last executing test programs: 20.967543638s ago: executing program 0 (id=6779): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x80000000, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) (async, rerun: 32) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (rerun: 32) 20.906348324s ago: executing program 0 (id=6783): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x432680, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x11}}, 0xc) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000000c0)) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000100)) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8210}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xcc, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x559}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="22c242ffc3cd"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6752d3044fc4"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) (async) socketpair(0x21, 0x5, 0x1, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x400, 0x6, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x31}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4002054}, 0x10) (async) r5 = syz_io_uring_setup(0x2b0a, &(0x7f0000000640)={0x0, 0x6751, 0x80, 0x0, 0x1c, 0x0, r0}, &(0x7f00000006c0), &(0x7f0000000700)) syz_io_uring_setup(0x6dee, &(0x7f0000000740)={0x0, 0x10ae, 0x1, 0x0, 0x3c7, 0x0, r5}, 0x0, &(0x7f00000007c0)) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000800)=0x1, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40801) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x23, 0x716b, 0xd, @mcast1, @mcast2, 0x10, 0x700, 0x400, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000b00)={@initdev, @local, 0x0}, &(0x7f0000000b40)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) (async) getsockname$packet(r3, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c40)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000c80)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d40)={'ip_vti0\x00', &(0x7f0000000cc0)={'gre0\x00', 0x0, 0x40, 0x976b942ea636e61d, 0x2, 0x80000001, {{0x13, 0x4, 0x0, 0x2, 0x4c, 0x65, 0x0, 0x5, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x34, 0xffffffffffffffff, [{0x5, 0xe, "89ce5fcc1a6b6209fdff49cd"}, {0x1, 0xb, "3dad7950af89422999"}, {0x1, 0x2}, {0x5, 0x11, "3349af1dc7df63d7b8b445d6d8c61b"}, {0x2, 0x2}]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000e40)={'erspan0\x00', &(0x7f0000000d80)={'erspan0\x00', 0x0, 0x40, 0x1, 0x85, 0x101, {{0x26, 0x4, 0x1, 0x1, 0x98, 0x68, 0x0, 0x4, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@rr={0x7, 0x13, 0x8a, [@local, @empty, @broadcast, @multicast2]}, @timestamp={0x44, 0x2c, 0x16, 0x0, 0x7, [0xf0ae, 0x4, 0x2, 0x1, 0x5, 0x1ff, 0x5, 0x4, 0xfffffffd, 0xffff]}, @rr={0x7, 0x13, 0x3e, [@multicast1, @empty, @multicast1, @multicast1]}, @timestamp={0x44, 0x2c, 0xf1, 0x0, 0x1, [0x3ff, 0xb6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x7, 0xa, 0x2]}, @generic={0x88, 0x4, "9f18"}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000e80)={'batadv_slave_0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000f80)={'erspan0\x00', &(0x7f0000000ec0)={'syztnl0\x00', 0x0, 0x8, 0x20, 0xffff, 0xfffffffd, {{0x20, 0x4, 0x1, 0x6, 0x80, 0x66, 0x0, 0x28, 0x29, 0x0, @empty, @empty, {[@end, @cipso={0x86, 0x45, 0x1, [{0x5, 0x8, "603a757d367f"}, {0x7, 0xf, "b1f40956710606388fabcacb22"}, {0x6, 0xb, "6f7b65be6e711c69c0"}, {0x5, 0x8, "8473bcaa1fee"}, {0x6, 0xc, "3941b7b872a232d8a703"}, {0x0, 0x6, "63eecc8e"}, {0x1, 0x3, 'E'}]}, @noop, @generic={0x88, 0xd, "15833b71cf3eb04994b9cf"}, @timestamp={0x44, 0x18, 0xdc, 0x0, 0x4, [0x7, 0x80000000, 0x4, 0x6, 0x421]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000fc0)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000016c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001680)={&(0x7f0000001000)={0x67c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x25c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x8, 0x5, 0x7}, {0x80, 0x2, 0xff, 0x9}, {0x800, 0xf2, 0xd, 0x3}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x140}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff8001}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x4, 0x6, 0x5}, {0xc0, 0x4, 0x8, 0x5}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r18}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x67c}, 0x1, 0x0, 0x0, 0x10}, 0x40084) 20.884775147s ago: executing program 0 (id=6787): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6163636573733d616e792c63616368513d6d6d6170061c5831627adc166470c574185487ce2c64666c746769643d"]) 20.874769877s ago: executing program 0 (id=6789): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0) 20.832564022s ago: executing program 0 (id=6793): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000580), &(0x7f0000000600)=0x6e) setpriority(0x2, 0x0, 0xd2f4) execve(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)={[&(0x7f0000000100)='\xd8:\x02\x00', &(0x7f0000000140)=':+/-.(]}+\xa8@/&*$\x00', &(0x7f0000000180)='^))#^&\x00', &(0x7f00000001c0)='/dev/rnullb0\x00']}, &(0x7f0000000480)={[&(0x7f0000000240)='(\x00', &(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='/dev/rnullb0\x00', &(0x7f0000000300)='ext3\x00', &(0x7f0000000340)='/dev/rnullb0\x00', &(0x7f0000000380)='/dev/rnullb0\x00', &(0x7f00000003c0)='/dev/rnullb0\x00', &(0x7f0000000400)='*.&\x00', &(0x7f0000000440)='^/}\x00']}) r1 = dup(0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000500)=0xffff, 0x8) 20.796504445s ago: executing program 0 (id=6796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8045) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8045) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfe60}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x45) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f, 0x15}}) sendfile(r0, r4, &(0x7f00000003c0)=0x9, 0x1db3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000440)=0x7, 0x4) (async) setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000440)=0x7, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, &(0x7f0000000480)="e96845e8a69ae49cf79aff8ea4494ada16817fc3951c997c42a90c4c4fabff14888871b96d6899df504faa1e23378814fdf04beb78df71b9901384e12b4d8f1404e4cc728008bc87f7df3ff21efef9608d2127b782507b5d35d7c68ddf8b0d8d54c27445ba77b92626e5159094aeba464741bbc0bc18bfa0a42a2716acf75233c04f589d723762135f95ac4fbf61441d1e8a59da0e0ccb875d14d9429a4b68cb2441c9fd4cb8536509d312443d20a0bce5cbc9b6aafbcfb77e3a9bcc70555f441fb5cf", 0xc3, 0x80, &(0x7f0000000580)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000006c0)={'sit0\x00', &(0x7f00000005c0)={'ip_vti0\x00', r2, 0x1, 0x8000, 0x16e6609a, 0x401, {{0x2b, 0x4, 0x2, 0x2d, 0xac, 0x68, 0x0, 0x83, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@generic={0x86, 0xb, "d66c1e67b5b27a5361"}, @ssrr={0x89, 0x1f, 0xfa, [@dev={0xac, 0x14, 0x14, 0x1b}, @empty, @loopback, @broadcast, @multicast1, @loopback, @multicast2]}, @lsrr={0x83, 0x13, 0xe9, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1]}, @cipso={0x86, 0x43, 0x0, [{0x6, 0xe, "975b28c00da7ff0cc0babb09"}, {0x1, 0xe, "d1bc2afad0544a4aa687cbba"}, {0x6, 0x7, "4b50780e9c"}, {0x6, 0xe, "b94639a10b1c13994135fbad"}, {0x1, 0x9, "6e0e89381ab100"}, {0x0, 0x3, "82"}]}, @rr={0x7, 0x17, 0x8b, [@multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000006c0)={'sit0\x00', &(0x7f00000005c0)={'ip_vti0\x00', r2, 0x1, 0x8000, 0x16e6609a, 0x401, {{0x2b, 0x4, 0x2, 0x2d, 0xac, 0x68, 0x0, 0x83, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@generic={0x86, 0xb, "d66c1e67b5b27a5361"}, @ssrr={0x89, 0x1f, 0xfa, [@dev={0xac, 0x14, 0x14, 0x1b}, @empty, @loopback, @broadcast, @multicast1, @loopback, @multicast2]}, @lsrr={0x83, 0x13, 0xe9, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1]}, @cipso={0x86, 0x43, 0x0, [{0x6, 0xe, "975b28c00da7ff0cc0babb09"}, {0x1, 0xe, "d1bc2afad0544a4aa687cbba"}, {0x6, 0x7, "4b50780e9c"}, {0x6, 0xe, "b94639a10b1c13994135fbad"}, {0x1, 0x9, "6e0e89381ab100"}, {0x0, 0x3, "82"}]}, @rr={0x7, 0x17, 0x8b, [@multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r0) (async) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r7, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000900)={'vxcan1\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x15}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x61}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) tee(r4, r5, 0x67f, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x22, 0x20}, 0x18) (async) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x22, 0x20}, 0x18) tee(r10, 0xffffffffffffffff, 0x6, 0x4) (async) tee(r10, 0xffffffffffffffff, 0x6, 0x4) clock_gettime(0x0, &(0x7f0000005280)={0x0, 0x0}) recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000b80)=""/196, 0xc4}, {&(0x7f0000000c80)=""/180, 0xb4}, {&(0x7f0000000d40)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/100, 0x64}, {&(0x7f0000000e40)=""/227, 0xe3}], 0x5, &(0x7f0000000fc0)=""/151, 0x97}, 0x5}, {{0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=""/52, 0x34}, 0x6d8e}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001100)=""/84, 0x54}, {&(0x7f0000001180)=""/242, 0xf2}, {&(0x7f0000001280)=""/218, 0xda}, {&(0x7f0000001380)=""/176, 0xb0}, {&(0x7f0000001440)=""/247, 0xf7}, {&(0x7f0000001540)=""/239, 0xef}, {&(0x7f0000001640)=""/137, 0x89}, {&(0x7f0000001700)=""/153, 0x99}], 0x8, &(0x7f0000001840)=""/4096, 0x1000}, 0x6c}, {{&(0x7f0000002840)=@isdn, 0x80, &(0x7f0000003a40)=[{&(0x7f00000028c0)=""/9, 0x9}, {&(0x7f0000002900)=""/216, 0xd8}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/63, 0x3f}], 0x4, &(0x7f0000003a80)=""/89, 0x59}, 0x26}, {{&(0x7f0000003b00)=@xdp, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003b80)=""/120, 0x78}, {&(0x7f0000003c00)=""/17, 0x11}, {&(0x7f0000003c40)=""/238, 0xee}, {&(0x7f0000003d40)=""/135, 0x87}, {&(0x7f0000003e00)=""/18, 0x12}, {&(0x7f0000003e40)=""/4, 0x4}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/184, 0xb8}, {&(0x7f0000004f40)=""/61, 0x3d}], 0x9, &(0x7f0000005040)=""/232, 0xe8}, 0x7f}], 0x5, 0x2001, &(0x7f00000052c0)={r11, r12+10000000}) add_key$keyring(&(0x7f0000005300), &(0x7f0000005340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) (async) add_key$keyring(&(0x7f0000005300), &(0x7f0000005340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) openat$ashmem(0xffffffffffffff9c, &(0x7f0000005380), 0x381a02, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000005380), 0x381a02, 0x0) 9.127038419s ago: executing program 3 (id=6836): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="d500d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x54000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x46, &(0x7f0000001ac0)={&(0x7f0000000440)={0x30, 0x14, 0x800, 0x70bd2a, 0x25dfdbfe, {0x1}, [@typed={0x19, 0x1, 0x0, 0x0, @str='cpuacct.usage_percpu\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001840), &(0x7f0000001880)=0xc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg$unix(r4, &(0x7f0000008280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xb0}}], 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x73}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8db}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xeaf}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa5f}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x78a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x719}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4044806) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000880)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0x0, 0x800, 0x8, 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000080)=ANY=[@ANYRES8=r5], 0x118) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x88fd537e5c114b6e, 0x4010, r10, 0x0) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 7.51681729s ago: executing program 1 (id=6837): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000240)=0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000001c0)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket(0x10, 0x803, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000400)=@add_del={0x2, &(0x7f00000002c0)='pim6reg1\x00'}) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x818441, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}, {@uname={'uname', 0x3d, '\xf1!^{'}}]}}) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f0000003700)=""/213, 0xd5}, {&(0x7f0000002180)=""/205, 0xcd}, {&(0x7f0000000b40)=""/161, 0xa1}, {&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000000680)=""/111, 0x6f}], 0x8}, 0x1009}], 0x2, 0x40012160, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 7.471449034s ago: executing program 3 (id=6839): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) ptrace$PTRACE_GETSIGMASK(0x420a, 0xffffffffffffffff, 0x8, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000040)={0x7, 'bond_slave_0\x00', {0x9}, 0x6f9f}) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002cbd5f00fbdbdfc91cf41aa7b2b58090220500000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x48080) ioctl$BTRFS_IOC_DEFRAG(r3, 0x1265, 0x3) 5.803587871s ago: executing program 1 (id=6840): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f0000003700)=""/213, 0xd5}, {&(0x7f0000002180)=""/205, 0xcd}], 0x5}, 0x1009}], 0x2, 0x40012160, 0x0) (fail_nth: 3) 5.803156431s ago: executing program 2 (id=6841): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x1c) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x1, 0x4, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 5.802841581s ago: executing program 3 (id=6842): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lstat(&(0x7f0000000140)='./file0\x00', 0x0) 5.773255174s ago: executing program 1 (id=6843): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lstat(&(0x7f0000000140)='./file0\x00', 0x0) 5.772591453s ago: executing program 2 (id=6844): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x79ccaa637b0fc887, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file7'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000004c0)={[0x8abc, 0x4, 0x9, 0x802, 0x7ffd, 0x2000000000e, 0x120000, 0x9, 0x1, 0x101, 0x8000000000000001, 0x1, 0x0, 0x4, 0x6, 0x80000000000001], 0xeeee8000, 0x1f47a2}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000100)=@x86={0x6, 0x2, 0x10, 0x0, 0x1000a, 0x7, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0x11, 0x7, '\x00', 0x6, 0x4080000000000005}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.952473175s ago: executing program 3 (id=6845): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "764c3cbd4bfcea3ccf39c5d39a1b806b9b7d59625e8a066879fba0a9f3e6a82551ea6a5cfc4e9b07b71db3eeffa3445ddb573a0d465f42672a21fac054d92ba2", 0x33}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000024c0)='keyring\x00', &(0x7f0000002500)={'syz', 0x1}, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f0000003700)=""/213, 0xd5}, {&(0x7f0000002180)=""/205, 0xcd}], 0x5}, 0x1009}], 0x2, 0x40012160, 0x0) 3.945533036s ago: executing program 1 (id=6846): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async, rerun: 64) r2 = dup(r1) (rerun: 64) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="0cbeea4fa145b9546f5b622fd651d555f0", 0x11}], 0x1, 0x3) (async) close(r4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f00000000c0)=0x5, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) (async, rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x3, @empty}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="00aaa0e499", 0x5}, {&(0x7f00000004c0)="fcefd580", 0x4}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000000000000100000000800000000000002001"], 0x138}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000002cc0)="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", 0x341}, {&(0x7f0000000940)="86e1f7ffae07a5bbfe4b993654fbeced199e08", 0x13}, {&(0x7f0000003cc0)="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", 0x341}, {&(0x7f0000000ac0)="bbc5be3b13", 0x5}, {&(0x7f00000008c0)="196874fa", 0x4}, {&(0x7f0000000b80)="f14a73372f", 0x5}, {&(0x7f0000000c40)="d63931f6", 0x4}], 0x7}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e80)="a28c4bdf", 0x4}, {&(0x7f0000000f80)="6e205f924cf7d2c355f51927a436eb9bbf885c1902bccfbaea99d23c6702e3642883e5780e9cc0c965483e08e57de8c9ce8b3b05d7eaa74cf04e5bd722759b87e608c43f3e1a448d0833c46fa86772436bb8f434a809f4ccdad6d950a88247bfc65269557019b208526daf4dd32d12ec56016c629a0036940fae53b02bfac1232d", 0x81}, {&(0x7f0000000d40)="f4e8224d", 0x4}, {&(0x7f0000001040)="56df03501c", 0x5}, {&(0x7f0000000d80)="9b7ef7ca", 0x4}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x4008440) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) (rerun: 32) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'team0\x00', {0x2}, 0xffff}) (async, rerun: 32) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000980)=ANY=[@ANYBLOB="7472616e733d1c0d0000000000003de17c0a595673e440af24ba7ad8107af8435307ac60f875fc4b8215efa6ae28359dc8d0be642e2bac1ce0d9a47ab885b813c1b48577f547d68cdc2760782698b98734d82466be0e4846fc368a2265cf905d78ea3959595a1fb4dc67e9eb520b50f17e4b0e762e39ecf08f5b83020e4d74e7dfbc57a7ab8fb8d80b916323b65f7db5ed1fcfff41e77a1b42c3dbe5aba8e988e6b30aa950bea023d1359f4b5f377602d0610afb1cd7cb51697ab8292fadba601e9360fd619063a1c2e7c4", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',afid=0x0000000000000008,k']) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = socket$packet(0x11, 0x3, 0x300) tee(r5, r1, 0x6b, 0x1) (async) r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async, rerun: 64) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x10, r7) (async) ptrace$getenv(0x4201, r7, 0xc, &(0x7f00000003c0)) (async) r8 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async, rerun: 64) ptrace$getregset(0x4204, r8, 0x201, &(0x7f0000000100)={0x0}) (async, rerun: 64) kcmp(r7, r8, 0x3, r1, r6) 3.945200906s ago: executing program 2 (id=6847): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) fchown(r2, r4, 0xee01) 2.041052166s ago: executing program 1 (id=6848): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f0000003700)=""/213, 0xd5}, {&(0x7f0000002180)=""/205, 0xcd}, {&(0x7f0000000b40)=""/161, 0xa1}, {&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000000680)=""/111, 0x6f}], 0x8}, 0x1009}], 0x2, 0x40012160, 0x0) (fail_nth: 3) 2.040484596s ago: executing program 2 (id=6849): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000940)=""/263, 0x107}, {&(0x7f0000003700)=""/213, 0xd5}, {&(0x7f0000002180)=""/205, 0xcd}, {&(0x7f0000000b40)=""/161, 0xa1}, {&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000000680)=""/111, 0x6f}], 0x8}, 0x1009}], 0x2, 0x40012160, 0x0) 2.040108696s ago: executing program 3 (id=6850): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0) 26.592397ms ago: executing program 1 (id=6851): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) ptrace$PTRACE_GETSIGMASK(0x420a, 0xffffffffffffffff, 0x8, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000040)={0x7, 'bond_slave_0\x00', {0x9}, 0x6f9f}) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002cbd5f00fbdbdfc91cf41aa7b2b58090220500000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x48080) ioctl$BTRFS_IOC_DEFRAG(r3, 0x1265, 0x3) 24.491927ms ago: executing program 2 (id=6852): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lstat(&(0x7f0000000140)='./file0\x00', 0x0) 24.073327ms ago: executing program 3 (id=6853): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lstat(&(0x7f0000000140)='./file0\x00', 0x0) 0s ago: executing program 2 (id=6854): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f00000000c0)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101601, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9"], 0x10) kernel console output (not intermixed with test programs): ous mode [ 215.910419][T10746] veth0_vlan: entered promiscuous mode [ 215.925736][T10746] veth1_macvtap: entered promiscuous mode [ 215.958687][T10766] random: crng reseeded on system resumption [ 216.065164][ T8427] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 216.195209][ T8427] usb 3-1: device descriptor read/64, error -71 [ 216.325074][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 216.445095][ T8427] usb 3-1: device descriptor read/64, error -71 [ 216.476271][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.487691][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.497404][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.507361][ T10] usb 1-1: config 0 descriptor?? [ 216.565108][ T8427] usb usb3-port1: attempt power cycle [ 216.862873][T10792] random: crng reseeded on system resumption [ 216.905057][ T8427] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 216.920561][ T10] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 216.926992][ T8427] usb 3-1: device descriptor read/8, error -71 [ 216.944606][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.001E/input/input29 [ 217.030302][ T10] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 217.076038][ T8427] usb 3-1: device descriptor read/8, error -71 [ 217.315372][ T8427] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 217.329433][ T5595] usb 1-1: USB disconnect, device number 31 [ 217.336634][ T8427] usb 3-1: device descriptor read/8, error -71 [ 217.405156][ T45] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 217.466989][ T8427] usb 3-1: device descriptor read/8, error -71 [ 217.556361][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.566287][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 217.575514][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.584504][ T8427] usb usb3-port1: unable to enumerate USB device [ 217.591708][ T45] usb 2-1: config 0 descriptor?? [ 217.713547][T10808] overlayfs: missing 'workdir' [ 217.850182][T10812] random: crng reseeded on system resumption [ 218.000352][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 218.008046][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 218.026379][ T45] usb 2-1: USB disconnect, device number 30 [ 218.290537][T10826] fuse: Bad value for 'group_id' [ 218.295836][T10826] fuse: Bad value for 'group_id' [ 218.365491][T10833] overlayfs: missing 'workdir' [ 218.630722][T10846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.630763][T10846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1347 [ 218.725279][T10849] fuse: Bad value for 'group_id' [ 218.760379][T10849] fuse: Bad value for 'group_id' [ 219.040646][T10866] fuse: Bad value for 'fd' [ 219.836292][T10887] fuse: Bad value for 'fd' [ 220.145177][ T9] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 220.306227][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.327787][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 2634, setting to 64 [ 220.349611][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 220.359044][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 220.375055][ T9] usb 2-1: SerialNumber: syz [ 220.383739][T10891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.596728][T10891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.813361][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 220.822218][ T9] usb-storage 2-1:1.0: USB Mass Storage device detected [ 220.830492][ T9] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 220.839442][ T9] scsi host1: usb-storage 2-1:1.0 [ 220.847094][ T9] usb 2-1: USB disconnect, device number 31 [ 220.895079][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 221.046230][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.056413][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 221.066224][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.082496][ T10] usb 3-1: config 0 descriptor?? [ 221.506327][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 221.512475][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 221.525485][ T10] usb 3-1: USB disconnect, device number 33 [ 221.805254][ T5595] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 221.878082][T11010] overlayfs: missing 'workdir' [ 221.956475][ T5595] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.967863][ T5595] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 221.978573][ T5595] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 221.988357][ T5595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 221.996788][ T5595] usb 4-1: SerialNumber: syz [ 222.006336][ T5595] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 222.014813][ T5595] usb-storage 4-1:1.0: USB Mass Storage device detected [ 222.026541][ T5595] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 222.038864][ T5595] scsi host1: usb-storage 4-1:1.0 [ 222.147442][T11034] random: crng reseeded on system resumption [ 222.276368][ T12] bridge_slave_1: left allmulticast mode [ 222.282321][ T12] bridge_slave_1: left promiscuous mode [ 222.288230][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.295968][ T12] bridge_slave_0: left allmulticast mode [ 222.301822][ T12] bridge_slave_0: left promiscuous mode [ 222.307888][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.411971][T11035] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.420585][T11035] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.433395][T11035] bridge_slave_0: entered allmulticast mode [ 222.440183][T11035] bridge_slave_0: entered promiscuous mode [ 222.447285][T11035] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.454689][T11035] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.463701][T11035] bridge_slave_1: entered allmulticast mode [ 222.472644][T11035] bridge_slave_1: entered promiscuous mode [ 222.482283][ T12] veth1_macvtap: left promiscuous mode [ 222.487875][ T12] veth0_vlan: left promiscuous mode [ 222.536972][T11057] fuse: Unknown parameter 'grou00000000000000000000' [ 222.560928][T11059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 222.560966][T11059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 222.657343][T11035] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.673591][T11035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.680955][T11035] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.688080][T11035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.718250][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.726408][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.746737][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.753848][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.761947][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.769053][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.793538][T11035] veth0_vlan: entered promiscuous mode [ 222.816193][T11035] veth1_macvtap: entered promiscuous mode [ 223.257132][T11100] fuse: Unknown parameter 'grou00000000000000000000' [ 223.594308][T11126] fuse: Unknown parameter 'group_i00000000000000000000' [ 223.844347][T11147] fuse: Unknown parameter 'group_i00000000000000000000' [ 224.065521][ T10] usb 4-1: USB disconnect, device number 28 [ 224.120158][T11177] random: crng reseeded on system resumption [ 224.218797][T11182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 224.218831][T11182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 224.428024][T11199] random: crng reseeded on system resumption [ 224.475057][ T10] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 224.512066][T11205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 224.512102][T11205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 224.626399][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.646618][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 224.657188][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 224.666332][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 224.674361][ T10] usb 4-1: SerialNumber: syz [ 224.686762][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 224.696671][ T10] usb-storage 4-1:1.0: USB Mass Storage device detected [ 224.706263][ T10] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 224.722125][ T10] scsi host1: usb-storage 4-1:1.0 [ 224.828673][T11230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 224.828712][T11230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 225.508801][T11256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 225.518557][T11256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 225.799057][T11278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 225.809225][T11278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 226.024541][ T8427] usb 4-1: USB disconnect, device number 29 [ 226.095037][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 226.256138][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.266193][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 226.275328][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.285105][ T10] usb 3-1: config 0 descriptor?? [ 226.540058][T11304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.540095][T11304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 226.604886][T11313] fuse: Bad value for 'user_id' [ 226.619291][T11313] fuse: Bad value for 'user_id' [ 226.694151][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 226.700258][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 226.709970][ T10] usb 3-1: USB disconnect, device number 34 [ 226.830752][T11325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.830786][T11325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 226.949759][T11331] fuse: Bad value for 'user_id' [ 226.963845][T11331] fuse: Bad value for 'user_id' [ 227.005102][ T9] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 227.166463][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.177587][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 227.188153][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 227.197303][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 227.205529][ T9] usb 2-1: SerialNumber: syz [ 227.222049][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 227.230600][ T9] usb-storage 2-1:1.0: USB Mass Storage device detected [ 227.238415][ T9] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 227.246479][ T9] scsi host1: usb-storage 2-1:1.0 [ 227.275727][T11349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 227.275763][T11349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 227.505083][ T8427] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 227.545096][ T5595] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 227.666245][ T8427] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.677353][ T5595] usb 1-1: device descriptor read/64, error -71 [ 227.683763][ T8427] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 227.692961][ T8427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.701727][ T8427] usb 4-1: config 0 descriptor?? [ 227.915057][ T5595] usb 1-1: device descriptor read/64, error -71 [ 228.066105][T11356] fuse: Bad value for 'user_id' [ 228.071026][T11356] fuse: Bad value for 'user_id' [ 228.108778][ T8427] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 228.118623][ T8427] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001F/input/input30 [ 228.155048][ T5595] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 228.189774][ T8427] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 228.285091][ T5595] usb 1-1: device descriptor read/64, error -71 [ 228.487501][ T45] usb 2-1: USB disconnect, device number 32 [ 228.518501][ T8427] usb 4-1: USB disconnect, device number 30 [ 228.525581][ T5595] usb 1-1: device descriptor read/64, error -71 [ 228.635195][ T5595] usb usb1-port1: attempt power cycle [ 228.975043][ T5595] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 229.001358][ T5595] usb 1-1: device descriptor read/8, error -71 [ 229.042097][T11362] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=276 sclass=netlink_xfrm_socket pid=11362 comm=syz.2.4757 [ 229.099553][T11374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 229.099589][T11374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1137 [ 229.136087][ T5595] usb 1-1: device descriptor read/8, error -71 [ 229.295053][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 229.385032][ T5595] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 229.406633][ T5595] usb 1-1: device descriptor read/8, error -71 [ 229.456376][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.466307][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 229.475424][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.485382][ T10] usb 2-1: config 0 descriptor?? [ 229.536169][ T5595] usb 1-1: device descriptor read/8, error -71 [ 229.646172][ T5595] usb usb1-port1: unable to enumerate USB device [ 229.715079][ T8427] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 229.866390][ T8427] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.877500][ T8427] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.887969][ T8427] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 229.897114][ T31] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 229.904763][ T8427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 229.912914][ T8427] usb 4-1: SerialNumber: syz [ 229.920656][ T8427] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 229.929165][ T8427] usb-storage 4-1:1.0: USB Mass Storage device detected [ 229.937156][ T8427] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 229.945256][ T8427] scsi host1: usb-storage 4-1:1.0 [ 230.066720][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.077753][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 230.086916][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.095814][ T31] usb 3-1: config 0 descriptor?? [ 230.097065][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 230.107921][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 230.116763][ T10] usb 2-1: USB disconnect, device number 33 [ 230.510854][ T31] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 230.522265][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0020/input/input31 [ 230.589441][ T31] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 230.920342][ T8427] usb 3-1: USB disconnect, device number 35 [ 231.385088][ T10] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 231.515528][ T10] usb 2-1: device descriptor read/64, error -71 [ 231.519755][T11422] fuse: Bad value for 'fd' [ 231.759600][ T10] usb 2-1: device descriptor read/64, error -71 [ 231.975446][ T9] usb 4-1: USB disconnect, device number 32 [ 232.015035][ T10] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 232.038750][T11447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.038786][T11447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 232.165052][ T10] usb 2-1: device descriptor read/64, error -71 [ 232.435081][ T10] usb 2-1: device descriptor read/64, error -71 [ 232.515094][ T9] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 232.545181][ T10] usb usb2-port1: attempt power cycle [ 232.629191][T11474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.629226][T11474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1208 [ 232.666466][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 232.686988][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 232.698468][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 232.707638][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 232.715687][ T9] usb 1-1: SerialNumber: syz [ 232.729188][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 232.737765][ T9] usb-storage 1-1:1.0: USB Mass Storage device detected [ 232.746139][ T9] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 232.754165][ T9] scsi host1: usb-storage 1-1:1.0 [ 232.885047][ T10] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 232.906149][ T10] usb 2-1: device descriptor read/8, error -71 [ 233.036189][ T10] usb 2-1: device descriptor read/8, error -71 [ 233.275057][ T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 233.296089][ T10] usb 2-1: device descriptor read/8, error -71 [ 233.426222][ T10] usb 2-1: device descriptor read/8, error -71 [ 233.535144][ T10] usb usb2-port1: unable to enumerate USB device [ 233.600754][T11510] fuse: Invalid rootmode [ 233.619195][T11512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.619228][T11512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1175 [ 233.910187][T11530] fuse: Bad value for 'rootmode' [ 234.208085][T11554] fuse: Bad value for 'rootmode' [ 234.229845][T11556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 234.229880][T11556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 234.346867][T11571] FAULT_INJECTION: forcing a failure. [ 234.346867][T11571] name failslab, interval 1, probability 0, space 0, times 0 [ 234.368780][T11571] CPU: 1 UID: 0 PID: 11571 Comm: syz.1.4842 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 234.368821][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.368842][T11571] Call Trace: [ 234.368849][T11571] [ 234.368861][T11571] __dump_stack+0x21/0x30 [ 234.368897][T11571] dump_stack_lvl+0x10c/0x190 [ 234.368927][T11571] ? __cfi_dump_stack_lvl+0x10/0x10 [ 234.368958][T11571] dump_stack+0x19/0x20 [ 234.368987][T11571] should_fail_ex+0x3d9/0x530 [ 234.369010][T11571] should_failslab+0xac/0x100 [ 234.369036][T11571] kmem_cache_alloc_noprof+0x42/0x430 [ 234.369057][T11571] ? alloc_empty_file+0xbf/0x280 [ 234.369085][T11571] ? _raw_spin_unlock+0x45/0x60 [ 234.369115][T11571] alloc_empty_file+0xbf/0x280 [ 234.369140][T11571] ? _raw_spin_unlock+0x45/0x60 [ 234.369168][T11571] alloc_file_pseudo+0x12a/0x1c0 [ 234.369195][T11571] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 234.369224][T11571] anon_inode_getfd+0xda/0x1d0 [ 234.369255][T11571] __se_sys_fsopen+0x255/0x390 [ 234.369284][T11571] ? __kasan_check_read+0x15/0x20 [ 234.369318][T11571] __x64_sys_fsopen+0x5f/0x80 [ 234.369348][T11571] x64_sys_call+0x2d40/0x2ee0 [ 234.369381][T11571] do_syscall_64+0x58/0xf0 [ 234.369410][T11571] ? clear_bhb_loop+0x50/0xa0 [ 234.369436][T11571] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 234.369461][T11571] RIP: 0033:0x7f80d558f6c9 [ 234.369481][T11571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.369501][T11571] RSP: 002b:00007f80d63be038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 234.369538][T11571] RAX: ffffffffffffffda RBX: 00007f80d57e5fa0 RCX: 00007f80d558f6c9 [ 234.369558][T11571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 234.369573][T11571] RBP: 00007f80d63be090 R08: 0000000000000000 R09: 0000000000000000 [ 234.369589][T11571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.369604][T11571] R13: 00007f80d57e6038 R14: 00007f80d57e5fa0 R15: 00007ffe52499ea8 [ 234.369626][T11571] [ 234.413117][T11578] fuse: Bad value for 'rootmode' [ 234.747785][ T36] audit: type=1400 audit(1762989944.940:474): avc: denied { append } for pid=11598 comm="syz.1.4854" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 234.779949][ T8427] usb 1-1: USB disconnect, device number 36 [ 234.875126][T11608] fuse: Unknown parameter 'use00000000000000000000' [ 234.917220][T11618] rust_binder: Write failure EFAULT in pid:1245 [ 235.025064][ T31] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 235.041834][T11628] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 235.041923][T11628] rust_binder: Write failure EINVAL in pid:1250 [ 235.196583][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.206498][T11639] fuse: Unknown parameter 'use00000000000000000000' [ 235.214038][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.221114][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 235.251698][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 235.268757][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.278892][ T31] usb 3-1: SerialNumber: syz [ 235.289761][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 235.298393][ T31] usb-storage 3-1:1.0: USB Mass Storage device detected [ 235.306238][ T31] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 235.314307][ T31] scsi host1: usb-storage 3-1:1.0 [ 235.386323][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.405223][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 235.424760][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.443985][ T10] usb 2-1: config 0 descriptor?? [ 235.528909][T11663] fuse: Unknown parameter 'use00000000000000000000' [ 235.856834][ T10] lenovo 0003:17EF:6047.0021: unknown main item tag 0x1 [ 235.863991][ T10] lenovo 0003:17EF:6047.0021: item fetching failed at offset 2/5 [ 235.872115][ T10] lenovo 0003:17EF:6047.0021: hid_parse failed [ 235.878400][ T10] lenovo 0003:17EF:6047.0021: probe with driver lenovo failed with error -22 [ 235.988856][T11687] fuse: Unknown parameter 'user_i00000000000000000000' [ 236.450327][T11711] fuse: Unknown parameter 'user_i00000000000000000000' [ 236.567184][ T45] usb 3-1: USB disconnect, device number 36 [ 237.219299][T11732] fuse: Unknown parameter 'user_i00000000000000000000' [ 237.407001][T11744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.407037][T11744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 237.512247][T11752] fuse: Unknown parameter 'user_id00000000000000000000' [ 237.982247][ T45] usb 2-1: USB disconnect, device number 38 [ 238.019348][T11773] fuse: Unknown parameter 'user_id00000000000000000000' [ 238.115035][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 238.245071][ T10] usb 4-1: device descriptor read/64, error -71 [ 238.478151][T11793] fuse: Unknown parameter 'user_id00000000000000000000' [ 238.495424][ T10] usb 4-1: device descriptor read/64, error -71 [ 238.599024][T11798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 238.599063][T11798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170 [ 238.629248][ T5594] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 238.765051][ T10] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 238.806075][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.815943][ T5594] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 238.825042][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.833720][ T5594] usb 3-1: config 0 descriptor?? [ 238.895073][ T10] usb 4-1: device descriptor read/64, error -71 [ 239.145061][ T10] usb 4-1: device descriptor read/64, error -71 [ 239.241876][ T5594] lenovo 0003:17EF:6047.0022: unknown main item tag 0x1 [ 239.249045][ T5594] lenovo 0003:17EF:6047.0022: item fetching failed at offset 2/5 [ 239.257118][ T5594] lenovo 0003:17EF:6047.0022: hid_parse failed [ 239.263328][ T10] usb usb4-port1: attempt power cycle [ 239.269049][ T5594] lenovo 0003:17EF:6047.0022: probe with driver lenovo failed with error -22 [ 239.511863][T11821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 239.511895][T11821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 239.605044][ T10] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 239.636312][ T10] usb 4-1: device descriptor read/8, error -71 [ 239.732825][T11843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 239.732859][T11843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338 [ 239.757440][T11845] fuse: Bad value for 'fd' [ 239.776150][ T10] usb 4-1: device descriptor read/8, error -71 [ 240.015072][ T10] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 240.037337][ T10] usb 4-1: device descriptor read/8, error -71 [ 240.137441][T11871] fuse: Unknown parameter '0x0000000000000003' [ 240.157388][T11873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 240.157423][T11873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 240.166162][ T10] usb 4-1: device descriptor read/8, error -71 [ 240.285219][ T10] usb usb4-port1: unable to enumerate USB device [ 240.584525][T11894] fuse: Unknown parameter '0x0000000000000003' [ 240.603716][T11896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 240.603750][T11896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 240.886062][T11917] fuse: Unknown parameter '0x0000000000000003' [ 241.146118][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4996'. [ 241.158351][T11943] fuse: Unknown parameter '0x0000000000000003' [ 241.403695][ T8427] usb 3-1: USB disconnect, device number 37 [ 241.417066][ T31] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 241.576280][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.586582][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.602471][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 241.611778][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.620040][ T31] usb 1-1: SerialNumber: syz [ 241.628587][ T31] usb 1-1: bad CDC descriptors [ 241.633599][ T31] usb-storage 1-1:1.0: USB Mass Storage device detected [ 241.645645][ T31] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 241.672532][T11965] fuse: Unknown parameter '0x0000000000000003' [ 241.842722][ T8427] usb 1-1: USB disconnect, device number 37 [ 241.925126][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 242.018370][T11987] fuse: Unknown parameter '0x0000000000000003' [ 242.076149][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.086182][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 242.095519][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.106172][ T45] usb 2-1: config 0 descriptor?? [ 242.369752][T12009] fuse: Unknown parameter 'fd0x0000000000000003' [ 242.518617][ T45] lenovo 0003:17EF:6047.0023: unknown main item tag 0x1 [ 242.526074][ T45] lenovo 0003:17EF:6047.0023: item fetching failed at offset 2/5 [ 242.534186][ T45] lenovo 0003:17EF:6047.0023: hid_parse failed [ 242.540633][ T45] lenovo 0003:17EF:6047.0023: probe with driver lenovo failed with error -22 [ 242.763780][T12030] fuse: Unknown parameter 'fd0x0000000000000003' [ 242.786501][T12032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.786539][T12032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1271 [ 242.845095][ T10] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 243.006191][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.016400][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.030140][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 243.039253][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 243.047276][ T10] usb 1-1: SerialNumber: syz [ 243.054619][ T10] usb 1-1: bad CDC descriptors [ 243.059501][ T423] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 243.067269][ T10] usb-storage 1-1:1.0: USB Mass Storage device detected [ 243.075350][ T10] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 243.216200][ T423] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.226483][ T423] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 243.239647][ T423] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.249441][ T423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.255252][ T45] usb 1-1: USB disconnect, device number 38 [ 243.258454][ T423] usb 3-1: config 0 descriptor?? [ 243.270509][ T423] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 243.471673][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.478801][T12043] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.486351][T12043] bridge_slave_0: entered allmulticast mode [ 243.492697][T12043] bridge_slave_0: entered promiscuous mode [ 243.499186][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.506465][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.513675][T12043] bridge_slave_1: entered allmulticast mode [ 243.520138][T12043] bridge_slave_1: entered promiscuous mode [ 243.567924][ T13] bridge_slave_1: left allmulticast mode [ 243.573626][ T13] bridge_slave_1: left promiscuous mode [ 243.579374][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.587090][ T13] bridge_slave_0: left allmulticast mode [ 243.592770][ T13] bridge_slave_0: left promiscuous mode [ 243.598500][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.653943][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.661058][T12043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.668421][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.675496][T12043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.697299][ T1358] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.705070][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.715530][ T13] tipc: Left network mode [ 243.721228][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.728356][ T1358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.736484][ T1358] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.743584][ T1358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.752859][ T13] veth1_macvtap: left promiscuous mode [ 243.758535][ T13] veth0_vlan: left promiscuous mode [ 243.828138][T12043] veth0_vlan: entered promiscuous mode [ 243.841839][T12043] veth1_macvtap: entered promiscuous mode [ 244.019230][T12066] fuse: Unknown parameter 'fd0x0000000000000003' [ 244.052485][T12070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 244.052513][T12070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 244.705197][ T8427] usb 2-1: USB disconnect, device number 39 [ 245.425077][ T8427] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 245.576247][ T8427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.586165][ T8427] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 245.595371][ T8427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.604085][ T8427] usb 1-1: config 0 descriptor?? [ 245.835471][ T45] usb 3-1: USB disconnect, device number 38 [ 246.012803][ T8427] lenovo 0003:17EF:6047.0024: item fetching failed at offset 1/5 [ 246.020820][ T8427] lenovo 0003:17EF:6047.0024: hid_parse failed [ 246.027075][ T8427] lenovo 0003:17EF:6047.0024: probe with driver lenovo failed with error -22 [ 246.215162][ T31] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 246.366478][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.377613][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.388063][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 246.397178][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 246.405285][ T31] usb 4-1: SerialNumber: syz [ 246.411528][ T31] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 246.420019][ T31] usb-storage 4-1:1.0: USB Mass Storage device detected [ 246.427879][ T31] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 246.436903][ T31] scsi host1: usb-storage 4-1:1.0 [ 246.700658][T12116] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 246.700690][T12116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1281 [ 247.485340][ T8427] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 247.646110][ T8427] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.656435][ T8427] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 247.669520][ T8427] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.678624][ T8427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.687647][ T5594] usb 4-1: USB disconnect, device number 37 [ 247.697658][ T8427] usb 3-1: config 0 descriptor?? [ 247.703670][ T8427] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 248.127770][T12138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 248.127805][T12138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 248.218732][ T45] usb 1-1: USB disconnect, device number 39 [ 249.035038][ T45] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 249.186182][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.197585][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 249.208109][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 249.217235][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 249.225330][ T45] usb 2-1: SerialNumber: syz [ 249.232525][ T45] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 249.241027][ T45] usb-storage 2-1:1.0: USB Mass Storage device detected [ 249.249569][ T45] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 249.258326][ T45] scsi host1: usb-storage 2-1:1.0 [ 249.265048][ T8427] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 249.416051][ T8427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.425974][ T8427] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 249.435311][ T8427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.447522][ T8427] usb 1-1: config 0 descriptor?? [ 249.859638][ T8427] lenovo 0003:17EF:6047.0025: item fetching failed at offset 1/5 [ 249.869063][ T8427] lenovo 0003:17EF:6047.0025: hid_parse failed [ 249.875544][ T8427] lenovo 0003:17EF:6047.0025: probe with driver lenovo failed with error -22 [ 250.256221][ T423] usb 3-1: USB disconnect, device number 39 [ 250.486599][ T423] usb 2-1: USB disconnect, device number 40 [ 251.347912][T12233] FAULT_INJECTION: forcing a failure. [ 251.347912][T12233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.385014][T12233] CPU: 0 UID: 0 PID: 12233 Comm: syz.1.5109 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 251.385054][T12233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 251.385071][T12233] Call Trace: [ 251.385079][T12233] [ 251.385090][T12233] __dump_stack+0x21/0x30 [ 251.385126][T12233] dump_stack_lvl+0x10c/0x190 [ 251.385158][T12233] ? __cfi_dump_stack_lvl+0x10/0x10 [ 251.385191][T12233] ? check_stack_object+0x12c/0x140 [ 251.385215][T12233] dump_stack+0x19/0x20 [ 251.385245][T12233] should_fail_ex+0x3d9/0x530 [ 251.385278][T12233] should_fail+0xf/0x20 [ 251.385299][T12233] should_fail_usercopy+0x1e/0x30 [ 251.385324][T12233] _copy_to_user+0x24/0xa0 [ 251.385352][T12233] simple_read_from_buffer+0xed/0x160 [ 251.385383][T12233] proc_fail_nth_read+0x19e/0x210 [ 251.385424][T12233] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 251.385456][T12233] ? bpf_lsm_file_permission+0xd/0x20 [ 251.385488][T12233] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 251.385519][T12233] vfs_read+0x27d/0xc70 [ 251.385541][T12233] ? __cfi_vfs_read+0x10/0x10 [ 251.385561][T12233] ? __kasan_check_write+0x18/0x20 [ 251.385595][T12233] ? mutex_lock+0x92/0x1c0 [ 251.385616][T12233] ? __cfi_mutex_lock+0x10/0x10 [ 251.385638][T12233] ? __fget_files+0x2c5/0x340 [ 251.385664][T12233] ksys_read+0x141/0x250 [ 251.385685][T12233] ? __cfi_ksys_read+0x10/0x10 [ 251.385707][T12233] ? __kasan_check_read+0x15/0x20 [ 251.385743][T12233] __x64_sys_read+0x7f/0x90 [ 251.385764][T12233] x64_sys_call+0x2638/0x2ee0 [ 251.385799][T12233] do_syscall_64+0x58/0xf0 [ 251.385828][T12233] ? clear_bhb_loop+0x50/0xa0 [ 251.385854][T12233] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 251.385879][T12233] RIP: 0033:0x7f80d558e0dc [ 251.385906][T12233] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 251.385926][T12233] RSP: 002b:00007f80d63be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.385953][T12233] RAX: ffffffffffffffda RBX: 00007f80d57e5fa0 RCX: 00007f80d558e0dc [ 251.385978][T12233] RDX: 000000000000000f RSI: 00007f80d63be0a0 RDI: 0000000000000005 [ 251.385993][T12233] RBP: 00007f80d63be090 R08: 0000000000000000 R09: 000000000000000f [ 251.386009][T12233] R10: 0000000000000b56 R11: 0000000000000246 R12: 0000000000000001 [ 251.386029][T12233] R13: 00007f80d57e6038 R14: 00007f80d57e5fa0 R15: 00007ffe52499ea8 [ 251.386050][T12233] [ 252.032308][ T45] usb 1-1: USB disconnect, device number 40 [ 252.156879][T12257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 252.156918][T12257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 252.187822][T12259] binder: Unknown parameter '0xffffffffffffffff01777777777777777777777' [ 252.475024][ T5595] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 252.640277][ T5595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.658013][ T5595] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 252.675845][T12283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 252.675885][T12283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 252.677403][ T5595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.745236][ T5595] usb 1-1: config 0 descriptor?? [ 253.155025][ T45] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 253.176138][ T5595] lenovo 0003:17EF:6047.0026: item fetching failed at offset 1/5 [ 253.186818][ T5595] lenovo 0003:17EF:6047.0026: hid_parse failed [ 253.193160][ T5595] lenovo 0003:17EF:6047.0026: probe with driver lenovo failed with error -22 [ 253.339949][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.355026][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.377589][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.397308][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.411454][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 253.421929][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.430216][ T45] usb 4-1: SerialNumber: syz [ 253.441077][ T45] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 253.455285][ T45] usb-storage 4-1:1.0: USB Mass Storage device detected [ 253.475955][ T45] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 253.604505][T12329] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5150'. [ 253.642720][ T423] usb 4-1: USB disconnect, device number 38 [ 253.703419][T12333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 253.703455][T12333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:289 [ 253.895425][T12356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 253.904709][T12356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 254.035047][ T45] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 254.071444][T12364] 9pnet_fd: Insufficient options for proto=fd [ 254.206132][ T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.227077][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 254.238516][T12377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 254.240306][T12377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 254.240639][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.275490][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.284302][ T45] usb 3-1: config 0 descriptor?? [ 254.290896][ T45] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 254.346407][T12385] 9pnet_fd: Insufficient options for proto=fd [ 254.569402][ T36] audit: type=1400 audit(1762989964.760:475): avc: denied { ioctl } for pid=12402 comm="syz.3.5183" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 254.569416][T12403] random: crng reseeded on system resumption [ 254.621366][T12403] fuseblk: Bad value for 'user_id' [ 254.626599][T12403] fuseblk: Bad value for 'user_id' [ 254.646172][T12405] 9pnet_fd: Insufficient options for proto=fd [ 254.664477][T12407] 9pnet_fd: Insufficient options for proto=fd [ 254.675036][ T10] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 254.826190][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.836398][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.848142][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.857928][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.871556][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 254.880761][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 254.888803][ T10] usb 2-1: SerialNumber: syz [ 254.896097][ T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 254.904511][ T10] usb-storage 2-1:1.0: USB Mass Storage device detected [ 254.912362][ T10] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 254.935059][ T45] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 255.086170][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.096086][ T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 255.097301][ T10] usb 2-1: USB disconnect, device number 41 [ 255.105388][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.120215][ T45] usb 4-1: config 0 descriptor?? [ 255.251405][ T5595] usb 1-1: USB disconnect, device number 41 [ 255.444514][T12427] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5193'. [ 255.468277][T12429] 9pnet_fd: Insufficient options for proto=fd [ 255.488376][T12431] 9pnet_fd: Insufficient options for proto=fd [ 255.528816][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 255.534827][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 255.543779][ T45] usb 4-1: USB disconnect, device number 39 [ 255.745037][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 255.826922][T12450] 9pnet_fd: Insufficient options for proto=fd [ 255.846007][T12452] 9pnet_fd: Insufficient options for proto=fd [ 255.896085][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.906015][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 255.915100][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.924091][ T10] usb 1-1: config 0 descriptor?? [ 256.095182][ T45] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 256.246265][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.256528][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.267586][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.277392][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.291651][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 256.300906][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 256.309018][ T45] usb 2-1: SerialNumber: syz [ 256.316680][ T45] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 256.325321][ T45] usb-storage 2-1:1.0: USB Mass Storage device detected [ 256.333585][ T10] lenovo 0003:17EF:6047.0027: item fetching failed at offset 1/5 [ 256.341923][ T10] lenovo 0003:17EF:6047.0027: hid_parse failed [ 256.343490][ T45] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 256.348218][ T10] lenovo 0003:17EF:6047.0027: probe with driver lenovo failed with error -22 [ 256.517767][ T45] usb 2-1: USB disconnect, device number 42 [ 256.809369][ T10] usb 3-1: USB disconnect, device number 40 [ 256.896697][ T45] hid (null): unknown global tag 0xc [ 256.906445][ T45] hid (null): report_id 0 is invalid [ 256.917830][ T45] hid-generic 0000:0003:0002.0028: unknown global tag 0xc [ 256.930414][ T45] hid-generic 0000:0003:0002.0028: item 0 1 1 12 parsing failed [ 256.938706][ T45] hid-generic 0000:0003:0002.0028: probe with driver hid-generic failed with error -22 [ 256.968614][T12479] 9pnet_fd: Insufficient options for proto=fd [ 257.231161][T12500] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 257.375017][ T45] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 257.415033][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 257.515033][ T45] usb 3-1: device descriptor read/64, error -71 [ 257.566352][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.576577][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 257.590365][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.600745][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.610069][ T10] usb 2-1: config 0 descriptor?? [ 257.616425][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 257.755028][ T45] usb 3-1: device descriptor read/64, error -71 [ 257.995060][ T45] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 258.125060][ T45] usb 3-1: device descriptor read/64, error -71 [ 258.205490][ T10] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 258.356132][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.367298][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 258.375040][ T45] usb 3-1: device descriptor read/64, error -71 [ 258.377827][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 258.392318][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 258.400346][ T10] usb 4-1: SerialNumber: syz [ 258.406721][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 258.415223][ T10] usb-storage 4-1:1.0: USB Mass Storage device detected [ 258.422934][ T10] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 258.430972][ T10] scsi host1: usb-storage 4-1:1.0 [ 258.485142][ T45] usb usb3-port1: attempt power cycle [ 258.510236][ T10] usb 1-1: USB disconnect, device number 42 [ 258.805030][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 258.825038][ T45] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 258.846496][ T45] usb 3-1: device descriptor read/8, error -71 [ 258.956117][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.966124][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 258.975229][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.983866][ T10] usb 1-1: config 0 descriptor?? [ 258.987006][ T45] usb 3-1: device descriptor read/8, error -71 [ 259.235056][ T45] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 259.256080][ T45] usb 3-1: device descriptor read/8, error -71 [ 259.386107][ T45] usb 3-1: device descriptor read/8, error -71 [ 259.395046][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 259.401070][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 259.410507][ T10] usb 1-1: USB disconnect, device number 43 [ 259.495129][ T45] usb usb3-port1: unable to enumerate USB device [ 259.686991][ T10] usb 4-1: USB disconnect, device number 40 [ 260.178917][ T5594] usb 2-1: USB disconnect, device number 43 [ 260.388963][T12547] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.400151][T12547] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.407636][T12547] bridge_slave_0: entered allmulticast mode [ 260.414196][T12547] bridge_slave_0: entered promiscuous mode [ 260.421161][T12547] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.428584][T12547] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.435934][T12547] bridge_slave_1: entered allmulticast mode [ 260.442492][T12547] bridge_slave_1: entered promiscuous mode [ 260.534479][ T13] bridge_slave_1: left allmulticast mode [ 260.544810][ T13] bridge_slave_1: left promiscuous mode [ 260.551585][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.559615][ T13] bridge_slave_0: left allmulticast mode [ 260.565779][ T13] bridge_slave_0: left promiscuous mode [ 260.571560][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.661173][T12547] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.668401][T12547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.675743][T12547] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.682836][T12547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.698351][ T13] veth1_macvtap: left promiscuous mode [ 260.703890][ T13] veth0_vlan: left promiscuous mode [ 260.755926][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.763360][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.780025][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.787222][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.794766][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.801851][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.828550][T12547] veth0_vlan: entered promiscuous mode [ 260.839850][T12547] veth1_macvtap: entered promiscuous mode [ 260.885072][ T45] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 260.915096][ T5595] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 261.026567][ T45] usb 2-1: device descriptor read/64, error -71 [ 261.066002][ T5595] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.078117][ T5595] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 261.091137][ T5595] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.100279][ T31] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 261.107953][ T5595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.119509][ T5595] usb 4-1: config 0 descriptor?? [ 261.125750][ T5595] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 261.265086][ T45] usb 2-1: device descriptor read/64, error -71 [ 261.283601][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 261.294922][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 261.306203][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 261.315987][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 261.324208][ T31] usb 1-1: SerialNumber: syz [ 261.331503][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 261.340259][ T31] usb-storage 1-1:1.0: USB Mass Storage device detected [ 261.349079][ T31] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 261.357793][ T31] scsi host1: usb-storage 1-1:1.0 [ 261.505019][ T45] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 261.645797][ T45] usb 2-1: device descriptor read/64, error -71 [ 261.759086][T12618] FAULT_INJECTION: forcing a failure. [ 261.759086][T12618] name failslab, interval 1, probability 0, space 0, times 0 [ 261.771914][T12618] CPU: 0 UID: 0 PID: 12618 Comm: syz.2.5268 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 261.771951][T12618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.771966][T12618] Call Trace: [ 261.771975][T12618] [ 261.771984][T12618] __dump_stack+0x21/0x30 [ 261.772014][T12618] dump_stack_lvl+0x10c/0x190 [ 261.772035][T12618] ? __cfi_dump_stack_lvl+0x10/0x10 [ 261.772057][T12618] ? __cfi_avc_has_perm+0x10/0x10 [ 261.772086][T12618] dump_stack+0x19/0x20 [ 261.772114][T12618] should_fail_ex+0x3d9/0x530 [ 261.772138][T12618] should_failslab+0xac/0x100 [ 261.772162][T12618] __kmalloc_cache_noprof+0x41/0x490 [ 261.772184][T12618] ? proc_thread_self_get_link+0x11b/0x290 [ 261.772212][T12618] proc_thread_self_get_link+0x11b/0x290 [ 261.772232][T12618] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 261.772260][T12618] ? __cfi_proc_thread_self_get_link+0x10/0x10 [ 261.772291][T12618] pick_link+0x6d5/0xe80 [ 261.772312][T12618] step_into+0xc58/0xf50 [ 261.772331][T12618] ? __kasan_check_read+0x15/0x20 [ 261.772364][T12618] ? read_word_at_a_time+0x1a/0x40 [ 261.772389][T12618] ? set_root+0x420/0x420 [ 261.772404][T12618] ? lookup_fast+0x167/0x530 [ 261.772418][T12618] ? inode_permission+0xf3/0x4c0 [ 261.772435][T12618] link_path_walk+0x753/0xec0 [ 261.772473][T12618] path_openat+0x281/0x34b0 [ 261.772503][T12618] ? kasan_save_track+0x3e/0x80 [ 261.772535][T12618] ? kasan_save_alloc_info+0x40/0x50 [ 261.772565][T12618] ? getname+0x1b/0x30 [ 261.772580][T12618] ? x64_sys_call+0xe69/0x2ee0 [ 261.772610][T12618] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 261.772639][T12618] ? do_filp_open+0x3e0/0x3e0 [ 261.772669][T12618] do_filp_open+0x1c6/0x3e0 [ 261.772698][T12618] ? __cfi_do_filp_open+0x10/0x10 [ 261.772728][T12618] ? alloc_fd+0x4e7/0x5a0 [ 261.772750][T12618] do_sys_openat2+0x12c/0x1c0 [ 261.772771][T12618] ? fput+0x1a5/0x240 [ 261.772797][T12618] ? do_sys_open+0x100/0x100 [ 261.772826][T12618] ? ksys_write+0x1ef/0x250 [ 261.772848][T12618] ? __cfi_ksys_write+0x10/0x10 [ 261.772869][T12618] __x64_sys_openat+0x13a/0x170 [ 261.772898][T12618] x64_sys_call+0xe69/0x2ee0 [ 261.772924][T12618] do_syscall_64+0x58/0xf0 [ 261.772950][T12618] ? clear_bhb_loop+0x50/0xa0 [ 261.772978][T12618] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 261.773001][T12618] RIP: 0033:0x7f510cd8df10 [ 261.773020][T12618] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 261.773040][T12618] RSP: 002b:00007f510b7f6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 261.773067][T12618] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f510cd8df10 [ 261.773083][T12618] RDX: 0000000000000002 RSI: 00007f510b7f6fa0 RDI: 00000000ffffff9c [ 261.773098][T12618] RBP: 00007f510b7f6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 261.773114][T12618] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 261.773128][T12618] R13: 00007f510cfe6038 R14: 00007f510cfe5fa0 R15: 00007ffddf995d68 [ 261.773148][T12618] [ 261.935076][ T45] usb 2-1: device descriptor read/64, error -71 [ 262.185187][ T45] usb usb2-port1: attempt power cycle [ 262.545020][ T45] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 262.566045][ T45] usb 2-1: device descriptor read/8, error -71 [ 262.696077][ T45] usb 2-1: device descriptor read/8, error -71 [ 262.935043][ T45] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 262.961960][ T45] usb 2-1: device descriptor read/8, error -71 [ 263.096108][ T45] usb 2-1: device descriptor read/8, error -71 [ 263.205146][ T45] usb usb2-port1: unable to enumerate USB device [ 263.343082][T12643] netlink: 25 bytes leftover after parsing attributes in process `syz.0.5280'. [ 263.353221][T12644] netlink: 'syz.0.5280': attribute type 4 has an invalid length. [ 263.425447][ T10] usb 1-1: USB disconnect, device number 44 [ 263.698888][ T10] usb 4-1: USB disconnect, device number 41 [ 263.735150][ T5594] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 263.845710][T12666] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.853715][T12666] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 263.862451][T12666] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.871401][T12666] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 263.888938][ T36] audit: type=1400 audit(1762989974.080:476): avc: denied { create } for pid=12665 comm="syz.0.5285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 263.909969][ T5594] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 263.918837][ T36] audit: type=1400 audit(1762989974.110:477): avc: denied { execute } for pid=12669 comm="syz.3.5291" path="/74/cpuacct.usage_percpu" dev="tmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 263.921021][ T5594] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 2634, setting to 64 [ 263.956855][ T5594] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 263.966015][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 263.974045][ T5594] usb 3-1: SerialNumber: syz [ 263.987827][T12649] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 263.995020][ T36] audit: type=1400 audit(1762989974.180:478): avc: denied { mounton } for pid=12673 comm="syz.0.5293" path="/222/file0" dev="tmpfs" ino=1364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 264.027597][ T36] audit: type=1400 audit(1762989974.220:479): avc: denied { create } for pid=12675 comm="syz.0.5294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 264.059034][ T36] audit: type=1400 audit(1762989974.220:480): avc: denied { write } for pid=12675 comm="syz.0.5294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 264.185285][ T31] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 264.218332][T12649] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 264.268999][T12693] FAULT_INJECTION: forcing a failure. [ 264.268999][T12693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.282192][T12693] CPU: 1 UID: 0 PID: 12693 Comm: syz.0.5302 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 264.282225][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.282240][T12693] Call Trace: [ 264.282247][T12693] [ 264.282256][T12693] __dump_stack+0x21/0x30 [ 264.282292][T12693] dump_stack_lvl+0x10c/0x190 [ 264.282330][T12693] ? __cfi_dump_stack_lvl+0x10/0x10 [ 264.282359][T12693] dump_stack+0x19/0x20 [ 264.282379][T12693] should_fail_ex+0x3d9/0x530 [ 264.282396][T12693] should_fail+0xf/0x20 [ 264.282410][T12693] should_fail_usercopy+0x1e/0x30 [ 264.282450][T12693] _copy_from_user+0x22/0xb0 [ 264.282479][T12693] __se_sys_io_pgetevents+0x116/0x430 [ 264.282553][T12693] ? __x64_sys_io_pgetevents+0x110/0x110 [ 264.282572][T12693] ? __cfi_ksys_write+0x10/0x10 [ 264.282590][T12693] __x64_sys_io_pgetevents+0xe9/0x110 [ 264.282617][T12693] x64_sys_call+0x2e9c/0x2ee0 [ 264.282648][T12693] do_syscall_64+0x58/0xf0 [ 264.282674][T12693] ? clear_bhb_loop+0x50/0xa0 [ 264.282695][T12693] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 264.282712][T12693] RIP: 0033:0x7f186cf8f6c9 [ 264.282726][T12693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.282746][T12693] RSP: 002b:00007f186ddf3038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 264.282772][T12693] RAX: ffffffffffffffda RBX: 00007f186d1e5fa0 RCX: 00007f186cf8f6c9 [ 264.282790][T12693] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 264.282804][T12693] RBP: 00007f186ddf3090 R08: 0000000000000000 R09: 00002000000002c0 [ 264.282818][T12693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.282829][T12693] R13: 00007f186d1e6038 R14: 00007f186d1e5fa0 R15: 00007ffe851331c8 [ 264.282843][T12693] [ 264.466493][ T45] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 264.475982][ T5594] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 264.484452][ T5594] usb-storage 3-1:1.0: USB Mass Storage device detected [ 264.494098][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.495785][ T5594] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 264.505177][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 264.517424][ T5594] scsi host1: usb-storage 3-1:1.0 [ 264.522493][ T31] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 264.532875][ T5594] usb 3-1: USB disconnect, device number 45 [ 264.543088][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.552381][ T31] usb 4-1: config 0 descriptor?? [ 264.616334][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 264.629680][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.638809][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.647676][ T45] usb 2-1: config 0 descriptor?? [ 264.653703][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 265.139480][T12729] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 265.147278][T12729] audit: out of memory in audit_log_start [ 265.552782][ T36] audit: type=1400 audit(1762989975.740:481): avc: denied { unmount } for pid=10746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 265.635016][ T45] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 265.786135][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.797255][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 265.807909][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 265.817087][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 265.825239][ T45] usb 3-1: SerialNumber: syz [ 265.833209][ T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 265.841822][ T45] usb-storage 3-1:1.0: USB Mass Storage device detected [ 265.849744][ T45] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 265.857849][ T45] scsi host1: usb-storage 3-1:1.0 [ 266.225531][T12767] can0: slcan on ttyS3. [ 266.481674][T12768] can0 (unregistered): slcan off ttyS3. [ 266.922581][ T45] usb 4-1: USB disconnect, device number 42 [ 267.071109][ T423] usb 2-1: USB disconnect, device number 48 [ 267.092722][T12825] 9pnet_fd: Insufficient options for proto=fd [ 267.303022][T12848] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5355'. [ 267.425077][ T45] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 267.455035][ T423] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 267.576190][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 267.589241][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.598337][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.607259][ T45] usb 1-1: config 0 descriptor?? [ 267.613192][ T45] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 267.616258][ T423] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.630740][ T423] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.644847][ T423] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 267.654041][ T423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.662929][ T423] usb 2-1: config 0 descriptor?? [ 267.905419][ T5594] usb 3-1: USB disconnect, device number 46 [ 267.992795][T12882] 9pnet_fd: Insufficient options for proto=fd [ 268.010544][T12884] FAULT_INJECTION: forcing a failure. [ 268.010544][T12884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.023676][T12884] CPU: 1 UID: 0 PID: 12884 Comm: syz.3.5372 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 268.023711][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.023726][T12884] Call Trace: [ 268.023736][T12884] [ 268.023747][T12884] __dump_stack+0x21/0x30 [ 268.023775][T12884] dump_stack_lvl+0x10c/0x190 [ 268.023797][T12884] ? __cfi_dump_stack_lvl+0x10/0x10 [ 268.023820][T12884] dump_stack+0x19/0x20 [ 268.023840][T12884] should_fail_ex+0x3d9/0x530 [ 268.023857][T12884] should_fail+0xf/0x20 [ 268.023871][T12884] should_fail_usercopy+0x1e/0x30 [ 268.023888][T12884] _copy_from_user+0x22/0xb0 [ 268.023908][T12884] ___sys_sendmsg+0x159/0x2a0 [ 268.023940][T12884] ? __sys_sendmsg+0x280/0x280 [ 268.023964][T12884] ? do_user_addr_fault+0xbc4/0x1200 [ 268.023994][T12884] __sys_sendmmsg+0x271/0x470 [ 268.024018][T12884] ? __cfi___sys_sendmmsg+0x10/0x10 [ 268.024046][T12884] ? __cfi_ksys_write+0x10/0x10 [ 268.024063][T12884] __x64_sys_sendmmsg+0xa4/0xc0 [ 268.024088][T12884] x64_sys_call+0xfec/0x2ee0 [ 268.024112][T12884] do_syscall_64+0x58/0xf0 [ 268.024134][T12884] ? clear_bhb_loop+0x50/0xa0 [ 268.024152][T12884] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 268.024172][T12884] RIP: 0033:0x7f3c4db8f6c9 [ 268.024185][T12884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.024199][T12884] RSP: 002b:00007f3c4e9a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.024216][T12884] RAX: ffffffffffffffda RBX: 00007f3c4dde5fa0 RCX: 00007f3c4db8f6c9 [ 268.024228][T12884] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000006 [ 268.024239][T12884] RBP: 00007f3c4e9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 268.024250][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.024259][T12884] R13: 00007f3c4dde6038 R14: 00007f3c4dde5fa0 R15: 00007ffcf1302eb8 [ 268.024273][T12884] [ 268.272660][T12894] can0: slcan on ttyS3. [ 268.308380][T12894] can0 (unregistered): slcan off ttyS3. [ 268.314115][T12894] Falling back ldisc for ttyS3. [ 268.515078][ T5594] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 268.666292][ T5594] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.677355][ T5594] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.687783][ T5594] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 268.696950][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.705064][ T5594] usb 3-1: SerialNumber: syz [ 268.712815][ T5594] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 268.721298][ T5594] usb-storage 3-1:1.0: USB Mass Storage device detected [ 268.729133][ T5594] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 268.737678][ T5594] scsi host1: usb-storage 3-1:1.0 [ 268.937316][T12937] binder: Unknown parameter 'fscontext?}' [ 269.604591][T12953] 9pnet_fd: Insufficient options for proto=fd [ 270.009220][ T5595] usb 3-1: USB disconnect, device number 47 [ 270.165633][ T5594] usb 2-1: USB disconnect, device number 49 [ 270.210310][ T45] usb 1-1: USB disconnect, device number 45 [ 270.226266][T12973] netlink: 'syz.3.5398': attribute type 27 has an invalid length. [ 270.236263][T12973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:267 [ 270.250768][T12979] 9pnet_fd: Insufficient options for proto=fd [ 270.475060][ T5594] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 270.565078][ T423] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 270.636087][ T5594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.654695][ T5594] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 270.674118][ T5594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.689690][ T5594] usb 2-1: config 0 descriptor?? [ 270.695425][T12998] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 270.703226][T12998] audit: out of memory in audit_log_start [ 270.739511][ T423] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.759929][ T423] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.771956][ T423] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.781167][ T423] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.791548][ T423] usb 4-1: config 0 descriptor?? [ 270.806700][T13002] 9pnet_fd: Insufficient options for proto=fd [ 271.055019][ T423] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 271.105063][ T5595] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 271.110576][ T5594] usbhid 2-1:0.0: can't add hid device: -71 [ 271.118759][ T5594] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 271.127674][ T5594] usb 2-1: USB disconnect, device number 50 [ 271.206144][ T423] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 271.219338][ T423] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.228478][ T423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.237196][ T423] usb 1-1: config 0 descriptor?? [ 271.243255][ T423] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 271.256090][ T5595] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 271.267246][ T5595] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 271.277669][ T5595] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 271.286783][ T5595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 271.294799][ T5595] usb 3-1: SerialNumber: syz [ 271.301104][ T5595] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 271.309534][ T5595] usb-storage 3-1:1.0: USB Mass Storage device detected [ 271.317299][ T5595] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 271.325556][ T5595] scsi host1: usb-storage 3-1:1.0 [ 271.637364][T13016] 9pnet_fd: Insufficient options for proto=fd [ 272.567018][ T5594] usb 3-1: USB disconnect, device number 48 [ 272.580583][T13033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5423'. [ 272.905020][ T423] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 273.056136][ T423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.066049][ T423] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 273.075330][ T423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.084661][ T423] usb 2-1: config 0 descriptor?? [ 273.343868][ T5595] usb 4-1: USB disconnect, device number 43 [ 273.387001][T13057] IPv6: A: Disabled Multicast RS [ 273.495579][ T423] usbhid 2-1:0.0: can't add hid device: -71 [ 273.502950][ T423] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 273.511993][ T423] usb 2-1: USB disconnect, device number 51 [ 273.517342][T13061] FAULT_INJECTION: forcing a failure. [ 273.517342][T13061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.531137][T13061] CPU: 0 UID: 0 PID: 13061 Comm: syz.2.5435 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 273.531172][T13061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.531200][T13061] Call Trace: [ 273.531206][T13061] [ 273.531213][T13061] __dump_stack+0x21/0x30 [ 273.531239][T13061] dump_stack_lvl+0x10c/0x190 [ 273.531265][T13061] ? __cfi_dump_stack_lvl+0x10/0x10 [ 273.531293][T13061] dump_stack+0x19/0x20 [ 273.531314][T13061] should_fail_ex+0x3d9/0x530 [ 273.531331][T13061] should_fail+0xf/0x20 [ 273.531346][T13061] should_fail_usercopy+0x1e/0x30 [ 273.531363][T13061] _copy_to_user+0x24/0xa0 [ 273.531384][T13061] put_itimerspec64+0x169/0x1e0 [ 273.531402][T13061] ? __cfi_put_itimerspec64+0x10/0x10 [ 273.531420][T13061] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 273.531443][T13061] ? do_timer_gettime+0xf3/0x140 [ 273.531468][T13061] __x64_sys_timer_gettime+0xee/0x150 [ 273.531511][T13061] ? __cfi___x64_sys_timer_gettime+0x10/0x10 [ 273.531534][T13061] ? __kasan_check_read+0x15/0x20 [ 273.531559][T13061] x64_sys_call+0x2788/0x2ee0 [ 273.531583][T13061] do_syscall_64+0x58/0xf0 [ 273.531603][T13061] ? clear_bhb_loop+0x50/0xa0 [ 273.531621][T13061] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 273.531638][T13061] RIP: 0033:0x7f510cd8f6c9 [ 273.531652][T13061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.531666][T13061] RSP: 002b:00007f510b7f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e0 [ 273.531684][T13061] RAX: ffffffffffffffda RBX: 00007f510cfe5fa0 RCX: 00007f510cd8f6c9 [ 273.531696][T13061] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000000 [ 273.531707][T13061] RBP: 00007f510b7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 273.531717][T13061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.531727][T13061] R13: 00007f510cfe6038 R14: 00007f510cfe5fa0 R15: 00007ffddf995d68 [ 273.531741][T13061] [ 273.685043][ T5595] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 273.742810][T13065] 9pnet_fd: Insufficient options for proto=fd [ 273.818896][ T45] usb 1-1: USB disconnect, device number 46 [ 273.872220][T13077] rust_binder: Read failure Err(EAGAIN) in pid:624 [ 273.886089][ T5595] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.904010][ T5595] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 273.914865][ T5595] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 273.924258][ T5595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.927666][T13083] process 'syz.0.5446' launched './file1' with NULL argv: empty string added [ 273.932657][ T5595] usb 4-1: SerialNumber: syz [ 273.952804][ T5595] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 273.961487][ T5595] usb-storage 4-1:1.0: USB Mass Storage device detected [ 273.970717][ T5595] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 273.978966][ T5595] scsi host1: usb-storage 4-1:1.0 [ 274.075056][ T8427] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 274.226137][ T8427] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.239877][ T8427] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.252824][ T8427] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 274.261923][ T8427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.270799][ T8427] usb 3-1: config 0 descriptor?? [ 274.276848][ T8427] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 274.286254][ T423] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 274.436202][ T423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.446067][ T423] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.459061][ T423] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.468137][ T423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.476837][ T423] usb 2-1: config 0 descriptor?? [ 274.482833][ T423] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 275.206520][ T65] usb 4-1: USB disconnect, device number 44 [ 275.723928][T13110] rust_binder: Read failure Err(EAGAIN) in pid:288 [ 275.737103][T13112] FAULT_INJECTION: forcing a failure. [ 275.737103][T13112] name failslab, interval 1, probability 0, space 0, times 0 [ 275.756345][T13112] CPU: 1 UID: 0 PID: 13112 Comm: syz.3.5456 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 275.756384][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.756396][T13112] Call Trace: [ 275.756404][T13112] [ 275.756411][T13112] __dump_stack+0x21/0x30 [ 275.756438][T13112] dump_stack_lvl+0x10c/0x190 [ 275.756459][T13112] ? __cfi_dump_stack_lvl+0x10/0x10 [ 275.756483][T13112] dump_stack+0x19/0x20 [ 275.756503][T13112] should_fail_ex+0x3d9/0x530 [ 275.756521][T13112] should_failslab+0xac/0x100 [ 275.756540][T13112] kmem_cache_alloc_noprof+0x42/0x430 [ 275.756555][T13112] ? alloc_empty_file+0xbf/0x280 [ 275.756575][T13112] alloc_empty_file+0xbf/0x280 [ 275.756595][T13112] path_openat+0xf8/0x34b0 [ 275.756614][T13112] ? is_bpf_text_address+0x17b/0x1a0 [ 275.756633][T13112] ? kernel_text_address+0xa9/0xe0 [ 275.756654][T13112] ? __kernel_text_address+0x11/0x40 [ 275.756674][T13112] ? unwind_get_return_address+0x51/0x90 [ 275.756694][T13112] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 275.756719][T13112] ? arch_stack_walk+0x10b/0x170 [ 275.756734][T13112] ? do_filp_open+0x3e0/0x3e0 [ 275.756755][T13112] do_filp_open+0x1c6/0x3e0 [ 275.756774][T13112] ? __cfi_do_filp_open+0x10/0x10 [ 275.756793][T13112] ? kasan_save_track+0x4f/0x80 [ 275.756815][T13112] ? __asan_memcpy+0x5a/0x80 [ 275.756829][T13112] do_open_execat+0x133/0x3e0 [ 275.756850][T13112] ? open_exec+0x70/0x70 [ 275.756869][T13112] ? check_stack_object+0x82/0x140 [ 275.756885][T13112] ? __check_object_size+0x50a/0x810 [ 275.756901][T13112] alloc_bprm+0x2b/0xb50 [ 275.756923][T13112] do_execveat_common+0x198/0xa80 [ 275.756946][T13112] ? __kasan_check_write+0x18/0x20 [ 275.756970][T13112] ? getname_flags+0x209/0x710 [ 275.756987][T13112] __x64_sys_execveat+0xd2/0xf0 [ 275.757026][T13112] x64_sys_call+0x906/0x2ee0 [ 275.757049][T13112] do_syscall_64+0x58/0xf0 [ 275.757079][T13112] ? clear_bhb_loop+0x50/0xa0 [ 275.757105][T13112] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 275.757135][T13112] RIP: 0033:0x7f3c4db8f6c9 [ 275.757155][T13112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.757170][T13112] RSP: 002b:00007f3c4e9a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 275.757188][T13112] RAX: ffffffffffffffda RBX: 00007f3c4dde5fa0 RCX: 00007f3c4db8f6c9 [ 275.757200][T13112] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 275.757212][T13112] RBP: 00007f3c4e9a1090 R08: 0000000000001000 R09: 0000000000000000 [ 275.757224][T13112] R10: 0000200000004780 R11: 0000000000000246 R12: 0000000000000001 [ 275.757235][T13112] R13: 00007f3c4dde6038 R14: 00007f3c4dde5fa0 R15: 00007ffcf1302eb8 [ 275.757251][T13112] [ 276.165632][ T65] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 276.316918][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 276.328068][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 276.338602][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 276.347790][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 276.356285][ T65] usb 1-1: SerialNumber: syz [ 276.366624][ T65] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 276.375237][ T65] usb-storage 1-1:1.0: USB Mass Storage device detected [ 276.386541][ T65] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 276.395331][ T65] scsi host1: usb-storage 1-1:1.0 [ 276.844706][ T65] usb 3-1: USB disconnect, device number 49 [ 277.042584][T13161] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=13161 comm=syz.2.5476 [ 277.062618][ T8427] usb 2-1: USB disconnect, device number 52 [ 277.325309][T13183] sit0: entered promiscuous mode [ 277.336617][T13183] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 277.362975][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.383286][T13183] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 277.396591][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.415555][T13183] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 277.435019][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.455083][T13183] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 277.458566][T13188] 9pnet: Could not find request transport: fd0x0000000000000003 [ 277.470957][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.489897][T13183] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 277.505201][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.514183][T13183] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 277.533481][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.542643][T13183] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 277.552966][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.562163][T13183] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 277.575455][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.599436][T13183] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 277.609735][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.632867][T13183] netlink: 'syz.1.5486': attribute type 1 has an invalid length. [ 277.640945][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.650121][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.659320][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.668641][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.678050][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.687378][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.696535][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.705738][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 277.715022][T13183] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5486'. [ 278.115716][T13213] 9pnet: Could not find request transport: fd0x0000000000000003 [ 278.395415][ T45] usb 1-1: USB disconnect, device number 47 [ 278.475965][T13237] 9pnet: Could not find request transport: fd0x0000000000000003 [ 278.595034][ T65] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 278.766128][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.785040][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.805157][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 278.814265][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.825200][ T65] usb 3-1: SerialNumber: syz [ 278.836263][ T65] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 278.844743][ T65] usb-storage 3-1:1.0: USB Mass Storage device detected [ 278.872339][ T65] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 278.887821][ T65] scsi host1: usb-storage 3-1:1.0 [ 279.017995][T13268] 9pnet_fd: Insufficient options for proto=fd [ 279.695058][ T65] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 279.866197][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.876187][ T65] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 279.885509][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.894595][ T65] usb 1-1: config 0 descriptor?? [ 280.015109][ T5595] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 280.175054][ T5595] usb 2-1: Using ep0 maxpacket: 16 [ 280.180771][ T45] usb 3-1: USB disconnect, device number 50 [ 280.191926][ T5595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.203201][ T5595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.213801][ T5595] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.226882][ T5595] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 280.237364][ T5595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.249529][ T5595] usb 2-1: config 0 descriptor?? [ 280.306843][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 280.313038][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 280.322436][ T65] usb 1-1: USB disconnect, device number 48 [ 280.487919][ T36] audit: type=1400 audit(1762989990.680:482): avc: denied { getopt } for pid=13332 comm="syz.3.5548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 280.659408][ T5595] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 280.669137][ T5595] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 280.676778][ T5595] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 280.684064][ T5595] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 280.691616][ T5595] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 280.699075][ T5595] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 280.713136][ T5595] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 280.720969][ T5595] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 280.728608][ T5595] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 280.741540][T13342] 9pnet_fd: Insufficient options for proto=fd [ 280.741608][ T5595] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 280.755613][ T5595] HID 045e:07da: Invalid code 65791 type 1 [ 280.761714][ T5595] HID 045e:07da: Invalid code 768 type 1 [ 280.767428][ T5595] HID 045e:07da: Invalid code 769 type 1 [ 280.773113][ T5595] HID 045e:07da: Invalid code 770 type 1 [ 280.778795][ T5595] HID 045e:07da: Invalid code 771 type 1 [ 280.784458][ T5595] HID 045e:07da: Invalid code 772 type 1 [ 280.790218][ T5595] HID 045e:07da: Invalid code 773 type 1 [ 280.795964][ T5595] HID 045e:07da: Invalid code 774 type 1 [ 280.801618][ T5595] HID 045e:07da: Invalid code 775 type 1 [ 280.807293][ T5595] HID 045e:07da: Invalid code 776 type 1 [ 280.825073][ T5595] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0029/input/input32 [ 280.850021][ T5595] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 280.857927][T13312] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=13312 comm=syz.1.5539 [ 280.939652][ T65] usb 2-1: USB disconnect, device number 53 [ 280.985828][T13356] 9pnet_fd: Insufficient options for proto=fd [ 281.045380][T13363] 9pnet_fd: Insufficient options for proto=fd [ 281.275049][ T5595] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 281.295026][ T45] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 281.426161][ T5595] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 281.437315][ T5595] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 2634, setting to 64 [ 281.448951][ T5595] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 281.458102][ T5595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 281.466572][ T5595] usb 1-1: SerialNumber: syz [ 281.471504][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.482519][T13361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.490200][ T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 281.501793][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.511673][ T45] usb 4-1: config 0 descriptor?? [ 281.710621][T13361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.789832][T13384] 9pnet_fd: Insufficient options for proto=fd [ 281.920316][ T5595] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 281.934906][ T5595] usb-storage 1-1:1.0: USB Mass Storage device detected [ 281.945156][ T5595] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 281.963716][ T5595] scsi host1: usb-storage 1-1:1.0 [ 281.979944][ T5595] usb 1-1: USB disconnect, device number 49 [ 282.122649][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 282.131346][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 282.153475][ T45] usb 4-1: USB disconnect, device number 45 [ 282.511306][T13405] 9pnet_fd: Insufficient options for proto=fd [ 282.615025][ T423] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 282.775004][ T423] usb 3-1: Using ep0 maxpacket: 16 [ 282.786072][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.805204][ T423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.825156][ T423] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.855005][ T423] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 282.874393][ T423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.893607][ T423] usb 3-1: config 0 descriptor?? [ 282.915020][ T31] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 283.076046][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 283.095049][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 283.115885][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 283.125269][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 283.133484][ T31] usb 2-1: SerialNumber: syz [ 283.150177][ T31] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 283.165515][ T31] usb-storage 2-1:1.0: USB Mass Storage device detected [ 283.183633][ T31] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 283.213104][ T31] scsi host1: usb-storage 2-1:1.0 [ 283.307638][ T423] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 283.314930][ T423] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 283.326558][ T423] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 283.333917][ T423] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 283.341564][ T423] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 283.348897][ T423] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 283.356340][ T423] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 283.363600][ T423] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 283.370890][ T423] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 283.378175][ T423] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 283.393380][ T423] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002A/input/input33 [ 283.409108][ T423] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 283.453501][T13438] __nla_validate_parse: 49 callbacks suppressed [ 283.453524][T13438] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.5591'. [ 283.522352][T13395] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=13395 comm=syz.2.5573 [ 283.536012][ T45] usb 3-1: USB disconnect, device number 51 [ 283.685000][ T423] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 283.846197][ T423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.856138][ T423] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 283.865488][ T423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.874466][ T423] usb 1-1: config 0 descriptor?? [ 284.484649][ T423] usbhid 1-1:0.0: can't add hid device: -71 [ 284.491111][ T423] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 284.501851][ T423] usb 1-1: USB disconnect, device number 50 [ 284.595036][ T5594] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 284.746339][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.757554][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.769743][ T5594] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.783134][ T5594] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.792523][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.801994][ T5594] usb 3-1: config 0 descriptor?? [ 285.222958][ T5594] usbhid 3-1:0.0: can't add hid device: -71 [ 285.235205][ T5594] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 285.254462][ T5594] usb 3-1: USB disconnect, device number 52 [ 285.285428][ T45] usb 2-1: USB disconnect, device number 54 [ 285.538370][T13505] FAULT_INJECTION: forcing a failure. [ 285.538370][T13505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.551657][T13505] CPU: 0 UID: 0 PID: 13505 Comm: syz.3.5620 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 285.551694][T13505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.551710][T13505] Call Trace: [ 285.551718][T13505] [ 285.551728][T13505] __dump_stack+0x21/0x30 [ 285.551766][T13505] dump_stack_lvl+0x10c/0x190 [ 285.551797][T13505] ? __cfi_dump_stack_lvl+0x10/0x10 [ 285.551829][T13505] ? check_stack_object+0x12c/0x140 [ 285.551853][T13505] dump_stack+0x19/0x20 [ 285.551882][T13505] should_fail_ex+0x3d9/0x530 [ 285.551906][T13505] should_fail+0xf/0x20 [ 285.551928][T13505] should_fail_usercopy+0x1e/0x30 [ 285.551953][T13505] _copy_to_user+0x24/0xa0 [ 285.551982][T13505] simple_read_from_buffer+0xed/0x160 [ 285.552011][T13505] proc_fail_nth_read+0x19e/0x210 [ 285.552043][T13505] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 285.552073][T13505] ? bpf_lsm_file_permission+0xd/0x20 [ 285.552106][T13505] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 285.552137][T13505] vfs_read+0x27d/0xc70 [ 285.552158][T13505] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 285.552180][T13505] ? __cfi_vfs_read+0x10/0x10 [ 285.552200][T13505] ? __kasan_check_write+0x18/0x20 [ 285.552234][T13505] ? mutex_lock+0x92/0x1c0 [ 285.552256][T13505] ? __cfi_mutex_lock+0x10/0x10 [ 285.552277][T13505] ? __fget_files+0x2c5/0x340 [ 285.552313][T13505] ksys_read+0x141/0x250 [ 285.552335][T13505] ? __cfi_ksys_read+0x10/0x10 [ 285.552356][T13505] ? __kasan_check_read+0x15/0x20 [ 285.552391][T13505] __x64_sys_read+0x7f/0x90 [ 285.552413][T13505] x64_sys_call+0x2638/0x2ee0 [ 285.552447][T13505] do_syscall_64+0x58/0xf0 [ 285.552476][T13505] ? clear_bhb_loop+0x50/0xa0 [ 285.552502][T13505] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 285.552527][T13505] RIP: 0033:0x7f3c4db8e0dc [ 285.552547][T13505] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 285.552567][T13505] RSP: 002b:00007f3c4e9a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.552592][T13505] RAX: ffffffffffffffda RBX: 00007f3c4dde5fa0 RCX: 00007f3c4db8e0dc [ 285.552610][T13505] RDX: 000000000000000f RSI: 00007f3c4e9a10a0 RDI: 0000000000000008 [ 285.552626][T13505] RBP: 00007f3c4e9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 285.552641][T13505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.552656][T13505] R13: 00007f3c4dde6038 R14: 00007f3c4dde5fa0 R15: 00007ffcf1302eb8 [ 285.552677][T13505] [ 285.635110][ T45] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 285.966101][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.977220][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 285.995246][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 286.004607][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 286.017551][ T45] usb 2-1: SerialNumber: syz [ 286.024201][ T45] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 286.045231][ T45] usb-storage 2-1:1.0: USB Mass Storage device detected [ 286.085480][ T45] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 286.105036][ T45] scsi host1: usb-storage 2-1:1.0 [ 286.205046][ T5594] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 286.213373][T13538] rust_binder: Write failure EFAULT in pid:725 [ 286.366500][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.393912][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.414406][ T5594] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.435193][ T5594] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.455718][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.468036][ T5594] usb 3-1: config 0 descriptor?? [ 286.875961][ T5594] usbhid 3-1:0.0: can't add hid device: -71 [ 286.882092][ T5594] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 286.891047][ T5594] usb 3-1: USB disconnect, device number 53 [ 287.366308][ T45] usb 2-1: USB disconnect, device number 55 [ 287.503950][ T36] audit: type=1400 audit(1762989997.690:483): avc: denied { write accept } for pid=13568 comm="syz.2.5648" path="socket:[81075]" dev="sockfs" ino=81075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 287.705031][ T331] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 287.815014][ T5594] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 287.856111][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.866323][ T331] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.879407][ T331] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 287.889208][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.898586][ T331] usb 4-1: config 0 descriptor?? [ 287.904625][ T331] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 287.914149][T13577] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.5655'. [ 287.966083][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.985006][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.995152][ T5594] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.010062][ T5594] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.019698][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.030044][ T5594] usb 3-1: config 0 descriptor?? [ 288.443083][ T5594] usbhid 3-1:0.0: can't add hid device: -71 [ 288.449810][ T5594] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 288.470135][ T5594] usb 3-1: USB disconnect, device number 54 [ 288.658064][T13602] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.5666'. [ 288.847532][T13619] 9pnet_fd: Insufficient options for proto=fd [ 288.865024][ T65] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 288.970608][T13623] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.5676'. [ 289.018975][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.030781][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.041525][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 289.053936][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 289.064161][ T65] usb 1-1: SerialNumber: syz [ 289.072788][ T65] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 289.081476][ T65] usb-storage 1-1:1.0: USB Mass Storage device detected [ 289.094745][ T65] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 289.104831][ T65] scsi host1: usb-storage 1-1:1.0 [ 289.395076][ T65] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 289.556139][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.567911][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.577827][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.590766][ T65] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.599865][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.608502][ T65] usb 2-1: config 0 descriptor?? [ 289.755006][ T5594] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 289.905012][ T5594] usb 3-1: Using ep0 maxpacket: 16 [ 289.911848][ T5594] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.922138][ T5594] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.932969][ T5594] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.942125][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.950192][ T5594] usb 3-1: Product: syz [ 289.954390][ T5594] usb 3-1: Manufacturer: syz [ 289.959031][ T5594] usb 3-1: SerialNumber: syz [ 290.017486][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 290.023549][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 290.032441][ T65] usb 2-1: USB disconnect, device number 56 [ 290.228643][ T5594] usb 3-1: 0:13 : does not exist [ 290.233894][ T5594] usb 3-1: 0:36 : does not exist [ 290.241526][ T5594] usb 3-1: USB disconnect, device number 55 [ 290.261128][ T506] udevd[506]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 290.277325][T13655] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.5688'. [ 290.342666][ T423] usb 1-1: USB disconnect, device number 51 [ 290.463672][ T5594] usb 4-1: USB disconnect, device number 46 [ 290.553941][T13681] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.5700'. [ 290.735713][T13699] 9pnet_fd: Insufficient options for proto=fd [ 290.867762][ T65] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 290.955415][T13719] 9pnet_fd: Insufficient options for proto=fd [ 291.036065][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.055000][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.068321][ T65] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 291.077674][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.092405][ T65] usb 3-1: config 0 descriptor?? [ 291.099174][ T65] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 291.225015][ T5594] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 291.376074][ T5594] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 291.387651][ T5594] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 74, setting to 64 [ 291.400895][ T5594] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 291.410239][ T5594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 291.419588][ T5594] usb 4-1: SerialNumber: syz [ 291.427017][T13725] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 291.636290][T13725] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 291.844796][ T5594] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 291.856417][ T5594] usb-storage 4-1:1.0: USB Mass Storage device detected [ 291.875697][ T5594] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 291.884386][ T5594] scsi host1: usb-storage 4-1:1.0 [ 291.893765][ T5594] usb 4-1: USB disconnect, device number 47 [ 293.075041][ T45] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 293.115019][ T5594] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 293.236320][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 293.247687][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.258707][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 293.268200][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 293.276531][ T45] usb 1-1: SerialNumber: syz [ 293.286095][ T5594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.286366][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 293.305034][ T5594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.305924][ T45] usb-storage 1-1:1.0: USB Mass Storage device detected [ 293.322852][ T5594] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.336219][ T5594] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.345448][ T5594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.346411][ T45] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 293.355439][ T5594] usb 2-1: config 0 descriptor?? [ 293.371430][ T45] scsi host1: usb-storage 1-1:1.0 [ 293.634216][ T65] usb 3-1: USB disconnect, device number 56 [ 293.775780][ T5594] usbhid 2-1:0.0: can't add hid device: -71 [ 293.786560][ T5594] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 293.796797][ T5594] usb 2-1: USB disconnect, device number 57 [ 293.842960][T13904] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.5804'. [ 293.940548][T13908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:312 [ 294.645040][ T65] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 294.696657][T13999] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.5851'. [ 294.816137][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.827177][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.837072][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.850151][ T65] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.861403][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.872146][ T65] usb 4-1: config 0 descriptor?? [ 294.915077][T14018] 9pnet_fd: Insufficient options for proto=fd [ 295.199829][T14040] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.5869'. [ 295.295393][T14046] 9pnet_fd: Insufficient options for proto=fd [ 295.354692][T14052] 9pnet_fd: Insufficient options for proto=fd [ 295.435509][ T5594] usb 1-1: USB disconnect, device number 52 [ 295.481652][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 295.491690][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 295.503682][ T65] usb 4-1: USB disconnect, device number 48 [ 295.665423][T14072] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.5886'. [ 295.825069][ T5594] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 295.996547][ T5594] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.020510][T14107] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.5903'. [ 296.021136][ T5594] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 296.040800][ T5594] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 296.050354][ T5594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 296.076747][ T5594] usb 1-1: SerialNumber: syz [ 296.091550][ T5594] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 296.114252][ T5594] usb-storage 1-1:1.0: USB Mass Storage device detected [ 296.125776][ T5594] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 296.135025][ T5594] scsi host1: usb-storage 1-1:1.0 [ 296.215409][T14126] 9pnet_fd: Insufficient options for proto=fd [ 296.695397][T14169] 9pnet_fd: Insufficient options for proto=fd [ 297.023362][T14193] 9pnet_fd: Insufficient options for proto=fd [ 297.806669][T14210] 9pnet_fd: Insufficient options for proto=fd [ 298.056193][T14222] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.5955'. [ 298.136554][ T331] usb 1-1: USB disconnect, device number 53 [ 298.192933][T14234] 9pnet_fd: Insufficient options for proto=fd [ 298.365013][ T45] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 298.405380][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 298.526120][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.547295][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.566053][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.567863][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 298.585070][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.604987][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 298.605240][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.614980][ T45] usb 4-1: SerialNumber: syz [ 298.642458][ T45] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 298.651858][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.663166][ T45] usb-storage 4-1:1.0: USB Mass Storage device detected [ 298.670173][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.681583][ T45] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 298.689837][ T10] usb 3-1: config 0 descriptor?? [ 298.705021][ T45] scsi host1: usb-storage 4-1:1.0 [ 299.075976][T14260] 9pnet_fd: Insufficient options for proto=fd [ 299.285597][T14278] 9pnet_fd: Insufficient options for proto=fd [ 299.301526][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 299.314257][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 299.326446][ T10] usb 3-1: USB disconnect, device number 57 [ 299.697217][T14308] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.5990'. [ 299.839539][T14330] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.6006'. [ 299.927139][ T331] usb 4-1: USB disconnect, device number 49 [ 300.004599][T14356] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.6020'. [ 300.185000][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 300.356115][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.374984][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.384920][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.414998][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.424096][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.445728][ T10] usb 3-1: config 0 descriptor?? [ 300.688529][T14416] 9pnet: Could not find request transport: fd0x0000000000000005 [ 301.053450][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 301.065031][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 301.083998][ T10] usb 3-1: USB disconnect, device number 58 [ 301.373050][T14440] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.6060'. [ 301.505402][T14450] 9pnet_fd: Insufficient options for proto=fd [ 301.528575][T14452] 9pnet_fd: Insufficient options for proto=fd [ 301.626792][T14459] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.6070'. [ 301.976774][T14476] 9pnet_fd: Insufficient options for proto=fd [ 302.034844][T14480] 9pnet_fd: Insufficient options for proto=fd [ 302.249528][T14486] 9pnet_fd: Insufficient options for proto=fd [ 302.467515][T14497] 9pnet_fd: Insufficient options for proto=fd [ 302.696837][T14509] 9pnet_fd: Insufficient options for proto=fd [ 302.778708][T14517] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.6095'. [ 303.419594][T14528] 9pnet_fd: Insufficient options for proto=fd [ 303.621632][T14546] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.6109'. [ 303.837750][T14565] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.6119'. [ 304.226963][T14595] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.6133'. [ 305.121205][T14633] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.6145'. [ 305.935949][T14660] 9pnet_fd: Insufficient options for proto=fd [ 306.075007][ T65] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 306.144077][T14682] 9pnet_fd: Insufficient options for proto=fd [ 306.256057][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.275474][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.293849][ T65] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 306.303613][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.323147][ T65] usb 1-1: config 0 descriptor?? [ 306.585010][ T45] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 306.715011][ T45] usb 3-1: device descriptor read/64, error -71 [ 306.725077][T14705] 9pnet_fd: Insufficient options for proto=fd [ 306.731979][ T65] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 306.751406][ T65] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002B/input/input34 [ 306.825113][ T65] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 306.933625][ T65] usb 1-1: USB disconnect, device number 54 [ 306.965008][ T45] usb 3-1: device descriptor read/64, error -71 [ 307.205011][ T45] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 307.335225][ T45] usb 3-1: device descriptor read/64, error -71 [ 307.585007][ T45] usb 3-1: device descriptor read/64, error -71 [ 307.695184][ T45] usb usb3-port1: attempt power cycle [ 307.814998][ T65] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 307.966172][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.977123][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.987067][ T65] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 307.996349][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.005326][ T65] usb 1-1: config 0 descriptor?? [ 308.035056][ T45] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 308.056099][ T45] usb 3-1: device descriptor read/8, error -71 [ 308.085004][ T5595] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 308.186101][ T45] usb 3-1: device descriptor read/8, error -71 [ 308.236154][ T5595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.247210][ T5595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.257029][ T5595] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 308.266169][ T5595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.276354][ T5595] usb 2-1: config 0 descriptor?? [ 308.359296][T14806] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 308.416672][ T65] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 308.425009][ T45] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 308.433164][ T65] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002C/input/input35 [ 308.446125][ T45] usb 3-1: device descriptor read/8, error -71 [ 308.513395][ T65] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 308.576062][ T45] usb 3-1: device descriptor read/8, error -71 [ 308.618147][ T331] usb 1-1: USB disconnect, device number 55 [ 308.685159][ T45] usb usb3-port1: unable to enumerate USB device [ 308.695580][ T5595] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 308.706021][ T5595] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002D/input/input36 [ 308.777655][ T5595] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 308.901731][ T10] usb 2-1: USB disconnect, device number 58 [ 309.173572][T14841] 9pnet: Could not find request transport: fd0x0000000000000003 [ 309.246987][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6258'. [ 309.385089][T14865] 9pnet_fd: Insufficient options for proto=fd [ 309.471563][T14878] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.6272'. [ 309.505001][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 309.513575][T14885] 9pnet_fd: Insufficient options for proto=fd [ 309.634753][T14905] 9pnet_fd: Insufficient options for proto=fd [ 309.666217][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.677534][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 309.690617][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.700252][ T10] usb 1-1: config 0 descriptor?? [ 309.769187][T14921] validate_nla: 55 callbacks suppressed [ 309.769209][T14921] netlink: 'syz.1.6293': attribute type 29 has an invalid length. [ 309.801177][T14926] 9pnet_fd: Insufficient options for proto=fd [ 309.815016][ T65] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 309.822674][T14928] 9pnet_fd: Insufficient options for proto=fd [ 309.976103][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.987188][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.987614][T14946] 9pnet_fd: Insufficient options for proto=fd [ 309.997048][ T65] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 310.012349][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.021633][ T65] usb 4-1: config 0 descriptor?? [ 310.041413][T14950] 9pnet_fd: Insufficient options for proto=fd [ 310.085019][ T5595] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 310.173637][T14964] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.6314'. [ 310.218100][T14968] 9pnet_fd: Insufficient options for proto=fd [ 310.236152][ T5595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.247288][ T5595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.257374][ T5595] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.270564][ T5595] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.279893][ T5595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.288659][ T5595] usb 3-1: config 0 descriptor?? [ 310.431993][ T65] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor [ 310.443770][ T65] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002E/input/input37 [ 310.525222][ T65] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 310.645356][ T45] usb 4-1: USB disconnect, device number 50 [ 310.898973][ T5595] usbhid 3-1:0.0: can't add hid device: -71 [ 310.906636][ T5595] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 310.919359][ T5595] usb 3-1: USB disconnect, device number 63 [ 311.696590][ T36] audit: type=1400 audit(1762990021.890:484): avc: denied { mount } for pid=15019 comm="syz.3.6340" name="/" dev="ramfs" ino=88905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 312.275462][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 312.281788][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 312.319096][ T10] usb 1-1: USB disconnect, device number 56 [ 312.831161][T15057] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6356'. [ 312.840565][T15057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6356'. [ 312.936813][T15067] 9pnet_fd: Insufficient options for proto=fd [ 313.193939][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6369'. [ 313.245702][T15099] 9pnet_fd: Insufficient options for proto=fd [ 313.278093][T15105] FAULT_INJECTION: forcing a failure. [ 313.278093][T15105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.295625][T15105] CPU: 0 UID: 0 PID: 15105 Comm: syz.3.6379 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 313.295663][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.295678][T15105] Call Trace: [ 313.295685][T15105] [ 313.295693][T15105] __dump_stack+0x21/0x30 [ 313.295728][T15105] dump_stack_lvl+0x10c/0x190 [ 313.295756][T15105] ? __cfi_dump_stack_lvl+0x10/0x10 [ 313.295787][T15105] dump_stack+0x19/0x20 [ 313.295815][T15105] should_fail_ex+0x3d9/0x530 [ 313.295841][T15105] should_fail+0xf/0x20 [ 313.295861][T15105] should_fail_usercopy+0x1e/0x30 [ 313.295885][T15105] _copy_from_iter+0x1a3/0x14d0 [ 313.295912][T15105] ? kmalloc_reserve+0xcf/0x500 [ 313.295941][T15105] ? __virt_addr_valid+0x2a6/0x380 [ 313.295968][T15105] ? __cfi__copy_from_iter+0x10/0x10 [ 313.295994][T15105] ? __check_object_size+0x50a/0x810 [ 313.296015][T15105] ? __cfi___check_object_size+0x10/0x10 [ 313.296034][T15105] ? skb_put+0x112/0x1f0 [ 313.296057][T15105] netlink_sendmsg+0x680/0xaf0 [ 313.296090][T15105] ? __cfi_netlink_sendmsg+0x10/0x10 [ 313.296124][T15105] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 313.296152][T15105] ? security_socket_sendmsg+0x33/0xd0 [ 313.296176][T15105] ? __cfi_netlink_sendmsg+0x10/0x10 [ 313.296208][T15105] ____sys_sendmsg+0xa15/0xa70 [ 313.296242][T15105] ? __sys_sendmsg_sock+0x50/0x50 [ 313.296292][T15105] ? import_iovec+0x81/0xb0 [ 313.296322][T15105] ___sys_sendmsg+0x220/0x2a0 [ 313.296353][T15105] ? __sys_sendmsg+0x280/0x280 [ 313.296387][T15105] ? proc_fail_nth_write+0x17e/0x210 [ 313.296417][T15105] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 313.296456][T15105] __x64_sys_sendmsg+0x1eb/0x2c0 [ 313.296490][T15105] ? fput+0x1a5/0x240 [ 313.296517][T15105] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 313.296550][T15105] ? ksys_write+0x1ef/0x250 [ 313.296574][T15105] ? __kasan_check_read+0x15/0x20 [ 313.296610][T15105] x64_sys_call+0x2a4c/0x2ee0 [ 313.296645][T15105] do_syscall_64+0x58/0xf0 [ 313.296675][T15105] ? clear_bhb_loop+0x50/0xa0 [ 313.296700][T15105] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 313.296723][T15105] RIP: 0033:0x7f3c4db8f6c9 [ 313.296742][T15105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.296761][T15105] RSP: 002b:00007f3c4e9a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.296786][T15105] RAX: ffffffffffffffda RBX: 00007f3c4dde5fa0 RCX: 00007f3c4db8f6c9 [ 313.296805][T15105] RDX: 0000000000000804 RSI: 0000200000000080 RDI: 0000000000000005 [ 313.296820][T15105] RBP: 00007f3c4e9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 313.296836][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.296848][T15105] R13: 00007f3c4dde6038 R14: 00007f3c4dde5fa0 R15: 00007ffcf1302eb8 [ 313.296866][T15105] [ 313.535029][ T5595] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 313.741176][ T5595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.752716][ T5595] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 313.762728][ T5595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.778682][ T5595] usb 2-1: config 0 descriptor?? [ 315.026991][ T36] audit: type=1326 audit(1762990025.220:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15212 comm="syz.2.6428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f510cd8f6c9 code=0x0 [ 315.058705][T15215] FAULT_INJECTION: forcing a failure. [ 315.058705][T15215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.072212][T15215] CPU: 1 UID: 0 PID: 15215 Comm: syz.0.6429 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 315.072251][T15215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.072268][T15215] Call Trace: [ 315.072276][T15215] [ 315.072286][T15215] __dump_stack+0x21/0x30 [ 315.072330][T15215] dump_stack_lvl+0x10c/0x190 [ 315.072362][T15215] ? __cfi_dump_stack_lvl+0x10/0x10 [ 315.072396][T15215] dump_stack+0x19/0x20 [ 315.072427][T15215] should_fail_ex+0x3d9/0x530 [ 315.072452][T15215] should_fail+0xf/0x20 [ 315.072473][T15215] should_fail_usercopy+0x1e/0x30 [ 315.072497][T15215] _copy_from_iter+0x1a3/0x14d0 [ 315.072525][T15215] ? kmalloc_reserve+0xcf/0x500 [ 315.072554][T15215] ? __virt_addr_valid+0x2a6/0x380 [ 315.072579][T15215] ? __cfi__copy_from_iter+0x10/0x10 [ 315.072606][T15215] ? __check_object_size+0x50a/0x810 [ 315.072627][T15215] ? __cfi___check_object_size+0x10/0x10 [ 315.072648][T15215] ? skb_put+0x112/0x1f0 [ 315.072676][T15215] netlink_sendmsg+0x680/0xaf0 [ 315.072712][T15215] ? __cfi_netlink_sendmsg+0x10/0x10 [ 315.072744][T15215] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 315.072771][T15215] ? security_socket_sendmsg+0x33/0xd0 [ 315.072799][T15215] ? __cfi_netlink_sendmsg+0x10/0x10 [ 315.072822][T15215] ____sys_sendmsg+0xa15/0xa70 [ 315.072848][T15215] ? __sys_sendmsg_sock+0x50/0x50 [ 315.072873][T15215] ? import_iovec+0x81/0xb0 [ 315.072895][T15215] ___sys_sendmsg+0x220/0x2a0 [ 315.072918][T15215] ? __sys_sendmsg+0x280/0x280 [ 315.072942][T15215] ? proc_fail_nth_write+0x17e/0x210 [ 315.072964][T15215] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 315.072992][T15215] __x64_sys_sendmsg+0x1eb/0x2c0 [ 315.073015][T15215] ? fput+0x1a5/0x240 [ 315.073037][T15215] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 315.073062][T15215] ? ksys_write+0x1ef/0x250 [ 315.073078][T15215] ? __kasan_check_read+0x15/0x20 [ 315.073104][T15215] x64_sys_call+0x2a4c/0x2ee0 [ 315.073128][T15215] do_syscall_64+0x58/0xf0 [ 315.073150][T15215] ? clear_bhb_loop+0x50/0xa0 [ 315.073169][T15215] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 315.073186][T15215] RIP: 0033:0x7f186cf8f6c9 [ 315.073201][T15215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.073215][T15215] RSP: 002b:00007f186ddf3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.073233][T15215] RAX: ffffffffffffffda RBX: 00007f186d1e5fa0 RCX: 00007f186cf8f6c9 [ 315.073246][T15215] RDX: 0000000000000804 RSI: 0000200000000080 RDI: 0000000000000005 [ 315.073257][T15215] RBP: 00007f186ddf3090 R08: 0000000000000000 R09: 0000000000000000 [ 315.073268][T15215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.073278][T15215] R13: 00007f186d1e6038 R14: 00007f186d1e5fa0 R15: 00007ffe851331c8 [ 315.073293][T15215] [ 315.387087][T15219] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 315.391832][T15226] 9pnet_fd: Insufficient options for proto=fd [ 315.711744][T15240] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6440'. [ 315.875257][T15246] 9pnet_fd: Insufficient options for proto=fd [ 316.197635][ T36] audit: type=1400 audit(1762990026.390:486): avc: denied { bind } for pid=15264 comm="syz.0.6453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.225690][T15265] SELinux: policydb string length 1836477231 does not match expected length 8 [ 316.255010][T15265] SELinux: failed to load policy [ 316.314335][ T5595] usbhid 2-1:0.0: can't add hid device: -71 [ 316.321857][ T5595] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 316.345870][ T5595] usb 2-1: USB disconnect, device number 59 [ 316.476558][ T36] audit: type=1400 audit(1762990026.660:487): avc: denied { bind } for pid=15285 comm="syz.3.6462" laddr=172.20.20.10 lport=255 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.525005][ T36] audit: type=1400 audit(1762990026.660:488): avc: denied { name_bind } for pid=15285 comm="syz.3.6462" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 316.546110][T15286] netlink: 'syz.3.6462': attribute type 15 has an invalid length. [ 316.573047][ T36] audit: type=1400 audit(1762990026.660:489): avc: denied { node_bind } for pid=15285 comm="syz.3.6462" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 316.845009][ T5594] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 316.996060][ T5594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.019658][ T5594] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 317.039714][ T5594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.061390][ T5594] usb 2-1: config 0 descriptor?? [ 317.252204][T15327] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 317.262738][T15326] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 317.280172][ T36] audit: type=1400 audit(1762990027.470:490): avc: denied { read } for pid=15325 comm="syz.0.6473" name="/" dev="configfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 317.330259][ T36] audit: type=1400 audit(1762990027.470:491): avc: denied { open } for pid=15325 comm="syz.0.6473" path="/" dev="configfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 317.718362][ T36] audit: type=1404 audit(1762990027.910:492): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 317.783868][ T36] audit: type=1404 audit(1762990027.910:493): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 317.806226][ T36] audit: type=1404 audit(1762990027.930:494): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 317.821201][ T36] audit: type=1400 audit(1762990027.930:495): avc: denied { execute } for pid=15345 comm="syz.0.6489" path="/515/cpuacct.usage_percpu" dev="tmpfs" ino=3142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 317.845297][ T36] audit: type=1400 audit(1762990027.960:496): avc: denied { read write } for pid=10746 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 317.869656][ T36] audit: type=1400 audit(1762990027.970:497): avc: denied { execute } for pid=15347 comm="syz.0.6490" path="/516/cpuacct.usage_percpu" dev="tmpfs" ino=3149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 317.897091][ T36] audit: type=1400 audit(1762990028.090:498): avc: denied { read write } for pid=10746 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 317.929321][ T36] audit: type=1400 audit(1762990028.120:499): avc: denied { execute } for pid=15349 comm="syz.0.6492" path="/517/cpuacct.usage_percpu" dev="tmpfs" ino=3155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 318.065369][T15354] FAULT_INJECTION: forcing a failure. [ 318.065369][T15354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.078739][T15354] CPU: 1 UID: 0 PID: 15354 Comm: syz.3.6491 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 318.078778][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 318.078794][T15354] Call Trace: [ 318.078802][T15354] [ 318.078812][T15354] __dump_stack+0x21/0x30 [ 318.078848][T15354] dump_stack_lvl+0x10c/0x190 [ 318.078880][T15354] ? __cfi_dump_stack_lvl+0x10/0x10 [ 318.078911][T15354] ? vsnprintf+0x7b4/0x1aa0 [ 318.078938][T15354] ? check_stack_object+0x107/0x140 [ 318.078962][T15354] dump_stack+0x19/0x20 [ 318.078991][T15354] should_fail_ex+0x3d9/0x530 [ 318.079015][T15354] should_fail+0xf/0x20 [ 318.079038][T15354] should_fail_usercopy+0x1e/0x30 [ 318.079063][T15354] _copy_from_user+0x22/0xb0 [ 318.079092][T15354] kstrtouint_from_user+0xc2/0x150 [ 318.079115][T15354] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 318.079137][T15354] ? selinux_file_permission+0x309/0xb30 [ 318.079168][T15354] ? __cfi_selinux_file_permission+0x10/0x10 [ 318.079196][T15354] proc_fail_nth_write+0x89/0x210 [ 318.079227][T15354] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 318.079258][T15354] ? bpf_lsm_file_permission+0xd/0x20 [ 318.079297][T15354] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 318.079328][T15354] vfs_write+0x3c0/0xf30 [ 318.079350][T15354] ? __cfi_vfs_write+0x10/0x10 [ 318.079370][T15354] ? __kasan_check_write+0x18/0x20 [ 318.079404][T15354] ? mutex_lock+0x92/0x1c0 [ 318.079426][T15354] ? __cfi_mutex_lock+0x10/0x10 [ 318.079469][T15354] ? __fget_files+0x2c5/0x340 [ 318.079496][T15354] ksys_write+0x141/0x250 [ 318.079517][T15354] ? __cfi_ksys_write+0x10/0x10 [ 318.079539][T15354] ? __kasan_check_read+0x15/0x20 [ 318.079574][T15354] __x64_sys_write+0x7f/0x90 [ 318.079597][T15354] x64_sys_call+0x271c/0x2ee0 [ 318.079632][T15354] do_syscall_64+0x58/0xf0 [ 318.079661][T15354] ? clear_bhb_loop+0x50/0xa0 [ 318.079686][T15354] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 318.079733][T15354] RIP: 0033:0x7f3c4db8e17f [ 318.079753][T15354] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 318.079774][T15354] RSP: 002b:00007f3c4e9a1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 318.079801][T15354] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c4db8e17f [ 318.079819][T15354] RDX: 0000000000000001 RSI: 00007f3c4e9a10a0 RDI: 0000000000000005 [ 318.079834][T15354] RBP: 00007f3c4e9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 318.079850][T15354] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 318.079865][T15354] R13: 00007f3c4dde6038 R14: 00007f3c4dde5fa0 R15: 00007ffcf1302eb8 [ 318.079887][T15354] [ 318.960829][T15380] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.6505'. [ 319.072590][T15405] netlink: 4100 bytes leftover after parsing attributes in process `syz.2.6517'. [ 319.199998][T15431] netlink: 4100 bytes leftover after parsing attributes in process `syz.0.6529'. [ 319.338651][T15459] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.6541'. [ 319.453729][T15484] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.6554'. [ 319.570104][T15509] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.6566'. [ 319.607943][ T5594] usbhid 2-1:0.0: can't add hid device: -71 [ 319.625023][ T5594] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 319.645485][ T5594] usb 2-1: USB disconnect, device number 60 [ 319.695849][T15528] syz.3.6575 (15528): /proc/15527/oom_adj is deprecated, please use /proc/15527/oom_score_adj instead. [ 319.746323][T15532] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.6577'. [ 320.525142][T15631] FAULT_INJECTION: forcing a failure. [ 320.525142][T15631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.538378][T15631] CPU: 0 UID: 0 PID: 15631 Comm: syz.0.6624 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 320.538415][T15631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.538431][T15631] Call Trace: [ 320.538440][T15631] [ 320.538449][T15631] __dump_stack+0x21/0x30 [ 320.538485][T15631] dump_stack_lvl+0x10c/0x190 [ 320.538516][T15631] ? __cfi_dump_stack_lvl+0x10/0x10 [ 320.538547][T15631] ? check_stack_object+0x12c/0x140 [ 320.538570][T15631] dump_stack+0x19/0x20 [ 320.538599][T15631] should_fail_ex+0x3d9/0x530 [ 320.538624][T15631] should_fail+0xf/0x20 [ 320.538659][T15631] should_fail_usercopy+0x1e/0x30 [ 320.538684][T15631] _copy_to_user+0x24/0xa0 [ 320.538713][T15631] simple_read_from_buffer+0xed/0x160 [ 320.538743][T15631] proc_fail_nth_read+0x19e/0x210 [ 320.538774][T15631] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 320.538805][T15631] ? bpf_lsm_file_permission+0xd/0x20 [ 320.538836][T15631] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 320.538866][T15631] vfs_read+0x27d/0xc70 [ 320.538887][T15631] ? __cfi_vfs_read+0x10/0x10 [ 320.538906][T15631] ? __kasan_check_write+0x18/0x20 [ 320.538940][T15631] ? mutex_lock+0x92/0x1c0 [ 320.538962][T15631] ? __cfi_mutex_lock+0x10/0x10 [ 320.538983][T15631] ? __fget_files+0x2c5/0x340 [ 320.539009][T15631] ksys_read+0x141/0x250 [ 320.539030][T15631] ? __cfi_ksys_read+0x10/0x10 [ 320.539050][T15631] ? fdget+0x189/0x1f0 [ 320.539074][T15631] ? __kasan_check_read+0x15/0x20 [ 320.539108][T15631] __x64_sys_read+0x7f/0x90 [ 320.539129][T15631] x64_sys_call+0x2638/0x2ee0 [ 320.539162][T15631] do_syscall_64+0x58/0xf0 [ 320.539323][T15631] ? clear_bhb_loop+0x50/0xa0 [ 320.539351][T15631] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 320.539376][T15631] RIP: 0033:0x7f186cf8e0dc [ 320.539396][T15631] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 320.539417][T15631] RSP: 002b:00007f186ddf3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.539441][T15631] RAX: ffffffffffffffda RBX: 00007f186d1e5fa0 RCX: 00007f186cf8e0dc [ 320.539460][T15631] RDX: 000000000000000f RSI: 00007f186ddf30a0 RDI: 0000000000000005 [ 320.539475][T15631] RBP: 00007f186ddf3090 R08: 0000000000000000 R09: 0000000000000000 [ 320.539491][T15631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.539505][T15631] R13: 00007f186d1e6038 R14: 00007f186d1e5fa0 R15: 00007ffe851331c8 [ 320.539525][T15631] [ 321.026742][T15719] FAULT_INJECTION: forcing a failure. [ 321.026742][T15719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.039969][T15719] CPU: 1 UID: 0 PID: 15719 Comm: syz.0.6667 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 321.040009][T15719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.040024][T15719] Call Trace: [ 321.040033][T15719] [ 321.040042][T15719] __dump_stack+0x21/0x30 [ 321.040078][T15719] dump_stack_lvl+0x10c/0x190 [ 321.040106][T15719] ? __cfi_dump_stack_lvl+0x10/0x10 [ 321.040136][T15719] ? check_stack_object+0x12c/0x140 [ 321.040158][T15719] dump_stack+0x19/0x20 [ 321.040187][T15719] should_fail_ex+0x3d9/0x530 [ 321.040211][T15719] should_fail+0xf/0x20 [ 321.040231][T15719] should_fail_usercopy+0x1e/0x30 [ 321.040256][T15719] _copy_to_user+0x24/0xa0 [ 321.040283][T15719] simple_read_from_buffer+0xed/0x160 [ 321.040313][T15719] proc_fail_nth_read+0x19e/0x210 [ 321.040342][T15719] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 321.040372][T15719] ? bpf_lsm_file_permission+0xd/0x20 [ 321.040404][T15719] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 321.040433][T15719] vfs_read+0x27d/0xc70 [ 321.040463][T15719] ? __cfi_vfs_read+0x10/0x10 [ 321.040482][T15719] ? __kasan_check_write+0x18/0x20 [ 321.040514][T15719] ? mutex_lock+0x92/0x1c0 [ 321.040536][T15719] ? __cfi_mutex_lock+0x10/0x10 [ 321.040558][T15719] ? __fget_files+0x2c5/0x340 [ 321.040585][T15719] ksys_read+0x141/0x250 [ 321.040606][T15719] ? __cfi_ksys_read+0x10/0x10 [ 321.040625][T15719] ? fdget+0x189/0x1f0 [ 321.040650][T15719] ? __kasan_check_read+0x15/0x20 [ 321.040684][T15719] __x64_sys_read+0x7f/0x90 [ 321.040706][T15719] x64_sys_call+0x2638/0x2ee0 [ 321.040741][T15719] do_syscall_64+0x58/0xf0 [ 321.040771][T15719] ? clear_bhb_loop+0x50/0xa0 [ 321.040797][T15719] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 321.040822][T15719] RIP: 0033:0x7f186cf8e0dc [ 321.040842][T15719] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 321.040861][T15719] RSP: 002b:00007f186ddf3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.040885][T15719] RAX: ffffffffffffffda RBX: 00007f186d1e5fa0 RCX: 00007f186cf8e0dc [ 321.040901][T15719] RDX: 000000000000000f RSI: 00007f186ddf30a0 RDI: 0000000000000005 [ 321.040915][T15719] RBP: 00007f186ddf3090 R08: 0000000000000000 R09: 0000000000000000 [ 321.040930][T15719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.040944][T15719] R13: 00007f186d1e6038 R14: 00007f186d1e5fa0 R15: 00007ffe851331c8 [ 321.040965][T15719] [ 321.492018][T15778] FAULT_INJECTION: forcing a failure. [ 321.492018][T15778] name failslab, interval 1, probability 0, space 0, times 0 [ 321.504769][T15778] CPU: 0 UID: 0 PID: 15778 Comm: syz.1.6695 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 321.504806][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.504821][T15778] Call Trace: [ 321.504829][T15778] [ 321.504839][T15778] __dump_stack+0x21/0x30 [ 321.504869][T15778] dump_stack_lvl+0x10c/0x190 [ 321.504890][T15778] ? __cfi_dump_stack_lvl+0x10/0x10 [ 321.504912][T15778] ? stack_depot_save_flags+0x38/0x800 [ 321.504935][T15778] ? skb_free_datagram+0x19/0x30 [ 321.504957][T15778] ? netlink_recvmsg+0x5cf/0xdf0 [ 321.504981][T15778] ? ___sys_recvmsg+0x1b6/0x510 [ 321.504996][T15778] dump_stack+0x19/0x20 [ 321.505017][T15778] should_fail_ex+0x3d9/0x530 [ 321.505034][T15778] should_failslab+0xac/0x100 [ 321.505052][T15778] kmem_cache_alloc_node_noprof+0x45/0x440 [ 321.505069][T15778] ? __alloc_skb+0x10c/0x370 [ 321.505088][T15778] ? __kasan_check_write+0x18/0x20 [ 321.505113][T15778] ? mutex_lock+0x92/0x1c0 [ 321.505129][T15778] __alloc_skb+0x10c/0x370 [ 321.505148][T15778] netlink_dump+0x1c8/0xe40 [ 321.505175][T15778] ? refcount_inc+0x90/0x90 [ 321.505198][T15778] ? __kfree_skb+0x18f/0x210 [ 321.505219][T15778] ? skb_free_datagram+0x19/0x30 [ 321.505240][T15778] ? consume_skb+0x65/0x1a0 [ 321.505261][T15778] netlink_recvmsg+0x677/0xdf0 [ 321.505286][T15778] ? __cfi_netlink_recvmsg+0x10/0x10 [ 321.505312][T15778] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 321.505332][T15778] ? security_socket_recvmsg+0x3a/0xf0 [ 321.505348][T15778] ? __cfi_netlink_recvmsg+0x10/0x10 [ 321.505372][T15778] sock_recvmsg+0x219/0x270 [ 321.505391][T15778] ____sys_recvmsg+0x1ca/0x460 [ 321.505416][T15778] ? __sys_recvmsg_sock+0x60/0x60 [ 321.505433][T15778] ? import_iovec+0x81/0xb0 [ 321.505454][T15778] ___sys_recvmsg+0x1b6/0x510 [ 321.505470][T15778] ? __sys_recvmsg+0x280/0x280 [ 321.505484][T15778] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 321.505501][T15778] ? selinux_file_permission+0x309/0xb30 [ 321.505522][T15778] ? __fget_files+0x2c5/0x340 [ 321.505541][T15778] do_recvmmsg+0x326/0x770 [ 321.505557][T15778] ? __sys_recvmmsg+0x290/0x290 [ 321.505571][T15778] ? __cfi_vfs_write+0x10/0x10 [ 321.505588][T15778] ? fput+0x1a5/0x240 [ 321.505608][T15778] __x64_sys_recvmmsg+0x191/0x240 [ 321.505623][T15778] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 321.505639][T15778] ? __kasan_check_read+0x15/0x20 [ 321.505664][T15778] x64_sys_call+0x292c/0x2ee0 [ 321.505688][T15778] do_syscall_64+0x58/0xf0 [ 321.505708][T15778] ? clear_bhb_loop+0x50/0xa0 [ 321.505727][T15778] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 321.505744][T15778] RIP: 0033:0x7f80d558f6c9 [ 321.505758][T15778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.505772][T15778] RSP: 002b:00007f80d63be038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 321.505791][T15778] RAX: ffffffffffffffda RBX: 00007f80d57e5fa0 RCX: 00007f80d558f6c9 [ 321.505803][T15778] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 321.505814][T15778] RBP: 00007f80d63be090 R08: 0000000000000000 R09: 0000000000000000 [ 321.505825][T15778] R10: 0000000040012160 R11: 0000000000000246 R12: 0000000000000001 [ 321.505836][T15778] R13: 00007f80d57e6038 R14: 00007f80d57e5fa0 R15: 00007ffe52499ea8 [ 321.505850][T15778] [ 321.875107][T15788] FAULT_INJECTION: forcing a failure. [ 321.875107][T15788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.888360][T15788] CPU: 0 UID: 0 PID: 15788 Comm: syz.1.6700 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 321.888398][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.888413][T15788] Call Trace: [ 321.888422][T15788] [ 321.888432][T15788] __dump_stack+0x21/0x30 [ 321.888468][T15788] dump_stack_lvl+0x10c/0x190 [ 321.888499][T15788] ? __cfi_dump_stack_lvl+0x10/0x10 [ 321.888530][T15788] ? check_stack_object+0x12c/0x140 [ 321.888553][T15788] dump_stack+0x19/0x20 [ 321.888581][T15788] should_fail_ex+0x3d9/0x530 [ 321.888605][T15788] should_fail+0xf/0x20 [ 321.888626][T15788] should_fail_usercopy+0x1e/0x30 [ 321.888651][T15788] _copy_to_user+0x24/0xa0 [ 321.888679][T15788] simple_read_from_buffer+0xed/0x160 [ 321.888709][T15788] proc_fail_nth_read+0x19e/0x210 [ 321.888739][T15788] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 321.888769][T15788] ? bpf_lsm_file_permission+0xd/0x20 [ 321.888801][T15788] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 321.888830][T15788] vfs_read+0x27d/0xc70 [ 321.888851][T15788] ? __cfi_vfs_read+0x10/0x10 [ 321.888871][T15788] ? __kasan_check_write+0x18/0x20 [ 321.888905][T15788] ? mutex_lock+0x92/0x1c0 [ 321.888926][T15788] ? __cfi_mutex_lock+0x10/0x10 [ 321.888946][T15788] ? __fget_files+0x2c5/0x340 [ 321.888973][T15788] ksys_read+0x141/0x250 [ 321.888993][T15788] ? __cfi_ksys_read+0x10/0x10 [ 321.889013][T15788] ? fdget+0x189/0x1f0 [ 321.889038][T15788] ? __kasan_check_read+0x15/0x20 [ 321.889071][T15788] __x64_sys_read+0x7f/0x90 [ 321.889092][T15788] x64_sys_call+0x2638/0x2ee0 [ 321.889132][T15788] do_syscall_64+0x58/0xf0 [ 321.889161][T15788] ? clear_bhb_loop+0x50/0xa0 [ 321.889186][T15788] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 321.889211][T15788] RIP: 0033:0x7f80d558e0dc [ 321.889231][T15788] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 321.889251][T15788] RSP: 002b:00007f80d63be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.889276][T15788] RAX: ffffffffffffffda RBX: 00007f80d57e5fa0 RCX: 00007f80d558e0dc [ 321.889294][T15788] RDX: 000000000000000f RSI: 00007f80d63be0a0 RDI: 0000000000000005 [ 321.889310][T15788] RBP: 00007f80d63be090 R08: 0000000000000000 R09: 0000000000000000 [ 321.889326][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.889340][T15788] R13: 00007f80d57e6038 R14: 00007f80d57e5fa0 R15: 00007ffe52499ea8 [ 321.889360][T15788] [ 322.343795][ T36] kauditd_printk_skb: 534 callbacks suppressed [ 322.343816][ T36] audit: type=1400 audit(1762990032.530:1034): avc: denied { read write } for pid=10746 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 322.374888][ T36] audit: type=1400 audit(1762990032.540:1035): avc: denied { read } for pid=15817 comm="syz.0.6714" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 322.398147][ T36] audit: type=1400 audit(1762990032.550:1036): avc: denied { read write } for pid=10746 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 322.422586][ T36] audit: type=1400 audit(1762990032.560:1037): avc: denied { create } for pid=15819 comm="syz.0.6715" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 322.444168][ T36] audit: type=1400 audit(1762990032.570:1038): avc: denied { read write } for pid=10746 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 322.468575][ T36] audit: type=1400 audit(1762990032.580:1039): avc: denied { mounton } for pid=15821 comm="syz.0.6716" path="/580/file0" dev="tmpfs" ino=3536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 322.491455][ T36] audit: type=1400 audit(1762990032.590:1040): avc: denied { read write } for pid=10746 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 322.515765][ T36] audit: type=1400 audit(1762990032.600:1041): avc: denied { execute } for pid=15823 comm="syz.0.6717" path="/581/cpuacct.usage_percpu" dev="tmpfs" ino=3542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 322.552835][ T36] audit: type=1400 audit(1762990032.740:1042): avc: denied { read write } for pid=12043 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 322.577782][ T36] audit: type=1400 audit(1762990032.740:1043): avc: denied { read write } for pid=10746 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 322.854090][T15872] FAULT_INJECTION: forcing a failure. [ 322.854090][T15872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.867309][T15872] CPU: 0 UID: 0 PID: 15872 Comm: syz.1.6738 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 322.867346][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.867358][T15872] Call Trace: [ 322.867364][T15872] [ 322.867371][T15872] __dump_stack+0x21/0x30 [ 322.867398][T15872] dump_stack_lvl+0x10c/0x190 [ 322.867421][T15872] ? __cfi_dump_stack_lvl+0x10/0x10 [ 322.867448][T15872] ? vsnprintf+0x7b4/0x1aa0 [ 322.867476][T15872] ? check_stack_object+0x107/0x140 [ 322.867500][T15872] dump_stack+0x19/0x20 [ 322.867524][T15872] should_fail_ex+0x3d9/0x530 [ 322.867541][T15872] should_fail+0xf/0x20 [ 322.867556][T15872] should_fail_usercopy+0x1e/0x30 [ 322.867574][T15872] _copy_from_user+0x22/0xb0 [ 322.867594][T15872] kstrtouint_from_user+0xc2/0x150 [ 322.867610][T15872] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 322.867626][T15872] ? selinux_file_permission+0x309/0xb30 [ 322.867647][T15872] ? __cfi_selinux_file_permission+0x10/0x10 [ 322.867668][T15872] proc_fail_nth_write+0x89/0x210 [ 322.867689][T15872] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 322.867711][T15872] ? bpf_lsm_file_permission+0xd/0x20 [ 322.867734][T15872] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 322.867756][T15872] vfs_write+0x3c0/0xf30 [ 322.867771][T15872] ? __cfi_vfs_write+0x10/0x10 [ 322.867785][T15872] ? __kasan_check_write+0x18/0x20 [ 322.867809][T15872] ? mutex_lock+0x92/0x1c0 [ 322.867824][T15872] ? __cfi_mutex_lock+0x10/0x10 [ 322.867838][T15872] ? __fget_files+0x2c5/0x340 [ 322.867857][T15872] ksys_write+0x141/0x250 [ 322.867873][T15872] ? __cfi_ksys_write+0x10/0x10 [ 322.867887][T15872] ? fdget+0x189/0x1f0 [ 322.867903][T15872] ? __kasan_check_read+0x15/0x20 [ 322.867935][T15872] __x64_sys_write+0x7f/0x90 [ 322.867950][T15872] x64_sys_call+0x271c/0x2ee0 [ 322.867974][T15872] do_syscall_64+0x58/0xf0 [ 322.867995][T15872] ? clear_bhb_loop+0x50/0xa0 [ 322.868014][T15872] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 322.868030][T15872] RIP: 0033:0x7f80d558e17f [ 322.868045][T15872] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 322.868059][T15872] RSP: 002b:00007f80d63be030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 322.868077][T15872] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80d558e17f [ 322.868090][T15872] RDX: 0000000000000001 RSI: 00007f80d63be0a0 RDI: 0000000000000005 [ 322.868100][T15872] RBP: 00007f80d63be090 R08: 0000000000000000 R09: 0000000000000000 [ 322.868111][T15872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 322.868121][T15872] R13: 00007f80d57e6038 R14: 00007f80d57e5fa0 R15: 00007ffe52499ea8 [ 322.868135][T15872] [ 323.373800][T15920] FAULT_INJECTION: forcing a failure. [ 323.373800][T15920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.386969][T15920] CPU: 1 UID: 0 PID: 15920 Comm: syz.1.6762 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 323.387005][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.387020][T15920] Call Trace: [ 323.387029][T15920] [ 323.387039][T15920] __dump_stack+0x21/0x30 [ 323.387073][T15920] dump_stack_lvl+0x10c/0x190 [ 323.387103][T15920] ? __cfi_dump_stack_lvl+0x10/0x10 [ 323.387132][T15920] ? check_stack_object+0x12c/0x140 [ 323.387148][T15920] dump_stack+0x19/0x20 [ 323.387169][T15920] should_fail_ex+0x3d9/0x530 [ 323.387187][T15920] should_fail+0xf/0x20 [ 323.387202][T15920] should_fail_usercopy+0x1e/0x30 [ 323.387220][T15920] _copy_to_user+0x24/0xa0 [ 323.387240][T15920] simple_read_from_buffer+0xed/0x160 [ 323.387262][T15920] proc_fail_nth_read+0x19e/0x210 [ 323.387284][T15920] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 323.387305][T15920] ? bpf_lsm_file_permission+0xd/0x20 [ 323.387328][T15920] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 323.387349][T15920] vfs_read+0x27d/0xc70 [ 323.387364][T15920] ? __cfi_vfs_read+0x10/0x10 [ 323.387378][T15920] ? __kasan_check_write+0x18/0x20 [ 323.387403][T15920] ? mutex_lock+0x92/0x1c0 [ 323.387418][T15920] ? __cfi_mutex_lock+0x10/0x10 [ 323.387432][T15920] ? __fget_files+0x2c5/0x340 [ 323.387451][T15920] ksys_read+0x141/0x250 [ 323.387466][T15920] ? __cfi_ksys_read+0x10/0x10 [ 323.387480][T15920] ? __kasan_check_read+0x15/0x20 [ 323.387505][T15920] __x64_sys_read+0x7f/0x90 [ 323.387519][T15920] x64_sys_call+0x2638/0x2ee0 [ 323.387543][T15920] do_syscall_64+0x58/0xf0 [ 323.387564][T15920] ? clear_bhb_loop+0x50/0xa0 [ 323.387583][T15920] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 323.387600][T15920] RIP: 0033:0x7f80d558e0dc [ 323.387615][T15920] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 323.387629][T15920] RSP: 002b:00007f80d63be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.387647][T15920] RAX: ffffffffffffffda RBX: 00007f80d57e5fa0 RCX: 00007f80d558e0dc [ 323.387660][T15920] RDX: 000000000000000f RSI: 00007f80d63be0a0 RDI: 0000000000000005 [ 323.387671][T15920] RBP: 00007f80d63be090 R08: 0000000000000000 R09: 0000000000000010 [ 323.387681][T15920] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 323.387692][T15920] R13: 00007f80d57e6038 R14: 00007f80d57e5fa0 R15: 00007ffe52499ea8 [ 323.387706][T15920] [ 323.648430][T15936] netlink: 'syz.3.6771': attribute type 2 has an invalid length. [ 323.656426][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6771'. [ 323.863923][T15991] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6795'. [ 324.166706][ T1358] bridge_slave_1: left allmulticast mode [ 324.172412][ T1358] bridge_slave_1: left promiscuous mode [ 324.178211][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.185901][ T1358] bridge_slave_0: left allmulticast mode [ 324.191579][ T1358] bridge_slave_0: left promiscuous mode [ 324.197344][ T1358] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.307634][ T1358] veth1_macvtap: left promiscuous mode [ 324.313221][ T1358] veth0_vlan: left promiscuous mode [ 327.939653][ T36] kauditd_printk_skb: 361 callbacks suppressed [ 327.939674][ T36] audit: type=1400 audit(1762990038.130:1405): avc: denied { execmem } for pid=16040 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 327.967811][ T36] audit: type=1400 audit(1762990038.160:1406): avc: denied { execute } for pid=16043 comm="syz.3.6818" path="/458/cpuacct.usage_percpu" dev="tmpfs" ino=2820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 327.992576][ T36] audit: type=1400 audit(1762990038.160:1407): avc: denied { mounton } for pid=16041 comm="syz.2.6817" path="/439/file0" dev="tmpfs" ino=2664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 328.015629][ T36] audit: type=1400 audit(1762990038.170:1408): avc: denied { execute } for pid=16042 comm="syz.1.6816" path="/517/cpuacct.usage_percpu" dev="tmpfs" ino=3164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 328.039886][ T36] audit: type=1400 audit(1762990038.170:1409): avc: denied { create } for pid=16042 comm="syz.1.6816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 328.059625][ T36] audit: type=1400 audit(1762990038.170:1410): avc: denied { create } for pid=16042 comm="syz.1.6816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 328.080011][ T36] audit: type=1400 audit(1762990038.170:1411): avc: denied { append } for pid=16042 comm="syz.1.6816" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 328.102987][ T36] audit: type=1400 audit(1762990038.170:1412): avc: denied { load_policy } for pid=16042 comm="syz.1.6816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0 [ 328.123290][ T36] audit: type=1400 audit(1762990038.180:1413): avc: denied { read write } for pid=11035 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 328.147656][ T36] audit: type=1400 audit(1762990038.180:1414): avc: denied { create } for pid=16043 comm="syz.3.6818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 330.097315][T16060] netlink: 'syz.3.6824': attribute type 27 has an invalid length. [ 333.008132][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 333.008151][ T36] audit: type=1400 audit(1762990043.200:1456): avc: denied { read write } for pid=12043 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 334.047519][ T36] audit: type=1400 audit(1762990044.230:1457): avc: denied { execmem } for pid=16078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 334.067137][ T36] audit: type=1400 audit(1762990044.240:1458): avc: denied { execute } for pid=16079 comm="syz.1.6831" path="/522/cpuacct.usage_percpu" dev="tmpfs" ino=3194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 334.091351][ T36] audit: type=1400 audit(1762990044.240:1459): avc: denied { mounton } for pid=16079 comm="syz.1.6831" path="/522/file0" dev="tmpfs" ino=3195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 334.114336][ T36] audit: type=1400 audit(1762990044.250:1460): avc: denied { read write } for pid=11035 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 334.138567][ T36] audit: type=1400 audit(1762990044.250:1461): avc: denied { execute } for pid=16083 comm="syz.3.6833" path="/463/cpuacct.usage_percpu" dev="tmpfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 334.162691][ T36] audit: type=1400 audit(1762990044.260:1462): avc: denied { create } for pid=16083 comm="syz.3.6833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 334.182375][ T36] audit: type=1400 audit(1762990044.260:1463): avc: denied { read write } for pid=16083 comm="syz.3.6833" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 334.205976][ T36] audit: type=1400 audit(1762990044.260:1464): avc: denied { create } for pid=16083 comm="syz.3.6833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 334.225754][ T36] audit: type=1400 audit(1762990044.260:1465): avc: denied { create } for pid=16083 comm="syz.3.6833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 338.883765][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 338.883787][ T36] audit: type=1400 audit(1762990049.070:1494): avc: denied { execmem } for pid=16100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 338.922255][ T36] audit: type=1400 audit(1762990049.080:1495): avc: denied { create } for pid=16102 comm="syz.2.6841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 338.941940][ T36] audit: type=1400 audit(1762990049.080:1496): avc: denied { execute } for pid=16102 comm="syz.2.6841" path="/447/cpuacct.usage_percpu" dev="tmpfs" ino=2711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 338.966056][ T36] audit: type=1400 audit(1762990049.080:1497): avc: denied { execute } for pid=16103 comm="syz.1.6840" path="/525/cpuacct.usage_percpu" dev="tmpfs" ino=3214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 338.990283][ T36] audit: type=1400 audit(1762990049.100:1498): avc: denied { execute } for pid=16101 comm="syz.3.6842" path="/466/cpuacct.usage_percpu" dev="tmpfs" ino=2868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 339.014452][ T36] audit: type=1400 audit(1762990049.100:1499): avc: denied { read write } for pid=11035 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 339.038782][ T36] audit: type=1400 audit(1762990049.100:1500): avc: denied { mounton } for pid=16101 comm="syz.3.6842" path="/466/file0" dev="tmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 339.061602][ T36] audit: type=1400 audit(1762990049.110:1501): avc: denied { execute } for pid=16107 comm="syz.2.6844" path="/448/cpuacct.usage_percpu" dev="tmpfs" ino=2717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 339.085720][ T36] audit: type=1400 audit(1762990049.110:1502): avc: denied { read write } for pid=12043 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 339.109920][ T36] audit: type=1400 audit(1762990049.130:1503): avc: denied { mounton } for pid=16108 comm="syz.1.6843" path="/526/file0" dev="tmpfs" ino=3220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 344.656048][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 344.656068][ T36] audit: type=1400 audit(1762990054.850:1517): avc: denied { execmem } for pid=16130 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 344.694315][ T36] audit: type=1400 audit(1762990054.860:1518): avc: denied { execute } for pid=16132 comm="syz.2.6852" path="/451/cpuacct.usage_percpu" dev="tmpfs" ino=2735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 344.755736][ T36] audit: type=1400 audit(1762990054.860:1519): avc: denied { mounton } for pid=16132 comm="syz.2.6852" path="/451/file0" dev="tmpfs" ino=2736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 344.788319][ T36] audit: type=1400 audit(1762990054.870:1520): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[1969]" dev="pipefs" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 344.811992][ T36] audit: type=1400 audit(1762990054.880:1521): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[1969]" dev="pipefs" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 344.865822][ T1358] bridge_slave_1: left allmulticast mode [ 344.871625][ T1358] bridge_slave_1: left promiscuous mode [ 344.875048][ T36] audit: type=1400 audit(1762990054.880:1522): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[1969]" dev="pipefs" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 344.900332][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.918018][ T1358] bridge_slave_0: left allmulticast mode [ 344.923724][ T1358] bridge_slave_0: left promiscuous mode [ 344.945121][ T1358] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.964980][ T36] audit: type=1400 audit(1762990054.880:1523): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[1969]" dev="pipefs" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 344.992092][ T36] audit: type=1400 audit(1762990054.880:1524): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[1969]" dev="pipefs" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 345.016395][ T36] audit: type=1400 audit(1762990054.880:1525): avc: denied { mounton } for pid=16133 comm="syz.3.6853" path="/469/file0" dev="tmpfs" ino=2888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 345.039251][ T36] audit: type=1400 audit(1762990054.890:1526): avc: denied { create } for pid=16136 comm="syz.2.6854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 345.147417][ T1358] veth1_macvtap: left promiscuous mode [ 345.152955][ T1358] veth0_vlan: left promiscuous mode [ 345.488151][ T1358] bridge_slave_1: left allmulticast mode [ 345.493838][ T1358] bridge_slave_1: left promiscuous mode [ 345.499523][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.507292][ T1358] bridge_slave_0: left allmulticast mode [ 345.512946][ T1358] bridge_slave_0: left promiscuous mode [ 345.518599][ T1358] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.526437][ T1358] bridge_slave_1: left allmulticast mode [ 345.532094][ T1358] bridge_slave_1: left promiscuous mode [ 345.537915][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.545469][ T1358] bridge_slave_0: left allmulticast mode [ 345.551129][ T1358] bridge_slave_0: left promiscuous mode [ 345.556910][ T1358] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.749368][ T1358] veth1_macvtap: left promiscuous mode [ 345.755001][ T1358] veth0_vlan: left promiscuous mode [ 345.760663][ T1358] veth1_macvtap: left promiscuous mode