last executing test programs: 5.391872181s ago: executing program 0 (id=732): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write$tcp_mem(r0, &(0x7f00000002c0)={0x8000, 0x20, 0x4, 0x20, 0x7}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001a80)={0x6, 'tunl0\x00', {0x1}, 0x869}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000c00)={0x0, 'bond_slave_0\x00', {}, 0x9}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x2, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x29) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x5c0, 0x0) ioctl$PPPIOCGIDLE64(r5, 0x8010743f, &(0x7f0000000440)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x9, 0x19, {0x3, 0x201, 0x1}}}}, 0x30}}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0x37) getdents64(r0, &(0x7f0000000100)=""/126, 0x7e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8931, &(0x7f0000000200)={'dummy0\x00', @random}) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x14c}) mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x9100, &(0x7f0000000180)={0x8, 0x100000, 0x1a0000, {r0}}, 0x20) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$UFFDIO_WRITEPROTECT(r9, 0xc018aa06, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x100, 0x800, &(0x7f0000000340)) 5.011788822s ago: executing program 3 (id=735): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x5) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010219900000ab07c5d6b73726a1de330902120001fbb8084b09044603007067f804993ad92e7018754dc22d87588592f32b11bee15f0dbf86789faceafe977d9d6f489e54a804eb20ff38df4a61cae72ac716d14bd7aa85ff477db11d6e53056c9bda05e24aeda3ca27066dce246931537ee8e228c63919b7e1c4d9ff5c313ab3ec333260d9d59cd138ebf7d30fcf5cd6a4930098b8f67e"], &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0}) fcntl$getown(r0, 0x9) 4.539751666s ago: executing program 0 (id=738): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x923b01) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000240)=""/39) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f0000000080)=@ethtool_cmd={0x24, 0x0, 0x3, 0x6, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfa, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x47cb, 0x80000001]}}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x204, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, 0x0, &(0x7f00000000c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, r10, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_PMKID={0x14, 0x55, "c7be56bf9bd055a0dd3bfe19168ba684"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="8c497cd2bd40"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "ece82a8dd6fc4af262cb1c4b0a80d2d0"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x15}, @NL80211_ATTR_PMKID={0x14, 0x55, "b2f8eb4194c9b90739de0178d51cfe8d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "6c98cef9f4320729f7cd3798ed4e2a19"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r12, &(0x7f0000000480)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x28, 0x68, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010102, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x1, 0xb, 0x2, 0xffffffff, 0x10}}}}}}, 0x3a) setreuid(0xee01, 0xee01) r15 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, "", [{{0x9, 0x4, 0x0, 0x16, 0x7, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x8, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r15, 0x0, 0x0) syz_usb_control_io(r15, &(0x7f0000000080)={0x2c, &(0x7f0000000180)={0x0, 0x7, 0x52, {0x1f, 0x5, "f70fa39f030000000000000005cb4fdc0100000001bf2e0f520808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.020040511s ago: executing program 0 (id=741): socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x6, 0x34, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070519b4"], 0x0) unshare(0x62020600) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) 3.472034468s ago: executing program 0 (id=744): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYRESHEX], 0x0) (async) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYRESHEX], 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) 2.235582004s ago: executing program 1 (id=752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x141840, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)=ANY=[@ANYBLOB="28000000430001"], 0x28}], 0x1}, 0x8000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000005480)={0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000080)=0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x450002, 0x181) r6 = open(&(0x7f0000000040)='./file0\x00', 0x140, 0x4) close_range(r4, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x200fb, 0x0, 0x26000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2c) lsetxattr$trusted_overlay_opaque(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980), &(0x7f00000009c0), 0x2, 0x2) dup3(r5, r2, 0x80000) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x9) syz_usb_connect(0x4, 0x6e1, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0xda, 0xa9, 0xaa, 0xff, 0x2c7c, 0x129, 0x6547, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6cf, 0x3, 0x1, 0x40, 0x60, 0xa, "", [{{0x9, 0x4, 0x62, 0xf8, 0x3, 0xff, 0x0, 0x40, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x2e}, [@extension_unit={0x8, 0x24, 0x8, 0x1, 0xb, 0x2, "fe"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x5, 0x2, 0x1, 0x6, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x401, 0x3, 0x3, 0x3}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x0, "76f8"}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'z'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x200, 0x1}}], [{{0x9, 0x5, 0x2, 0xc, 0x10, 0x6, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x3}]}}, {{0x9, 0x5, 0x80, 0x9, 0x200, 0xe, 0x6, 0x6, [@generic={0x7e, 0x7, "2644863cc5b8e390bb5e8ee06a513352e463f4b42d8256ac37a689b4d711ffd09808fe03554cd1c9d253f70a0a34a8b82bc5abdb8821d636d190c390a4d504d9399a6106958501587d7c42c474527523ad10086e6414c35e7177737cc19914f9c92f95020f6f44436aa23328eff84f58b71715ecad2ac1490ab33d30"}, @generic={0xf5, 0xa, "8ee5ab993b62e7bbe323aff376e46d2bb053ad3f35fea6f501e49665fe51e9add1bc3c2b63b0c3a52eea9dabc3bdb92a0acc2ff21bc606a73a586a2fb397575479e675e6e72f17301f2b790a7338e7d61c0f16f891c194f0de7cb9bfb770e94e9103446ce0f854ede6e35a9c1e53abdcf00f8f61138b4041059677f45990675f6082fcd3247d50434c9a6d602eb506193319bada4be8fd8e236a8ee6beefef994fc56f1947487750c06f1e876f34ed3772df7001e5fe19bc078e79efdbc20105d71d222657a83616bce7dcae2cb32dfd4cba938ab241e364bb248b59a310e4d8b4c119f39197c6ff38c73bef1b0bb2756ebafa"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x7, 0x2}}]}}, {{0x9, 0x4, 0x26, 0x80, 0x6, 0x1b, 0xdd, 0xda, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xce8, 0x1, 0xd6, 0x9}, [@obex={0x5, 0x24, 0x15, 0x9}, @mdlm_detail={0x101, 0x24, 0x13, 0xb6, "382fee7ec2d2707217e94a1ba4e272235ad81c4a5455a35575c2ed10646330a3d09c2082babfaaf4a261b53b1c6b2d905983f2e83b4104ab67e89afca47c407f5ff5436cb2136e1d213fe442ed726d1724e5ee20594cc72f60f8ff14c2163c83a73e2c8c61ecf386765d61426ca4c67cd80156b2dfb7f71971a627fb5b3239a369c649c2a8a60fb0f702f2b2f0f3b52f4a4ee940224eb5ef766fbc98c4125b0a6e50991b4b9d103898d4f81a0f08c23f84ccccba5e9b967e3583c18365bf9186b3762b6692b15e74071cfabcb1a435d9e0600e06596f02313d5608096c25a5d9e818e1a0debde49ae6fb261fbb635df2ae49f5b34dcfabcee764ef9482"}, @acm={0x4, 0x24, 0x2, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x95}]}], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x52, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xec, 0x93, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x9}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x2, 0x9, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x3}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x4d, 0x0, 0x4}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x4, 0x11, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x48}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x9, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x6}]}}]}}, {{0x9, 0x4, 0x7b, 0x4, 0x9, 0x45, 0xab, 0x80, 0x8, [], [{{0x9, 0x5, 0xa, 0x4, 0x400, 0x3, 0x2, 0x3}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xef, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x45, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x7, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1}, @generic={0x8c, 0x4, "b78f339675193cd44921c26e977f095041fbfe5f92848d2149758a18fec034971baa9d6e809bb6950ca0f5c1e14679f6ccc7088dff903d15e6c11b6f2da9164cd2c4401f030afd47792bff3c2b550f6795fb45b14f1df4831c15e25769a224382cfc22aca182858c4153e596b9a4a11c796501fc1b3a251acbe1f726326d8ef4a163fb8828fef6216ff8"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x6, 0x7, 0x9, [@generic={0x65, 0x24, "5250bcce2f6db23469642c86e8bdcefea14f330f7529fe8d232eaae3a029f672e4aa906b33f0405013ed46b256b3e6036bffc41e6af431dbec6ddcd9cd4736f5b0a8708122c9653e71686bd0d79a19f96d50a15b501498c9ec5b39f634c080b0edbe4b"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x2, 0x7, 0x6a}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x5, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x5}, @generic={0xc2, 0xf, "fd696d97ca8aab0bef1ea4634cbc0f93cb50ca91c24966aec07ef7b49b373e6ff64385df56ee960030e70b789015b2df5d0f50199aac0443a612d0e81612eb2a6d30f711ea7acac2e53c18ca4a453f1da935b8b24b7d41cfa07f0b596772843cb63cae278cce36ce1902aff54ec347106e2f715453c134205d06fe06927e1e8adfbe7852a46abf1477978bd853438dfbd6b4133041ae94cafd520d09b6740be71ecff014540835f5203742a50e422daaa6516e0bdec91a77e8f7557d543c5a40"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x0, 0x7, 0x6, [@generic={0x87, 0x30, "0297bf2313d0b43e45cfabc7061f9b79ec1f593430f7dd67377f129fad897fb618d757119f4ca3786199d76d316e73f485968bbf42279abc12e3e772a5a06c468b7209c35d7b878684b42c745356b75ef40dff05e2d2f4272b7b9a13fa58880e8d44efbb6cd8a157813734066f4683134f7b8c9e03efe25ec46bcdcbcc5ffd1b4e6bef1f5d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x1}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x9, 0x5, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xc, 0x9, 0x5, [@generic={0xa2, 0x21, "1f1fc565d4b825cdd39dc452b66f354e682947686b9aefb0f34076753f30e6778d430f004c5d1c2ad42001565b31cd6a77e7c878708b700dd046c19d53391b7328697e2aa008a2fcc6a04c66aa6a4130adbfa5654fe343446a36f492085f5e527207e7470e4ef0ab5ed64632f4723980713629a7f0714d5fc908c8f183cadf81ed4d44d08ec5e36a62089b87d3453f531674fe208e55db70ee02c8e69493fa63"}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x201, 0xd8, 0xb, 0x4, 0x0, 0x2}, 0x83, &(0x7f0000000840)={0x5, 0xf, 0x83, 0x6, [@wireless={0xb, 0x10, 0x1, 0x7ae08f81bc4e20bb, 0x0, 0x5, 0x0, 0x2, 0x80}, @wireless={0xb, 0x10, 0x1, 0xe, 0x9, 0x0, 0x3, 0x999b, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x4, 0xf000, 0x8, [0xc030, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "30c5e22927023df9a1a9249db7737660"}, @generic={0x35, 0x10, 0x3, "8a6bdcdab70489077d3b20bb0a773e494825a87a27f90b60b1a7deb0352c92137b56cc0206dcf5bbe0087636317eac7e332d"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa8, 0x4, 0x3, 0x7, 0x2}]}}) 1.999816232s ago: executing program 3 (id=753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x1, 0x5, 0x0) (async) r2 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) (async, rerun: 32) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) (rerun: 32) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0x0, 0xb2, 0x0, r2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x1, 0x3ab, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x2, 0x902c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02"], 0x0) 1.626534012s ago: executing program 1 (id=755): syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080400000000000000000200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e0300"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 744.315249ms ago: executing program 2 (id=757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000600), 0x3) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x0) listen(r0, 0x9) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "850100", "daf9af4a", "747aaaaf941f267e"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000780)=@gcm_256={{0x303}, "9d24e21e71196e04", "d2b5dd1989d30c208c02359429be8aff3d0dea3d361a0700bcb54369549c87bf", "e634b333"}, 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000095174103d1b960104000000030109021b0001000000000904"], 0x0) 655.792491ms ago: executing program 3 (id=758): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) (async) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000001680)=""/4104, 0x1008}], 0x2}}], 0x1, 0x40030002, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/12, 0xc}}], 0x1, 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x80000001, 0xe82c, 0x0, 0x209}) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000005180), 0x0, 0x0) (async) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$RNDGETENTCNT(r3, 0x5207, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000300)={0x20000002}) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x4, r5, 0x0}]) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010100"], 0x1c}], 0x1}, 0x0) (async) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000080)={0x28000006}) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) syz_clone3(&(0x7f0000000900)={0x81000200, &(0x7f0000000180), 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = userfaultfd(0x1) r8 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r8, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) 638.054911ms ago: executing program 3 (id=759): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r0, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 636.689452ms ago: executing program 3 (id=760): socket$nl_audit(0x10, 0x3, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x70, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010102, {0x14, 0x4, 0x1, 0x39, 0x8, 0x64, 0xfffe, 0x6, 0x2f, 0xd92, @multicast1, @empty, {[@cipso={0x86, 0x37, 0x0, [{0x5, 0x12, "bc7838a2f03ea58e38657648f257cf7b"}, {0x5, 0xe, "604079bd96df0cfbf0e2b2e3"}, {0x1, 0x11, "55b1c99ce054c3d67d2c4f1622c107"}]}, @ssrr={0x89, 0x3, 0x9c}]}}, '&2k|'}}}}}}, 0x82) 587.782953ms ago: executing program 3 (id=761): prctl$PR_MCE_KILL_GET(0x3d) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000030000000002010920060904000000010120200924010200060900030904b201022000090401010101022000090501092000080500082501010604040009040200000102200009040201010109200003e6400825010303fe0500"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$uac1(0x5, 0x9e, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x3, 0x1, 0xf, 0x30, 0xa2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xf}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf8, 0x1, 0x6, 0x9}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xaf, 0x3, 0xc, 0x7, "44b429d4052bfc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x3, 0xb5, {0x7, 0x25, 0x1, 0x8, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x8, 0x9, 0x2, 0xff}, @as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x6, {0x7, 0x25, 0x1, 0x4, 0x2, 0xd65}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0xc5, 0x1, 0x8, 0x20, 0x6}, 0xaf, &(0x7f0000000700)={0x5, 0xf, 0xaf, 0x6, [@generic={0x57, 0x10, 0x4, "c0c56b7a29306b7ee6aed79195ffc2307e3e056f85131c5ff5c132f3ceca3f3364ab199c085e82fe5a56e89a7b5f49ec996ad87c94ce654b98bba52bbb908d17d261f7acd116848b13e9c23bf61176590e1a8f77"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xc9, 0xe, 0xffff}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x7, 0xf0f, 0x9, [0xf, 0x1feff28, 0xff00c0, 0xc0f0]}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0xb, 0xf00, 0x8e9, [0xff00c0, 0xf, 0xc0, 0x30, 0x30]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x65, 0x7, 0x7}]}, 0x2, [{0x58, &(0x7f00000007c0)=@string={0x58, 0x3, "65ef06996df7321821c79c7940eaedc3609958633e7e6942ca06c5fa6bedcd54498b036c41350744c63f187f6fbeaeb3f87985a74d6514e492c87b8a0418dddd69193052c5f8728818a20856c60a113d557cc47fa40d"}}, {0xf9, &(0x7f0000000840)=@string={0xf9, 0x3, "dd5a18bf2f50e8dcae7b2fa277f82d0cbbe56094f11db77c59edca22011c4c6b6166ea9f6f026616677acc8e9315ec9e8640aaa1670b300b3de04aa6f3e681afaf8403acc196ba9a0f7fa2fe0284c9061e951b3a12ddd3052289cc0da62fb0ef4f1557fef462b54b5ca47e9f918ce6848291454b0498e6d44959d2a341da0d681b2ecf39c181b589852105bdf31f3cd385b4acfa84162d1ba96f16145f0d56b78d44bbe77eca9580633fe6828ebfed0dcc3f40b4f585b862c932598f2075d0f422b673d4dd4b2604d1ed9c1ea516c02ad6590e7fa91c0016842a02fb72bef07084fe556c85448d7848d8cba4195317dc97eaf9d90fd037"}}]}) syz_usb_connect$uac1(0x7, 0xe7, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x6, 0x40, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x367c, 0x3c}, [@processing_unit={0x9, 0x24, 0x7, 0x1, 0x1, 0x9, "b502"}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x8}, @extension_unit={0xa, 0x24, 0x8, 0x2, 0xfff9, 0x2, "2fd12e"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0x1, 0x10, "01"}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x2, 0x2, [0x4, 0x1], 0x1}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x0, "f81c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x1, 0x3, 0x3, "01f7a5fed57192"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xc18d, 0x0, "e3e59a8f1203"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0xf8, 0xce, "bd037309"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x14, 0x7, 0xc8, {0x7, 0x25, 0x1, 0x8, 0x8, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x4, 0x0, "f52e", "167e"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x6, 0x8, "6d8bc6c4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x7f, 0x5, {0x7, 0x25, 0x1, 0x8, 0x8}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x8, 0x1, 0xff, 0xff, 0x1}, 0xe7, &(0x7f00000001c0)={0x5, 0xf, 0xe7, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x2, 0xf}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0xffff, 0xff00, 0x8, [0xff00f0, 0x44b0c86896cc1005, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xa8, 0x2, 0x9, 0x49}, @generic={0xa3, 0x10, 0xa, "35e188fca22568410337dc2a5dbcb1a2c38a851f1ef88ac01ba86ae7d366703d7ba8130391cc844fe69b82d6c9af8a402a3311446ce5796bd833261628699dc5f5e8f440df8b167040ee4393b916d74ad908be66baeec950653b1b910866c49a8e641b63d7a9f457b55398048092dc55bc4f95d3fe41eb69ad795720a1c6a7d3596ada14ff9a0b21149bbab5b2bf8f6ce9c40f47a75669cd8124871b8091e771"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x5, 0x8001}, @wireless={0xb, 0x10, 0x1, 0x0, 0x40, 0x0, 0xfd, 0x8001, 0xd}]}, 0x3, [{0xdb, &(0x7f0000000380)=@string={0xdb, 0x3, "0b41ffc4d3748882beb3d3ba22a8f17e8f637a1ea2d7fe57474cb164a3d61c5c157c973f2b321e66af19003307a597012a086d2dfdd32c89dbf24110eed7489fb8054302b85902049319d31eb1bcead592e982499c764eadc5b26fa6f39cccd2967faeb5aece48dfeea8398084cc5081011fbcbabaa17f6bbf2a96f5c7f905095a0a2aa5a90e0f1d7b08c4e800d08c74b4f100d91950fe6493dfb95e4a193a0ad4cc49cc3f84cb44bbd6f39d54f192efed5a2209ce6be5420bcef14aed01a814e22f92c831bdda7428e694d71610e020840000000000000000"}}, {0xcd, &(0x7f0000000480)=@string={0xcd, 0x3, "36beafa58456a203e454e5c8226e70671cb4678a20f37b501650affb25fdc7dacd5d5ddc06e2a5be1371cb2e461ef3096df0463335b8a3fab2ff8f5e20f64dc2d385959539e2f656725bc4b46bf225f7f562c6fdcb0f2c76e04e33abde44858450e8ef05967bf7ec5ffb546b54777bb3dd9907684912911e6f5a084dbc5dd80e3ca249b2694c03081c523f07b2552863e1cf4dff8a69a13d7c6a3a23db6c85592ca3ae360044b65dc6e7adc361732025b6b7ac1d94afc4c70699de96b12ed0d336fdb2309a994c094cc79f"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42a}}]}) 511.485635ms ago: executing program 0 (id=762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa4, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7226c59058b8928f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000045}, 0x480d1) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf4, r6, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x325778d3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x213ce475}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x679026af}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50ee74f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b1ba3c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79f28ec}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22c7f6fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e4d747d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0xc000801) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) ioctl$UI_GET_VERSION(r8, 0x8004552d, &(0x7f0000000640)) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x44000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xfa}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x44001) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00), r10) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800c0}, 0x20000000) (async, rerun: 32) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x24000001) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c840}, 0x20008004) r11 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg(r11, &(0x7f0000001bc0)=[{{&(0x7f0000000d40)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="bc0e1c4c7a482a539c54f9b16b015643aa155c30fdc5225d5a70695b4e51953bfcc59f2a99c60716ff2504bc854266b66967a0d99858e093a1919b4de6196de53bded18501580090f9d785eb37", 0x4d}, {&(0x7f0000000e40)="57d000a13a20aa91824101", 0xb}, {&(0x7f0000000e80)="a0c4b82e8f631a7bdea7d3f811880018f99b", 0x12}, {&(0x7f0000000ec0)="46c85e1a22a9e2d0ad1556f69e88378b9516bba85f9c3469004cc0714ae882163e57404b8b28097790a964a5f96e51e44eaf8c2dcce3e0bd53a432e9f313134d6413e1944777db393adf60d7f9bec2c84bfab5dfbcecb7a62ae0cc2a4bd38aa91e73b9e3eb1b7ca9e3b8e76391ae808a40f3049a56bc5f190c0ba26d8bd17256d881c8a56b58339a055e5f16f2421b0fc65805a77023949c6e79b6e02af6b7eae285de4cd1c71cead9f6f5b2a5f3a5b4b027ea72c2b84092edfac1eb545abb", 0xbf}], 0x4, &(0x7f0000000fc0)=[{0x100, 0x110, 0x9, "0e07b62dc4743f7856f7928f637c7145f6743d30e74aea935b91684e2c16f142eb97d396c3dfea30165d0b42a2384dd75d417af7a3471a2bf45846555f21c2dd4e9cf06cffb026da7df89ba365d4ac044e27c13b0644833a189fa31e66a71d38b4392ba1ebc6bff8451cee01293e18009b5a8612d5c9d439a04e322f7d48a210d75a81819b20d4d006201cb371eb35a1e55f98e11fd576a254fdaf09a14c603a9e6bba870dcd101dad79ec6329c132f1a4c84e0911d57f7808fb9a2c2c6bda76d9bf0dc3f48af53922262ceb1250e3b5443a7a764f2482592061c81ebaa4c736a3f4476c426c8f3f5fdf"}, {0x108, 0x117, 0x974, "359d4879477ba189da8a6efffa8a1464073ae5acad7fda883520e4417c2fbee8d8feb9c74b2ec8b8be01049189aa30753d2fb08b19b92d6c35ed00f403948901478a87c76790f4ce89d323e1a490694e302b195d03daa1877846b63cca055890ba7b0e94e98a7f4191402cf8473d5f451334ef258f5566402890843accdc0c71507b871e7b183cdedcb8c9eaea2c51a87b0c9960bb3096423d38ac19c849f93bf679e9f0cac8c8e1d32a1cea2df8db7ed63e8966af5661beab222182f8df4d189b46b7f07d0d8d672c60f5ac9db99d034c5be9b8eed05e55ce8aec0c72d7d51f3db0fe5f66cb7327dc740702c57004043e45d808f3ff86ce"}, {0x50, 0x109, 0xeedd, "e7bd3354ac0dd3447cd24ff1fd6286521e0e14acfdc4d87b52b9cf5f6e80b20cdff17a773bf407d5346659fb935635c5e4a8e3b5b9ef740f897d"}, {0x38, 0x84, 0x9, "92b5a42a7ffbc400cb19b56251df22e38e8a75bc368306735fd30d7fff8c9680fde3003e44d0e7b1"}, {0x70, 0x110, 0x2, "df9228f3a0a59c3d51a547a92bbf631bfdacc63c88ae86c9c1b365133c1d33c08d32467c9cd453eebfdcf27491d92919187870d3b8ef158d569e75cc30fbec58f1727b159776e1a8cc57739a73e44dc36dbf9e465eb834b81abb258d"}], 0x300}}, {{&(0x7f00000012c0)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x83920000, @loopback, 0x137b}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001340)="f5e1a9405fc06d7dc4b6ab33f119fdf3473fb2866cd962fba2b61ea9c4f4db4a8c298ff12d94e7d3b9c1b863708bdcf58b599302ef9436b5f2b143", 0x3b}, {&(0x7f0000001380)="87bbc4b110da8c1a4cd7fc2632e09ec8dc26e5ce9abfb1530b95bbe32edd22b4980d79129556eb2c6a91e3891489203dbeec200c52e80834ad7ac17a13be271dcfa17959cbc01ebac63d9807070f0766235030b5f67e127c962cb366af86ad0ec70f75ee59b582efe65fffd751f68176a8b63156c961646bba4715f31e71092a4fc683fe18d5e0060c5df3339651", 0x8e}, {&(0x7f0000001440)="869b70fe32979b2af71e1a9f7930efc1e5d6afd056990246cb71d134d20f09e33dfb4849cd79b0a7d942d3b7a0cda21f0f4d98799934d43f29273ae2fd1abde5e2a2a5370bff0ae28fff", 0x4a}, {&(0x7f00000014c0)="4b8c60b4e4c44c3fed993957a7406fbcad1050c5037af9ee47fb1fd4df2b998d82ad3cda55f225072acc093eb8b822483096d35fc3b7b197a99f247a7562062e311823b7afaa08827de4a8b8a38f28aab071a5966fff65b365ffd96856bc046643f09d2c6cd21831da83ace86ec9504824801862f8af1eaf6901707f2c0c16908c4e6b6feb95c5a55e24a429e158902e82720f92292b50ab95a5d375e97494877987ea07893fd6c9eefaebb82b15326341f0dc5c647b64149a190d8abad3c5be455734e6c3ec1545dcc25b8d131cc666b5b89e48ae97633669d520798cfe037a4fabdd362cbb253b410a8ad0f25b4b27748691359da436ef66", 0xf9}, {&(0x7f00000015c0)="8119ac5d13b133c68b6efcaba672ef2f536d7b343fa944946dfe7f72cdef20205f29a7fd9251abddde3ab1", 0x2b}, {&(0x7f0000001600)="242a4286be4433a80a0a8c2645261c36081527da5309ef89d2c9406df81057171de8302095f8482e0c6af66130755bdfdf4b6fc139ec9f8bbc31bffff192484cd2932a0e1f75f220e6298600d507c611399e9ab2f5a8d6ab3cdd140889abcab5d96ca55eedb4596974513d855476f96ab9600c0f", 0x74}, {&(0x7f0000001680)="1b7f88a4be813bd80036b6fefefeb5c538730b14db28defd9b75ac333ed45a80119156b6303c82ce6056a592c1e2cc2468a8659cba6a28c272ee0ff4c3a374747cc81436074de52550351f51ddf584f1f8620f8cf51c89a6fc529fc410cc5552c34d1534b57917f572c1c35f176b64ed5d38ce3789a19347d06a0e4af3e6ac23018e1b443d55197413bb91f193fcb706768ea62627072a1d044d66fef9278ce753b758a206bf79fa5c60304f0ad86ec6d46c746f7879f71b39a61ca5c61ae184a8e3f02e43a11d0e9437878bde7ee6fdef51bfabb9ed398e6721b2bfc39ca1222ffb3b", 0xe3}], 0x7}}, {{&(0x7f0000001800)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001880)="3faa0bff95c5a0334aef304ecfac8d1ecd7c2024fc4507d25ba1225cf034bae52588b1ef88", 0x25}, {&(0x7f00000018c0)="3bb1698c73036542a56364e0de2c0d0262aa84e4758387f9db98738905d4e0a5843fe082b2a8526f1b90d793fa6260c94c679bd06785f226e7830ff13f87b2e38bf8c61f94e5656e0cdc00eb4e62be0b8391b47db5f6740e452e20b19198ca133003fd7b9624d6b0bb2143fcba4dcf7d56a35e7d2b11599b64c14a3db3a874bfef948d478ff50e4c62e3acba614b634835a7d43fc14a219b12798855fdd9f525deca88e249fc67eb20f99bf7e36b231f690b69f98a21fa598ac93d50efaeb56e0d2fb496b133db1037a8cd2ffa5d264badb39263397d08d0492d39876260d12436dce577ccab", 0xe6}, {&(0x7f00000019c0)="11744b6d8dd6f74a67d8616f65a5d64dd9e617862cbb63b23aec921e29215a71e1ba71ef7a9cba330e44939b927858628b8ceae0b334d3139b491e966b2b5ea5177688928f7fab5a5dac86e19f5dabd890e214194fd8593305c8a8e09d38d541660cb4afc0c38ae3c1afc41d929a2aa77fe714c77641bca6f83ee7bc8a51f41fd784d6e2cd1a997486a88f3d78f1fb186387e0b6257592ef44b25240ce85cd182dd58044008e9a0f24b3de248579ff", 0xaf}, {&(0x7f0000001a80)="39b07ed40944874798508e9f735f5f8ebc0b76f0eb989f8de7fab460544858c7d28185ff6af0d419b4ec70cd1d5b19e5828e44c72982c8c0a629aeeae287c54ff4570188434ffa19905d600aef230186dc8d22dacc80960c3581a5198cc01b86e3c4e684f131f0847d278946297e30c9155b274acaf7e9c278709c0f1e4ac2a1662bdcb42b2254c1045638349a875ec7a796e8b208a3638da0dc92906a09b0170b4e32c2ca9a8bab7b336fbe2a28f9b4de5a202234fb5662b8dc9a825e5ef35695be21a6fe3c4c4e22c882d5408d0b5fc541d479a3672adcb46b43842c8d93618aabc2729ed854095b388fe80d8beff78142", 0xf2}], 0x4}}], 0x3, 0x4000040) (async, rerun: 64) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x20, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001d80), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001dc0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f0000002080)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001e40)={0x1e0, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0xec, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0xcc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4045}, 0xd4cdee37102ee771) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x50, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r10, &(0x7f0000002240)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4008000}, 0xc001) 501.079396ms ago: executing program 0 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002}) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x1c}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28000006}) 383.950189ms ago: executing program 1 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x38, 0xd, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x0, 0x10dd722b6e14c3dd) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c04, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x16, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:_\xa9\xe2\x00\xf7\x8a'}]}, 0x34}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@redirect_dir_off}, {@userxattr}], [], 0x2c}) 383.630409ms ago: executing program 1 (id=765): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000c08dd4bbbbbbbbbbaaaaaaaaaa2b88a83000810000000800451e001c00684000070190780000001cffffffff1100907800000006"], 0x36) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x14, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0xa9}]}, 0x14}], 0x1, 0x0, 0x0, 0x24040015}, 0x20040010) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ipv6_route\x00') r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000c40)={0x2000000a}) 382.633849ms ago: executing program 1 (id=766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x0, 0x2471}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x7d}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a000000000c0000000c00008008"], 0x20}}, 0x40816) r4 = getpgrp(0xffffffffffffffff) setpgid(0xffffffffffffffff, r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000023, 0x0, 0x7fffffffffffffff}]}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 299.155202ms ago: executing program 1 (id=767): ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000000)=""/120) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="05e0670a543ba4128965a9dba91e8e8762e62594fa229c5881ef889af6c3bcf682816114b5287a7f03f39af2b675927f8ebe2ae31dcd55794e0e646dc12e", 0x3e}, {&(0x7f0000000180)="fec9c01ca296956e3bb48e090edd143244eaded1afb31c2bf285881481d6ae053d0a625311369aa5f22def716a0cd229d668a29a1e6dbffa08d6831dd0736e1534d8b83c46a14624b5723355bde7e47244dbfed0f6b1407ac281815b22b250926c0577a8f37ff31b82a8ca862ca53cd25cf13e6856bb27ff41bdf1043d2592dd5f48bd7506ce1cac47abcd69bb", 0x8d}, {&(0x7f0000000240)="edeea8fb1bb9e1c1e332f99be6bd4fd3cec35ad6c7e022765efcff92f87b0fa069436c3574118f82b9a5489bf33ee69fafcca47835dbe378abc972631348437ba6cf4c97d778de0496f89db9deeefa2cc0f970867124ea09280e59bfc362dd5f7f156a3072331783992a70de535df717c4701fb34a4fb1ed06a8c94ec2517180f4cf0ff7c7815985fdd2f0978df6430edbb5ede0b029aa183e140734b6c8cbffcc", 0xa1}, {&(0x7f0000000300)="cbdae8ab855406447030688e7b76a1f3a97adbbb742f", 0x16}, {&(0x7f0000000340)="ee20ed0368975d010d04e5e49b60ba5538422623022bae1f83", 0x19}, {&(0x7f0000000380)="b52f", 0x2}, {&(0x7f00000003c0)="ec1b", 0x2}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="2fe97e687d018f60387d83eb17db7ded539d86227badd902d09d5e8d6c13791560164f", 0x23}, {&(0x7f0000001440)="2f47167ee0fb1a8886c2857580e62bcf2559db2ffd084526a4130297a4c133a3fd15ed4c4e750f9af21fcbc01ff519ced74f26d16ab6e9dfe104ba9a2894c33be97bfa6b814eee17e5c8b535d1bcf827bb94bbb5228fcfb866efe562f415a00e80b49224bfd71d991e4e75820d8041d06ee7fae3e17ba5bf9468fad156cfe29014b27a01cbbd547c42d05e19517037531f8f0061450e04376e2e893604c49ba0b997250d0782d4518ae3ff1b727614a91d2cbda6f5ef6c848291e2f074bb97e13dce3a0db1958c59b27a9289d92a1474a5", 0xd1}], 0xa) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001600)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000001640)={0x0, 0x1, 0x3ff, 0x1, 0xffffffa9, 0x1ff}) write$char_usb(0xffffffffffffffff, &(0x7f0000001680)="04e5bda8c2f94b8dcde85e3dfd3f806c61c4b2a38a31550be613743f524d9be6380a155c0220cba690aa59ca57f8b79aed0cac5b17d262c590acefd7aa8193d9cddd810868f512e766002701f11de98a520d587beee38e46522e33e0202d", 0x5e) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001700), 0x802, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x27) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x3) r3 = timerfd_create(0x6, 0x0) timerfd_gettime(r3, &(0x7f0000001740)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000027c0)={0x8, 0x0, &(0x7f0000001780)=[@decrefs={0x40046307, 0x2}], 0x1000, 0x0, &(0x7f00000017c0)="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"}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000002c00)={{r2, &(0x7f0000002800)='./binderfs/binder1\x00', 0x401802, &(0x7f0000002840)={@align=0xd8, {0x4, 0x8, 0x4, 0x4}}, 0x4da8, &(0x7f0000002880), &(0x7f00000028c0)=0x54}, 0x4, &(0x7f0000002b80)=[{0x2, 0xdd, &(0x7f0000002900)='$]&#$\x03}&%^@[-(\x16\x00', &(0x7f0000002940)="fe343c02bbb9cd1dcc331a131f7a0f2472c20ffd9ddafc88a071d55673afdf09", 0x20, 0x1a}, {0x3, 0x9, &(0x7f0000002980)='\x00', &(0x7f00000029c0)="2464dc1ae487cd9ffcabd691daf09b89b5a02731db5c54d63a7e4932de9059d43067d6020f70544a85bf97680e2635b38cff01ac564bb19946cdf91a4aa66b7147d2d971e38dd2742031aabcbe5eb06d12bc968983aceaa148dd57553d44bef7876af92681af1aeb", 0x68, 0x30}, {0x3, 0x49, &(0x7f0000002a40)='\x00', &(0x7f0000002a80)="9c002a8e0d62519de87c39d7b551115cb28fb877a3c2d0a2dfff21a58a7fed808052e22e409677eda2d42920c8a5f9c85483782faeb2d16ea08ca37119f2c208bdfc1799dab367d5502013", 0x4b, 0x2}, {0x2, 0x4633f6d3, &(0x7f0000002b00)='/dev/uinput\x00', &(0x7f0000002b40)="d7b2f357290a49787c411e72f5ac5fa8943307d62a4808be1c7c8bd8ec4db2d636a33e53e77f245987d7ad4720de045f7b273672c2e73b0fd26c477fecf48234", 0x40, 0x10}]}) recvfrom$unix(0xffffffffffffffff, &(0x7f0000002c80)=""/4096, 0x1000, 0x20c3, 0x0, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000003c80), 0x240302, 0x0) r6 = pidfd_getfd(r5, r1, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r7 = ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000003cc0)={0x0, 0x3, [{r5, 0x0, 0xfffffffff0000000}, {r5, 0x0, 0x100000000, 0x100000000}, {r4, 0x0, 0xfffffffffffff000}]}) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000003d40)) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000003d80)={0x29, 0x4, 0x0, {0x2, 0x8001, 0x1, 0x0, [0x0]}}, 0x29) fcntl$addseals(r6, 0x409, 0xe) fcntl$setstatus(r7, 0x4, 0x40000) write$rfkill(r5, &(0x7f0000003dc0)={0x0, 0x2, 0x2, 0x1}, 0x8) mknodat(r5, &(0x7f0000003e00)='./file0\x00', 0xc000, 0x8) umount2(&(0x7f0000003e40)='./file0\x00', 0x8) open_tree(r6, &(0x7f0000003e80)='./file0/../file0\x00', 0x8100) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000003f00)={0x0, 0xffff, 0x40, &(0x7f0000003ec0)=@ublk_ctrl_dev_info_new=@any_dev}) 215.841714ms ago: executing program 2 (id=768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x40000006, @mcast1, 0x80000004}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, 0xfffffffffffffffd, &(0x7f0000003080)=0x7a) 159.978126ms ago: executing program 2 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000280)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x70, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010102, {0x14, 0x4, 0x1, 0x39, 0x8, 0x64, 0xfffe, 0x6, 0x2f, 0xd92, @multicast1, @empty, {[@cipso={0x86, 0x37, 0x0, [{0x5, 0x12, "bc7838a2f03ea58e38657648f257cf7b"}, {0x5, 0xe, "604079bd96df0cfbf0e2b2e3"}, {0x1, 0x11, "55b1c99ce054c3d67d2c4f1622c107"}]}, @ssrr={0x89, 0x3, 0x9c}]}}, '&2k|'}}}}}}, 0x82) 139.552377ms ago: executing program 2 (id=770): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r0, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 129.351936ms ago: executing program 2 (id=771): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x218000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="f20f5ce266b8f5008ec8b9120a0000b800000080ba000000000f30470f67658667f3420f090fc7724866baf80cb8d1342d84ef66bafc0cb000eeb9410200000f3226650f01f866baf80cb8bbff468fef66bafc0cb000ee", 0x57}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f00000001c0)) creat(0x0, 0x93) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') (async) exit(0x3) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') (async) pipe2(&(0x7f0000001440), 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) (async) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) (async) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r5}, &(0x7f0000000380)=0x0) timer_settime(r6, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r7 = gettid() (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101600, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4020aeb2, &(0x7f0000000540)={0x1, 0x11, @ioapic={0x1000, 0x1, 0x3, 0x80000000, 0x0, [{0x97, 0x2, 0x8, '\x00', 0x6b}, {0xe, 0x3, 0x1, '\x00', 0x4}, {0x5, 0x7f}, {0x6, 0x9, 0xfe, '\x00', 0x27}, {0x0, 0xb8, 0xc, '\x00', 0x11}, {0x6, 0x8d, 0x5, '\x00', 0x1}, {0x49, 0x2, 0x9, '\x00', 0x3}, {0x6, 0x0, 0xfd, '\x00', 0xfd}, {0xb0, 0x4, 0xb, '\x00', 0x9}, {0x9e, 0x7c}, {0x6, 0xc, 0x76, '\x00', 0x5}, {0x8}, {0x46, 0x5, 0xfe, '\x00', 0x6}, {0x2, 0xfd, 0x2, '\x00', 0x8}, {0x5, 0x11, 0xc, '\x00', 0x2}, {0x3, 0x7, 0x12, '\x00', 0x74}, {0x7, 0xac, 0x6, '\x00', 0xce}, {0x8c, 0x81, 0x2, '\x00', 0x83}, {0xfc, 0xfd, 0x2, '\x00', 0x8a}, {0x2, 0x9, 0xe7, '\x00', 0x7}, {0x6, 0x5f, 0x7, '\x00', 0x3e}, {0xec, 0xe, 0x1, '\x00', 0x7}, {0x5, 0x13, 0xf, '\x00', 0xb5}, {0x4, 0x11, 0x0, '\x00', 0x25}]}}) tkill(r7, 0x16) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 2 (id=772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x28, 0x1a, 0x15, 0x0, 0xfeffffff, "", [@typed={0x10, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00;\xc4\xd6g\x05$\x00\x00'}, @nested={0x8, 0x10, 0x0, 0x1, [@typed={0x4, 0xd0, 0x0, 0x0, @binary}]}]}, 0x28}], 0x1}, 0x800) 0s ago: executing program 2 (id=773): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x10400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x369a02, 0x109) fstat(r1, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x26, 0x2, 0x3, 0x100, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_CFG_CMD={0x7, 0x1, {0x1, 0x0, 0x11}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x14, r7, 0x309, 0x70bd2c, 0x0, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r8}, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000010101014ac84ac4da64565c020000070c001980080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r9}, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d07, 0x0, 0xfffffffffffffffe}]}) r11 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r11, 0x409, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8042, 0x0) mount$incfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x808005, &(0x7f00000002c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0xffffffffffff89d4}}]}) r12 = syz_open_pts(0xffffffffffffffff, 0x107480) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x80010, r12, 0x4e650000) kernel console output (not intermixed with test programs): dn't find an available UDC or it's busy [ 90.671851][ T1818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.682305][ T1818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.691544][ T1818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.704751][ T1818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.713672][ T1818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.722374][ T1818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.730829][ T1818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.798700][ T478] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 90.938697][ T1272] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 90.948674][ T478] usb 4-1: Using ep0 maxpacket: 32 [ 90.955500][ T478] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 114, changing to 7 [ 90.966535][ T478] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.979538][ T478] usb 4-1: string descriptor 0 read error: -22 [ 90.985717][ T478] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 90.994795][ T478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.088641][ T1272] usb 1-1: Using ep0 maxpacket: 8 [ 91.094774][ T1272] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 91.103127][ T1272] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 91.108662][ T343] tipc: Node number set to 2130706433 [ 91.111218][ T1272] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 91.125470][ T1272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 91.136366][ T1272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 91.147504][ T1272] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 91.156578][ T1272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.164577][ T1272] usb 1-1: Product: syz [ 91.168755][ T1272] usb 1-1: Manufacturer: syz [ 91.173347][ T1272] usb 1-1: SerialNumber: syz [ 91.178530][ T1272] usb 1-1: config 0 descriptor?? [ 91.184223][ T1272] hub 1-1:0.0: bad descriptor, ignoring hub [ 91.190174][ T1272] hub 1-1:0.0: probe with driver hub failed with error -5 [ 91.198019][ T1272] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 91.223407][ T478] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 91.230408][ T478] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 91.242654][ T478] usb 4-1: USB disconnect, device number 37 [ 91.250674][ T378] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 91.271151][ T378] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 91.279676][ T1824] syzkaller1: entered promiscuous mode [ 91.285127][ T1824] syzkaller1: entered allmulticast mode [ 91.344258][ T1833] FAULT_INJECTION: forcing a failure. [ 91.344258][ T1833] name failslab, interval 1, probability 0, space 0, times 0 [ 91.357016][ T1833] CPU: 0 UID: 0 PID: 1833 Comm: syz.2.473 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 91.357046][ T1833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.357058][ T1833] Call Trace: [ 91.357064][ T1833] [ 91.357070][ T1833] __dump_stack+0x21/0x30 [ 91.357099][ T1833] dump_stack_lvl+0x140/0x1c0 [ 91.357122][ T1833] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.357148][ T1833] dump_stack+0x19/0x20 [ 91.357170][ T1833] should_fail_ex+0x3d7/0x530 [ 91.357192][ T1833] should_failslab+0xac/0x100 [ 91.357214][ T1833] kmem_cache_alloc_node_noprof+0x45/0x420 [ 91.357233][ T1833] ? __alloc_skb+0x108/0x370 [ 91.357252][ T1833] ? __build_skb_around+0x2a4/0x590 [ 91.357272][ T1833] __alloc_skb+0x108/0x370 [ 91.357290][ T1833] alloc_skb_with_frags+0xce/0x8b0 [ 91.357309][ T1833] ? __cfi_avc_has_perm+0x10/0x10 [ 91.357330][ T1833] ? __kasan_check_write+0x18/0x20 [ 91.357349][ T1833] sock_alloc_send_pskb+0x883/0x9a0 [ 91.357375][ T1833] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 91.357406][ T1833] ? __check_object_size+0x527/0x830 [ 91.357426][ T1833] ? __cfi___check_object_size+0x10/0x10 [ 91.357445][ T1833] ? skb_put+0x112/0x1f0 [ 91.357464][ T1833] bt_skb_sendmsg+0xda/0x600 [ 91.357490][ T1833] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 91.357514][ T1833] ? __rfcomm_sock_close+0x2f0/0x2f0 [ 91.357540][ T1833] ? release_sock+0x171/0x1f0 [ 91.357558][ T1833] rfcomm_sock_sendmsg+0x2b7/0x440 [ 91.357583][ T1833] ? __cfi_rfcomm_sock_sendmsg+0x10/0x10 [ 91.357609][ T1833] ____sys_sendmsg+0x9e1/0xa30 [ 91.357633][ T1833] ? __import_iovec+0x5ad/0x7c0 [ 91.357652][ T1833] ? __sys_sendmsg_sock+0x50/0x50 [ 91.357675][ T1833] ? import_iovec+0x80/0xb0 [ 91.357693][ T1833] ___sys_sendmsg+0x2a6/0x370 [ 91.357716][ T1833] ? __sys_sendmsg+0x2a0/0x2a0 [ 91.357738][ T1833] ? proc_fail_nth_write+0x184/0x220 [ 91.357763][ T1833] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 91.357794][ T1833] __x64_sys_sendmsg+0x1fb/0x2d0 [ 91.357816][ T1833] ? fput+0x1a4/0x240 [ 91.357838][ T1833] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 91.357860][ T1833] ? ksys_write+0x1f3/0x260 [ 91.357880][ T1833] ? __kasan_check_read+0x15/0x20 [ 91.357897][ T1833] x64_sys_call+0x2a4c/0x2ee0 [ 91.357914][ T1833] do_syscall_64+0x57/0xf0 [ 91.357936][ T1833] ? clear_bhb_loop+0x50/0xa0 [ 91.357953][ T1833] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.357978][ T1833] RIP: 0033:0x7fdafc99ce59 [ 91.357992][ T1833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.358006][ T1833] RSP: 002b:00007fdafd808028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.358027][ T1833] RAX: ffffffffffffffda RBX: 00007fdafcc15fa0 RCX: 00007fdafc99ce59 [ 91.358041][ T1833] RDX: 0000000020000040 RSI: 000020000000fa00 RDI: 0000000000000003 [ 91.358053][ T1833] RBP: 00007fdafd808090 R08: 0000000000000000 R09: 0000000000000000 [ 91.358065][ T1833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.358077][ T1833] R13: 00007fdafcc16038 R14: 00007fdafcc15fa0 R15: 00007ffd7fcc80e8 [ 91.358093][ T1833] [ 91.686907][ T1272] usb 1-1: USB disconnect, device number 51 [ 91.865569][ T1812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.874239][ T1812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.882531][ T343] usb 2-1: USB disconnect, device number 35 [ 91.960767][ T343] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 91.980553][ T1860] syz.3.475 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.001889][ T1862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.010701][ T1862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.305000][ T1881] syzkaller1: entered promiscuous mode [ 92.310552][ T1881] syzkaller1: entered allmulticast mode [ 92.425168][ T1889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=1889 comm=syz.1.485 [ 92.667801][ T1893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.677683][ T1893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.685489][ T378] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 92.699588][ T1893] netlink: 5 bytes leftover after parsing attributes in process `syz.2.487'. [ 92.709421][ T1893] netlink: 104 bytes leftover after parsing attributes in process `syz.2.487'. [ 92.738221][ T1898] tipc: Enabling of bearer rejected, failed to enable media [ 92.746909][ T1898] tipc: Started in network mode [ 92.752069][ T1898] tipc: Node identity , cluster identity 4711 [ 92.758212][ T1898] tipc: Failed to obtain node identity [ 92.763938][ T1898] tipc: Enabling of bearer rejected, failed to enable media [ 92.838447][ T378] usb 2-1: Using ep0 maxpacket: 16 [ 92.843961][ T378] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 92.858879][ T378] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 92.867928][ T378] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 92.876310][ T378] usb 2-1: Product: syz [ 92.880490][ T378] usb 2-1: Manufacturer: syz [ 92.887358][ T378] r8152-cfgselector 2-1: Unknown version 0x0000 [ 92.893676][ T378] r8152-cfgselector 2-1: config 0 descriptor?? [ 92.935378][ T1908] FAULT_INJECTION: forcing a failure. [ 92.935378][ T1908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.949085][ T1906] syzkaller1: entered promiscuous mode [ 92.954799][ T1906] syzkaller1: entered allmulticast mode [ 92.956577][ T1908] CPU: 1 UID: 0 PID: 1908 Comm: syz.0.493 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 92.956602][ T1908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 92.956616][ T1908] Call Trace: [ 92.956622][ T1908] [ 92.956629][ T1908] __dump_stack+0x21/0x30 [ 92.956658][ T1908] dump_stack_lvl+0x140/0x1c0 [ 92.956681][ T1908] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.956704][ T1908] ? alloc_skb_with_frags+0x809/0x8b0 [ 92.956724][ T1908] ? __cfi_avc_has_perm+0x10/0x10 [ 92.956745][ T1908] dump_stack+0x19/0x20 [ 92.956767][ T1908] should_fail_ex+0x3d7/0x530 [ 92.956789][ T1908] should_fail+0xf/0x20 [ 92.956815][ T1908] should_fail_usercopy+0x1e/0x30 [ 92.956838][ T1908] _copy_from_iter+0x1a9/0x1510 [ 92.956863][ T1908] ? __virt_addr_valid+0x2a6/0x380 [ 92.956884][ T1908] ? __cfi__copy_from_iter+0x10/0x10 [ 92.956907][ T1908] ? __check_object_size+0x527/0x830 [ 92.956926][ T1908] ? __cfi___check_object_size+0x10/0x10 [ 92.956944][ T1908] ? skb_put+0x112/0x1f0 [ 92.956962][ T1908] bt_skb_sendmsg+0x37b/0x600 [ 92.956986][ T1908] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 92.957011][ T1908] ? __rfcomm_sock_close+0x2f0/0x2f0 [ 92.957034][ T1908] ? release_sock+0x171/0x1f0 [ 92.957052][ T1908] rfcomm_sock_sendmsg+0x2b7/0x440 [ 92.957077][ T1908] ? __cfi_rfcomm_sock_sendmsg+0x10/0x10 [ 92.957101][ T1908] ____sys_sendmsg+0x9e1/0xa30 [ 92.957123][ T1908] ? __import_iovec+0x5ad/0x7c0 [ 92.957140][ T1908] ? __sys_sendmsg_sock+0x50/0x50 [ 92.957162][ T1908] ? import_iovec+0x80/0xb0 [ 92.957179][ T1908] ___sys_sendmsg+0x2a6/0x370 [ 92.957201][ T1908] ? __sys_sendmsg+0x2a0/0x2a0 [ 92.957222][ T1908] ? proc_fail_nth_write+0x184/0x220 [ 92.957246][ T1908] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 92.957275][ T1908] __x64_sys_sendmsg+0x1fb/0x2d0 [ 92.957297][ T1908] ? fput+0x1a4/0x240 [ 92.957319][ T1908] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 92.957340][ T1908] ? ksys_write+0x1f3/0x260 [ 92.957359][ T1908] ? __kasan_check_read+0x15/0x20 [ 92.957378][ T1908] x64_sys_call+0x2a4c/0x2ee0 [ 92.957395][ T1908] do_syscall_64+0x57/0xf0 [ 92.957418][ T1908] ? clear_bhb_loop+0x50/0xa0 [ 92.957434][ T1908] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.957460][ T1908] RIP: 0033:0x7f208239ce59 [ 92.957476][ T1908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.957490][ T1908] RSP: 002b:00007f20831e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.957511][ T1908] RAX: ffffffffffffffda RBX: 00007f2082615fa0 RCX: 00007f208239ce59 [ 92.957525][ T1908] RDX: 0000000020000040 RSI: 000020000000fa00 RDI: 0000000000000003 [ 92.957536][ T1908] RBP: 00007f20831e4090 R08: 0000000000000000 R09: 0000000000000000 [ 92.957548][ T1908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 92.957559][ T1908] R13: 00007f2082616038 R14: 00007f2082615fa0 R15: 00007ffe9be37fe8 [ 92.957575][ T1908] [ 93.104548][ T378] r8152-cfgselector 2-1: bad CDC descriptors [ 93.260080][ T378] r8152-cfgselector 2-1: USB disconnect, device number 36 [ 93.308395][ T343] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 93.431837][ T1926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 93.469730][ T343] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 93.478492][ T343] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 93.488721][ T343] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.497899][ T343] usb 1-1: config 1 has no interface number 0 [ 93.504031][ T343] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 93.519546][ T343] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 93.537744][ T343] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.559030][ T343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.567049][ T343] usb 1-1: Product: syz [ 93.571299][ T343] usb 1-1: Manufacturer: syz [ 93.575919][ T343] usb 1-1: SerialNumber: syz [ 93.580789][ T1267] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 93.613478][ T343] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 93.627683][ T343] cdc_ncm 1-1:1.1: bind() failure [ 93.637854][ T1931] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 93.643388][ T1931] dvmrp1: ignored: set checksum disabled [ 93.710810][ T1931] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 93.722417][ T1936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.501'. [ 93.736294][ T1938] FAULT_INJECTION: forcing a failure. [ 93.736294][ T1938] name failslab, interval 1, probability 0, space 0, times 0 [ 93.737155][ T1936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.750026][ T1938] CPU: 0 UID: 0 PID: 1938 Comm: syz.1.502 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 93.750053][ T1938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.750064][ T1938] Call Trace: [ 93.750070][ T1938] [ 93.750076][ T1938] __dump_stack+0x21/0x30 [ 93.750104][ T1938] dump_stack_lvl+0x140/0x1c0 [ 93.750129][ T1938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.750154][ T1938] dump_stack+0x19/0x20 [ 93.750176][ T1938] should_fail_ex+0x3d7/0x530 [ 93.750199][ T1938] should_failslab+0xac/0x100 [ 93.750221][ T1938] kmem_cache_alloc_node_noprof+0x45/0x420 [ 93.750240][ T1938] ? __alloc_skb+0x108/0x370 [ 93.750258][ T1938] ? __build_skb_around+0x2a4/0x590 [ 93.750277][ T1938] __alloc_skb+0x108/0x370 [ 93.750295][ T1938] alloc_skb_with_frags+0xce/0x8b0 [ 93.750323][ T1938] ? __cfi_avc_has_perm+0x10/0x10 [ 93.750343][ T1938] ? __kasan_check_write+0x18/0x20 [ 93.750362][ T1938] sock_alloc_send_pskb+0x883/0x9a0 [ 93.750386][ T1938] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 93.750408][ T1938] ? __check_object_size+0x527/0x830 [ 93.750426][ T1938] ? __cfi___check_object_size+0x10/0x10 [ 93.750446][ T1938] ? skb_put+0x112/0x1f0 [ 93.750465][ T1938] bt_skb_sendmsg+0xda/0x600 [ 93.750489][ T1938] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 93.750514][ T1938] ? __rfcomm_sock_close+0x2f0/0x2f0 [ 93.750539][ T1938] ? release_sock+0x171/0x1f0 [ 93.750557][ T1938] rfcomm_sock_sendmsg+0x2b7/0x440 [ 93.750581][ T1938] ? __cfi_rfcomm_sock_sendmsg+0x10/0x10 [ 93.750606][ T1938] ____sys_sendmsg+0x9e1/0xa30 [ 93.750628][ T1938] ? __import_iovec+0x5ad/0x7c0 [ 93.750646][ T1938] ? __sys_sendmsg_sock+0x50/0x50 [ 93.750668][ T1938] ? import_iovec+0x80/0xb0 [ 93.750685][ T1938] ___sys_sendmsg+0x2a6/0x370 [ 93.750707][ T1938] ? __sys_sendmsg+0x2a0/0x2a0 [ 93.750729][ T1938] ? proc_fail_nth_write+0x184/0x220 [ 93.750753][ T1938] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 93.750782][ T1938] __x64_sys_sendmsg+0x1fb/0x2d0 [ 93.750803][ T1938] ? fput+0x1a4/0x240 [ 93.750824][ T1938] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 93.750846][ T1938] ? ksys_write+0x1f3/0x260 [ 93.750865][ T1938] ? __kasan_check_read+0x15/0x20 [ 93.750883][ T1938] x64_sys_call+0x2a4c/0x2ee0 [ 93.750901][ T1938] do_syscall_64+0x57/0xf0 [ 93.750923][ T1938] ? clear_bhb_loop+0x50/0xa0 [ 93.750941][ T1938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.750967][ T1938] RIP: 0033:0x7fe70f99ce59 [ 93.750982][ T1938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.750997][ T1938] RSP: 002b:00007fe710909028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.751016][ T1938] RAX: ffffffffffffffda RBX: 00007fe70fc15fa0 RCX: 00007fe70f99ce59 [ 93.751030][ T1938] RDX: 0000000020000040 RSI: 000020000000fa00 RDI: 0000000000000003 [ 93.751043][ T1938] RBP: 00007fe710909090 R08: 0000000000000000 R09: 0000000000000000 [ 93.751054][ T1938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.751066][ T1938] R13: 00007fe70fc16038 R14: 00007fe70fc15fa0 R15: 00007ffde34b4a28 [ 93.751081][ T1938] [ 94.062567][ T1910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.063419][ T1936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.071283][ T1910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.087149][ T1267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.101483][ T1267] usb 4-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=6b.01 [ 94.111076][ T1267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.119114][ T1267] usb 4-1: Product: syz [ 94.123275][ T1267] usb 4-1: Manufacturer: syz [ 94.128300][ T1267] usb 4-1: SerialNumber: syz [ 94.137346][ T1267] usb 4-1: config 0 descriptor?? [ 94.346327][ T1267] ums-cypress 4-1:0.0: USB Mass Storage device detected [ 94.409650][ T1267] usb 4-1: USB disconnect, device number 38 [ 94.418271][ T378] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 94.548243][ T378] usb 2-1: device descriptor read/64, error -71 [ 94.787925][ T1955] can0: slcan on ttyS3. [ 94.792552][ T378] usb 2-1: device descriptor read/64, error -71 [ 94.959207][ T1955] can0 (unregistered): slcan off ttyS3. [ 95.038182][ T378] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 95.129219][ T36] kauditd_printk_skb: 3840 callbacks suppressed [ 95.129236][ T36] audit: type=1400 audit(1781759193.774:4224): avc: denied { getopt } for pid=1990 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.188230][ T378] usb 2-1: device descriptor read/64, error -71 [ 95.428131][ T378] usb 2-1: device descriptor read/64, error -71 [ 95.538192][ T378] usb usb2-port1: attempt power cycle [ 95.767079][ T36] audit: type=1326 audit(1781759194.404:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2015 comm="syz.3.513" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0e919ce59 code=0x0 [ 95.848608][ T2020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.857100][ T2020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.888087][ T378] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 95.897058][ T2020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.514'. [ 95.909064][ T378] usb 2-1: device descriptor read/8, error -71 [ 95.952948][ T36] audit: type=1400 audit(1781759194.594:4226): avc: denied { bind } for pid=2019 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.972210][ T36] audit: type=1400 audit(1781759194.594:4227): avc: denied { write } for pid=2019 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.995415][ T343] usb 1-1: USB disconnect, device number 52 [ 96.007872][ T2024] rust_binder: 2023:2024 transaction to 0 failed: ENOENT [ 96.007963][ T2024] rust_binder: Write failure EINVAL in pid:240 [ 96.039620][ T378] usb 2-1: device descriptor read/8, error -71 [ 96.058054][ T1267] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 96.209056][ T1267] usb 4-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 96.219469][ T1267] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.228513][ T1267] usb 4-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 96.237537][ T1267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.246057][ T1267] usb 4-1: config 0 descriptor?? [ 96.298033][ T378] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 96.318950][ T378] usb 2-1: device descriptor read/8, error -71 [ 96.448980][ T378] usb 2-1: device descriptor read/8, error -71 [ 96.464181][ T2026] rust_binder: 2025:2026 transaction to 0 failed: ENOENT [ 96.464253][ T2026] rust_binder: Write failure EINVAL in pid:530 [ 96.471585][ T2026] FAULT_INJECTION: forcing a failure. [ 96.471585][ T2026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.490820][ T2026] CPU: 1 UID: 0 PID: 2026 Comm: syz.2.516 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 96.490849][ T2026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.490859][ T2026] Call Trace: [ 96.490863][ T2026] [ 96.490867][ T2026] __dump_stack+0x21/0x30 [ 96.490886][ T2026] dump_stack_lvl+0x140/0x1c0 [ 96.490900][ T2026] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.490915][ T2026] ? _printk+0xde/0x140 [ 96.490927][ T2026] dump_stack+0x19/0x20 [ 96.490942][ T2026] should_fail_ex+0x3d7/0x530 [ 96.490956][ T2026] should_fail+0xf/0x20 [ 96.490968][ T2026] should_fail_usercopy+0x1e/0x30 [ 96.490981][ T2026] _copy_from_user+0x20/0xa0 [ 96.490990][ T2026] _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0xb09/0x5d80 [ 96.491007][ T2026] ? __cfi_rust_binder_waitlcl+0x10/0x10 [ 96.491028][ T2026] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 96.491050][ T2026] ? is_bpf_text_address+0x17b/0x1a0 [ 96.491065][ T2026] ? kernel_text_address+0xa9/0xe0 [ 96.491079][ T2026] ? __kernel_text_address+0x11/0x40 [ 96.491092][ T2026] ? unwind_get_return_address+0x51/0x90 [ 96.491108][ T2026] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 96.491121][ T2026] ? arch_stack_walk+0x10a/0x170 [ 96.491133][ T2026] ? is_bpf_text_address+0x17b/0x1a0 [ 96.491147][ T2026] ? kernel_text_address+0xa9/0xe0 [ 96.491160][ T2026] ? __kernel_text_address+0x11/0x40 [ 96.491173][ T2026] ? unwind_get_return_address+0x51/0x90 [ 96.491186][ T2026] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 96.491197][ T2026] ? arch_stack_walk+0x10a/0x170 [ 96.491208][ T2026] ? stack_depot_save_flags+0x38/0x800 [ 96.491221][ T2026] ? stack_trace_save+0xaa/0x100 [ 96.491233][ T2026] ? kasan_save_track+0x4f/0x80 [ 96.491245][ T2026] ? kasan_save_track+0x3e/0x80 [ 96.491255][ T2026] ? kasan_save_alloc_info+0x40/0x50 [ 96.491264][ T2026] ? __kasan_slab_alloc+0x73/0x90 [ 96.491275][ T2026] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 96.491286][ T2026] ? security_inode_alloc+0x51/0x230 [ 96.491298][ T2026] ? inode_init_always_gfp+0x756/0x9e0 [ 96.491310][ T2026] ? alloc_inode+0xc5/0x270 [ 96.491322][ T2026] ? new_inode+0x25/0x1e0 [ 96.491333][ T2026] ? proc_pid_make_inode+0x25/0x140 [ 96.491345][ T2026] ? proc_pident_instantiate+0x6d/0x2c0 [ 96.491356][ T2026] ? proc_pident_lookup+0x1c7/0x270 [ 96.491368][ T2026] ? proc_tid_base_lookup+0x2f/0x40 [ 96.491377][ T2026] ? path_openat+0x1315/0x34f0 [ 96.491390][ T2026] ? do_filp_open+0x1f5/0x440 [ 96.491402][ T2026] ? do_sys_openat2+0x134/0x1d0 [ 96.491415][ T2026] ? __x64_sys_openat+0x13a/0x170 [ 96.491429][ T2026] ? x64_sys_call+0xe69/0x2ee0 [ 96.491438][ T2026] ? do_syscall_64+0x57/0xf0 [ 96.491452][ T2026] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.491469][ T2026] ? avc_has_perm_noaudit+0x26c/0x360 [ 96.491481][ T2026] ? __asan_memcpy+0x5a/0x80 [ 96.491491][ T2026] ? avc_has_perm_noaudit+0x28a/0x360 [ 96.491503][ T2026] ? avc_has_perm+0x155/0x240 [ 96.491514][ T2026] ? __cfi_avc_has_perm+0x10/0x10 [ 96.491525][ T2026] ? kasan_save_alloc_info+0x40/0x50 [ 96.491535][ T2026] ? selinux_file_open+0x46c/0x630 [ 96.491546][ T2026] ? __cfi_selinux_file_open+0x10/0x10 [ 96.491557][ T2026] ? avc_has_extended_perms+0x80b/0xe70 [ 96.491568][ T2026] ? __asan_memcpy+0x5a/0x80 [ 96.491578][ T2026] ? avc_has_extended_perms+0x969/0xe70 [ 96.491590][ T2026] ? __asan_set_shadow_00+0x12/0x20 [ 96.491610][ T2026] ? do_vfs_ioctl+0x182d/0x2010 [ 96.491622][ T2026] ? arch_stack_walk+0x10a/0x170 [ 96.491632][ T2026] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 96.491646][ T2026] ? _parse_integer+0x2e/0x40 [ 96.491659][ T2026] ? ioctl_has_perm+0x39a/0x500 [ 96.491669][ T2026] ? has_cap_mac_admin+0xd0/0xd0 [ 96.491678][ T2026] ? proc_fail_nth_write+0x184/0x220 [ 96.491692][ T2026] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 96.491707][ T2026] ? selinux_file_ioctl+0x732/0x1480 [ 96.491717][ T2026] ? vfs_write+0x9a4/0xf90 [ 96.491727][ T2026] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 96.491737][ T2026] ? __cfi_vfs_write+0x10/0x10 [ 96.491747][ T2026] ? __kasan_check_write+0x18/0x20 [ 96.491757][ T2026] ? mutex_unlock+0x90/0x240 [ 96.491767][ T2026] ? __cfi_mutex_unlock+0x10/0x10 [ 96.491778][ T2026] ? __fget_files+0x2c5/0x340 [ 96.491790][ T2026] ? __fget_files+0x2c5/0x340 [ 96.491802][ T2026] ? bpf_lsm_file_ioctl+0xd/0x20 [ 96.491815][ T2026] ? security_file_ioctl+0x3e/0x110 [ 96.491830][ T2026] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 96.491844][ T2026] __se_sys_ioctl+0x132/0x1b0 [ 96.491857][ T2026] __x64_sys_ioctl+0x7f/0xa0 [ 96.491869][ T2026] x64_sys_call+0x1878/0x2ee0 [ 96.491878][ T2026] do_syscall_64+0x57/0xf0 [ 96.491891][ T2026] ? clear_bhb_loop+0x50/0xa0 [ 96.491901][ T2026] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.491917][ T2026] RIP: 0033:0x7fdafc99ce59 [ 96.491926][ T2026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.491936][ T2026] RSP: 002b:00007fdafd808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.491948][ T2026] RAX: ffffffffffffffda RBX: 00007fdafcc15fa0 RCX: 00007fdafc99ce59 [ 96.491956][ T2026] RDX: 0000200000007a00 RSI: 00000000c0306201 RDI: 0000000000000003 [ 96.491964][ T2026] RBP: 00007fdafd808090 R08: 0000000000000000 R09: 0000000000000000 [ 96.491970][ T2026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.491977][ T2026] R13: 00007fdafcc16038 R14: 00007fdafcc15fa0 R15: 00007ffd7fcc80e8 [ 96.491986][ T2026] [ 97.031457][ T378] usb usb2-port1: unable to enumerate USB device [ 97.054857][ T2036] FAULT_INJECTION: forcing a failure. [ 97.054857][ T2036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.067985][ T2036] CPU: 0 UID: 0 PID: 2036 Comm: syz.2.520 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 97.068012][ T2036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.068024][ T2036] Call Trace: [ 97.068031][ T2036] [ 97.068039][ T2036] __dump_stack+0x21/0x30 [ 97.068073][ T2036] dump_stack_lvl+0x140/0x1c0 [ 97.068096][ T2036] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.068121][ T2036] ? alloc_skb_with_frags+0x809/0x8b0 [ 97.068145][ T2036] ? __cfi_avc_has_perm+0x10/0x10 [ 97.068165][ T2036] dump_stack+0x19/0x20 [ 97.068179][ T2036] should_fail_ex+0x3d7/0x530 [ 97.068192][ T2036] should_fail+0xf/0x20 [ 97.068203][ T2036] should_fail_usercopy+0x1e/0x30 [ 97.068216][ T2036] _copy_from_iter+0x1a9/0x1510 [ 97.068237][ T2036] ? __virt_addr_valid+0x2a6/0x380 [ 97.068261][ T2036] ? __cfi__copy_from_iter+0x10/0x10 [ 97.068285][ T2036] ? __check_object_size+0x527/0x830 [ 97.068304][ T2036] ? __cfi___check_object_size+0x10/0x10 [ 97.068316][ T2036] ? skb_put+0x112/0x1f0 [ 97.068327][ T2036] bt_skb_sendmsg+0x37b/0x600 [ 97.068341][ T2036] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 97.068356][ T2036] ? __rfcomm_sock_close+0x2f0/0x2f0 [ 97.068371][ T2036] ? release_sock+0x171/0x1f0 [ 97.068389][ T2036] rfcomm_sock_sendmsg+0x2b7/0x440 [ 97.068415][ T2036] ? __cfi_rfcomm_sock_sendmsg+0x10/0x10 [ 97.068441][ T2036] ____sys_sendmsg+0x9e1/0xa30 [ 97.068459][ T2036] ? __import_iovec+0x5ad/0x7c0 [ 97.068469][ T2036] ? __sys_sendmsg_sock+0x50/0x50 [ 97.068482][ T2036] ? import_iovec+0x80/0xb0 [ 97.068491][ T2036] ___sys_sendmsg+0x2a6/0x370 [ 97.068504][ T2036] ? __sys_sendmsg+0x2a0/0x2a0 [ 97.068519][ T2036] ? proc_fail_nth_write+0x184/0x220 [ 97.068545][ T2036] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 97.068575][ T2036] __x64_sys_sendmsg+0x1fb/0x2d0 [ 97.068595][ T2036] ? fput+0x1a4/0x240 [ 97.068608][ T2036] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 97.068620][ T2036] ? ksys_write+0x1f3/0x260 [ 97.068631][ T2036] ? __kasan_check_read+0x15/0x20 [ 97.068642][ T2036] x64_sys_call+0x2a4c/0x2ee0 [ 97.068652][ T2036] do_syscall_64+0x57/0xf0 [ 97.068673][ T2036] ? clear_bhb_loop+0x50/0xa0 [ 97.068693][ T2036] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.068719][ T2036] RIP: 0033:0x7fdafc99ce59 [ 97.068735][ T2036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.068744][ T2036] RSP: 002b:00007fdafd808028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.068756][ T2036] RAX: ffffffffffffffda RBX: 00007fdafcc15fa0 RCX: 00007fdafc99ce59 [ 97.068764][ T2036] RDX: 0000000020000040 RSI: 000020000000fa00 RDI: 0000000000000003 [ 97.068772][ T2036] RBP: 00007fdafd808090 R08: 0000000000000000 R09: 0000000000000000 [ 97.068778][ T2036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.068785][ T2036] R13: 00007fdafcc16038 R14: 00007fdafcc15fa0 R15: 00007ffd7fcc80e8 [ 97.068793][ T2036] [ 97.180679][ T2038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.182932][ T478] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 97.188497][ T2038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.244078][ T2045] 9p: Unknown uid 00000000004294967295 [ 97.248864][ T36] audit: type=1400 audit(1781759195.884:4228): avc: denied { mounton } for pid=2044 comm="syz.1.523" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 97.339018][ T478] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.430063][ T478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 97.441233][ T478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 97.454359][ T478] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.467252][ T478] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.476291][ T478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.485004][ T478] usb 1-1: config 0 descriptor?? [ 97.490797][ T2034] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 97.545831][ T2052] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 97.566769][ T2054] rust_binder: 2053:2054 transaction to 0 failed: ENOENT [ 97.566835][ T2054] rust_binder: Write failure EINVAL in pid:378 [ 97.574134][ T2054] FAULT_INJECTION: forcing a failure. [ 97.574134][ T2054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.593374][ T2054] CPU: 0 UID: 0 PID: 2054 Comm: syz.1.526 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 97.593393][ T2054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.593400][ T2054] Call Trace: [ 97.593405][ T2054] [ 97.593410][ T2054] __dump_stack+0x21/0x30 [ 97.593429][ T2054] dump_stack_lvl+0x140/0x1c0 [ 97.593451][ T2054] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.593478][ T2054] dump_stack+0x19/0x20 [ 97.593504][ T2054] should_fail_ex+0x3d7/0x530 [ 97.593527][ T2054] should_fail+0xf/0x20 [ 97.593538][ T2054] should_fail_usercopy+0x1e/0x30 [ 97.593551][ T2054] _copy_from_user+0x20/0xa0 [ 97.593561][ T2054] _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x829/0xa690 [ 97.593608][ T2054] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 97.593679][ T2054] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 97.593699][ T2054] ? __asan_memcpy+0x5a/0x80 [ 97.593710][ T2054] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 97.593730][ T2054] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 97.593762][ T2054] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 97.593794][ T2054] ? __asan_memcpy+0x5a/0x80 [ 97.593809][ T2054] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 97.593827][ T2054] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter12pad_integral+0x307/0x810 [ 97.593844][ T2054] ? put_dec_trunc8+0x229/0x380 [ 97.593858][ T2054] ? put_dec+0xd7/0xf0 [ 97.593871][ T2054] ? __asan_memset+0x39/0x50 [ 97.593889][ T2054] ? move_right+0x8e/0xb0 [ 97.593913][ T2054] ? format_decode+0x1bb/0x1610 [ 97.593936][ T2054] ? vsnprintf+0x7b4/0x1ad0 [ 97.593954][ T2054] ? __asan_memcpy+0x5a/0x80 [ 97.593964][ T2054] ? vsnprintf+0x19ef/0x1ad0 [ 97.593976][ T2054] ? desc_read+0x202/0x3e0 [ 97.593987][ T2054] ? __kasan_check_write+0x18/0x20 [ 97.593997][ T2054] ? desc_read+0x1ab/0x3e0 [ 97.594009][ T2054] ? prb_first_seq+0x109/0x1d0 [ 97.594026][ T2054] ? __cfi_prb_first_seq+0x10/0x10 [ 97.594047][ T2054] ? __kasan_check_write+0x18/0x20 [ 97.594065][ T2054] ? desc_read+0x1ab/0x3e0 [ 97.594084][ T2054] ? __kasan_check_read+0x15/0x20 [ 97.594099][ T2054] ? this_cpu_in_panic+0x56/0x90 [ 97.594111][ T2054] ? _prb_read_valid+0x9f3/0xa80 [ 97.594122][ T2054] ? record_print_text+0x290/0x450 [ 97.594137][ T2054] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 97.594152][ T2054] ? update_curr+0xf8/0x9e0 [ 97.594166][ T2054] ? xfd_validate_state+0x68/0x140 [ 97.594189][ T2054] ? save_fpregs_to_fpstate+0x196/0x220 [ 97.594210][ T2054] ? __kasan_check_write+0x18/0x20 [ 97.594229][ T2054] ? __switch_to+0xc4f/0x1300 [ 97.594245][ T2054] ? __cfi_sched_clock_cpu+0x10/0x10 [ 97.594262][ T2054] ? __kasan_check_write+0x18/0x20 [ 97.594271][ T2054] ? _raw_spin_lock+0x92/0x120 [ 97.594284][ T2054] ? __cfi__raw_spin_lock+0x10/0x10 [ 97.594297][ T2054] ? psi_task_switch+0xad/0xa10 [ 97.594310][ T2054] ? _raw_spin_unlock+0x45/0x60 [ 97.594331][ T2054] ? __asan_set_shadow_00+0x12/0x20 [ 97.594355][ T2054] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x1008/0x1c70 [ 97.594390][ T2054] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 97.594409][ T2054] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 97.594423][ T2054] ? up+0x10a/0x1b0 [ 97.594434][ T2054] ? __cfi_up+0x10/0x10 [ 97.594444][ T2054] ? __kasan_check_read+0x15/0x20 [ 97.594453][ T2054] ? prb_read_valid+0x41/0x80 [ 97.594473][ T2054] ? preempt_schedule_common+0x2d/0x60 [ 97.594491][ T2054] ? preempt_schedule+0xc5/0xe0 [ 97.594507][ T2054] ? __cfi_preempt_schedule+0x10/0x10 [ 97.594530][ T2054] ? __printk_safe_exit+0xd/0x20 [ 97.594545][ T2054] ? console_trylock+0x17e/0x220 [ 97.594565][ T2054] ? __cfi_console_trylock+0x10/0x10 [ 97.594587][ T2054] ? preempt_schedule_thunk+0x1a/0x40 [ 97.594607][ T2054] ? vprintk_emit+0x584/0x650 [ 97.594629][ T2054] ? vprintk_emit+0x3e3/0x650 [ 97.594652][ T2054] ? __cfi_vprintk_emit+0x10/0x10 [ 97.594673][ T2054] ? _raw_spin_unlock+0x45/0x60 [ 97.594695][ T2054] ? rust_binder_waitlcl+0xdd3/0xfd0 [ 97.594721][ T2054] ? vprintk_default+0x2a/0x40 [ 97.594743][ T2054] ? vprintk+0x93/0xa0 [ 97.594760][ T2054] ? _printk+0xde/0x140 [ 97.594781][ T2054] ? __kasan_check_write+0x18/0x20 [ 97.594799][ T2054] ? _raw_spin_lock+0x92/0x120 [ 97.594816][ T2054] ? __cfi__raw_spin_lock+0x10/0x10 [ 97.594829][ T2054] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x11db/0x5d80 [ 97.594845][ T2054] ? __asan_memcpy+0x5a/0x80 [ 97.594855][ T2054] _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 97.594871][ T2054] ? __cfi_rust_binder_waitlcl+0x10/0x10 [ 97.594897][ T2054] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 97.594943][ T2054] ? is_bpf_text_address+0x17b/0x1a0 [ 97.594962][ T2054] ? kernel_text_address+0xa9/0xe0 [ 97.594976][ T2054] ? __kernel_text_address+0x11/0x40 [ 97.594989][ T2054] ? unwind_get_return_address+0x51/0x90 [ 97.595003][ T2054] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 97.595017][ T2054] ? arch_stack_walk+0x10a/0x170 [ 97.595040][ T2054] ? is_bpf_text_address+0x17b/0x1a0 [ 97.595066][ T2054] ? kernel_text_address+0xa9/0xe0 [ 97.595089][ T2054] ? __kernel_text_address+0x11/0x40 [ 97.595106][ T2054] ? unwind_get_return_address+0x51/0x90 [ 97.595118][ T2054] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 97.595131][ T2054] ? stack_depot_save_flags+0x38/0x800 [ 97.595145][ T2054] ? stack_trace_save+0xaa/0x100 [ 97.595157][ T2054] ? kasan_save_track+0x4f/0x80 [ 97.595175][ T2054] ? kasan_save_track+0x3e/0x80 [ 97.595194][ T2054] ? kasan_save_alloc_info+0x40/0x50 [ 97.595211][ T2054] ? __kasan_slab_alloc+0x73/0x90 [ 97.595231][ T2054] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 97.595245][ T2054] ? security_inode_alloc+0x51/0x230 [ 97.595257][ T2054] ? inode_init_always_gfp+0x756/0x9e0 [ 97.595269][ T2054] ? alloc_inode+0xc5/0x270 [ 97.595281][ T2054] ? new_inode+0x25/0x1e0 [ 97.595292][ T2054] ? proc_pid_make_inode+0x25/0x140 [ 97.595306][ T2054] ? proc_pident_instantiate+0x6d/0x2c0 [ 97.595327][ T2054] ? proc_pident_lookup+0x1c7/0x270 [ 97.595348][ T2054] ? proc_tid_base_lookup+0x2f/0x40 [ 97.595365][ T2054] ? do_filp_open+0x1f5/0x440 [ 97.595386][ T2054] ? avc_has_perm_noaudit+0x26c/0x360 [ 97.595398][ T2054] ? __asan_memcpy+0x5a/0x80 [ 97.595408][ T2054] ? avc_has_perm_noaudit+0x28a/0x360 [ 97.595419][ T2054] ? avc_has_perm+0x155/0x240 [ 97.595430][ T2054] ? __cfi_avc_has_perm+0x10/0x10 [ 97.595441][ T2054] ? kasan_save_alloc_info+0x40/0x50 [ 97.595458][ T2054] ? selinux_file_open+0x46c/0x630 [ 97.595476][ T2054] ? __cfi_selinux_file_open+0x10/0x10 [ 97.595497][ T2054] ? avc_has_extended_perms+0x80b/0xe70 [ 97.595524][ T2054] ? __asan_memcpy+0x5a/0x80 [ 97.595534][ T2054] ? avc_has_extended_perms+0x969/0xe70 [ 97.595546][ T2054] ? __asan_set_shadow_00+0x12/0x20 [ 97.595560][ T2054] ? do_vfs_ioctl+0x182d/0x2010 [ 97.595572][ T2054] ? arch_stack_walk+0x10a/0x170 [ 97.595582][ T2054] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 97.595603][ T2054] ? _parse_integer+0x2e/0x40 [ 97.595627][ T2054] ? ioctl_has_perm+0x39a/0x500 [ 97.595645][ T2054] ? has_cap_mac_admin+0xd0/0xd0 [ 97.595664][ T2054] ? proc_fail_nth_write+0x184/0x220 [ 97.595680][ T2054] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 97.595694][ T2054] ? selinux_file_ioctl+0x732/0x1480 [ 97.595703][ T2054] ? vfs_write+0x9a4/0xf90 [ 97.595713][ T2054] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 97.595723][ T2054] ? __cfi_vfs_write+0x10/0x10 [ 97.595736][ T2054] ? __kasan_check_write+0x18/0x20 [ 97.595753][ T2054] ? mutex_unlock+0x90/0x240 [ 97.595771][ T2054] ? __cfi_mutex_unlock+0x10/0x10 [ 97.595789][ T2054] ? __fget_files+0x2c5/0x340 [ 97.595811][ T2054] ? __fget_files+0x2c5/0x340 [ 97.595830][ T2054] ? bpf_lsm_file_ioctl+0xd/0x20 [ 97.595843][ T2054] ? security_file_ioctl+0x3e/0x110 [ 97.595858][ T2054] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 97.595872][ T2054] __se_sys_ioctl+0x132/0x1b0 [ 97.595891][ T2054] __x64_sys_ioctl+0x7f/0xa0 [ 97.595913][ T2054] x64_sys_call+0x1878/0x2ee0 [ 97.595930][ T2054] do_syscall_64+0x57/0xf0 [ 97.595954][ T2054] ? clear_bhb_loop+0x50/0xa0 [ 97.595966][ T2054] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.595981][ T2054] RIP: 0033:0x7fe70f99ce59 [ 97.595991][ T2054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.596000][ T2054] RSP: 002b:00007fe710909028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.596012][ T2054] RAX: ffffffffffffffda RBX: 00007fe70fc15fa0 RCX: 00007fe70f99ce59 [ 97.596025][ T2054] RDX: 0000200000007a00 RSI: 00000000c0306201 RDI: 0000000000000003 [ 97.596038][ T2054] RBP: 00007fe710909090 R08: 0000000000000000 R09: 0000000000000000 [ 97.596051][ T2054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.596063][ T2054] R13: 00007fe70fc16038 R14: 00007fe70fc15fa0 R15: 00007ffde34b4a28 [ 97.596079][ T2054] [ 97.596101][ T2054] rust_binder: Write failure EFAULT in pid:378 [ 97.795800][ T2056] rust_binder: 2055:2056 transaction to 0 failed: ENOENT [ 97.859229][ T2057] rust_binder: 540: no such ref 0 [ 98.176985][ T2034] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 98.182320][ T478] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 98.240171][ T1265] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 98.245013][ T478] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 98.267669][ T1265] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.278687][ T478] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 98.365256][ T2069] hid-generic 0000:0000:0000.0013: pid 2069 passed too short report [ 98.384833][ T478] usb 1-1: USB disconnect, device number 53 [ 98.406090][ T36] audit: type=1400 audit(1781759197.044:4229): avc: denied { ioctl } for pid=2061 comm="syz.1.529" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 98.603939][ T36] audit: type=1400 audit(1781759197.224:4230): avc: denied { connect } for pid=2071 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.654364][ T36] audit: type=1400 audit(1781759197.284:4231): avc: denied { ioctl } for pid=2077 comm="syz.2.534" path="socket:[16018]" dev="sockfs" ino=16018 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.698524][ T36] audit: type=1400 audit(1781759197.344:4232): avc: denied { write } for pid=2082 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.737355][ T2087] rust_binder: 2086:2087 transaction to 0 failed: ENOENT [ 98.737462][ T2087] rust_binder: Write failure EINVAL in pid:552 [ 98.744896][ T2087] FAULT_INJECTION: forcing a failure. [ 98.744896][ T2087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.764205][ T2087] CPU: 1 UID: 0 PID: 2087 Comm: syz.2.538 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 98.764235][ T2087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.764246][ T2087] Call Trace: [ 98.764252][ T2087] [ 98.764259][ T2087] __dump_stack+0x21/0x30 [ 98.764290][ T2087] dump_stack_lvl+0x140/0x1c0 [ 98.764314][ T2087] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.764329][ T2087] dump_stack+0x19/0x20 [ 98.764349][ T2087] should_fail_ex+0x3d7/0x530 [ 98.764370][ T2087] should_fail+0xf/0x20 [ 98.764389][ T2087] should_fail_usercopy+0x1e/0x30 [ 98.764411][ T2087] _copy_from_user+0x20/0xa0 [ 98.764428][ T2087] _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x162a/0xa690 [ 98.764465][ T2087] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 98.764504][ T2087] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 98.764525][ T2087] ? __asan_memcpy+0x5a/0x80 [ 98.764536][ T2087] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 98.764554][ T2087] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 98.764578][ T2087] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 98.764596][ T2087] ? __asan_memcpy+0x5a/0x80 [ 98.764606][ T2087] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 98.764624][ T2087] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter12pad_integral+0x307/0x810 [ 98.764643][ T2087] ? put_dec_trunc8+0x229/0x380 [ 98.764657][ T2087] ? put_dec+0xd7/0xf0 [ 98.764670][ T2087] ? __asan_memset+0x39/0x50 [ 98.764679][ T2087] ? move_right+0x8e/0xb0 [ 98.764693][ T2087] ? format_decode+0x1bb/0x1610 [ 98.764705][ T2087] ? vsnprintf+0x7b4/0x1ad0 [ 98.764717][ T2087] ? __asan_memcpy+0x5a/0x80 [ 98.764727][ T2087] ? vsnprintf+0x19ef/0x1ad0 [ 98.764740][ T2087] ? desc_read+0x202/0x3e0 [ 98.764752][ T2087] ? __kasan_check_write+0x18/0x20 [ 98.764761][ T2087] ? desc_read+0x1ab/0x3e0 [ 98.764773][ T2087] ? prb_first_seq+0x109/0x1d0 [ 98.764784][ T2087] ? __cfi_prb_first_seq+0x10/0x10 [ 98.764795][ T2087] ? __kasan_check_write+0x18/0x20 [ 98.764804][ T2087] ? desc_read+0x1ab/0x3e0 [ 98.764815][ T2087] ? cgroup_rstat_updated+0x141/0x810 [ 98.764827][ T2087] ? this_cpu_in_panic+0x56/0x90 [ 98.764839][ T2087] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 98.764850][ T2087] ? record_print_text+0x290/0x450 [ 98.764864][ T2087] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 98.764879][ T2087] ? update_curr+0xf8/0x9e0 [ 98.764889][ T2087] ? xfd_validate_state+0x68/0x140 [ 98.764904][ T2087] ? save_fpregs_to_fpstate+0x196/0x220 [ 98.764916][ T2087] ? __kasan_check_write+0x18/0x20 [ 98.764926][ T2087] ? __switch_to+0xc4f/0x1300 [ 98.764935][ T2087] ? __cfi_sched_clock_cpu+0x10/0x10 [ 98.764950][ T2087] ? __kasan_check_write+0x18/0x20 [ 98.764966][ T2087] ? _raw_spin_lock+0x92/0x120 [ 98.764988][ T2087] ? __cfi__raw_spin_lock+0x10/0x10 [ 98.765009][ T2087] ? psi_task_switch+0xad/0xa10 [ 98.765030][ T2087] ? _raw_spin_unlock+0x45/0x60 [ 98.765052][ T2087] ? __asan_set_shadow_00+0x12/0x20 [ 98.765073][ T2087] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x1008/0x1c70 [ 98.765101][ T2087] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 98.765131][ T2087] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 98.765152][ T2087] ? up+0x10a/0x1b0 [ 98.765168][ T2087] ? __cfi_up+0x10/0x10 [ 98.765183][ T2087] ? __kasan_check_write+0x18/0x20 [ 98.765199][ T2087] ? llist_add_batch+0x10f/0x1f0 [ 98.765216][ T2087] ? prb_read_valid+0x41/0x80 [ 98.765235][ T2087] ? __cfi_llist_add_batch+0x10/0x10 [ 98.765254][ T2087] ? preempt_schedule_common+0x2d/0x60 [ 98.765270][ T2087] ? preempt_schedule+0xc5/0xe0 [ 98.765279][ T2087] ? __cfi_preempt_schedule+0x10/0x10 [ 98.765288][ T2087] ? tick_nohz_tick_stopped+0x4c/0x60 [ 98.765302][ T2087] ? __irq_work_queue_local+0xc4/0x260 [ 98.765316][ T2087] ? irq_work_queue+0xc2/0x160 [ 98.765329][ T2087] ? vprintk_emit+0x3e3/0x650 [ 98.765349][ T2087] ? __cfi_vprintk_emit+0x10/0x10 [ 98.765370][ T2087] ? _raw_spin_unlock+0x45/0x60 [ 98.765393][ T2087] ? rust_binder_waitlcl+0xdd3/0xfd0 [ 98.765419][ T2087] ? vprintk_default+0x2a/0x40 [ 98.765433][ T2087] ? vprintk+0x93/0xa0 [ 98.765442][ T2087] ? _printk+0xde/0x140 [ 98.765454][ T2087] ? __kasan_check_write+0x18/0x20 [ 98.765464][ T2087] ? _raw_spin_lock+0x92/0x120 [ 98.765477][ T2087] ? __cfi__raw_spin_lock+0x10/0x10 [ 98.765498][ T2087] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x11db/0x5d80 [ 98.765523][ T2087] ? __asan_memcpy+0x5a/0x80 [ 98.765540][ T2087] _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 98.765575][ T2087] ? __cfi_rust_binder_waitlcl+0x10/0x10 [ 98.765602][ T2087] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 98.765639][ T2087] ? is_bpf_text_address+0x17b/0x1a0 [ 98.765663][ T2087] ? kernel_text_address+0xa9/0xe0 [ 98.765687][ T2087] ? __kernel_text_address+0x11/0x40 [ 98.765708][ T2087] ? unwind_get_return_address+0x51/0x90 [ 98.765730][ T2087] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 98.765752][ T2087] ? arch_stack_walk+0x10a/0x170 [ 98.765776][ T2087] ? is_bpf_text_address+0x17b/0x1a0 [ 98.765796][ T2087] ? kernel_text_address+0xa9/0xe0 [ 98.765809][ T2087] ? __kernel_text_address+0x11/0x40 [ 98.765822][ T2087] ? unwind_get_return_address+0x51/0x90 [ 98.765835][ T2087] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 98.765848][ T2087] ? stack_depot_save_flags+0x38/0x800 [ 98.765861][ T2087] ? stack_trace_save+0xaa/0x100 [ 98.765873][ T2087] ? kasan_save_track+0x4f/0x80 [ 98.765884][ T2087] ? kasan_save_track+0x3e/0x80 [ 98.765895][ T2087] ? kasan_save_alloc_info+0x40/0x50 [ 98.765904][ T2087] ? __kasan_slab_alloc+0x73/0x90 [ 98.765916][ T2087] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 98.765926][ T2087] ? security_inode_alloc+0x51/0x230 [ 98.765938][ T2087] ? inode_init_always_gfp+0x756/0x9e0 [ 98.765950][ T2087] ? alloc_inode+0xc5/0x270 [ 98.765962][ T2087] ? new_inode+0x25/0x1e0 [ 98.765974][ T2087] ? proc_pid_make_inode+0x25/0x140 [ 98.765986][ T2087] ? proc_pident_instantiate+0x6d/0x2c0 [ 98.765998][ T2087] ? proc_pident_lookup+0x1c7/0x270 [ 98.766009][ T2087] ? proc_tid_base_lookup+0x2f/0x40 [ 98.766019][ T2087] ? do_filp_open+0x1f5/0x440 [ 98.766033][ T2087] ? avc_has_perm_noaudit+0x26c/0x360 [ 98.766045][ T2087] ? __asan_memcpy+0x5a/0x80 [ 98.766055][ T2087] ? avc_has_perm_noaudit+0x28a/0x360 [ 98.766069][ T2087] ? avc_has_perm+0x155/0x240 [ 98.766080][ T2087] ? __cfi_avc_has_perm+0x10/0x10 [ 98.766090][ T2087] ? kasan_save_alloc_info+0x40/0x50 [ 98.766100][ T2087] ? selinux_file_open+0x46c/0x630 [ 98.766111][ T2087] ? __cfi_selinux_file_open+0x10/0x10 [ 98.766122][ T2087] ? avc_has_extended_perms+0x80b/0xe70 [ 98.766133][ T2087] ? __asan_memcpy+0x5a/0x80 [ 98.766143][ T2087] ? avc_has_extended_perms+0x969/0xe70 [ 98.766155][ T2087] ? __asan_set_shadow_00+0x12/0x20 [ 98.766169][ T2087] ? do_vfs_ioctl+0x182d/0x2010 [ 98.766181][ T2087] ? arch_stack_walk+0x10a/0x170 [ 98.766191][ T2087] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 98.766204][ T2087] ? _parse_integer+0x2e/0x40 [ 98.766217][ T2087] ? ioctl_has_perm+0x39a/0x500 [ 98.766227][ T2087] ? has_cap_mac_admin+0xd0/0xd0 [ 98.766237][ T2087] ? proc_fail_nth_write+0x184/0x220 [ 98.766251][ T2087] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 98.766265][ T2087] ? selinux_file_ioctl+0x732/0x1480 [ 98.766275][ T2087] ? vfs_write+0x9a4/0xf90 [ 98.766285][ T2087] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 98.766295][ T2087] ? __cfi_vfs_write+0x10/0x10 [ 98.766305][ T2087] ? __kasan_check_write+0x18/0x20 [ 98.766314][ T2087] ? mutex_unlock+0x90/0x240 [ 98.766325][ T2087] ? __cfi_mutex_unlock+0x10/0x10 [ 98.766338][ T2087] ? __fget_files+0x2c5/0x340 [ 98.766359][ T2087] ? __fget_files+0x2c5/0x340 [ 98.766378][ T2087] ? bpf_lsm_file_ioctl+0xd/0x20 [ 98.766401][ T2087] ? security_file_ioctl+0x3e/0x110 [ 98.766426][ T2087] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 98.766453][ T2087] __se_sys_ioctl+0x132/0x1b0 [ 98.766475][ T2087] __x64_sys_ioctl+0x7f/0xa0 [ 98.766496][ T2087] x64_sys_call+0x1878/0x2ee0 [ 98.766512][ T2087] do_syscall_64+0x57/0xf0 [ 98.766526][ T2087] ? clear_bhb_loop+0x50/0xa0 [ 98.766537][ T2087] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.766552][ T2087] RIP: 0033:0x7fdafc99ce59 [ 98.766569][ T2087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.766579][ T2087] RSP: 002b:00007fdafd808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.766591][ T2087] RAX: ffffffffffffffda RBX: 00007fdafcc15fa0 RCX: 00007fdafc99ce59 [ 98.766599][ T2087] RDX: 0000200000007a00 RSI: 00000000c0306201 RDI: 0000000000000003 [ 98.766607][ T2087] RBP: 00007fdafd808090 R08: 0000000000000000 R09: 0000000000000000 [ 98.766613][ T2087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.766620][ T2087] R13: 00007fdafcc16038 R14: 00007fdafcc15fa0 R15: 00007ffd7fcc80e8 [ 98.766629][ T2087] [ 98.766663][ T2087] rust_binder: Write failure EFAULT in pid:552 [ 98.887693][ T1272] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 98.898454][ T1267] usb 4-1: string descriptor 0 read error: -71 [ 99.058816][ T1272] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.060828][ T378] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 99.065638][ T1272] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.072218][ T1267] usb 4-1: USB disconnect, device number 39 [ 99.079738][ T1272] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 99.227700][ T378] usb 2-1: Using ep0 maxpacket: 8 [ 99.232313][ T1272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.241850][ T378] usb 2-1: config 0 interface 0 altsetting 4 has an endpoint descriptor with address 0x7B, changing to 0xB [ 99.245837][ T1272] usb 1-1: Product: syz [ 99.272116][ T378] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 99.279287][ T1272] usb 1-1: Manufacturer: syz [ 99.284311][ T378] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.288593][ T1272] usb 1-1: SerialNumber: syz [ 99.292243][ T378] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 99.322161][ T2093] x_tables: arp_tables: NFLOG target: not valid for this family [ 99.325868][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.379351][ T36] audit: type=1400 audit(1781759198.004:4233): avc: denied { getopt } for pid=2095 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.395454][ T378] usb 2-1: config 0 descriptor?? [ 99.428407][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.438378][ T378] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 99.442567][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.648378][ T2075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.659272][ T1272] usb 1-1: 0:1 : does not exist [ 99.662468][ T2075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.671443][ T1272] usb 1-1: unit 4 not found! [ 99.681217][ T1267] usb 2-1: USB disconnect, device number 41 [ 99.684875][ T1272] usb 1-1: unit 51 not found! [ 99.767588][ T1265] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 99.800707][ T1272] usb 1-1: USB disconnect, device number 54 [ 99.947634][ T1265] usb 4-1: Using ep0 maxpacket: 32 [ 99.955444][ T1265] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.963686][ T1265] usb 4-1: config 0 has no interface number 0 [ 99.969902][ T1265] usb 4-1: config 0 interface 184 has no altsetting 0 [ 99.978215][ T1265] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.987291][ T1265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.995327][ T1265] usb 4-1: Product: syz [ 99.999532][ T1265] usb 4-1: Manufacturer: syz [ 100.004116][ T1265] usb 4-1: SerialNumber: syz [ 100.009468][ T1265] usb 4-1: config 0 descriptor?? [ 100.016802][ T1265] smsc75xx v1.0.0 [ 100.227349][ T2109] rust_binder: 2108:2109 transaction to 0 failed: ENOENT [ 100.227537][ T2109] rust_binder: Write failure EINVAL in pid:385 [ 100.234810][ T2109] rust_binder: 385: no such ref 1 [ 100.427508][ T1267] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 100.452217][ T2113] rust_binder: 2112:2113 transaction to 0 failed: ENOENT [ 100.452408][ T2113] rust_binder: Write failure EINVAL in pid:568 [ 100.577496][ T1267] usb 1-1: Using ep0 maxpacket: 8 [ 100.590339][ T1267] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.601259][ T1267] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.611079][ T1267] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.620957][ T1267] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.630819][ T1267] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 100.642240][ T1267] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.651314][ T1267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.659373][ T1267] usb 1-1: Product: 䩣鄜Ᾰ캗蔖밹儐ⲟ⇢攆昻똛⹌ꞅ鐦벂鴘䈜◐Ǔꃗ﫦刃◲ᵮ奺㘻秋睬ܗ㋪ở婪랾溾皞쭶ꨲ붗긞㹴厃➫伯暞蝮罸ꌆ訸敾G戏嫹卨ሩ뾉ହ鋤矂꿃쬊ꌋ皋捲횩휃ل씍鱧烐╿趟ᑅ [ 100.683715][ T1267] usb 1-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈￫Ⓩ蟸맏᯻쌲钧욢 [ 100.700434][ T1267] usb 1-1: SerialNumber: syz [ 100.907736][ T1267] cdc_ncm 1-1:1.0: bind() failure [ 100.913607][ T1267] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 100.920461][ T1267] cdc_ncm 1-1:1.1: bind() failure [ 100.928254][ T1267] usb 1-1: USB disconnect, device number 55 [ 101.109974][ T2115] rust_binder: 2114:2115 transaction to 0 failed: ENOENT [ 101.110051][ T2115] rust_binder: Write failure EINVAL in pid:389 [ 101.117360][ T2115] FAULT_INJECTION: forcing a failure. [ 101.117360][ T2115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.136695][ T2115] CPU: 0 UID: 0 PID: 2115 Comm: syz.1.548 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 101.136725][ T2115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.136738][ T2115] Call Trace: [ 101.136745][ T2115] [ 101.136754][ T2115] __dump_stack+0x21/0x30 [ 101.136784][ T2115] dump_stack_lvl+0x140/0x1c0 [ 101.136801][ T2115] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.136817][ T2115] dump_stack+0x19/0x20 [ 101.136830][ T2115] should_fail_ex+0x3d7/0x530 [ 101.136851][ T2115] should_fail+0xf/0x20 [ 101.136872][ T2115] should_fail_usercopy+0x1e/0x30 [ 101.136896][ T2115] _copy_from_user+0x20/0xa0 [ 101.136915][ T2115] _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x829/0xa690 [ 101.136951][ T2115] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 101.136999][ T2115] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 101.137040][ T2115] ? __asan_memcpy+0x5a/0x80 [ 101.137060][ T2115] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 101.137082][ T2115] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 101.137100][ T2115] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 101.137118][ T2115] ? __asan_memcpy+0x5a/0x80 [ 101.137131][ T2115] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 101.137164][ T2115] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter12pad_integral+0x307/0x810 [ 101.137196][ T2115] ? put_dec_trunc8+0x229/0x380 [ 101.137217][ T2115] ? put_dec+0xd7/0xf0 [ 101.137229][ T2115] ? __asan_memset+0x39/0x50 [ 101.137239][ T2115] ? move_right+0x8e/0xb0 [ 101.137253][ T2115] ? format_decode+0x1bb/0x1610 [ 101.137276][ T2115] ? vsnprintf+0x7b4/0x1ad0 [ 101.137297][ T2115] ? __asan_memcpy+0x5a/0x80 [ 101.137313][ T2115] ? vsnprintf+0x19ef/0x1ad0 [ 101.137333][ T2115] ? desc_read+0x202/0x3e0 [ 101.137354][ T2115] ? __kasan_check_write+0x18/0x20 [ 101.137375][ T2115] ? desc_read+0x1ab/0x3e0 [ 101.137394][ T2115] ? prb_first_seq+0x109/0x1d0 [ 101.137415][ T2115] ? __cfi_prb_first_seq+0x10/0x10 [ 101.137435][ T2115] ? __kasan_check_write+0x18/0x20 [ 101.137454][ T2115] ? desc_read+0x1ab/0x3e0 [ 101.137474][ T2115] ? __kasan_check_read+0x15/0x20 [ 101.137493][ T2115] ? this_cpu_in_panic+0x56/0x90 [ 101.137514][ T2115] ? _prb_read_valid+0x9f3/0xa80 [ 101.137533][ T2115] ? record_print_text+0x290/0x450 [ 101.137559][ T2115] ? prb_read_valid+0x80/0x80 [ 101.137580][ T2115] ? __kasan_check_write+0x18/0x20 [ 101.137599][ T2115] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 101.137625][ T2115] ? desc_read+0x202/0x3e0 [ 101.137642][ T2115] ? __kasan_check_write+0x18/0x20 [ 101.137652][ T2115] ? desc_read+0x1ab/0x3e0 [ 101.137664][ T2115] ? __kasan_check_write+0x18/0x20 [ 101.137674][ T2115] ? _raw_spin_lock+0x92/0x120 [ 101.137687][ T2115] ? __cfi__raw_spin_lock+0x10/0x10 [ 101.137704][ T2115] ? __kasan_check_write+0x18/0x20 [ 101.137724][ T2115] ? _raw_spin_unlock+0x45/0x60 [ 101.137748][ T2115] ? __asan_set_shadow_00+0x12/0x20 [ 101.137773][ T2115] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x1008/0x1c70 [ 101.137797][ T2115] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 101.137812][ T2115] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 101.137831][ T2115] ? prb_read_valid+0x80/0x80 [ 101.137842][ T2115] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 101.137867][ T2115] ? up+0x10a/0x1b0 [ 101.137887][ T2115] ? __cfi_up+0x10/0x10 [ 101.137907][ T2115] ? __kasan_check_read+0x15/0x20 [ 101.137925][ T2115] ? prb_read_valid+0x41/0x80 [ 101.137937][ T2115] ? console_unlock+0x247/0x2c0 [ 101.137949][ T2115] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 101.137964][ T2115] ? __cfi_console_unlock+0x10/0x10 [ 101.137976][ T2115] ? __printk_safe_exit+0xd/0x20 [ 101.137986][ T2115] ? console_trylock+0x17e/0x220 [ 101.138009][ T2115] ? __cfi_console_trylock+0x10/0x10 [ 101.138032][ T2115] ? __kasan_check_write+0x18/0x20 [ 101.138051][ T2115] ? irq_work_queue+0xc9/0x160 [ 101.138073][ T2115] ? vprintk_emit+0x3e3/0x650 [ 101.138086][ T2115] ? __cfi_vprintk_emit+0x10/0x10 [ 101.138099][ T2115] ? _raw_spin_unlock+0x45/0x60 [ 101.138113][ T2115] ? rust_binder_waitlcl+0xdd3/0xfd0 [ 101.138128][ T2115] ? vprintk_default+0x2a/0x40 [ 101.138149][ T2115] ? vprintk+0x93/0xa0 [ 101.138166][ T2115] ? _printk+0xde/0x140 [ 101.138188][ T2115] ? __kasan_check_write+0x18/0x20 [ 101.138207][ T2115] ? _raw_spin_lock+0x92/0x120 [ 101.138224][ T2115] ? __cfi__raw_spin_lock+0x10/0x10 [ 101.138243][ T2115] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x11db/0x5d80 [ 101.138263][ T2115] ? __asan_memcpy+0x5a/0x80 [ 101.138273][ T2115] _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 101.138298][ T2115] ? __cfi_rust_binder_waitlcl+0x10/0x10 [ 101.138326][ T2115] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 101.138363][ T2115] ? is_bpf_text_address+0x17b/0x1a0 [ 101.138379][ T2115] ? kernel_text_address+0xa9/0xe0 [ 101.138393][ T2115] ? __kernel_text_address+0x11/0x40 [ 101.138407][ T2115] ? unwind_get_return_address+0x51/0x90 [ 101.138420][ T2115] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 101.138442][ T2115] ? arch_stack_walk+0x10a/0x170 [ 101.138466][ T2115] ? is_bpf_text_address+0x17b/0x1a0 [ 101.138493][ T2115] ? kernel_text_address+0xa9/0xe0 [ 101.138512][ T2115] ? __kernel_text_address+0x11/0x40 [ 101.138525][ T2115] ? unwind_get_return_address+0x51/0x90 [ 101.138538][ T2115] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 101.138552][ T2115] ? stack_depot_save_flags+0x38/0x800 [ 101.138566][ T2115] ? stack_trace_save+0xaa/0x100 [ 101.138586][ T2115] ? kasan_save_track+0x4f/0x80 [ 101.138605][ T2115] ? kasan_save_track+0x3e/0x80 [ 101.138623][ T2115] ? kasan_save_alloc_info+0x40/0x50 [ 101.138641][ T2115] ? __kasan_slab_alloc+0x73/0x90 [ 101.138662][ T2115] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 101.138678][ T2115] ? security_inode_alloc+0x51/0x230 [ 101.138691][ T2115] ? inode_init_always_gfp+0x756/0x9e0 [ 101.138703][ T2115] ? alloc_inode+0xc5/0x270 [ 101.138715][ T2115] ? new_inode+0x25/0x1e0 [ 101.138735][ T2115] ? proc_pid_make_inode+0x25/0x140 [ 101.138757][ T2115] ? proc_pident_instantiate+0x6d/0x2c0 [ 101.138778][ T2115] ? proc_pident_lookup+0x1c7/0x270 [ 101.138800][ T2115] ? proc_tid_base_lookup+0x2f/0x40 [ 101.138811][ T2115] ? do_filp_open+0x1f5/0x440 [ 101.138826][ T2115] ? avc_has_perm_noaudit+0x26c/0x360 [ 101.138838][ T2115] ? __asan_memcpy+0x5a/0x80 [ 101.138848][ T2115] ? avc_has_perm_noaudit+0x28a/0x360 [ 101.138861][ T2115] ? avc_has_perm+0x155/0x240 [ 101.138878][ T2115] ? __cfi_avc_has_perm+0x10/0x10 [ 101.138899][ T2115] ? kasan_save_alloc_info+0x40/0x50 [ 101.138919][ T2115] ? selinux_file_open+0x46c/0x630 [ 101.138938][ T2115] ? __cfi_selinux_file_open+0x10/0x10 [ 101.138954][ T2115] ? avc_has_extended_perms+0x80b/0xe70 [ 101.138973][ T2115] ? __asan_memcpy+0x5a/0x80 [ 101.138983][ T2115] ? avc_has_extended_perms+0x969/0xe70 [ 101.138996][ T2115] ? __asan_set_shadow_00+0x12/0x20 [ 101.139012][ T2115] ? do_vfs_ioctl+0x182d/0x2010 [ 101.139033][ T2115] ? arch_stack_walk+0x10a/0x170 [ 101.139052][ T2115] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 101.139076][ T2115] ? _parse_integer+0x2e/0x40 [ 101.139098][ T2115] ? ioctl_has_perm+0x39a/0x500 [ 101.139108][ T2115] ? has_cap_mac_admin+0xd0/0xd0 [ 101.139118][ T2115] ? proc_fail_nth_write+0x184/0x220 [ 101.139132][ T2115] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 101.139147][ T2115] ? selinux_file_ioctl+0x732/0x1480 [ 101.139159][ T2115] ? vfs_write+0x9a4/0xf90 [ 101.139178][ T2115] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 101.139197][ T2115] ? __cfi_vfs_write+0x10/0x10 [ 101.139216][ T2115] ? __kasan_check_write+0x18/0x20 [ 101.139234][ T2115] ? mutex_unlock+0x90/0x240 [ 101.139247][ T2115] ? __cfi_mutex_unlock+0x10/0x10 [ 101.139262][ T2115] ? __fget_files+0x2c5/0x340 [ 101.139275][ T2115] ? __fget_files+0x2c5/0x340 [ 101.139287][ T2115] ? bpf_lsm_file_ioctl+0xd/0x20 [ 101.139302][ T2115] ? security_file_ioctl+0x3e/0x110 [ 101.139328][ T2115] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 101.139355][ T2115] __se_sys_ioctl+0x132/0x1b0 [ 101.139377][ T2115] __x64_sys_ioctl+0x7f/0xa0 [ 101.139392][ T2115] x64_sys_call+0x1878/0x2ee0 [ 101.139403][ T2115] do_syscall_64+0x57/0xf0 [ 101.139416][ T2115] ? clear_bhb_loop+0x50/0xa0 [ 101.139428][ T2115] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.139445][ T2115] RIP: 0033:0x7fe70f99ce59 [ 101.139463][ T2115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.139479][ T2115] RSP: 002b:00007fe710909028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.139500][ T2115] RAX: ffffffffffffffda RBX: 00007fe70fc15fa0 RCX: 00007fe70f99ce59 [ 101.139516][ T2115] RDX: 0000200000007a00 RSI: 00000000c0306201 RDI: 0000000000000003 [ 101.139528][ T2115] RBP: 00007fe710909090 R08: 0000000000000000 R09: 0000000000000000 [ 101.139535][ T2115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.139541][ T2115] R13: 00007fe70fc16038 R14: 00007fe70fc15fa0 R15: 00007ffde34b4a28 [ 101.139550][ T2115] [ 101.778491][ T1267] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 101.784560][ T2115] rust_binder: Write failure EFAULT in pid:389 [ 101.790887][ T1265] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 102.067157][ T1265] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 102.080091][ T1265] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 102.093968][ T1265] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 102.117074][ T1265] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 102.143394][ T1265] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 102.152925][ T1265] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 102.164617][ T1265] usb 4-1: USB disconnect, device number 40 [ 102.197350][ T1267] usb 1-1: device descriptor read/64, error -71 [ 102.213023][ T2135] syzkaller1: entered promiscuous mode [ 102.218538][ T2135] syzkaller1: entered allmulticast mode [ 102.268865][ T2137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.277509][ T2137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.285675][ T2137] rust_binder: 2136:2137 transaction to 0 failed: ENOENT [ 102.285807][ T2137] rust_binder: Write failure EINVAL in pid:580 [ 102.293528][ T2137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.315348][ T2137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.377309][ T378] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 102.457302][ T1267] usb 1-1: device descriptor read/64, error -71 [ 102.528254][ T378] usb 2-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 102.538744][ T378] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.548972][ T378] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.558064][ T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.566073][ T378] usb 2-1: Product: syz [ 102.570768][ T378] usb 2-1: Manufacturer: syz [ 102.575350][ T378] usb 2-1: SerialNumber: syz [ 102.697262][ T1267] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 102.727247][ T1265] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 102.783219][ T36] audit: type=1400 audit(1781759201.425:4234): avc: denied { getattr } for pid=2132 comm="syz.1.554" path="cgroup:[4026532298]" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 102.807648][ T378] usb 2-1: 0:2 : does not exist [ 102.812550][ T378] usb 2-1: unit 9 not found! [ 102.819965][ T378] usb 2-1: USB disconnect, device number 42 [ 102.827540][ T1267] usb 1-1: device descriptor read/64, error -71 [ 102.829327][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.887228][ T1265] usb 4-1: Using ep0 maxpacket: 32 [ 102.893744][ T1265] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.902270][ T1265] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 102.911147][ T1265] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.921421][ T1265] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.931661][ T1265] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.940783][ T1265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.948920][ T1265] usb 4-1: Product: syz [ 102.953114][ T1265] usb 4-1: Manufacturer: syz [ 102.957792][ T1265] usb 4-1: SerialNumber: syz [ 103.087190][ T1267] usb 1-1: device descriptor read/64, error -71 [ 103.166446][ T1265] usb 4-1: 0:2 : does not exist [ 103.173092][ T1265] usb 4-1: USB disconnect, device number 41 [ 103.182152][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.197947][ T1267] usb usb1-port1: attempt power cycle [ 103.557182][ T1267] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 103.578388][ T1267] usb 1-1: device descriptor read/8, error -71 [ 103.607160][ T1272] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 103.708114][ T1267] usb 1-1: device descriptor read/8, error -71 [ 103.758351][ T1272] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.766756][ T1272] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.776873][ T1272] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.785969][ T1272] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 103.796846][ T1272] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 103.809983][ T1272] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 103.820774][ T1272] usb 2-1: config 1 interface 1 has no altsetting 0 [ 103.829323][ T1272] usb 2-1: string descriptor 0 read error: -22 [ 103.835489][ T1272] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 103.844528][ T1272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.917099][ T1265] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 103.947110][ T1267] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 103.968096][ T1267] usb 1-1: device descriptor read/8, error -71 [ 104.054710][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.063365][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.067059][ T1265] usb 4-1: Using ep0 maxpacket: 16 [ 104.071890][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.078323][ T1265] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.085155][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.093024][ T1265] usb 4-1: config 106 has an invalid interface number: 22 but max is 0 [ 104.100973][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.108619][ T1265] usb 4-1: config 106 has no interface number 0 [ 104.117644][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.123149][ T1265] usb 4-1: config 106 interface 22 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 104.131721][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.141951][ T1265] usb 4-1: config 106 interface 22 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 104.142013][ T1267] usb 1-1: device descriptor read/8, error -71 [ 104.150832][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.167278][ T2154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.173915][ T1265] usb 4-1: config 106 interface 22 has no altsetting 0 [ 104.183402][ T2154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.190606][ T1265] usb 4-1: New USB device found, idVendor=05ac, idProduct=9218, bcdDevice=eb.64 [ 104.199899][ T1272] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 104.205859][ T1265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.220979][ T1265] usb 4-1: Product: syz [ 104.225140][ T1265] usb 4-1: Manufacturer: syz [ 104.229739][ T1265] usb 4-1: SerialNumber: syz [ 104.259427][ T36] audit: type=1400 audit(1781759202.905:4235): avc: denied { ioctl } for pid=2152 comm="syz.1.562" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 104.284622][ T1267] usb usb1-port1: unable to enumerate USB device [ 104.286140][ T1272] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 104.302293][ T1272] usb 2-1: USB disconnect, device number 43 [ 104.332833][ T2164] syzkaller1: entered promiscuous mode [ 104.338562][ T2164] syzkaller1: entered allmulticast mode [ 104.437234][ T1265] usbhid 4-1:106.22: couldn't find an input interrupt endpoint [ 104.459911][ T2169] netlink: 9 bytes leftover after parsing attributes in process `syz.1.566'. [ 104.461959][ T1265] usb 4-1: USB disconnect, device number 42 [ 104.474662][ T2169] gretap0: entered promiscuous mode [ 104.727027][ T1272] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 104.856991][ T1266] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 104.878003][ T1272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 104.888978][ T1272] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.901859][ T1272] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 104.910932][ T1272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.919535][ T1272] usb 2-1: config 0 descriptor?? [ 104.924742][ T2169] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.006949][ T1266] usb 1-1: Using ep0 maxpacket: 16 [ 105.013170][ T1266] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.023430][ T1266] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.033722][ T1266] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.042781][ T1266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.050822][ T1266] usb 1-1: Product: syz [ 105.054975][ T1266] usb 1-1: Manufacturer: syz [ 105.059573][ T1266] usb 1-1: SerialNumber: syz [ 105.196935][ T478] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 105.267766][ T1266] usb 1-1: 0:2 : does not exist [ 105.275097][ T1266] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 105.295817][ T1266] usb 1-1: USB disconnect, device number 60 [ 105.297426][ T2176] input: syz1 as /devices/virtual/input/input17 [ 105.313792][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.336184][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.344654][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.353291][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.355475][ T2178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.360551][ T478] usb 4-1: Using ep0 maxpacket: 32 [ 105.369714][ T2178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.374232][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.385176][ T2178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.388977][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.399253][ T2178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.404543][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.415620][ T2178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.419853][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.428452][ T2178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.434386][ T478] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.449862][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.456995][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.464137][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.471213][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.478372][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.485415][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.492534][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.499638][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.506748][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.513820][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.520933][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.527994][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.535077][ T478] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 105.544148][ T478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.552178][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.559235][ T1272] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 105.566253][ T1272] cypress 0003:04B4:07B1.0014: item fetching failed at offset 37/41 [ 105.574246][ T478] usb 4-1: Product: syz [ 105.578424][ T478] usb 4-1: Manufacturer: syz [ 105.582998][ T478] usb 4-1: SerialNumber: syz [ 105.588109][ T1272] cypress 0003:04B4:07B1.0014: parse failed [ 105.594282][ T1272] cypress 0003:04B4:07B1.0014: probe with driver cypress failed with error -22 [ 105.606075][ T1272] usb 2-1: USB disconnect, device number 44 [ 105.805049][ T478] usb 4-1: unit 4 not found! [ 105.809753][ T478] usb 4-1: unit 0 not found! [ 105.963843][ T2183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.972920][ T2183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.983589][ T2183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.992591][ T2183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.046834][ T1266] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 106.141963][ T2188] syzkaller1: entered promiscuous mode [ 106.147498][ T2188] syzkaller1: entered allmulticast mode [ 106.206469][ T478] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 106.216363][ T478] usb 4-1: unit 4 not found! [ 106.219336][ T1266] usb 1-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 106.221172][ T478] usb 4-1: unit 0 not found! [ 106.236868][ T478] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 106.239601][ T1266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.247968][ T478] usb 4-1: unit 4 not found! [ 106.258614][ T1266] usb 1-1: Product: syz [ 106.259572][ T478] usb 4-1: unit 0 not found! [ 106.263266][ T1266] usb 1-1: Manufacturer: Ⰹ [ 106.278649][ T1266] usb 1-1: SerialNumber: syz [ 106.288257][ T478] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 106.302739][ T478] usb 4-1: USB disconnect, device number 43 [ 106.311121][ T538] udevd[538]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.745291][ T2215] tipc: Started in network mode [ 106.750308][ T2215] tipc: Node identity 7f000001, cluster identity 4711 [ 106.764653][ T2215] tipc: Enabled bearer , priority 10 [ 106.772728][ T2215] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 106.781233][ T2217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.790681][ T2215] tipc: Enabled bearer , priority 10 [ 106.801732][ T2217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.836965][ T2219] syzkaller1: entered promiscuous mode [ 106.844468][ T2219] syzkaller1: entered allmulticast mode [ 106.979468][ T2229] netlink: 'syz.3.588': attribute type 4 has an invalid length. [ 106.987284][ T2229] netlink: 'syz.3.588': attribute type 32 has an invalid length. [ 107.093737][ T1266] usb 1-1: MIDIStreaming interface descriptor not found [ 107.257347][ T36] audit: type=1400 audit(1781759205.905:4236): avc: denied { read } for pid=2238 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.298146][ T2180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.307091][ T2180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.308367][ T36] audit: type=1400 audit(1781759205.955:4237): avc: denied { setopt } for pid=2238 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.515550][ T1266] usb 1-1: USB disconnect, device number 61 [ 107.823117][ T2246] syzkaller1: entered promiscuous mode [ 107.828677][ T2246] syzkaller1: entered allmulticast mode [ 107.878646][ T2248] rust_binder: 2247:2248 transaction to 0 failed: ENOENT [ 107.878765][ T2248] rust_binder: Write failure EINVAL in pid:410 [ 107.896613][ T478] tipc: Node number set to 2130706433 [ 108.110918][ T36] audit: type=1400 audit(1781759206.755:4238): avc: denied { create } for pid=2252 comm="syz.1.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 108.177284][ T2254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.595'. [ 108.227646][ T2256] netlink: 'syz.0.597': attribute type 9 has an invalid length. [ 108.251278][ T2258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.260024][ T2258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.346571][ T478] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 108.506547][ T478] usb 2-1: Using ep0 maxpacket: 16 [ 108.512734][ T478] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.523063][ T478] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.533398][ T478] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.542536][ T478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.550633][ T478] usb 2-1: Product: syz [ 108.554787][ T478] usb 2-1: Manufacturer: syz [ 108.559390][ T478] usb 2-1: SerialNumber: syz [ 108.724509][ T2269] syzkaller1: entered promiscuous mode [ 108.730047][ T2269] syzkaller1: entered allmulticast mode [ 108.768582][ T478] usb 2-1: 0:2 : does not exist [ 108.777086][ T478] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 108.788161][ T478] usb 2-1: USB disconnect, device number 45 [ 108.854295][ T36] audit: type=1400 audit(1781759207.495:4239): avc: denied { bind } for pid=2272 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.867195][ T2273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.880940][ T2273] IPv6: NLM_F_CREATE should be set when creating new route [ 108.888168][ T2273] IPv6: NLM_F_CREATE should be set when creating new route [ 108.937394][ T2275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.946279][ T2276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.946357][ T2275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.955944][ T2276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.036490][ T1266] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 109.171837][ T2275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.181206][ T2275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.186452][ T1266] usb 4-1: Using ep0 maxpacket: 8 [ 109.196054][ T1266] usb 4-1: config 0 has too many interfaces: 247, using maximum allowed: 32 [ 109.204941][ T1266] usb 4-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 109.215357][ T1266] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 247 [ 109.224062][ T36] audit: type=1400 audit(1781759207.865:4240): avc: denied { map } for pid=2282 comm="syz.0.607" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.251132][ T36] audit: type=1400 audit(1781759207.865:4241): avc: denied { create } for pid=2282 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 109.254039][ T1266] usb 4-1: config 0 interface 0 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 109.276679][ T2287] syzkaller1: entered promiscuous mode [ 109.284158][ T1266] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.296494][ T1266] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 109.298501][ T2287] syzkaller1: entered allmulticast mode [ 109.306647][ T1266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.316304][ T36] audit: type=1400 audit(1781759207.915:4242): avc: denied { relabelfrom } for pid=2286 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.333857][ T1266] usb 4-1: config 0 descriptor?? [ 109.361320][ T36] audit: type=1400 audit(1781759207.915:4243): avc: denied { relabelto } for pid=2286 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.509964][ T2305] tipc: Can't bind to reserved service type 2 [ 109.560219][ T2271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.568822][ T2271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.581039][ T1266] usb 4-1: string descriptor 0 read error: -71 [ 109.590693][ T1266] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 109.601046][ T1266] usb 4-1: USB disconnect, device number 44 [ 109.607057][ T2316] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 109.607073][ T2316] rust_binder: Read failure Err(EFAULT) in pid:419 [ 109.607151][ T2317] rust_binder: pid 2317 performed invalid decrement on ref [ 109.628893][ T2317] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 109.628912][ T2317] rust_binder: Read failure Err(EFAULT) in pid:419 [ 109.689559][ T2316] overlayfs: statfs failed on './file0' [ 109.715258][ T2321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.725812][ T2321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.760755][ T2326] rust_binder: 2325:2326 transaction to 0 failed: ENOENT [ 109.776378][ T378] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 109.806442][ T478] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 109.946392][ T378] usb 2-1: Using ep0 maxpacket: 16 [ 109.952684][ T378] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.956383][ T478] usb 1-1: Using ep0 maxpacket: 32 [ 109.963680][ T378] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.970313][ T478] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 109.981667][ T378] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 109.989926][ T478] usb 1-1: config 2 has no interface number 0 [ 109.998788][ T378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.005059][ T478] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 110.013534][ T378] usb 2-1: config 0 descriptor?? [ 110.023357][ T1273] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 110.035385][ T478] usb 1-1: config 2 interface 88 has no altsetting 0 [ 110.043513][ T478] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 110.052596][ T478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 110.060699][ T478] usb 1-1: Product: syz [ 110.064882][ T478] usb 1-1: Manufacturer: syz [ 110.069596][ T478] usb 1-1: SerialNumber: syz [ 110.075081][ T2311] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 110.186690][ T1273] usb 4-1: too many configurations: 162, using maximum allowed: 8 [ 110.195613][ T1273] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 110.203237][ T1273] usb 4-1: can't read configurations, error -61 [ 110.246799][ T2330] netlink: 56 bytes leftover after parsing attributes in process `syz.2.621'. [ 110.282566][ T2311] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 110.315845][ T2332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.324424][ T2332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.346294][ T1273] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 110.433173][ T2309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.442970][ T2309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.452256][ T378] usbhid 2-1:0.0: can't add hid device: -71 [ 110.458266][ T378] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 110.469884][ T378] usb 2-1: USB disconnect, device number 46 [ 110.516669][ T1273] usb 4-1: too many configurations: 162, using maximum allowed: 8 [ 110.525583][ T1273] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 110.533199][ T1273] usb 4-1: can't read configurations, error -61 [ 110.539674][ T1273] usb usb4-port1: attempt power cycle [ 110.876308][ T1273] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 110.891721][ T2337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.897003][ T1273] usb 4-1: too many configurations: 162, using maximum allowed: 8 [ 110.900946][ T2337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.909538][ T1273] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 110.923822][ T478] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 110.935635][ T478] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 110.940754][ T36] audit: type=1400 audit(1781759209.586:4244): avc: denied { read } for pid=2340 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.948119][ T1273] usb 4-1: can't read configurations, error -61 [ 110.968532][ T36] audit: type=1400 audit(1781759209.616:4245): avc: denied { ioctl } for pid=2340 comm="syz.0.623" path="socket:[18015]" dev="sockfs" ino=18015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.974076][ T478] asix 1-1:2.88: probe with driver asix failed with error -71 [ 111.017165][ T478] usb 1-1: USB disconnect, device number 62 [ 111.089466][ T2349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 111.133827][ T36] audit: type=1400 audit(1781759209.776:4246): avc: denied { ioctl } for pid=2351 comm="syz.2.627" path="socket:[18110]" dev="sockfs" ino=18110 ioctlcmd=0x457f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.136253][ T1273] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 111.160245][ T2352] netlink: 'syz.2.627': attribute type 7 has an invalid length. [ 111.174815][ T2352] netlink: 'syz.2.627': attribute type 5 has an invalid length. [ 111.183674][ T2352] netlink: 17 bytes leftover after parsing attributes in process `syz.2.627'. [ 111.193351][ T1273] usb 4-1: too many configurations: 162, using maximum allowed: 8 [ 111.211117][ T1273] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 111.218957][ T1273] usb 4-1: can't read configurations, error -61 [ 111.233341][ T1273] usb usb4-port1: unable to enumerate USB device [ 111.258215][ T2356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.266875][ T2356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.346201][ T478] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 111.386903][ T2363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=2363 comm=syz.1.631 [ 111.399515][ T2363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=54 sclass=netlink_tcpdiag_socket pid=2363 comm=syz.1.631 [ 111.412239][ T2363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=2363 comm=syz.1.631 [ 111.425043][ T2363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=2363 comm=syz.1.631 [ 111.448249][ T2365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 111.497255][ T478] usb 1-1: config 0 has an invalid descriptor of length 178, skipping remainder of the config [ 111.507665][ T478] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 111.521500][ T478] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.40 [ 111.533996][ T36] audit: type=1400 audit(1781759210.176:4247): avc: denied { read } for pid=2366 comm="syz.1.633" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.535984][ T478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.559271][ T2367] deleting an unspecified loop device is not supported. [ 111.576308][ T478] usb 1-1: config 0 descriptor?? [ 111.583700][ T478] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 111.876122][ T1266] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 112.026132][ T1266] usb 2-1: Using ep0 maxpacket: 8 [ 112.032386][ T1266] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 112.040682][ T1266] usb 2-1: config 0 has no interface number 0 [ 112.046819][ T1266] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 112.059070][ T1266] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 112.076168][ T1266] usb 2-1: config 0 interface 200 has no altsetting 0 [ 112.085763][ T1266] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 112.094843][ T1266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.102912][ T1266] usb 2-1: Product: syz [ 112.107131][ T1266] usb 2-1: Manufacturer: syz [ 112.111725][ T1266] usb 2-1: SerialNumber: syz [ 112.116867][ T1266] usb 2-1: config 0 descriptor?? [ 112.132615][ T2390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.141419][ T2390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.148008][ T1265] usb 1-1: USB disconnect, device number 63 [ 112.151061][ T2390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.164594][ T2390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.324619][ T1266] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input18 [ 112.336691][ C0] usb 2-1: hanwang_irq - urb shutting down with status: -2 [ 112.337554][ T1266] usb 2-1: USB disconnect, device number 47 [ 112.646039][ T1265] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 112.797976][ T1265] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 112.807135][ T1265] usb 1-1: New USB device strings: Mfr=14, Product=20, SerialNumber=0 [ 112.815288][ T1265] usb 1-1: Product: syz [ 112.819509][ T1265] usb 1-1: Manufacturer: syz [ 112.824663][ T1265] usb 1-1: config 0 descriptor?? [ 112.831962][ T1265] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 112.840828][ T2410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=257 sclass=netlink_tcpdiag_socket pid=2410 comm=syz.3.647 [ 112.843189][ T1265] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 112.881259][ T2418] netlink: 388 bytes leftover after parsing attributes in process `syz.1.650'. [ 112.935901][ T2427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.950916][ T2427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.037532][ T1265] usb 1-1: USB disconnect, device number 64 [ 113.044209][ T1265] ftdi_sio 1-1:0.0: device disconnected [ 113.115988][ T36] kauditd_printk_skb: 1519 callbacks suppressed [ 113.116006][ T36] audit: type=1326 audit(1781759211.766:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.1.656" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f99ce59 code=0x50000 [ 113.147245][ T36] audit: type=1326 audit(1781759211.766:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.1.656" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe70f95d68e code=0x50000 [ 113.172211][ T1273] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 113.172582][ T36] audit: type=1326 audit(1781759211.766:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.1.656" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe70f95d68e code=0x50000 [ 113.204772][ T36] audit: type=1326 audit(1781759211.766:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.1.656" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe70f95d68e code=0x50000 [ 113.229758][ T36] audit: type=1326 audit(1781759211.766:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.1.656" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe70f95d68e code=0x50000 [ 113.254946][ T36] audit: type=1326 audit(1781759211.766:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.1.656" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe70f95d68e code=0x50000 [ 113.280504][ T36] audit: type=1326 audit(1781759211.766:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.1.656" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe70f95d68e code=0x50000 [ 113.305508][ T36] audit: type=1326 audit(1781759211.766:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.1.656" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe70f95d68e code=0x50000 [ 113.330490][ T36] audit: type=1326 audit(1781759211.766:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.1.656" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe70f95d68e code=0x50000 [ 113.335932][ T1273] usb 4-1: device descriptor read/64, error -71 [ 113.355943][ T36] audit: type=1326 audit(1781759211.766:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2437 comm="syz.1.656" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe70f95d68e code=0x50000 [ 113.604004][ T2447] devpts: called with bogus options [ 113.615898][ T1273] usb 4-1: device descriptor read/64, error -71 [ 113.626969][ T2447] syzkaller1: left promiscuous mode [ 113.632200][ T2447] syzkaller1: left allmulticast mode [ 113.875870][ T1273] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 113.945870][ T1267] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 114.015867][ T1273] usb 4-1: device descriptor read/64, error -71 [ 114.106838][ T1267] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 114.125850][ T1267] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 114.143828][ T1267] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 114.155102][ T1267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.168530][ T1267] usb 1-1: Product: syz [ 114.174883][ T1267] usb 1-1: Manufacturer: syz [ 114.182764][ T1267] usb 1-1: SerialNumber: syz [ 114.255812][ T1273] usb 4-1: device descriptor read/64, error -71 [ 114.365893][ T1273] usb usb4-port1: attempt power cycle [ 114.399603][ T1267] usb 1-1: Can't get UAC3 power state for id 10 [ 114.414524][ T1267] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 114.431003][ T1267] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 114.442436][ T2457] tipc: Started in network mode [ 114.453144][ T2457] tipc: Node identity 2e000000000040000000000000000001, cluster identity 4711 [ 114.457093][ T1267] usb 1-1: USB disconnect, device number 65 [ 114.481815][ T2457] tipc: Enabling of bearer rejected, failed to enable media [ 114.519891][ T2457] netlink: 9 bytes leftover after parsing attributes in process `syz.0.661'. [ 114.538023][ T2457] z00X: renamed from gretap0 (while UP) [ 114.550116][ T2457] z00X: entered allmulticast mode [ 114.598557][ T2461] netlink: 64 bytes leftover after parsing attributes in process `syz.0.662'. [ 114.715781][ T1273] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 114.746752][ T1273] usb 4-1: device descriptor read/8, error -71 [ 114.876688][ T1273] usb 4-1: device descriptor read/8, error -71 [ 114.925744][ T1267] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 115.086734][ T1267] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 115.105708][ T1267] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.116820][ T1267] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.135693][ T1267] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 115.135721][ T1273] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 115.148699][ T1267] usb 1-1: config 0 interface 0 has no altsetting 0 [ 115.148734][ T1267] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 115.187867][ T1267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.188607][ T1273] usb 4-1: device descriptor read/8, error -71 [ 115.202448][ T1267] usb 1-1: config 0 descriptor?? [ 115.277024][ T2465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.290929][ T2465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.323247][ T2465] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 115.336646][ T1273] usb 4-1: device descriptor read/8, error -71 [ 115.337673][ T2465] SELinux: failed to load policy [ 115.445771][ T1273] usb usb4-port1: unable to enumerate USB device [ 115.615060][ T1267] ryos 0003:1E7D:3138.0015: unknown main item tag 0x0 [ 115.628414][ T1267] ryos 0003:1E7D:3138.0015: unknown main item tag 0x0 [ 115.639579][ T1267] ryos 0003:1E7D:3138.0015: unknown main item tag 0x0 [ 115.651821][ T1267] ryos 0003:1E7D:3138.0015: unknown main item tag 0x0 [ 115.662976][ T1267] ryos 0003:1E7D:3138.0015: unknown main item tag 0x0 [ 115.677442][ T1267] ryos 0003:1E7D:3138.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 115.820788][ T1273] usb 1-1: USB disconnect, device number 66 [ 116.000445][ T2478] input: syz0 as /devices/virtual/input/input19 [ 116.098940][ T2492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2492 comm=syz.2.673 [ 116.122162][ T2497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.130666][ T2497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.161408][ T2497] kvm: pic: non byte read [ 116.166185][ T2497] kvm: pic: non byte read [ 116.172073][ T2497] kvm: pic: non byte read [ 116.187088][ T2497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.196192][ T2497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.435579][ T1273] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 116.586548][ T1273] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 116.594836][ T1273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.604919][ T1273] usb 2-1: config 0 has no interfaces? [ 116.610397][ T1273] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 116.619433][ T1273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.628170][ T1273] usb 2-1: config 0 descriptor?? [ 116.655528][ T1267] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 116.760227][ T2517] kvm: kvm [2516]: vcpu0, guest rIP: 0x9116 Unhandled WRMSR(0xc2) = 0xc0ff [ 116.768946][ T2517] kvm: kvm [2516]: vcpu0, guest rIP: 0x9116 Unhandled WRMSR(0xc1) = 0xb2fe [ 116.785513][ T1267] usb 1-1: device descriptor read/64, error -71 [ 116.834913][ T2502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 116.845168][ T1265] usb 2-1: USB disconnect, device number 48 [ 116.883170][ T2526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.891872][ T2526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.900907][ T2526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.910006][ T2526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.919196][ T2526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.928150][ T2526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.942424][ T2526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.954608][ T2526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.964569][ T2526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.976074][ T2526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.025489][ T1267] usb 1-1: device descriptor read/64, error -71 [ 117.064552][ T2533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.073142][ T2533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.100208][ T2535] netlink: 'syz.3.686': attribute type 12 has an invalid length. [ 117.172290][ T2539] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 117.275493][ T1267] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 117.310109][ T2555] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64 sclass=netlink_xfrm_socket pid=2555 comm=syz.3.693 [ 117.322473][ T2555] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=2555 comm=syz.3.693 [ 117.335015][ T2555] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=52 sclass=netlink_xfrm_socket pid=2555 comm=syz.3.693 [ 117.362170][ T2557] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 117.371851][ T2559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.695'. [ 117.405467][ T1267] usb 1-1: device descriptor read/64, error -71 [ 117.442906][ T2571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 117.645420][ T1267] usb 1-1: device descriptor read/64, error -71 [ 117.755503][ T1267] usb usb1-port1: attempt power cycle [ 117.885390][ T478] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 118.036833][ T478] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 118.047135][ T478] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 118.057445][ T478] usb 4-1: config 1 interface 0 has no altsetting 0 [ 118.065271][ T478] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 118.074354][ T478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.082475][ T478] usb 4-1: Product: syz [ 118.086650][ T478] usb 4-1: Manufacturer: syz [ 118.091241][ T478] usb 4-1: SerialNumber: syz [ 118.096984][ T2584] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 118.104143][ T2584] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 118.105356][ T1267] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 118.130980][ T2601] syzkaller1: entered promiscuous mode [ 118.136708][ T2601] syzkaller1: entered allmulticast mode [ 118.143170][ T1267] usb 1-1: device descriptor read/8, error -71 [ 118.192909][ T2603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.201519][ T2603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.276363][ T1267] usb 1-1: device descriptor read/8, error -71 [ 118.515306][ T1267] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 118.536419][ T1267] usb 1-1: device descriptor read/8, error -71 [ 118.655301][ T1273] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 118.666301][ T1267] usb 1-1: device descriptor read/8, error -71 [ 118.775698][ T1267] usb usb1-port1: unable to enumerate USB device [ 118.826296][ T1273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.837495][ T1273] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.846449][ T1273] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.861056][ T1273] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 118.870202][ T1273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.879919][ T1273] usb 2-1: Product: syz [ 118.884138][ T36] kauditd_printk_skb: 36088 callbacks suppressed [ 118.884155][ T36] audit: type=1400 audit(1781759217.527:41865): avc: denied { map } for pid=2616 comm="syz.2.716" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.913762][ T1273] usb 2-1: Manufacturer: syz [ 118.918573][ T1273] usb 2-1: SerialNumber: syz [ 118.924641][ T1273] usb 2-1: config 0 descriptor?? [ 118.929031][ T2622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2622 comm=syz.2.717 [ 118.930689][ T36] audit: type=1400 audit(1781759217.577:41866): avc: denied { read } for pid=2621 comm="syz.2.717" name="file0" dev="tmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.943518][ T2622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=2622 comm=syz.2.717 [ 118.965595][ T1273] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 118.977371][ T2622] netlink: 17 bytes leftover after parsing attributes in process `syz.2.717'. [ 118.983362][ T1273] usb 2-1: No valid video chain found. [ 118.993092][ T2622] netlink: 'syz.2.717': attribute type 4 has an invalid length. [ 119.010574][ T36] audit: type=1400 audit(1781759217.657:41867): avc: denied { mounton } for pid=2621 comm="syz.2.717" path="/240/file0" dev="tmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.035313][ T2622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2622 comm=syz.2.717 [ 119.130432][ T478] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:29:c6:a3:de:73 [ 119.141676][ T478] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 119.149049][ T478] usb 4-1: USB disconnect, device number 53 [ 119.241097][ T2632] syzkaller1: entered promiscuous mode [ 119.246631][ T2632] syzkaller1: entered allmulticast mode [ 119.549046][ T2648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=2648 comm=syz.2.724 [ 119.562243][ T2648] fuse: Bad value for 'group_id' [ 119.567322][ T2648] fuse: Bad value for 'group_id' [ 119.625824][ T2648] kvm: kvm [2647]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 119.634756][ T2648] kvm: kvm [2647]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 119.735856][ T2657] syzkaller1: entered promiscuous mode [ 119.741340][ T2657] syzkaller1: entered allmulticast mode [ 119.772976][ T2664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.781693][ T2664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.791835][ T2664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.801557][ T2664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.816010][ T2664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.824456][ T2664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.405493][ T2676] rust_binder: Write failure EINVAL in pid:736 [ 120.662415][ T2679] syz.3.735: attempt to access beyond end of device [ 120.662415][ T2679] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 120.681627][ T2679] EXT4-fs (loop3): unable to read superblock [ 120.689618][ T2679] input: syz1 as /devices/virtual/input/input20 [ 120.935044][ T1265] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 121.025755][ T1267] usb 2-1: USB disconnect, device number 49 [ 121.043158][ T36] audit: type=1400 audit(1781759219.687:41868): avc: denied { getopt } for pid=2680 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.075044][ T1265] usb 4-1: device descriptor read/64, error -71 [ 121.201227][ T2697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.211232][ T2697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.230510][ T2699] fuse: Unknown parameter '0x00000000000000040x0000000000000003' [ 121.334964][ T1265] usb 4-1: device descriptor read/64, error -71 [ 121.474943][ T1267] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 121.574962][ T1265] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 121.625943][ T1267] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 121.636233][ T1267] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.656403][ T1267] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 121.666446][ T1267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.674777][ T1267] usb 2-1: SerialNumber: syz [ 121.682530][ T1267] usb 2-1: bad CDC descriptors [ 121.687636][ T1267] usb-storage 2-1:1.0: USB Mass Storage device detected [ 121.695259][ T1267] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 121.704934][ T1265] usb 4-1: device descriptor read/64, error -71 [ 121.782790][ T2706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.791309][ T2706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.884534][ T478] usb 2-1: USB disconnect, device number 50 [ 121.944929][ T1265] usb 4-1: device descriptor read/64, error -71 [ 122.054983][ T1265] usb usb4-port1: attempt power cycle [ 122.205344][ T2715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.214411][ T2715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.274851][ T478] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 122.404830][ T1265] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 122.425870][ T1265] usb 4-1: device descriptor read/8, error -71 [ 122.434956][ T478] usb 2-1: Using ep0 maxpacket: 16 [ 122.440125][ T1273] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 122.449002][ T478] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 7 [ 122.467316][ T478] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 25, changing to 7 [ 122.479774][ T478] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 122.488896][ T478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.497519][ T478] usb 2-1: Product: syz [ 122.501707][ T478] usb 2-1: Manufacturer: syz [ 122.506350][ T478] usb 2-1: SerialNumber: syz [ 122.527299][ T2727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.535856][ T2727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.555825][ T1265] usb 4-1: device descriptor read/8, error -71 [ 122.584797][ T1273] usb 1-1: device descriptor read/64, error -71 [ 122.718449][ T478] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 122.725426][ T478] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 122.736024][ T478] usb 2-1: USB disconnect, device number 51 [ 122.745508][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.794800][ T1265] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 122.815763][ T1265] usb 4-1: device descriptor read/8, error -71 [ 122.834813][ T1273] usb 1-1: device descriptor read/64, error -71 [ 122.965768][ T1265] usb 4-1: device descriptor read/8, error -71 [ 123.081124][ T1265] usb usb4-port1: unable to enumerate USB device [ 123.084747][ T1273] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 123.115128][ T2730] rust_binder: Write failure EINVAL in pid:757 [ 123.224758][ T1273] usb 1-1: device descriptor read/64, error -71 [ 123.475469][ T1273] usb 1-1: device descriptor read/64, error -71 [ 123.488879][ T2743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.752'. [ 123.501867][ T36] audit: type=1400 audit(1781759222.147:41869): avc: denied { write } for pid=2742 comm="syz.1.752" name="/" dev="incremental-fs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.585077][ T1273] usb usb1-port1: attempt power cycle [ 123.908258][ T2749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.916920][ T2749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.934664][ T1273] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 123.955711][ T1273] usb 1-1: device descriptor read/8, error -71 [ 124.064648][ T1267] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 124.085701][ T1273] usb 1-1: device descriptor read/8, error -71 [ 124.215675][ T1267] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 124.225553][ T1267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 124.235311][ T1267] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 124.246520][ T1267] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 124.255614][ T1267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.263611][ T1267] usb 4-1: Product: syz [ 124.267907][ T1267] usb 4-1: Manufacturer: syz [ 124.272490][ T1267] usb 4-1: SerialNumber: syz [ 124.277835][ T1267] usb 4-1: config 0 descriptor?? [ 124.283067][ T2745] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.290824][ T1267] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 124.324601][ T1273] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 124.334640][ T1265] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 124.345627][ T1273] usb 1-1: device descriptor read/8, error -71 [ 124.434455][ T2753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.443468][ T2753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.443717][ T2754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.459865][ T2754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.475556][ T1273] usb 1-1: device descriptor read/8, error -71 [ 124.490729][ T478] usb 4-1: USB disconnect, device number 58 [ 124.504723][ T1265] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.512880][ T1265] usb 2-1: not running at top speed; connect to a high speed hub [ 124.521603][ T1265] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.531699][ T1265] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 124.540946][ T1265] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 124.553318][ T1265] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 124.562411][ T1265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.570409][ T1265] usb 2-1: Product: syz [ 124.574575][ T1265] usb 2-1: Manufacturer: syz [ 124.579159][ T1265] usb 2-1: SerialNumber: syz [ 124.584939][ T1273] usb usb1-port1: unable to enumerate USB device [ 124.789571][ T1265] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 124.798088][ T1265] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 124.806107][ T1265] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 124.814556][ T1265] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 124.823074][ T1265] usb 2-1: 0:2 : does not exist [ 124.831697][ T1265] usb 2-1: USB disconnect, device number 52 [ 124.842772][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.981159][ T2756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.990072][ T2756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.301950][ T2776] overlayfs: conflicting options: userxattr,redirect_dir=on [ 125.327960][ T1265] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 125.425682][ T2783] rust_binder: 580: no such ref 2 [ 125.464459][ T1265] usb 4-1: device descriptor read/64, error -71 [ 125.519824][ T2788] syzkaller1: entered promiscuous mode [ 125.531705][ T2788] syzkaller1: entered allmulticast mode [ 125.624431][ T478] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 125.693473][ T2799] ------------[ cut here ]------------ [ 125.699011][ T2799] WARNING: CPU: 1 PID: 2799 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 125.708560][ T2799] Modules linked in: [ 125.712457][ T2799] CPU: 1 UID: 0 PID: 2799 Comm: syz.2.773 Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 125.723936][ T2799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.734012][ T2799] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 125.740056][ T2799] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 62 1b 0c 06 00 0f 85 c2 00 00 00 c6 05 55 1b 0c 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 125.759816][ T2799] RSP: 0018:ffffc90011787860 EFLAGS: 00010246 [ 125.765917][ T2799] RAX: 0000000000000000 RBX: 0000000000000020 RCX: 0000000000000000 [ 125.773890][ T2799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90011787918 [ 125.781888][ T2799] RBP: ffffc90011787988 R08: ffffc90011787917 R09: 0000000000000000 [ 125.784408][ T478] usb 1-1: Using ep0 maxpacket: 32 [ 125.789895][ T2799] R10: ffffc90011787900 R11: fffff520022f0f23 R12: ffffc900117878a0 [ 125.796692][ T478] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.803008][ T2799] R13: dffffc0000000000 R14: 1ffff920022f0f10 R15: 0000000000000000 [ 125.803030][ T2799] FS: 00007fdafd8086c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 125.815175][ T478] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 125.821104][ T2799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.830433][ T478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.839095][ T2799] CR2: 0000200000001000 CR3: 000000010ca7a000 CR4: 00000000003526b0 [ 125.846046][ T478] usb 1-1: Product: syz [ 125.853678][ T2799] Call Trace: [ 125.853689][ T2799] [ 125.853697][ T2799] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.862080][ T478] usb 1-1: Manufacturer: syz [ 125.865842][ T2799] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 125.869343][ T478] usb 1-1: SerialNumber: syz [ 125.872060][ T2799] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 125.872089][ T2799] ___kmalloc_large_node+0x81/0x210 [ 125.894850][ T478] usb 1-1: config 0 descriptor?? [ 125.898637][ T2799] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 125.906671][ T478] usb 1-1: bad CDC descriptors [ 125.908769][ T2799] __kmalloc_large_node_noprof+0x1e/0xd0 [ 125.915194][ T478] usb 1-1: unsupported MDLM descriptors [ 125.919125][ T2799] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 125.935933][ T2799] __kmalloc_noprof+0x326/0x500 [ 125.940773][ T2799] ? __cfi_lockref_get+0x10/0x10 [ 125.945732][ T2799] incfs_realloc_mount_info+0xa7/0x4d0 [ 125.951195][ T2799] ? incfs_add_sysfs_node+0x118/0x230 [ 125.956589][ T2799] incfs_alloc_mount_info+0x478/0x5f0 [ 125.961966][ T2799] incfs_mount_fs+0x3ca/0x970 [ 125.966656][ T2799] ? __cfi_incfs_mount_fs+0x10/0x10 [ 125.971854][ T2799] ? vfs_parse_fs_string+0x10f/0x180 [ 125.977213][ T2799] ? selinux_capable+0x38/0x50 [ 125.981988][ T2799] legacy_get_tree+0x103/0x1b0 [ 125.986772][ T2799] ? __cfi_incfs_mount_fs+0x10/0x10 [ 125.991981][ T2799] vfs_get_tree+0x9e/0x290 [ 125.996417][ T2799] do_new_mount+0x251/0xb30 [ 126.000923][ T2799] ? security_capable+0x44/0x130 [ 126.005876][ T2799] path_mount+0x682/0x1010 [ 126.010294][ T2799] __se_sys_mount+0x2bf/0x480 [ 126.014987][ T2799] ? __x64_sys_mount+0xf0/0xf0 [ 126.019756][ T2799] ? __kasan_check_write+0x18/0x20 [ 126.024879][ T2799] ? __kasan_check_write+0x18/0x20 [ 126.029992][ T2799] ? fpregs_restore_userregs+0x11c/0x260 [ 126.035646][ T2799] __x64_sys_mount+0xc3/0xf0 [ 126.040246][ T2799] x64_sys_call+0x2021/0x2ee0 [ 126.044945][ T2799] do_syscall_64+0x57/0xf0 [ 126.049375][ T2799] ? clear_bhb_loop+0x50/0xa0 [ 126.054049][ T2799] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.059970][ T2799] RIP: 0033:0x7fdafc99ce59 [ 126.064443][ T2799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.084105][ T2799] RSP: 002b:00007fdafd808028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.092546][ T2799] RAX: ffffffffffffffda RBX: 00007fdafcc15fa0 RCX: 00007fdafc99ce59 [ 126.100540][ T2799] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 126.108558][ T2799] RBP: 00007fdafca32d6f R08: 00002000000002c0 R09: 0000000000000000 [ 126.116578][ T2799] R10: 0000000000808005 R11: 0000000000000246 R12: 0000000000000000 [ 126.116977][ T478] usb 1-1: USB disconnect, device number 75 [ 126.124587][ T2799] R13: 00007fdafcc16038 R14: 00007fdafcc15fa0 R15: 00007ffd7fcc80e8 [ 126.124614][ T2799] [ 126.124621][ T2799] ---[ end trace 0000000000000000 ]--- [ 126.124721][ T1265] usb 4-1: device descriptor read/64, error -71 [ 126.130586][ T2799] incfs: Error allocating mount info. -12 [ 126.160485][ T2799] incfs: mount failed -12 [ 126.374391][ T1265] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 126.504372][ T1265] usb 4-1: device descriptor read/64, error -71 [ 126.744330][ T1265] usb 4-1: device descriptor read/64, error -71 [ 126.854479][ T1265] usb usb4-port1: attempt power cycle [ 127.194282][ T1265] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 127.215227][ T1265] usb 4-1: device descriptor read/8, error -71 [ 127.345283][ T1265] usb 4-1: device descriptor read/8, error -71 [ 127.584204][ T1265] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 127.605171][ T1265] usb 4-1: device descriptor read/8, error -71 [ 127.735226][ T1265] usb 4-1: device descriptor read/8, error -71 [ 127.844290][ T1265] usb usb4-port1: unable to enumerate USB device