x1c0 [ 54.739789][ T1356] ethnl_default_set_doit+0x646/0x900 [ 54.739818][ T1356] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 54.739849][ T1356] ? genl_family_rcv_msg_attrs_parse+0x213/0x390 [ 54.739880][ T1356] genl_family_rcv_msg_doit+0x22f/0x330 [ 54.739910][ T1356] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 54.739938][ T1356] ? selinux_capable+0x38/0x50 [ 54.739964][ T1356] ? ns_capable+0x91/0xf0 [ 54.739988][ T1356] genl_rcv_msg+0x609/0x7a0 [ 54.740017][ T1356] ? __cfi_genl_rcv_msg+0x10/0x10 [ 54.740043][ T1356] ? __cfi_ethnl_default_set_doit+0x10/0x10 [ 54.740076][ T1356] netlink_rcv_skb+0x22e/0x4a0 [ 54.740092][ T1356] ? __cfi_genl_rcv_msg+0x10/0x10 [ 54.740112][ T1356] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 54.740127][ T1356] ? rwsem_read_trylock+0x2b1/0x660 [ 54.740157][ T1356] ? down_read+0x79/0xe0 [ 54.740183][ T1356] ? __cfi_down_read+0x10/0x10 [ 54.740209][ T1356] ? is_vmalloc_addr+0x11/0x40 [ 54.740228][ T1356] genl_rcv+0x2c/0x40 [ 54.740246][ T1356] netlink_unicast+0x8c6/0xa60 [ 54.740261][ T1356] netlink_sendmsg+0x7f0/0xaf0 [ 54.740280][ T1356] ? __cfi_netlink_sendmsg+0x10/0x10 [ 54.740307][ T1356] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 54.740328][ T1356] ? security_socket_sendmsg+0x33/0xd0 [ 54.740354][ T1356] ? __cfi_netlink_sendmsg+0x10/0x10 [ 54.740375][ T1356] ____sys_sendmsg+0xa15/0xa70 [ 54.740394][ T1356] ? __sys_sendmsg_sock+0x50/0x50 [ 54.740412][ T1356] ? import_iovec+0x81/0xb0 [ 54.740428][ T1356] ___sys_sendmsg+0x220/0x2a0 [ 54.740455][ T1356] ? __sys_sendmsg+0x280/0x280 [ 54.740478][ T1356] ? proc_fail_nth_write+0x17e/0x210 [ 54.740500][ T1356] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 54.740531][ T1356] __x64_sys_sendmsg+0x1eb/0x2c0 [ 54.740548][ T1356] ? fput+0x1a5/0x240 [ 54.740562][ T1356] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 54.740586][ T1356] ? ksys_write+0x1ef/0x250 [ 54.740616][ T1356] ? __kasan_check_read+0x15/0x20 [ 54.740643][ T1356] x64_sys_call+0x2a4c/0x2ee0 [ 54.740670][ T1356] do_syscall_64+0x58/0xf0 [ 54.740684][ T1356] ? clear_bhb_loop+0x50/0xa0 [ 54.740703][ T1356] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.740721][ T1356] RIP: 0033:0x7fe604f8e929 [ 54.740742][ T1356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.740762][ T1356] RSP: 002b:00007fe605d3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.740786][ T1356] RAX: ffffffffffffffda RBX: 00007fe6051b5fa0 RCX: 00007fe604f8e929 [ 54.740805][ T1356] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 54.740815][ T1356] RBP: 00007fe605d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 54.740826][ T1356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.740836][ T1356] R13: 0000000000000000 R14: 00007fe6051b5fa0 R15: 00007ffdb7f902b8 [ 54.740849][ T1356] [ 54.743853][ T36] audit: type=1400 audit(1751376029.950:298): avc: denied { bind } for pid=1349 comm="syz.2.353" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.784315][ T361] hid-generic 0003:046D:C31C.0008: item fetching failed at offset 0/1 [ 54.792580][ T36] audit: type=1400 audit(1751376029.950:299): avc: denied { node_bind } for pid=1349 comm="syz.2.353" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 54.802454][ T361] hid-generic 0003:046D:C31C.0008: probe with driver hid-generic failed with error -22 [ 55.115712][ T630] usb 2-1: string descriptor 0 read error: -71 [ 55.220595][ T630] usbhid 2-1:0.0: can't add hid device: -71 [ 55.221976][ T1361] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 55.226646][ T630] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 55.235845][ T1361] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.249085][ T630] usb 2-1: USB disconnect, device number 14 [ 55.278963][ T36] audit: type=1400 audit(1751376030.490:300): avc: denied { connect } for pid=1362 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.809057][ T1160] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 55.989723][ T1160] usb 3-1: unable to get BOS descriptor or descriptor too short [ 56.002260][ T1160] usb 3-1: not running at top speed; connect to a high speed hub [ 56.018108][ T1160] usb 3-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 56.045483][ T1160] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.059197][ T1376] input: syz0 as /devices/virtual/input/input6 [ 56.069660][ T1160] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.086052][ T36] audit: type=1400 audit(1751376031.290:301): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=553 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.110799][ T1160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.131544][ T1160] usb 3-1: Product: syz [ 56.136174][ T1160] usb 3-1: Manufacturer: syz [ 56.140642][ T36] audit: type=1400 audit(1751376031.290:302): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=553 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.165086][ T36] audit: type=1400 audit(1751376031.290:303): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=553 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.331602][ T1160] usb 3-1: SerialNumber: syz [ 56.378324][ T630] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 56.529514][ T630] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x18, changing to 0x8 [ 56.541150][ T630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 56.556332][ T630] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 33209, setting to 1024 [ 56.567729][ T630] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.588343][ T361] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 56.588540][ T630] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 56.605378][ T630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.605541][ T1160] usb 3-1: 0:2 : does not exist [ 56.619287][ T630] usb 2-1: config 0 descriptor?? [ 56.626344][ T1160] usb 3-1: USB disconnect, device number 11 [ 56.633107][ T630] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 56.749475][ T361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.759864][ T361] usb 1-1: config 0 has no interfaces? [ 56.765404][ T361] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 56.774862][ T361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.784794][ T361] usb 1-1: config 0 descriptor?? [ 56.828077][ T36] audit: type=1400 audit(1751376032.030:304): avc: denied { connect } for pid=1375 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.829597][ T1160] usb 2-1: USB disconnect, device number 15 [ 56.855573][ T36] audit: type=1400 audit(1751376032.040:305): avc: denied { mounton } for pid=1375 comm="syz.1.363" path="/proc/236/cgroup" dev="proc" ino=13295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 56.949262][ T1390] rust_binder: Write failure EFAULT in pid:105 [ 56.949286][ T1389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1389 comm=syz.4.367 [ 56.968203][ T361] usb 5-1: USB disconnect, device number 4 [ 56.969031][ T1389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1389 comm=syz.4.367 [ 57.003480][ T1393] overlay: filesystem on ./bus not supported as upperdir [ 57.011431][ T1392] Invalid logical block size (38764) [ 57.017202][ T1392] rust_binder: Error in use_page_slow: ESRCH [ 57.017222][ T1392] rust_binder: use_range failure ESRCH [ 57.023329][ T1392] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 57.028858][ T1392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 57.036876][ T1392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:108 [ 57.127641][ T1398] rust_binder: 1398: no such ref 3 [ 57.145506][ T1398] rust_binder: Write failure EINVAL in pid:285 [ 57.161298][ T1160] usb 1-1: USB disconnect, device number 13 [ 57.580224][ T1415] rust_binder: 1415: no such ref 0 [ 57.580892][ T1417] rust_binder: Read failure Err(EAGAIN) in pid:121 [ 57.585530][ T1416] rust_binder: Write failure EINVAL in pid:121 [ 57.680745][ T1422] rust_binder: 1422: no such ref 3 [ 57.692360][ T1421] rust_binder: 1421: no such ref 3 [ 57.697574][ T1421] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 57.697597][ T1421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 57.705711][ T1422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 57.715219][ T1421] rust_binder: Failure BR_FAILED_REPLY { source: ENOSPC } during reply - delivering BR_FAILED_REPLY to sender. [ 57.725015][ T1421] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:243 [ 57.758027][ T1432] capability: warning: `syz.1.379' uses deprecated v2 capabilities in a way that may be insecure [ 57.886802][ T828] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.893315][ T941] Bluetooth: hci1: sending frame failed (-49) [ 57.901132][ T938] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 57.931529][ T1451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.385'. [ 58.308870][ T1484] fuseblk: Unknown parameter 'fowner<00000000000000000000' [ 58.317168][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 58.317187][ T36] audit: type=1400 audit(1751376033.520:318): avc: denied { lock } for pid=1483 comm="syz.2.395" path="socket:[14602]" dev="sockfs" ino=14602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.347687][ T36] audit: type=1400 audit(1751376033.540:319): avc: denied { ioctl } for pid=1485 comm="syz.0.396" path="socket:[14136]" dev="sockfs" ino=14136 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.385106][ T36] audit: type=1400 audit(1751376033.550:320): avc: denied { setattr } for pid=1483 comm="syz.2.395" name="KEY" dev="sockfs" ino=14603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.412022][ T36] audit: type=1400 audit(1751376033.620:321): avc: denied { mount } for pid=1491 comm="syz.0.399" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.416689][ T1493] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 58.460872][ T36] audit: type=1400 audit(1751376033.670:322): avc: denied { mounton } for pid=1491 comm="syz.0.399" path="/128/bus/bus/bus" dev="overlay" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysfs_t tclass=dir permissive=1 [ 58.460913][ T1493] overlayfs: conflicting options: userxattr,metacopy=on [ 58.531106][ T36] audit: type=1400 audit(1751376033.740:323): avc: denied { mount } for pid=1502 comm="syz.2.404" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.564057][ T36] audit: type=1107 audit(1751376033.770:324): pid=1499 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Xð' [ 58.587862][ T36] audit: type=1400 audit(1751376033.770:325): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.590296][ T1507] overlay: ./bus is not a directory [ 58.678604][ T36] audit: type=1400 audit(1751376033.890:326): avc: denied { create } for pid=1516 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.699319][ T36] audit: type=1326 audit(1751376033.910:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.2.409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f331b78e929 code=0x0 [ 58.754886][ T1520] capability: warning: `syz.0.410' uses 32-bit capabilities (legacy support in use) [ 58.849978][ T292] Bluetooth: hci1: Frame reassembly failed (-84) [ 59.526199][ T292] tipc: Subscription rejected, illegal request [ 59.551657][ T1543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.416'. [ 59.746571][ T1562] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 59.746595][ T1562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 59.755208][ T1562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:347 [ 59.908365][ T1533] Bluetooth: hci0: command 0x1003 tx timeout [ 59.908409][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.498327][ T1160] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.658656][ T1160] usb 5-1: Using ep0 maxpacket: 32 [ 60.665053][ T1160] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.676356][ T1160] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00 [ 60.685711][ T1160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.696436][ T1160] usb 5-1: config 0 descriptor?? [ 60.819253][ T1585] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 60.868358][ T938] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 60.868370][ T53] Bluetooth: hci2: command 0x1003 tx timeout [ 60.868392][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 60.874500][ T941] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 60.923597][ T1587] rust_binder: 1587: no such ref 1 [ 60.928810][ T1587] rust_binder: 1587: no such ref 1 [ 60.934008][ T1587] rust_binder: 1587: no such ref 2 [ 60.939296][ T1587] rust_binder: Write failure EINVAL in pid:391 [ 60.948322][ T630] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 61.111004][ T1160] apple 0003:05AC:0225.0009: unknown main item tag 0x3 [ 61.119484][ T630] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.130669][ T1160] apple 0003:05AC:0225.0009: hidraw0: USB HID v0.00 Device [HID 05ac:0225] on usb-dummy_hcd.4-1/input0 [ 61.140876][ T1598] Invalid ELF header len 4 [ 61.141805][ T630] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 61.159091][ T630] usb 3-1: config 0 interface 0 has no altsetting 0 [ 61.165744][ T630] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 61.178033][ T630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.196172][ T630] usb 3-1: config 0 descriptor?? [ 61.201672][ T1581] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 61.332093][ T1615] netlink: 37 bytes leftover after parsing attributes in process `syz.0.440'. [ 61.371184][ T1618] syzkaller0: create flow: hash 159319332 index 0 [ 61.439636][ T1618] syzkaller0 (unregistered): delete flow: hash 159319332 index 0 [ 61.569617][ T1626] netlink: 188 bytes leftover after parsing attributes in process `syz.1.444'. [ 61.580879][ T1626] rust_binder: Error while translating object. [ 61.580927][ T1626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.587171][ T1626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 61.597794][ T1630] netlink: 188 bytes leftover after parsing attributes in process `syz.1.444'. [ 61.617128][ T630] usbhid 3-1:0.0: can't add hid device: -71 [ 61.620888][ T1629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.623478][ T630] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 61.645792][ T630] usb 3-1: USB disconnect, device number 12 [ 61.670862][ T1634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.670902][ T1634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:274 [ 61.928331][ T306] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 62.088334][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 62.094652][ T306] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.104870][ T306] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 62.113973][ T306] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 62.124799][ T306] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.134732][ T306] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.145668][ T306] usb 1-1: config 1 interface 1 has no altsetting 0 [ 62.153812][ T306] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.162929][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.170952][ T306] usb 1-1: Product: syz [ 62.175123][ T306] usb 1-1: Manufacturer: syz [ 62.179746][ T306] usb 1-1: SerialNumber: syz [ 62.393396][ T306] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 62.401391][ T306] usb 1-1: 2:1 : format type 9 is not supported yet [ 62.413886][ T1641] netlink: 'syz.1.449': attribute type 4 has an invalid length. [ 62.417301][ T306] usb 1-1: USB disconnect, device number 14 [ 62.422847][ T1641] netlink: 'syz.1.449': attribute type 5 has an invalid length. [ 62.435674][ T1641] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.449'. [ 62.447156][ T1641] rust_binder: Error while translating object. [ 62.447186][ T1641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 62.453478][ T1641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:278 [ 62.476128][ T1643] binder: Unknown parameter 'audit' [ 62.934466][ T1670] ------------[ cut here ]------------ [ 62.940045][ T1670] WARNING: CPU: 1 PID: 1670 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0 [ 62.949828][ T1670] Modules linked in: [ 62.953781][ T1670] CPU: 1 UID: 0 PID: 1670 Comm: syz.1.460 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 62.967189][ T1670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.977296][ T1670] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 62.983231][ T1670] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 64 33 ee 05 00 0f 85 c4 00 00 00 c6 05 57 33 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 63.002912][ T1670] RSP: 0018:ffffc900093679a0 EFLAGS: 00010246 [ 63.009140][ T1670] RAX: 0000000000000000 RBX: 1ffff9200126cf38 RCX: 0000000000000000 [ 63.017142][ T1670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90009367a48 [ 63.025159][ T1670] RBP: ffffc90009367ad0 R08: ffffc90009367a47 R09: 0000000000000000 [ 63.033187][ T1670] R10: ffffc90009367a30 R11: fffff5200126cf49 R12: ffffc900093679e0 [ 63.041223][ T1670] R13: 0000000000000034 R14: dffffc0000000000 R15: 0000000000000000 [ 63.049244][ T1670] FS: 00007f2a3b2006c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 63.058229][ T1670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.064996][ T1670] CR2: 0000000000000000 CR3: 000000010e7d2000 CR4: 00000000003526b0 [ 63.073010][ T1670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.081037][ T1670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.089056][ T1670] Call Trace: [ 63.092354][ T1670] [ 63.095306][ T1670] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 63.100498][ T630] usb 5-1: USB disconnect, device number 5 [ 63.101010][ T1670] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 63.112570][ T1670] ? try_to_wake_up+0xe17/0x1aa0 [ 63.117544][ T1670] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 63.123778][ T1670] ___kmalloc_large_node+0x9c/0x1d0 [ 63.129043][ T1670] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 63.135237][ T1670] __kmalloc_large_node_noprof+0x1e/0xe0 [ 63.140951][ T1670] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 63.147142][ T1670] __kmalloc_noprof+0x26d/0x450 [ 63.152042][ T1670] ? __kasan_check_write+0x18/0x20 [ 63.157191][ T1670] pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 63.163215][ T1670] ? __cfi_futex_wake+0x10/0x10 [ 63.168089][ T1670] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 63.174544][ T1670] ? selinux_file_ioctl+0x6e0/0x1360 [ 63.179910][ T1670] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 63.185494][ T1670] ? do_futex+0x356/0x500 [ 63.189872][ T1670] ? __cfi_do_futex+0x10/0x10 [ 63.194582][ T1670] ? __fget_files+0x2c5/0x340 [ 63.199301][ T1670] ? bpf_lsm_file_ioctl+0xd/0x20 [ 63.204265][ T1670] ? security_file_ioctl+0x34/0xd0 [ 63.209417][ T1670] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 63.215869][ T1670] __se_sys_ioctl+0x132/0x1b0 [ 63.220602][ T1670] __x64_sys_ioctl+0x7f/0xa0 [ 63.225226][ T1670] x64_sys_call+0x1878/0x2ee0 [ 63.229946][ T1670] do_syscall_64+0x58/0xf0 [ 63.234382][ T1670] ? clear_bhb_loop+0x50/0xa0 [ 63.239214][ T1670] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.245187][ T1670] RIP: 0033:0x7f2a3a38e929 [ 63.249644][ T1670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.269320][ T1670] RSP: 002b:00007f2a3b200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.277765][ T1670] RAX: ffffffffffffffda RBX: 00007f2a3a5b5fa0 RCX: 00007f2a3a38e929 [ 63.285795][ T1670] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000009 [ 63.293824][ T1670] RBP: 00007f2a3a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 63.301867][ T1670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.309887][ T1670] R13: 0000000000000000 R14: 00007f2a3a5b5fa0 R15: 00007ffd47842d18 [ 63.317888][ T1670] [ 63.320940][ T1670] ---[ end trace 0000000000000000 ]--- [ 63.378352][ T361] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 63.528342][ T361] usb 3-1: Using ep0 maxpacket: 8 [ 63.534491][ T361] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.545422][ T361] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.552088][ T361] usb 3-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.00 [ 63.561154][ T361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.570121][ T361] usb 3-1: config 0 descriptor?? [ 63.777144][ T361] usb 3-1: string descriptor 0 read error: -71 [ 63.785205][ T361] usbhid 3-1:0.0: can't add hid device: -71 [ 63.791365][ T361] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 63.800023][ T361] usb 3-1: USB disconnect, device number 13