last executing test programs: 5.031225295s ago: executing program 2 (id=162): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x67, 0x0, 0x2, 0x4, "9daea758", "3c4d15c3"}}, 0x0}, 0x0) 4.831501318s ago: executing program 1 (id=172): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) 4.549463792s ago: executing program 1 (id=173): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x300, r2}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) 4.536592442s ago: executing program 1 (id=174): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000740)={0x0, 0x0, 0x5, "f55a77283c"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000086"]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000047fb67f7cc9a7b33fe55d51a09710000700a0000000000000300000000000000"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x160e) r5 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom(r5, &(0x7f00000000c0)=""/79, 0x4f, 0x2000, &(0x7f0000000200)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee0000, 0x42240}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f00000002c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.00933501s ago: executing program 3 (id=182): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x300, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) 4.00732359s ago: executing program 3 (id=183): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x20}}, 0x20000083) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) 3.948268871s ago: executing program 3 (id=184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x6, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x0, 0x40, 0x4000000, 0x2, {{0x2b, 0x4, 0x0, 0x16, 0xac, 0x66, 0x0, 0x19, 0x4, 0x0, @remote, @multicast2, {[@end, @noop, @lsrr={0x83, 0xf, 0xfc, [@multicast2, @remote, @multicast2]}, @noop, @noop, @timestamp_prespec={0x44, 0x54, 0xc5, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x400}, {@multicast2}, {@remote, 0x5}, {@multicast2, 0x100}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x8000}, {@broadcast, 0x5}, {@broadcast}, {@broadcast, 0x80000001}, {@broadcast, 0x5}]}, @cipso={0x86, 0x2b, 0x1, [{0x5, 0xe, "d40253504fd44279f3218583"}, {0x6, 0x12, "d5aae3fbb17d221a03a7ea1c2e174616"}, {0x5, 0x5, "d13125"}]}, @end, @end, @timestamp_prespec={0x44, 0x4, 0xeb, 0x3, 0x6}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x0, 0x40, 0x4000000, 0x2, {{0x2b, 0x4, 0x0, 0x16, 0xac, 0x66, 0x0, 0x19, 0x4, 0x0, @remote, @multicast2, {[@end, @noop, @lsrr={0x83, 0xf, 0xfc, [@multicast2, @remote, @multicast2]}, @noop, @noop, @timestamp_prespec={0x44, 0x54, 0xc5, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x400}, {@multicast2}, {@remote, 0x5}, {@multicast2, 0x100}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x8000}, {@broadcast, 0x5}, {@broadcast}, {@broadcast, 0x80000001}, {@broadcast, 0x5}]}, @cipso={0x86, 0x2b, 0x1, [{0x5, 0xe, "d40253504fd44279f3218583"}, {0x6, 0x12, "d5aae3fbb17d221a03a7ea1c2e174616"}, {0x5, 0x5, "d13125"}]}, @end, @end, @timestamp_prespec={0x44, 0x4, 0xeb, 0x3, 0x6}]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0xd0, 0x0, 0x7fff0000}]}) shutdown(0xffffffffffffffff, 0x2) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede1102030109021200010000100009e7ff01000083ec00"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede1102030109021200010000100009e7ff01000083ec00"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) 3.231203062s ago: executing program 2 (id=185): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x20) ioctl$TCSETAF(r2, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "823af9032ae9da23"}) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r1, &(0x7f0000000440)="bb8f", 0x2, 0x10, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a"], 0x20}}, 0x40816) 3.198575102s ago: executing program 2 (id=186): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$inet(0x2, 0x801, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000180100002800c000180"], 0x28}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fgetxattr(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='syst'], 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) 3.036404205s ago: executing program 2 (id=187): r0 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x1d, 0x800, 0x3b, &(0x7f0000000040)) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x5, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x4, 0xdddd1000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfe}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0x8, 0x6, 0x0, 0x0, 0x83}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5, 0x0, 0x3}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xd801, 0x0, [0x6, 0x0, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000040)={0x6000, 0xdddd0000, 0x5, 0x5, 0x7f}) syz_usb_control_io(r3, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000380)={0x20, 0x13, 0x2, "69c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2a, &(0x7f0000000180)=0x77, 0x4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) add_key$keyring(&(0x7f0000001180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r8, 0x28, 0x0, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r9, 0x8000000000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x1, 0x16}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x38}}, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffd98}}, 0x40}, @register_looper], 0x0, 0x0, 0x0}) 1.192933152s ago: executing program 1 (id=189): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000d00)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@weak_binder={0x77622a85, 0x1000}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x10, 0x0, &(0x7f0000000600)=[@request_death], 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0xceb, @empty}, 0x1c) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x67, 0x0, 0xee01}, {0x20}, {0x0, 0x63c}, 0xc6, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d2, 0x32}, 0xa, @in6=@private0, 0x0, 0x2}}, 0xe8) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) dup2(r4, r5) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1.092016634s ago: executing program 1 (id=190): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x241, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x6c2000, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) (async) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)=0xfffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000001300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f00000001c0)={0x10d8, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf2e5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x105c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "830e5a370ad9b8155e5e523930f39bac37aaad8a47f0337def"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0x10d8}, 0x1, 0x0, 0x0, 0x8000}, 0x8000080) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000001380)={0x18, 0x1, 0x0, {0x4f}}, 0x18) (async) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000001380)={0x18, 0x1, 0x0, {0x4f}}, 0x18) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000001440)=0x6) accept4$unix(r1, &(0x7f0000001480), &(0x7f0000001500)=0x6e, 0x800) (async) r4 = accept4$unix(r1, &(0x7f0000001480), &(0x7f0000001500)=0x6e, 0x800) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000001540)={0xf5d2, 0x9, 0x0, 0x5}, 0x10) lgetxattr(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000001600)=""/8, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001640)={'vxcan0\x00', 0x0}) sendmmsg(r4, &(0x7f0000001dc0)=[{{&(0x7f0000001680)=@can={0x1d, r5}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001700)="1c8542c5ce6bab80e8eed68f1e9cc16add3b051b3a60b469a7464781b7fef8d2706b377f572d0abec5190293853c99cee739f73ea8e5561768d45111779f31b68ac7e33f989a531250d807beaedb9275425c9cb85d553cf6f37a85e32752226716b54a21ec2ea51e26732366d736d2c9a44ca0", 0x73}, {&(0x7f0000001780)="c3b1977ee45367ec158fbba51ff87d7581c80c20f41cdfdca0f38b805ff1c4759e0dcd856615ddb290c29610ea4447482b2a9ebb45d106b8cf6ce49ceb5ac8f097aa0cfd9bb77457f8790cf8481469b0b36463b2616437d94e2aef2ae467054bd180e2a174590c1b77d001ed153df2ec75686cee2557ddf7bb2ee6e17798013195dec2e1fb4c", 0x86}, {&(0x7f0000001840)="f955c3b33a47bced90e93165c21dd28865b8fbf29e6f08eb812c1597cebf549a8f769b0935eca132576517f59cc25288d8560643e8deb61477af0dde4e01de710dce3124c1a3fc51c3", 0x49}, {&(0x7f00000018c0)="befd93bf816e6f8e246116a1a3a6fda0d584b5158da40cd61fc7b78c46d0ab90e3417a8c525bb26182cb9ab9ed0e59", 0x2f}, {&(0x7f0000001900)="1ed5fcbad6840e897a6e0f9721a58490ea5033bd1e4e523ea4e4a6f9f2bbf9bf4a50efd7f79932dc47513c6f8c104fe632a84a22606d03e3a9022ec02aba4a848c7296897f900ac1bb5dbbf707d9ec3bbf51adc7f642115ffef0e515f87eeedd0e9cbbf94a03e1c3d160665c3742356a96177aa5a5d66a2a50b5d935c677d70c27c41b46248c5e1a05ce90c4006f99743612a9b08fc4332a5871fdc94bb60b3ad21b8908961f86232b0206d8e7546b06f77e57b61330c8250bbb3b6d6e179f6815dd1a2f4c38da975015b981c3ca5646f9e081756dca7f0748c763e44f13c1e8d607db06b0355d900c9689917d8c", 0xee}, {&(0x7f0000001a00)="20f3c8a928107f7c20338d172d48e23a4cfcbe9231b8b0d5587f0611ed754f88ecbd36b1142df3df91d6e3e9321c24c2a0dafaa05ee6ec92b7357f00b169d552c0934c73b0", 0x45}, {&(0x7f0000001a80)="3d44b6f47038a2089abfff6d815a3189c829a1e39192805656", 0x19}, {&(0x7f0000001ac0)="16c190846df53adb5b41d8504f0c53e7efc087e0c7fd050a155dcb7e01273c593cc85762de2decc34c1f", 0x2a}, {&(0x7f0000001b00)="ad8a90e91db3567b54957b977e8fdb94a9b7327e544eb1afdb8d60b8e4f06daf1fa2f9a42ee4debdd4b02bafeee488fc0ab4edfe24d2f4abe4a84d4060867dc77f45cc5022b49b74282992c5f4962443c3fca7e43a0c2d2e", 0x58}], 0x9, &(0x7f0000001c40)=[{0x28, 0x88, 0x8, "3bf5d9b19549123194703bbfd7f94ea466"}, {0xa8, 0x113, 0xffffffff, "8ed2de14b2b2d3864b82b3f09a6b13a303017a106fc44d088ce460ef54c095bbee5a73b82a45a2733613a730b0e4430f4989c5bffd8d355e321fd6351feae064a0229278ae135f0df046d8b1b22e5bf57160ef4df4ea76d78291f67fb0565310ed6838a03bfe930517df60ec2c28830c2ba1392d656b87c0efc003d5a81c6dd81fd58b190fa89e4ebafc13325290457b0ef893cdc7b584"}, {0x50, 0x10a, 0xb, "3f10ac6da7e3674cf3a3411a7715e50a032cd4c3d3cd2e1a8dfc8044f655b8cfc1f5325a081beb82aaf69ef86c251c377b736a74a9eea169d11b5b3f"}, {0x38, 0x10b, 0x2287, "d83aa3c4095cd26aacf3a3fc4c544d03affa4456f68071cf688266aaf294524391"}], 0x158}}], 0x1, 0x20000014) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f0000001e00)={{0x12, 0x1, 0x310, 0x27, 0x68, 0xaf, 0x20, 0x8516, 0x2870, 0x3412, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x6, 0x80, 0x40, [{{0x9, 0x4, 0xcc, 0x6, 0x0, 0xba, 0x4c, 0xcf, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0xfc}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x3ff, 0x3, 0x5, 0x9}]}]}}]}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000001e40)={0xa, 0x6, 0x201, 0x6, 0xb1, 0x3, 0x20, 0x4}, 0x3b, &(0x7f0000001e80)={0x5, 0xf, 0x3b, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x0, 0xd5, 0x0, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xe0, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x8, 0x101}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d00a11a957fbe14f9f939617d2bb57b8"}]}, 0x4, [{0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x4c30}}, {0xba, &(0x7f0000001f40)=@string={0xba, 0x3, "3ed0d67b68ff427897430e234cd25a56b5ef270bf2544ed76c7becdde5c5c856926fd80e2926ffa22e1b01b388657055f661495f5b069d5702e435bbbf7122400b8a957aac68f2dc4c07724885b3f57ad32697d64ac307cd50dcde487a25925add9b1bdce7e496e1c1a5d9dd46b0cc6861b8158f919dc67007bd80df44ca5783b987e22ad54ec7ff7a1097330afd6ab4c189e1b8350178d6c756dbaa90cec2221a43de9b5dfbebcb5a7b90db02a0562a3d59eba12afa1fce"}}, {0x7e, &(0x7f0000002000)=@string={0x7e, 0x3, "011d9699b29f8493470c480dc2a76c641573fb4fd2e93936ba1af60f6601161084c084691636944ab9c87736c58e7654ba143d84b93b8c721481d3240bf0d1b6c3fb813526606062da707f2f9191a334c2647ea08b24237e18fa87ce8dc480f3b555c001a8837a4f84b8d9822b16f1fd53b3084bf591f513a1ac4291"}}]}) (async) r6 = syz_usb_connect(0x4, 0x36, &(0x7f0000001e00)={{0x12, 0x1, 0x310, 0x27, 0x68, 0xaf, 0x20, 0x8516, 0x2870, 0x3412, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x6, 0x80, 0x40, [{{0x9, 0x4, 0xcc, 0x6, 0x0, 0xba, 0x4c, 0xcf, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0xfc}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x3ff, 0x3, 0x5, 0x9}]}]}}]}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000001e40)={0xa, 0x6, 0x201, 0x6, 0xb1, 0x3, 0x20, 0x4}, 0x3b, &(0x7f0000001e80)={0x5, 0xf, 0x3b, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x0, 0xd5, 0x0, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xe0, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x8, 0x101}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d00a11a957fbe14f9f939617d2bb57b8"}]}, 0x4, [{0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0x4c30}}, {0xba, &(0x7f0000001f40)=@string={0xba, 0x3, "3ed0d67b68ff427897430e234cd25a56b5ef270bf2544ed76c7becdde5c5c856926fd80e2926ffa22e1b01b388657055f661495f5b069d5702e435bbbf7122400b8a957aac68f2dc4c07724885b3f57ad32697d64ac307cd50dcde487a25925add9b1bdce7e496e1c1a5d9dd46b0cc6861b8158f919dc67007bd80df44ca5783b987e22ad54ec7ff7a1097330afd6ab4c189e1b8350178d6c756dbaa90cec2221a43de9b5dfbebcb5a7b90db02a0562a3d59eba12afa1fce"}}, {0x7e, &(0x7f0000002000)=@string={0x7e, 0x3, "011d9699b29f8493470c480dc2a76c641573fb4fd2e93936ba1af60f6601161084c084691636944ab9c87736c58e7654ba143d84b93b8c721481d3240bf0d1b6c3fb813526606062da707f2f9191a334c2647ea08b24237e18fa87ce8dc480f3b555c001a8837a4f84b8d9822b16f1fd53b3084bf591f513a1ac4291"}}]}) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000002100)) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000002100)) sendto$unix(r3, &(0x7f0000002140)="8164283d9bcbedc91519cabd569305e0518aa0b0db1910f13c496c7f7ffc2ad6c8e710b0", 0x24, 0x40080, &(0x7f0000002180)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_control_io$cdc_ncm(r6, &(0x7f00000022c0)={0x14, &(0x7f0000002200)={0x20, 0x24, 0x62, {0x62, 0x22, "229622eddcddbb1765457894d6494b2fb4e9cd5531927f7c494c3b32148a1374166b48c56b6ca4c519d85cc4c886967aa71368394f58e73cd9325fce4434629b46a0e7273ae5e50750d221a13a99054b7445ff794843781e620ad83439231878"}}, &(0x7f0000002280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002540)={0x44, &(0x7f0000002300)={0x0, 0x17, 0x67, "d14d1c98c8d2545c44084d4cc55ef97fd2a8b922a816e66f028074ebfb9f4a5a9561317e0c659190e9cadb064c4a365cdd2e2c64e1e052a26afe89fd8d9d2723facfde5185d4219855597adad0c824c4dcbf81aaef3a9b6f7080ad7e9ff8349f620c2cc8f7f6b6"}, &(0x7f0000002380)={0x0, 0xa, 0x1, 0xa2}, &(0x7f00000023c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002400)={0x20, 0x80, 0x1c, {0x4, 0x9, 0x6, 0x9, 0x80, 0x6, 0x6, 0xc48, 0x1, 0x7, 0x0, 0x401}}, &(0x7f0000002440)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000002480)={0x20, 0x83, 0x2}, &(0x7f00000024c0)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000002500)={0x20, 0x89, 0x2, 0x1}}) syz_usb_ep_write(r6, 0x8, 0x55, &(0x7f00000025c0)="cfbd0b29f1214a77f6fc07ff4a2f6d7f9d26655fc6042001199e6eb6784dac022f58f145b88834d7469e3c13f9734baaae5e7cdf0fc3042de8c75894db3686fc181475e10fbb38b99ba6f36c97ab80465813d1cc27") (async) syz_usb_ep_write(r6, 0x8, 0x55, &(0x7f00000025c0)="cfbd0b29f1214a77f6fc07ff4a2f6d7f9d26655fc6042001199e6eb6784dac022f58f145b88834d7469e3c13f9734baaae5e7cdf0fc3042de8c75894db3686fc181475e10fbb38b99ba6f36c97ab80465813d1cc27") mkdirat(0xffffffffffffffff, &(0x7f0000002640)='./file0\x00', 0x40) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000002680)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x30, r5}) openat$kvm(0xffffffffffffff9c, &(0x7f00000026c0), 0x2000, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000026c0), 0x2000, 0x0) mount$9p_fd(0x0, &(0x7f0000002700)='./file0\x00', &(0x7f0000002740), 0x10000, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@debug={'debug', 0x3d, 0x10001}}], [{@obj_role={'obj_role', 0x3d, ')'}}, {@context={'context', 0x3d, 'system_u'}}, {@hash}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x34}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_role={'subj_role', 0x3d, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}}) close(r4) 1.012766035s ago: executing program 2 (id=191): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xcb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000160a03020000000000000000020000000900020073797a3000000000099700010073797a3000000000040003"], 0x58}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, &(0x7f0000000140)=""/92, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 914.743256ms ago: executing program 3 (id=192): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x300, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) 852.418737ms ago: executing program 3 (id=193): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x40, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de548baebade76f1a00000000000004c46f7fe47218a02ff8ba94a4feef2c3bdee607e294742478a7b69462fc21aff55002ce55e854564e7d309f20d22d196137252587ab17948adf2dec91770ef2733"}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r3 = gettid() socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socket$igmp6(0xa, 0x3, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f00000001c0)=0x1) mmap(&(0x7f0000341000/0x2000)=nil, 0x2000, 0x0, 0x4002011, r4, 0xd3d07000) fallocate(r2, 0x0, 0x0, 0x1000f4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="9a29cd1fb4ccd347afc934b1ef3922299c16637f5766dd4f2e5497f28b98b220ceaa8df22e1f4e2e83f31d76ecb812966cb2cc5590b2dbd9496a895f52df578a2b2897f00914e3bfa2b9ea55c39cd5b7"}) 602.676741ms ago: executing program 1 (id=194): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000040)=""/41) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_cnodeIs=g,']) 276.892016ms ago: executing program 0 (id=200): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1a0, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x4000000, 0x0, 0x3}, {0xfffffffffffffffc, 0x0, 0x9}, 0x0, 0xffffffff, 0x1}, {{@in=@empty, 0x1, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xbfffffff}}, 0xe8) 276.653676ms ago: executing program 0 (id=201): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x300, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) 276.432906ms ago: executing program 0 (id=202): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000000c0)=@x86={0x77, 0x8, 0xd, 0x0, 0x7, 0x77, 0x5, 0x83, 0x8, 0x5, 0xf8, 0xe, 0x0, 0x1, 0x5, 0x4, 0xf8, 0x8, 0x6, '\x00', 0x8, 0x4}) write$P9_RVERSION(r1, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 212.528947ms ago: executing program 0 (id=203): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x2000005, 0x840000000000a132, 0xffffffffffffffff, 0x3d000) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xd1383000) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r0, 0x0) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 212.351597ms ago: executing program 0 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x6) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r3, r1, 0x0) 129.080308ms ago: executing program 2 (id=205): munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x123040, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) waitid(0x1, r4, 0x0, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r8, 0x1, 0x2d, &(0x7f00000001c0)=0x1, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xc9) ioctl$KVM_RUN(r7, 0xae80, 0x0) 105.127488ms ago: executing program 0 (id=206): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1000000}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) 0s ago: executing program 3 (id=207): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) read(r0, &(0x7f0000000000)=""/66, 0x42) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x3ff, @any, 0x7, 0x1}, 0xe) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x2d38, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x153c, 0x3, 0x0, 0x1, [{0x12e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x90, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "241ba898e99133c142b67ce9d5faadba193c50f11c07dca85390c518b9fd42834efc881ad68b9f4324883265e9c9a2f7a4455a97f688c50a37d5d374002b111b802787d982764f939ae1ef882f0beae03626b20656c9432ff9225857b15ae059395cff4537d51b882897722dfb69bdc1bff7e3794cf46f2867"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x1138, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "d1bed5377b5be844862c1b980852a419d88dfc52c4b873317c9b1e36b8c8cb488b9b839a0ced2660c4"}, @NFTA_DATA_VALUE={0x5c, 0x1, "22944e7d00bf455790b7de5c1883fd401f8084f303630e9e6c204e37df9f6cec507b0b02f4d4bed8eb97c3983eebd41bf40ad639f4a1176487625d30f1058f76fdda6a4d143faa63509ed427ae8853b5aa2075a3c4cba301"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY_END={0x10c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa8, 0x1, "2e23f6f4281ccbba7293951571d7c8961890d5ca7c32a900a39d10ec911b7e58c953f4278023e6201b1e9559816c9cf82f70eb529f33d17a8915089d6e18520cc18b7f1c9b28c768020ada5eb58f3548077f4d35532e6bc51511fe3472a9d5838f1f5dba4cb1b982dfe57989a6999d49bd7d3683cdf47ed16b4fc2015ccfb4b966c12e0c083b5e22443e771e60fbfdb6d9eae769c8226515ee02c62b177e940786fb0c20"}, @NFTA_DATA_VALUE={0x1d, 0x1, "72e84cc2632dfde676f08e80fbe031374de02ee7be896fbaa7"}, @NFTA_DATA_VALUE={0x3f, 0x1, "fb7e7a4b213fa0e11d1bad70105906262c279220ce25ee5ccb5d980f9329b9b869e51a32c0c02abf50457bb8291b9713a43603e07fc79dca01537d"}]}]}, {0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xb4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x16, 0x1, "d6446d631d8bdbbd1ade872561b8c2173d97"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x1a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0xe9, 0x6, 0x1, 0x0, "180389fdb9ecc868aa5e0700dafa7ac55b3e0435fd2ae807fbd145b0900d4a2b43d9dff663bab41c2eb3e610b9261274cfc4aa290342a60798d9dacfe1fa63f9cb498366ffa22925b724d0325d418a0daede6d9f4fae536bcec1e9e31409aefd2b8f9548e5b56d272cc6f00f3bf0184834d782ab9d0db00173c1b0e631ff7f9be4a4100e05074847d9dd35d2f12c0bf0845f52fb1ad4d3b6b4dc8d958b1c9632f4690ba52c53b6da5aaef5c0ab735c8d51b448041edc75870aaa1acbed5e05790cd47e31678a6de2e4c0ac1306542a564d371097f1e035b00a847f7e89d5193fd1d2c0bee1"}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x17c8, 0x3, 0x0, 0x1, [{0x11e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "0cac9836b29ba409e5e9b4d5c36ba27437bd03b83ae9ead4049349f24222bfa3a10fdcfc749b0031939fe474b7db8bc93c4220cd759013482b9b6e348d379999243988e0039bd6516b282f7029f0336e4bd1e5dd4126efc7e923a2cf60dc8b5d8a0e7a2086023fa278542b505cde8701f0c83cf1d2c3eabad2c316770dc6250a38cca092d386dfb9e7d47d95d1abb5f3c7c38df9680b10e9c6bec89afa74de14a600ef20c5492f4d34"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_KEY_END={0x1108, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "2bbc2eca3a9208446cbfd7ee"}, @NFTA_DATA_VALUE={0x6c, 0x1, "2d53d007e308b4bd4828adcdd1f182ea7b7c2844bb4b8e2033443688ebbd5e0dc3e7086c552f875102741dad35831841bfd46855f3d44f192112633a7eb3ce1a6e6ca2e0516de007729295c01277bf1dddae0d86648bf2c9efe6e4c8bb68a5fea85205c0039bd0b5"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_KEY={0x1cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "0a1222127867ef414906b3d79cc0fff203e72ff64eb650bea06c936e3aded6c277b3bfc4b0811557a0088577ee21035f07172dd30df0425a19721cb36723297a2755f9ac81e2a4fb2d43153676e0787d1a8d5e3853f9b6413103fde2afbf6b3eb4e3bd89d194c0a6698b6be4409abce0a5bc479f8646c2ed2c8f2ff8bed37a6d42c82bcd58a9d6e8f16c2c5ab07ceb8f46693deef04c0bf0"}, @NFTA_DATA_VALUE={0xcd, 0x1, "d3ea34a233c0a54a42a24ebfae6a702f54dd375e8758ef2cd6728c5447edfa4bea11cc358beb6981b3b1a1fae60ac7a3733954f5343cff9bb8b8235c5e2573890a0589aacd476f35b7df1ad35d2c1c8a4351bb38e0e93224a41b373595bbd30c95853df01bfc37876ee002a62b099f333593f76662463253094f70ddbddb72d2dc960db65f4db840be932da666dc67c56ad479a03b53e6bce4a0f5531ed328c4c8f5d1c2e7d12721e3c3b4d0b9ffd748155a3b4da16700232d83443a6982712284b93089ceadd00493"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd6, 0x1, "9cc8a197b98300990b08da7baf0631254f673a47ec8e8d5634fbe88adc75e420c11c0ff0006c0cc32565a37468520531d98e1984fd7898260623d4bef2d60de04cca7aa7fd347112d5f6ad19d4e5da36972565122305d41666d6068051e1206d5e5f19cff0647689f7110643711587a15f801d6320c23460dffd046f221d30b3779c797af051a57e0b134dd536d7f79266dfc4d700a723235d018ef292d62ce6f9c4b23288025987d8e9db3100ac013dfa75e26537be2741b397440a16793a03c8c1a414395c5ccd75eea16a66506c613efd"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x240, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xedcb}, @NFTA_SET_ELEM_KEY_END={0x218, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "374aee7f7f85725af4b8cd6d2b0f54e0f9022665c0d367b03ad1bbfa9e30873d3fc28cfe15c9da55fe"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x49, 0x1, "c135fc9f4b186ba7a890c9b9af5a22ca52945cec8004087a41707639b5e5d886d0a5926cd83fd55446d283d91f08223e00ac385d21b4efdac6bb65c9daf696d1efcb82365e"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "61c5d65f0b4693f15a5bfeb5b9dc8b0ba745e6f92b0ab60a44e39ec3163111ccc29c9e19aee1f82c2821195ae189791925bb5f37662a48b27ca433d0e3a43cb24c81f3417f5e3844a698c319b8d746915372604d0f7fb34126ca9d204e6ada568ab9d7bccc1d78c7f9e1bab62476e4fe41e7b39b69a9516dd8d039071e91a2fb1d9f844f6dc6e6"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000000}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "069aa3df9693d9e503fab9ea47ec2b2539fccc193136d5badbf5fe9b79579fe7d7e39b6a72806ad0a31cef49f810f6776240dfdf492beb8fd9c2c9e3dd2ab8285a70d9a130b53ad6953ea5f89ecd143d5a3b0b290b66a82d8be9b40eb306bbf3c9a8ae463c8defbf2cec0c79fd57f15273ef59defdbb075a898849406e3609fdc99e00657e09f69a07362220d7996f1bf5d1bb73b9a91e7450"}, @NFTA_DATA_VALUE={0x1b, 0x1, "5a52339cfa9ff334189993666963470a2286b4e2106f9d"}]}]}]}]}, 0x2d38}, 0x1, 0x0, 0x0, 0x4084}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 344.244408][ T36] audit: type=1400 audit(1750457412.080:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 344.245783][ T281] cgroup: Unknown subsys name 'net' [ 344.267723][ T36] audit: type=1400 audit(1750457412.080:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 344.294730][ T36] audit: type=1400 audit(1750457412.110:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 344.294953][ T281] cgroup: Unknown subsys name 'devices' [ 344.422562][ T281] cgroup: Unknown subsys name 'hugetlb' [ 344.428204][ T281] cgroup: Unknown subsys name 'rlimit' [ 344.523450][ T36] audit: type=1400 audit(1750457412.360:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.546758][ T36] audit: type=1400 audit(1750457412.360:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 344.571674][ T36] audit: type=1400 audit(1750457412.360:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 344.583156][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 344.603629][ T36] audit: type=1400 audit(1750457412.440:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 344.629148][ T36] audit: type=1400 audit(1750457412.440:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 344.659467][ T36] audit: type=1400 audit(1750457412.490:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 344.685085][ T36] audit: type=1400 audit(1750457412.490:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 344.685287][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 345.921642][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.928718][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.935930][ T288] bridge_slave_0: entered allmulticast mode [ 345.942316][ T288] bridge_slave_0: entered promiscuous mode [ 345.948824][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.955923][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.963026][ T288] bridge_slave_1: entered allmulticast mode [ 345.969359][ T288] bridge_slave_1: entered promiscuous mode [ 346.106215][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.113347][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.120736][ T291] bridge_slave_0: entered allmulticast mode [ 346.127017][ T291] bridge_slave_0: entered promiscuous mode [ 346.142236][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.149314][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.156458][ T291] bridge_slave_1: entered allmulticast mode [ 346.162773][ T291] bridge_slave_1: entered promiscuous mode [ 346.175980][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.183076][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.190219][ T292] bridge_slave_0: entered allmulticast mode [ 346.196479][ T292] bridge_slave_0: entered promiscuous mode [ 346.213953][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.221116][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.228207][ T292] bridge_slave_1: entered allmulticast mode [ 346.234660][ T292] bridge_slave_1: entered promiscuous mode [ 346.273391][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.280501][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.287710][ T294] bridge_slave_0: entered allmulticast mode [ 346.294044][ T294] bridge_slave_0: entered promiscuous mode [ 346.300626][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.307683][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.315041][ T294] bridge_slave_1: entered allmulticast mode [ 346.321386][ T294] bridge_slave_1: entered promiscuous mode [ 346.334922][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.342025][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.349499][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.356631][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.469062][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.476171][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.483529][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.490607][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.517154][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.524256][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.531583][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.538635][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.565607][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.573131][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.580893][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.588159][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.595513][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.603210][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.618213][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.625342][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.633903][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.640995][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.677833][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.684942][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.701255][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.708331][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.721296][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.728378][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.737866][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.744961][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.773233][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.780331][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.788122][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.795190][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.831788][ T291] veth0_vlan: entered promiscuous mode [ 346.841178][ T292] veth0_vlan: entered promiscuous mode [ 346.862256][ T288] veth0_vlan: entered promiscuous mode [ 346.875710][ T291] veth1_macvtap: entered promiscuous mode [ 346.882574][ T294] veth0_vlan: entered promiscuous mode [ 346.899370][ T288] veth1_macvtap: entered promiscuous mode [ 346.915749][ T292] veth1_macvtap: entered promiscuous mode [ 346.929229][ T294] veth1_macvtap: entered promiscuous mode [ 346.946474][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 347.040194][ T314] 9pnet_fd: Insufficient options for proto=fd [ 347.071752][ T324] capability: warning: `syz.3.6' uses 32-bit capabilities (legacy support in use) [ 347.084923][ T324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 347.289985][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 347.300309][ T306] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 347.309843][ T62] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 347.349859][ T308] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 347.450024][ T306] usb 2-1: Using ep0 maxpacket: 32 [ 347.450091][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 347.457853][ T306] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.461379][ T45] usb 3-1: too many configurations: 86, using maximum allowed: 8 [ 347.470874][ T306] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.479556][ T45] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 347.488854][ T62] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 347.495627][ T45] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 347.506734][ T62] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.516162][ T45] usb 3-1: config 4 has no interface number 0 [ 347.531019][ T306] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.535849][ T308] usb 4-1: Using ep0 maxpacket: 16 [ 347.545522][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.549484][ T45] usb 3-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.557689][ T62] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 347.570838][ T45] usb 3-1: config 4 interface 15 has no altsetting 0 [ 347.579942][ T306] usb 2-1: Product: syz [ 347.586929][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.590676][ T62] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.600812][ T308] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.01 [ 347.608514][ T306] usb 2-1: Manufacturer: syz [ 347.621403][ T45] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 347.622597][ T306] usb 2-1: SerialNumber: syz [ 347.630642][ T45] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 347.637397][ T62] usb 1-1: config 0 descriptor?? [ 347.645235][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.653555][ T62] hub 1-1:0.0: bad descriptor, ignoring hub [ 347.660225][ T45] usb 3-1: config 4 has no interface number 0 [ 347.664613][ T62] hub 1-1:0.0: probe with driver hub failed with error -5 [ 347.671211][ T308] usb 4-1: config 0 descriptor?? [ 347.680211][ T62] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 347.682622][ T45] usb 3-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.703277][ T45] usb 3-1: config 4 interface 15 has no altsetting 0 [ 347.712068][ T45] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 347.720266][ T45] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 347.730741][ T45] usb 3-1: config 4 has no interface number 0 [ 347.736959][ T45] usb 3-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.750087][ T45] usb 3-1: config 4 interface 15 has no altsetting 0 [ 347.757638][ T45] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 347.765854][ T45] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 347.776734][ T45] usb 3-1: config 4 has no interface number 0 [ 347.782902][ T45] usb 3-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.795905][ T45] usb 3-1: config 4 interface 15 has no altsetting 0 [ 347.803536][ T45] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 347.811729][ T45] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 347.822125][ T45] usb 3-1: config 4 has no interface number 0 [ 347.828233][ T45] usb 3-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.841251][ T45] usb 3-1: config 4 interface 15 has no altsetting 0 [ 347.848690][ T45] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 347.857388][ T45] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 347.860635][ T306] usb 2-1: 0:2 : does not exist [ 347.867540][ T45] usb 3-1: config 4 has no interface number 0 [ 347.878766][ T45] usb 3-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.892119][ T45] usb 3-1: config 4 interface 15 has no altsetting 0 [ 347.895804][ T306] usb 2-1: USB disconnect, device number 2 [ 347.917133][ T45] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 347.934454][ T45] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 347.944663][ T45] usb 3-1: config 4 has no interface number 0 [ 347.950837][ T45] usb 3-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.964854][ T45] usb 3-1: config 4 interface 15 has no altsetting 0 [ 347.972293][ T45] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 347.980464][ T45] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 347.990776][ T45] usb 3-1: config 4 has no interface number 0 [ 347.996903][ T45] usb 3-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 348.010696][ T45] usb 3-1: config 4 interface 15 has no altsetting 0 [ 348.018882][ T45] usb 3-1: New USB device found, idVendor=0930, idProduct=06b1, bcdDevice=9c.6a [ 348.028347][ T45] usb 3-1: New USB device strings: Mfr=119, Product=183, SerialNumber=33 [ 348.036866][ T45] usb 3-1: Product: syz [ 348.041302][ T45] usb 3-1: Manufacturer: syz [ 348.045907][ T45] usb 3-1: SerialNumber: syz [ 348.049940][ T62] usb 1-1: USB disconnect, device number 2 [ 348.262057][ T45] usb 3-1: USB disconnect, device number 2 [ 348.319665][ T308] usbhid 4-1:0.0: can't add hid device: -71 [ 348.325816][ T308] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 348.341501][ T308] usb 4-1: USB disconnect, device number 2 [ 348.475405][ T331] binfmt_misc: register: failed to install interpreter file ./file0 [ 348.488933][ T331] rust_binder: Error while translating object. [ 348.489006][ T331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 348.495679][ T331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:4 [ 348.555019][ T340] ======================================================= [ 348.555019][ T340] WARNING: The mand mount option has been deprecated and [ 348.555019][ T340] and is ignored by this kernel. Remove the mand [ 348.555019][ T340] option from the mount to silence this warning. [ 348.555019][ T340] ======================================================= [ 348.603647][ T340] Zero length message leads to an empty skb [ 348.803882][ T355] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 348.918295][ T365] rust_binder: Write failure EINVAL in pid:6 [ 349.149557][ T375] rust_binder: Write failure EFAULT in pid:11 [ 349.454230][ T378] capability: warning: `syz.0.22' uses deprecated v2 capabilities in a way that may be insecure [ 349.680601][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 349.680619][ T36] audit: type=1326 audit(1750457417.520:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=359 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9ff8e929 code=0x7fc00000 [ 349.720013][ T382] FAULT_INJECTION: forcing a failure. [ 349.720013][ T382] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 349.733224][ T382] CPU: 1 UID: 0 PID: 382 Comm: syz.2.24 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 349.733263][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.733278][ T382] Call Trace: [ 349.733285][ T382] [ 349.733293][ T382] __dump_stack+0x21/0x30 [ 349.733331][ T382] dump_stack_lvl+0x10c/0x190 [ 349.733353][ T382] ? __cfi_dump_stack_lvl+0x10/0x10 [ 349.733378][ T382] dump_stack+0x19/0x20 [ 349.733398][ T382] should_fail_ex+0x3d9/0x530 [ 349.733415][ T382] should_fail+0xf/0x20 [ 349.733430][ T382] should_fail_usercopy+0x1e/0x30 [ 349.733447][ T382] _copy_from_user+0x22/0xb0 [ 349.733467][ T382] do_fcntl+0x84f/0x1500 [ 349.733487][ T382] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 349.733509][ T382] ? check_fcntl_cmd+0xb0/0xb0 [ 349.733528][ T382] ? __cfi_mutex_unlock+0x10/0x10 [ 349.733542][ T382] ? __fget_files+0x2c5/0x340 [ 349.733564][ T382] ? bpf_lsm_file_fcntl+0xd/0x20 [ 349.733580][ T382] ? security_file_fcntl+0x34/0xd0 [ 349.733601][ T382] __se_sys_fcntl+0xe4/0x180 [ 349.733619][ T382] __x64_sys_fcntl+0x7f/0xa0 [ 349.733638][ T382] x64_sys_call+0x1cb3/0x2ee0 [ 349.733657][ T382] do_syscall_64+0x58/0xf0 [ 349.733677][ T382] ? clear_bhb_loop+0x35/0x90 [ 349.733699][ T382] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 349.733721][ T382] RIP: 0033:0x7f9e9ff8e929 [ 349.733738][ T382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.733750][ T382] RSP: 002b:00007f9ea0e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 349.733769][ T382] RAX: ffffffffffffffda RBX: 00007f9ea01b5fa0 RCX: 00007f9e9ff8e929 [ 349.733781][ T382] RDX: 0000200000001340 RSI: 0000000000000007 RDI: 0000000000000003 [ 349.733790][ T382] RBP: 00007f9ea0e14090 R08: 0000000000000000 R09: 0000000000000000 [ 349.733799][ T382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.733808][ T382] R13: 0000000000000000 R14: 00007f9ea01b5fa0 R15: 00007ffc01370528 [ 349.733821][ T382] [ 349.944791][ T36] audit: type=1400 audit(1750457417.580:148): avc: denied { read } for pid=383 comm="syz.2.25" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 349.968137][ T36] audit: type=1400 audit(1750457417.580:149): avc: denied { open } for pid=383 comm="syz.2.25" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 349.991526][ T36] audit: type=1400 audit(1750457417.580:150): avc: denied { setopt } for pid=383 comm="syz.2.25" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.011686][ T36] audit: type=1400 audit(1750457417.590:151): avc: denied { map } for pid=383 comm="syz.2.25" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 350.072099][ T36] audit: type=1400 audit(1750457417.910:152): avc: denied { name_bind } for pid=387 comm="syz.2.27" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 350.130253][ T36] audit: type=1400 audit(1750457417.970:153): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 350.218942][ T36] audit: type=1400 audit(1750457418.050:154): avc: denied { read write } for pid=401 comm="syz.3.34" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 350.242871][ T36] audit: type=1400 audit(1750457418.050:155): avc: denied { open } for pid=401 comm="syz.3.34" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 350.267263][ T36] audit: type=1400 audit(1750457418.050:156): avc: denied { ioctl } for pid=401 comm="syz.3.34" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 350.298656][ T404] rust_binder: inc_ref_done called when no active inc_refs [ 350.409835][ T45] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 350.529831][ T308] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 350.571035][ T45] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 350.581494][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.594605][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 350.602347][ T407] block device autoloading is deprecated and will be removed. [ 350.603699][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.620094][ T407] syz.0.36: attempt to access beyond end of device [ 350.620094][ T407] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 350.633413][ T45] usb 3-1: config 0 descriptor?? [ 350.639425][ T45] hub 3-1:0.0: bad descriptor, ignoring hub [ 350.645430][ T45] hub 3-1:0.0: probe with driver hub failed with error -5 [ 350.653270][ T45] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 350.689914][ T308] usb 4-1: Using ep0 maxpacket: 32 [ 350.697136][ T308] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.709113][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 350.720979][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 350.733391][ T308] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 350.743093][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.744015][ T410] SELinux: security_context_str_to_sid (syste) failed with errno=-22 [ 350.759996][ T308] usb 4-1: config 0 descriptor?? [ 350.765591][ T404] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 350.779228][ T308] hub 4-1:0.0: USB hub found [ 350.795921][ T412] block device autoloading is deprecated and will be removed. [ 350.804589][ T412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 350.805459][ T412] rust_binder: Read failure Err(EFAULT) in pid:26 [ 350.959968][ T62] usb 3-1: USB disconnect, device number 3 [ 350.975114][ T308] hub 4-1:0.0: 2 ports detected [ 351.089839][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 351.239792][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 351.246134][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.257133][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.266946][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.276077][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.284840][ T45] usb 1-1: config 0 descriptor?? [ 351.290988][ T45] hub 1-1:0.0: USB hub found [ 351.381129][ T308] hub 4-1:0.0: set hub depth failed [ 351.402698][ T308] usb 4-1: USB disconnect, device number 3 [ 351.490851][ T45] hub 1-1:0.0: 1 port detected [ 351.694187][ T45] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 351.703866][ T45] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 351.710466][ T306] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 351.714753][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 351.725265][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 351.756463][ T429] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 351.760521][ T45] usb 1-1: USB disconnect, device number 3 [ 351.766823][ T429] SELinux: failed to load policy [ 351.869869][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 351.876091][ T306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.887034][ T306] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 351.896121][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.904961][ T306] usb 3-1: config 0 descriptor?? [ 352.206943][ T452] rust_binder: Write failure EFAULT in pid:45 [ 352.268330][ T458] rust_binder: Write failure EINVAL in pid:34 [ 352.314849][ T306] kye 0003:0458:5016.0001: control desc unexpectedly large [ 352.329650][ T306] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0001/input/input4 [ 352.344615][ T306] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0001/input/input5 [ 352.358275][ T306] kye 0003:0458:5016.0001: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 352.469554][ T467] overlay: Unknown parameter 'subj_user' [ 352.479902][ T308] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 352.542779][ T470] FAULT_INJECTION: forcing a failure. [ 352.542779][ T470] name failslab, interval 1, probability 0, space 0, times 1 [ 352.555557][ T470] CPU: 0 UID: 0 PID: 470 Comm: syz.0.62 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 352.555587][ T470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 352.555603][ T470] Call Trace: [ 352.555609][ T470] [ 352.555617][ T470] __dump_stack+0x21/0x30 [ 352.555642][ T470] dump_stack_lvl+0x10c/0x190 [ 352.555664][ T470] ? __cfi_dump_stack_lvl+0x10/0x10 [ 352.555685][ T470] ? release_sock+0x171/0x1f0 [ 352.555708][ T470] dump_stack+0x19/0x20 [ 352.555727][ T470] should_fail_ex+0x3d9/0x530 [ 352.555747][ T470] should_failslab+0xac/0x100 [ 352.555772][ T470] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 352.555792][ T470] ? __alloc_skb+0x10c/0x370 [ 352.555820][ T470] __alloc_skb+0x10c/0x370 [ 352.555843][ T470] netlink_alloc_large_skb+0xf7/0x1b0 [ 352.555867][ T470] netlink_sendmsg+0x586/0xaf0 [ 352.555894][ T470] ? __cfi_netlink_sendmsg+0x10/0x10 [ 352.555920][ T470] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 352.555947][ T470] ? security_socket_sendmsg+0x33/0xd0 [ 352.555968][ T470] ? __cfi_netlink_sendmsg+0x10/0x10 [ 352.555994][ T470] ____sys_sendmsg+0xa15/0xa70 [ 352.556022][ T470] ? __sys_sendmsg_sock+0x50/0x50 [ 352.556049][ T470] ? import_iovec+0x81/0xb0 [ 352.556077][ T470] ___sys_sendmsg+0x220/0x2a0 [ 352.556104][ T470] ? __sys_sendmsg+0x280/0x280 [ 352.556131][ T470] ? proc_fail_nth_write+0x17e/0x210 [ 352.556148][ T470] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 352.556170][ T470] __x64_sys_sendmsg+0x1eb/0x2c0 [ 352.556186][ T470] ? fput+0x1a5/0x240 [ 352.556212][ T470] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 352.556228][ T470] ? ksys_write+0x1ef/0x250 [ 352.556250][ T470] ? __kasan_check_read+0x15/0x20 [ 352.556270][ T470] x64_sys_call+0x2a4c/0x2ee0 [ 352.556293][ T470] do_syscall_64+0x58/0xf0 [ 352.556316][ T470] ? clear_bhb_loop+0x35/0x90 [ 352.556357][ T470] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 352.556382][ T470] RIP: 0033:0x7f2450b8e929 [ 352.556397][ T470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.556411][ T470] RSP: 002b:00007f2451980038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.556431][ T470] RAX: ffffffffffffffda RBX: 00007f2450db5fa0 RCX: 00007f2450b8e929 [ 352.556444][ T470] RDX: 0000000000040840 RSI: 00002000000001c0 RDI: 0000000000000003 [ 352.556456][ T470] RBP: 00007f2451980090 R08: 0000000000000000 R09: 0000000000000000 [ 352.556467][ T470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.556478][ T470] R13: 0000000000000000 R14: 00007f2450db5fa0 R15: 00007ffc2a0cfe88 [ 352.556492][ T470] [ 352.739841][ T308] usb 4-1: Invalid ep0 maxpacket: 64 [ 352.828637][ T306] usb 3-1: USB disconnect, device number 4 [ 352.913003][ T474] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 352.949881][ T308] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 353.025648][ T486] overlayfs: failed to resolve './file1/file0': -2 [ 353.032943][ T486] overlayfs: missing 'lowerdir' [ 353.119824][ T308] usb 4-1: Invalid ep0 maxpacket: 64 [ 353.126897][ T308] usb usb4-port1: attempt power cycle [ 353.169829][ T417] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 353.319827][ T417] usb 2-1: Using ep0 maxpacket: 16 [ 353.326137][ T417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.337131][ T417] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 353.346270][ T417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.358107][ T417] usb 2-1: config 0 descriptor?? [ 353.358147][ T507] binfmt_misc: register: failed to install interpreter file ./cgroup [ 353.374260][ T507] SELinux: Context system_u: is not valid (left unmapped). [ 353.387966][ T507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:42 [ 353.429878][ T306] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 353.469860][ T308] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 353.501084][ T308] usb 4-1: Invalid ep0 maxpacket: 64 [ 353.541006][ T519] FAULT_INJECTION: forcing a failure. [ 353.541006][ T519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.554123][ T519] CPU: 1 UID: 0 PID: 519 Comm: syz.2.86 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 353.554157][ T519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.554171][ T519] Call Trace: [ 353.554178][ T519] [ 353.554187][ T519] __dump_stack+0x21/0x30 [ 353.554216][ T519] dump_stack_lvl+0x10c/0x190 [ 353.554237][ T519] ? __cfi_dump_stack_lvl+0x10/0x10 [ 353.554255][ T519] ? unwind_get_return_address+0x51/0x90 [ 353.554269][ T519] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 353.554292][ T519] dump_stack+0x19/0x20 [ 353.554316][ T519] should_fail_ex+0x3d9/0x530 [ 353.554338][ T519] should_fail+0xf/0x20 [ 353.554358][ T519] should_fail_usercopy+0x1e/0x30 [ 353.554380][ T519] _copy_from_user+0x22/0xb0 [ 353.554400][ T519] ___sys_recvmsg+0x12f/0x510 [ 353.554415][ T519] ? __sys_recvmsg+0x280/0x280 [ 353.554429][ T519] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 353.554453][ T519] ? selinux_file_permission+0x309/0xb30 [ 353.554484][ T519] ? __fget_files+0x2c5/0x340 [ 353.554514][ T519] do_recvmmsg+0x326/0x770 [ 353.554530][ T519] ? __sys_recvmmsg+0x290/0x290 [ 353.554543][ T519] ? __cfi_vfs_write+0x10/0x10 [ 353.554563][ T519] ? fput+0x1a5/0x240 [ 353.554591][ T519] __x64_sys_recvmmsg+0x191/0x240 [ 353.554612][ T519] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 353.554632][ T519] ? __kasan_check_read+0x15/0x20 [ 353.554655][ T519] x64_sys_call+0x292c/0x2ee0 [ 353.554678][ T519] do_syscall_64+0x58/0xf0 [ 353.554697][ T519] ? clear_bhb_loop+0x35/0x90 [ 353.554720][ T519] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 353.554753][ T519] RIP: 0033:0x7f9e9ff8e929 [ 353.554770][ T519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.554792][ T519] RSP: 002b:00007f9ea0e14038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 353.554821][ T519] RAX: ffffffffffffffda RBX: 00007f9ea01b5fa0 RCX: 00007f9e9ff8e929 [ 353.554832][ T519] RDX: 0000000000000003 RSI: 0000200000009800 RDI: 0000000000000003 [ 353.554842][ T519] RBP: 00007f9ea0e14090 R08: 0000000000000000 R09: 0000000000000000 [ 353.554851][ T519] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001 [ 353.554861][ T519] R13: 0000000000000000 R14: 00007f9ea01b5fa0 R15: 00007ffc01370528 [ 353.554877][ T519] [ 353.689849][ T306] usb 1-1: Using ep0 maxpacket: 8 [ 353.759820][ T308] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 353.767359][ T417] hid-generic 0003:04D8:00DD.0002: unknown main item tag 0x7 [ 353.800237][ T308] usb 4-1: Invalid ep0 maxpacket: 64 [ 353.805145][ T417] hid-generic 0003:04D8:00DD.0002: item fetching failed at offset 4/5 [ 353.812421][ T308] usb usb4-port1: unable to enumerate USB device [ 353.818809][ T306] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 353.841353][ T417] hid-generic 0003:04D8:00DD.0002: probe with driver hid-generic failed with error -22 [ 353.851055][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.865605][ T306] usb 1-1: config 0 descriptor?? [ 353.959798][ T534] FAULT_INJECTION: forcing a failure. [ 353.959798][ T534] name failslab, interval 1, probability 0, space 0, times 0 [ 353.970929][ T417] usb 2-1: USB disconnect, device number 3 [ 353.972582][ T534] CPU: 1 UID: 0 PID: 534 Comm: syz.2.93 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 353.972616][ T534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 353.972632][ T534] Call Trace: [ 353.972640][ T534] [ 353.972649][ T534] __dump_stack+0x21/0x30 [ 353.972683][ T534] dump_stack_lvl+0x10c/0x190 [ 353.972710][ T534] ? __cfi_dump_stack_lvl+0x10/0x10 [ 353.972750][ T534] dump_stack+0x19/0x20 [ 353.972775][ T534] should_fail_ex+0x3d9/0x530 [ 353.972802][ T534] should_failslab+0xac/0x100 [ 353.972836][ T534] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 353.972865][ T534] ? vfs_parse_fs_string+0xcc/0x170 [ 353.972900][ T534] kmemdup_nul+0x5a/0x1a0 [ 353.972925][ T534] vfs_parse_fs_string+0xcc/0x170 [ 353.972958][ T534] ? __kasan_kmalloc+0x96/0xb0 [ 353.972987][ T534] ? __cfi_vfs_parse_fs_string+0x10/0x10 [ 353.973022][ T534] ? shmem_init_fs_context+0x77/0x2c0 [ 353.973055][ T534] ? bpf_lsm_sb_eat_lsm_opts+0xd/0x20 [ 353.973089][ T534] shmem_parse_options+0x15c/0x220 [ 353.973122][ T534] parse_monolithic_mount_data+0x7f/0x90 [ 353.973159][ T534] do_new_mount+0x222/0xb40 [ 353.973188][ T534] path_mount+0x688/0x1050 [ 353.973213][ T534] ? putname+0x113/0x150 [ 353.973242][ T534] __se_sys_mount+0x2bd/0x480 [ 353.973270][ T534] ? ksys_write+0x1ef/0x250 [ 353.973298][ T534] ? __x64_sys_mount+0xf0/0xf0 [ 353.973327][ T534] __x64_sys_mount+0xc3/0xf0 [ 353.973355][ T534] x64_sys_call+0x2021/0x2ee0 [ 353.973386][ T534] do_syscall_64+0x58/0xf0 [ 353.973416][ T534] ? clear_bhb_loop+0x35/0x90 [ 353.973450][ T534] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 353.973484][ T534] RIP: 0033:0x7f9e9ff8e929 [ 353.973503][ T534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.973522][ T534] RSP: 002b:00007f9ea0e14038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 353.973548][ T534] RAX: ffffffffffffffda RBX: 00007f9ea01b5fa0 RCX: 00007f9e9ff8e929 [ 353.973566][ T534] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 353.973581][ T534] RBP: 00007f9ea0e14090 R08: 00002000000000c0 R09: 0000000000000000 [ 353.973597][ T534] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 353.973611][ T534] R13: 0000000000000000 R14: 00007f9ea01b5fa0 R15: 00007ffc01370528 [ 353.973631][ T534] [ 354.239904][ T308] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 354.399861][ T308] usb 3-1: Using ep0 maxpacket: 8 [ 354.406093][ T308] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 354.415227][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.424091][ T308] usb 3-1: config 0 descriptor?? [ 354.565260][ T540] netlink: 188 bytes leftover after parsing attributes in process `syz.1.96'. [ 354.695639][ T549] rust_binder: Error while translating object. [ 354.695664][ T549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 354.701937][ T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:35 [ 354.727081][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 354.727100][ T36] audit: type=1400 audit(1750457422.560:211): avc: denied { create } for pid=550 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 354.761423][ T36] audit: type=1400 audit(1750457422.560:212): avc: denied { bind } for pid=550 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 354.780429][ T36] audit: type=1400 audit(1750457422.560:213): avc: denied { read } for pid=550 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 355.263107][ T36] audit: type=1400 audit(1750457423.100:214): avc: denied { getopt } for pid=554 comm="syz.3.103" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.286256][ T36] audit: type=1400 audit(1750457423.120:215): avc: denied { ioctl } for pid=554 comm="syz.3.103" path="socket:[5105]" dev="sockfs" ino=5105 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 355.573361][ T36] audit: type=1400 audit(1750457423.410:216): avc: denied { write } for pid=562 comm="syz.1.106" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 355.575301][ T563] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 355.596600][ T36] audit: type=1400 audit(1750457423.410:217): avc: denied { ioctl } for pid=562 comm="syz.1.106" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 355.733183][ T36] audit: type=1400 audit(1750457423.570:218): avc: denied { nlmsg_write } for pid=571 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 355.830495][ T576] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 355.830529][ T576] rust_binder: Error while translating object. [ 355.841562][ T576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 355.847848][ T576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 355.858381][ T576] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 355.983877][ T36] audit: type=1400 audit(1750457423.820:219): avc: denied { read } for pid=583 comm="syz.1.114" path="socket:[6241]" dev="sockfs" ino=6241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 356.034822][ T36] audit: type=1400 audit(1750457423.870:220): avc: denied { getopt } for pid=583 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.042658][ T585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 356.235490][ T536] can: request_module (can-proto-0) failed. [ 356.242557][ T308] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 356.253257][ T308] asix 3-1:0.0: probe with driver asix failed with error -71 [ 356.262163][ T308] usb 3-1: USB disconnect, device number 5 [ 356.321557][ T306] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 356.332604][ T306] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 356.343683][ T306] asix 1-1:0.0: probe with driver asix failed with error -71 [ 356.351356][ T594] rust_binder: Error while translating object. [ 356.351401][ T594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 356.353663][ T306] usb 1-1: USB disconnect, device number 4 [ 356.361930][ T594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:66 [ 356.823672][ T635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 356.824430][ T635] rust_binder: Error while translating object. [ 356.834077][ T635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 356.840515][ T635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 356.991941][ T663] netlink: 104 bytes leftover after parsing attributes in process `syz.1.148'. [ 357.048289][ T670] binder: Bad value for 'stats' [ 357.101679][ T308] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 357.107405][ T677] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.118007][ T677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 357.125105][ T308] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 357.144564][ T677] rust_binder: Error while translating object. [ 357.144646][ T677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 357.169805][ T677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 357.253492][ T682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 357.371941][ T651] rust_binder: Error while translating object. [ 357.371974][ T651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 357.384178][ T651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:80 [ 357.591566][ T714] SELinux: Context o}xd is not valid (left unmapped). [ 357.609676][ T717] FAULT_INJECTION: forcing a failure. [ 357.609676][ T717] name failslab, interval 1, probability 0, space 0, times 0 [ 357.622437][ T717] CPU: 1 UID: 0 PID: 717 Comm: syz.0.171 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 357.622469][ T717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.622482][ T717] Call Trace: [ 357.622489][ T717] [ 357.622496][ T717] __dump_stack+0x21/0x30 [ 357.622524][ T717] dump_stack_lvl+0x10c/0x190 [ 357.622548][ T717] ? __cfi_dump_stack_lvl+0x10/0x10 [ 357.622571][ T717] ? do_vfs_ioctl+0xeda/0x1e30 [ 357.622599][ T717] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 357.622627][ T717] dump_stack+0x19/0x20 [ 357.622649][ T717] should_fail_ex+0x3d9/0x530 [ 357.622671][ T717] should_failslab+0xac/0x100 [ 357.622700][ T717] __kmalloc_cache_noprof+0x41/0x3c0 [ 357.622724][ T717] ? dev_ethtool+0x125/0x1850 [ 357.622751][ T717] ? __kasan_check_write+0x18/0x20 [ 357.622772][ T717] dev_ethtool+0x125/0x1850 [ 357.622800][ T717] ? __cfi_dev_ethtool+0x10/0x10 [ 357.622829][ T717] ? ioctl_has_perm+0x384/0x4d0 [ 357.622859][ T717] ? has_cap_mac_admin+0xd0/0xd0 [ 357.622886][ T717] ? full_name_hash+0xa1/0xf0 [ 357.622913][ T717] ? dev_get_by_name_rcu+0xe9/0x140 [ 357.622943][ T717] dev_ioctl+0x4e0/0x1030 [ 357.622969][ T717] sock_do_ioctl+0x244/0x330 [ 357.623002][ T717] ? sock_show_fdinfo+0xd0/0xd0 [ 357.623024][ T717] ? __cfi_vfs_write+0x10/0x10 [ 357.623047][ T717] ? __kasan_check_write+0x18/0x20 [ 357.623070][ T717] ? mutex_unlock+0x8b/0x240 [ 357.623091][ T717] sock_ioctl+0x634/0x7b0 [ 357.623113][ T717] ? __cfi_sock_ioctl+0x10/0x10 [ 357.623134][ T717] ? __fget_files+0x2c5/0x340 [ 357.623163][ T717] ? bpf_lsm_file_ioctl+0xd/0x20 [ 357.623185][ T717] ? security_file_ioctl+0x34/0xd0 [ 357.623214][ T717] ? __cfi_sock_ioctl+0x10/0x10 [ 357.623236][ T717] __se_sys_ioctl+0x132/0x1b0 [ 357.623264][ T717] __x64_sys_ioctl+0x7f/0xa0 [ 357.623292][ T717] x64_sys_call+0x1878/0x2ee0 [ 357.623320][ T717] do_syscall_64+0x58/0xf0 [ 357.623346][ T717] ? clear_bhb_loop+0x35/0x90 [ 357.623375][ T717] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 357.623403][ T717] RIP: 0033:0x7f2450b8e929 [ 357.623429][ T717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.623446][ T717] RSP: 002b:00007f2451980038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.623467][ T717] RAX: ffffffffffffffda RBX: 00007f2450db5fa0 RCX: 00007f2450b8e929 [ 357.623482][ T717] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 357.623495][ T717] RBP: 00007f2451980090 R08: 0000000000000000 R09: 0000000000000000 [ 357.623509][ T717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.623520][ T717] R13: 0000000000000000 R14: 00007f2450db5fa0 R15: 00007ffc2a0cfe88 [ 357.623536][ T717] [ 357.902708][ T321] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 357.943869][ T726] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 357.951600][ T726] SELinux: failed to load policy [ 357.959120][ T726] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 357.959144][ T726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:97 [ 357.968654][ T726] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 357.978404][ T726] rust_binder: Read failure Err(EFAULT) in pid:97 [ 358.069870][ T321] usb 3-1: Using ep0 maxpacket: 32 [ 358.082884][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.094529][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.107730][ T321] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 358.117749][ T321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.127416][ T321] usb 3-1: config 0 descriptor?? [ 358.135510][ T321] hub 3-1:0.0: USB hub found [ 358.159840][ T306] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 358.168910][ T737] FAULT_INJECTION: forcing a failure. [ 358.168910][ T737] name failslab, interval 1, probability 0, space 0, times 0 [ 358.181698][ T737] CPU: 0 UID: 0 PID: 737 Comm: syz.3.179 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 358.181734][ T737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 358.181747][ T737] Call Trace: [ 358.181754][ T737] [ 358.181762][ T737] __dump_stack+0x21/0x30 [ 358.181791][ T737] dump_stack_lvl+0x10c/0x190 [ 358.181815][ T737] ? __cfi_dump_stack_lvl+0x10/0x10 [ 358.181842][ T737] dump_stack+0x19/0x20 [ 358.181865][ T737] should_fail_ex+0x3d9/0x530 [ 358.181888][ T737] should_failslab+0xac/0x100 [ 358.181918][ T737] __kmalloc_cache_noprof+0x41/0x3c0 [ 358.181943][ T737] ? __se_sys_mount+0x15f/0x480 [ 358.181970][ T737] __se_sys_mount+0x15f/0x480 [ 358.181994][ T737] ? ksys_write+0x1ef/0x250 [ 358.182020][ T737] ? __x64_sys_mount+0xf0/0xf0 [ 358.182046][ T737] __x64_sys_mount+0xc3/0xf0 [ 358.182071][ T737] x64_sys_call+0x2021/0x2ee0 [ 358.182098][ T737] do_syscall_64+0x58/0xf0 [ 358.182125][ T737] ? clear_bhb_loop+0x35/0x90 [ 358.182158][ T737] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 358.182189][ T737] RIP: 0033:0x7fed28f8e929 [ 358.182205][ T737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.182223][ T737] RSP: 002b:00007fed29e9b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.182245][ T737] RAX: ffffffffffffffda RBX: 00007fed291b5fa0 RCX: 00007fed28f8e929 [ 358.182261][ T737] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 358.182275][ T737] RBP: 00007fed29e9b090 R08: 0000200000000000 R09: 0000000000000000 [ 358.182289][ T737] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 358.182302][ T737] R13: 0000000000000000 R14: 00007fed291b5fa0 R15: 00007ffef5593e28 [ 358.182329][ T737] [ 358.217112][ T741] rust_binder: Error while translating object. [ 358.289805][ T417] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 358.290319][ T741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 358.329798][ T306] usb 2-1: Using ep0 maxpacket: 8 [ 358.336636][ T741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 358.355952][ T306] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 358.419785][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.445209][ T306] usb 2-1: config 0 descriptor?? [ 358.458074][ T321] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 358.473484][ T751] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.501076][ T417] usb 1-1: unable to get BOS descriptor or descriptor too short [ 358.515639][ T417] usb 1-1: not running at top speed; connect to a high speed hub [ 358.524097][ T417] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.534243][ T417] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 358.543170][ T417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.554155][ T417] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 358.566521][ T417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.575703][ T417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.584062][ T417] usb 1-1: Product: syz [ 358.588243][ T417] usb 1-1: Manufacturer: syz [ 358.592909][ T417] usb 1-1: SerialNumber: syz [ 358.598476][ T730] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 358.660756][ T321] usbhid 3-1:0.0: can't add hid device: -71 [ 358.666815][ T321] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 358.690125][ T321] usb 3-1: USB disconnect, device number 6 [ 358.709802][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 358.860247][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 358.867801][ T10] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 358.876322][ T10] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 358.884902][ T10] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 358.894137][ T10] usb 4-1: config 250 has no interface number 0 [ 358.900578][ T10] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 358.912458][ T10] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 358.923165][ T10] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 358.933653][ T10] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 358.944175][ T10] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 358.957864][ T10] usb 4-1: config 250 interface 228 has no altsetting 0 [ 358.966212][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 358.975545][ T10] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 358.983943][ T10] usb 4-1: Product: syz [ 358.988316][ T10] usb 4-1: SerialNumber: syz [ 358.995954][ T10] hub 4-1:250.228: bad descriptor, ignoring hub [ 359.003243][ T10] hub 4-1:250.228: probe with driver hub failed with error -5 [ 359.200635][ T10] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 359.260282][ T10] usb 4-1: USB disconnect, device number 8 [ 359.275301][ T10] usblp0: removed [ 359.275856][ T758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 359.430113][ T750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.443603][ T750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.639809][ T62] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 359.749823][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 359.819826][ T62] usb 3-1: Using ep0 maxpacket: 16 [ 359.826519][ T62] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 359.835655][ T62] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.846057][ T62] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.856684][ T62] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.866199][ T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.874643][ T62] usb 3-1: Product: syz [ 359.878981][ T62] usb 3-1: Manufacturer: syz [ 359.884120][ T62] usb 3-1: SerialNumber: syz [ 359.900392][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 359.906758][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.917740][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 359.927586][ T10] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 359.935998][ T10] usb 4-1: Product: syz [ 359.940493][ T10] usb 4-1: Manufacturer: syz [ 359.945178][ T10] usb 4-1: SerialNumber: syz [ 359.952038][ T10] usb 4-1: config 0 descriptor?? [ 360.084934][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 360.084953][ T36] audit: type=1400 audit(1750457428.924:264): avc: denied { mount } for pid=723 comm="syz.1.174" name="/" dev="ramfs" ino=7365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 360.113303][ T36] audit: type=1400 audit(1750457428.924:265): avc: denied { read } for pid=723 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 360.333129][ T62] usb 3-1: 0:2 : does not exist [ 360.508224][ T751] rust_binder: Got transaction with invalid offset. [ 360.508275][ T751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 360.515295][ T751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 360.546873][ T760] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 360.752726][ T306] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 360.763350][ T306] asix 2-1:0.0: probe with driver asix failed with error -71 [ 360.784393][ T306] usb 2-1: USB disconnect, device number 4 [ 360.834487][ T760] rust_binder: Write failure EFAULT in pid:99 [ 360.894692][ T62] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 360.915877][ T62] usb 3-1: USB disconnect, device number 7 [ 361.012256][ T417] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 361.019278][ T417] cdc_ncm 1-1:1.0: bind() failure [ 361.025879][ T417] usb 1-1: USB disconnect, device number 5 [ 361.090391][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 361.091714][ T36] audit: type=1326 audit(1750457429.934:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=765 comm="syz.0.188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2450b8e929 code=0x0 [ 361.181989][ T36] audit: type=1400 audit(1750457430.024:267): avc: denied { remount } for pid=765 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 361.263220][ T36] audit: type=1400 audit(1750457430.104:268): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 361.291795][ T769] rust_binder: Write failure EINVAL in pid:88 [ 361.292243][ T36] audit: type=1400 audit(1750457430.134:269): avc: denied { bind } for pid=768 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 361.317863][ T36] audit: type=1400 audit(1750457430.134:270): avc: denied { node_bind } for pid=768 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 361.452443][ T36] audit: type=1400 audit(1750457430.294:271): avc: denied { connect } for pid=773 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 361.537423][ T62] usb 4-1: USB disconnect, device number 9 [ 361.566491][ T779] rust_binder: Read failure Err(EAGAIN) in pid:157 [ 361.624637][ T780] rust_binder: Read failure Err(EAGAIN) in pid:157 [ 362.109834][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 362.280907][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.299791][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.309594][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.339548][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.360976][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.377157][ T45] usb 2-1: config 0 descriptor?? [ 362.425125][ T36] audit: type=1400 audit(1750457431.264:272): avc: denied { read write } for pid=810 comm="syz.2.205" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 362.427010][ T817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:160 [ 362.455003][ T36] audit: type=1400 audit(1750457431.264:273): avc: denied { open } for pid=810 comm="syz.2.205" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 362.460538][ T817] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 362.460538][ T817] null pointer dereference occurred [ 362.501869][ T817] ------------[ cut here ]------------ [ 362.507398][ T817] kernel BUG at rust/helpers/bug.c:7! [ 362.513443][ T817] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 362.520417][ T817] CPU: 0 UID: 0 PID: 817 Comm: syz.3.207 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 362.533719][ T817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.543805][ T817] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 362.549146][ T817] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 18 af bc 77 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 52 6b f5 fb 90 90 90 90 90 90 90 90 90 [ 362.568781][ T817] RSP: 0018:ffffc9000eb7f1d0 EFLAGS: 00010246 [ 362.574866][ T817] RAX: 000000000000005a RBX: 1ffff92001d6fe3c RCX: c81732c2570ccc00 [ 362.582869][ T817] RDX: ffffc90001eb3000 RSI: 0000000000013210 RDI: 0000000000013211 [ 362.590872][ T817] RBP: ffffc9000eb7f1d0 R08: ffffc9000eb7eec7 R09: 1ffff92001d6fdd8 [ 362.598874][ T817] R10: dffffc0000000000 R11: fffff52001d6fdd9 R12: 0000000000000000 [ 362.606866][ T817] R13: dffffc0000000000 R14: ffffc9000eb7f200 R15: ffffc9000eb7f230 [ 362.614865][ T817] FS: 00007fed29e9b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 362.623807][ T817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.629843][ T308] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 362.630406][ T817] CR2: 0000000000000000 CR3: 00000001077a8000 CR4: 00000000003526b0 [ 362.630428][ T817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.654071][ T817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.662077][ T817] Call Trace: [ 362.665371][ T817] [ 362.668313][ T817] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 362.675816][ T817] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 362.683831][ T817] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 362.697406][ T817] ? p9pdu_vwritef+0x2720/0x2720 [ 362.702384][ T817] ? radix_tree_node_alloc+0x1af/0x400 [ 362.707891][ T817] ? __cfi_p9pdu_vwritef+0x10/0x10 [ 362.713029][ T817] ? p9pdu_vwritef+0x1c5e/0x2720 [ 362.718002][ T817] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 362.726091][ T817] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 362.734890][ T817] ? p9pdu_writef+0xdb/0x130 [ 362.739505][ T817] ? p9pdu_vwritef+0x2720/0x2720 [ 362.744468][ T817] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 362.753617][ T817] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 362.762504][ T817] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 362.770342][ T817] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 362.778033][ T817] ? p9_client_prepare_req+0x732/0xa10 [ 362.781015][ T308] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.783535][ T817] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 362.796333][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.802669][ T817] ? __kasan_check_write+0x18/0x20 [ 362.802706][ T817] ? _raw_spin_lock+0x8c/0x120 [ 362.802732][ T817] ? __cfi__raw_spin_lock+0x10/0x10 [ 362.802760][ T817] ? __kasan_check_write+0x18/0x20 [ 362.812561][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.815245][ T817] ? _raw_spin_lock+0x8c/0x120 [ 362.815282][ T817] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 362.820577][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.825246][ T817] p9_fd_request+0x391/0x520 [ 362.825285][ T817] p9_client_rpc+0x2f9/0xb40 [ 362.825309][ T817] ? bt_sock_poll+0x477/0x7b0 [ 362.830507][ T308] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.837848][ T817] ? p9_fid_create+0x3d0/0x3d0 [ 362.843183][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.850849][ T817] ? __cfi_sock_poll+0x10/0x10 [ 362.850880][ T817] ? p9_conn_create+0x4c9/0x570 [ 362.850908][ T817] ? p9_fd_create+0x2f3/0x4c0 [ 362.858678][ T308] usb 1-1: Product: syz [ 362.862875][ T817] p9_client_create+0x96a/0x1190 [ 362.862904][ T817] ? __cfi_p9_client_create+0x10/0x10 [ 362.862928][ T817] ? kasan_save_alloc_info+0x40/0x50 [ 362.867918][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.872211][ T817] ? __kasan_kmalloc+0x96/0xb0 [ 362.872251][ T817] ? kstrdup+0x7b/0x140 [ 362.872274][ T817] ? __kasan_check_write+0x18/0x20 [ 362.872298][ T817] v9fs_session_init+0x1e1/0x1820 [ 362.881836][ T308] usb 1-1: Manufacturer: syz [ 362.886093][ T817] ? __cfi_v9fs_session_init+0x10/0x10 [ 362.894484][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.898870][ T817] ? kasan_save_alloc_info+0x40/0x50 [ 362.898901][ T817] ? __kasan_kmalloc+0x96/0xb0 [ 362.904135][ T308] usb 1-1: SerialNumber: syz [ 362.908427][ T817] ? v9fs_mount+0xbd/0xa00 [ 362.913590][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.917541][ T817] v9fs_mount+0xd7/0xa00 [ 362.917576][ T817] ? selinux_sb_eat_lsm_opts+0xa69/0xb40 [ 362.923731][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.928232][ T817] ? __cfi_v9fs_mount+0x10/0x10 [ 362.928267][ T817] ? selinux_capable+0x38/0x50 [ 362.928300][ T817] legacy_get_tree+0x103/0x1b0 [ 362.937021][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.940437][ T817] ? __cfi_v9fs_mount+0x10/0x10 [ 362.940470][ T817] vfs_get_tree+0x9e/0x290 [ 362.940497][ T817] do_new_mount+0x251/0xb40 [ 362.945167][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.949767][ T817] path_mount+0x688/0x1050 [ 362.949799][ T817] ? putname+0x113/0x150 [ 362.949828][ T817] __se_sys_mount+0x2bd/0x480 [ 362.955337][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.959444][ T817] ? __x64_sys_mount+0xf0/0xf0 [ 362.959478][ T817] ? __kasan_check_write+0x18/0x20 [ 362.965446][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.972341][ T817] ? fpregs_restore_userregs+0x11d/0x260 [ 362.972398][ T817] __x64_sys_mount+0xc3/0xf0 [ 362.972426][ T817] x64_sys_call+0x2021/0x2ee0 [ 362.978288][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.982509][ T817] do_syscall_64+0x58/0xf0 [ 362.982542][ T817] ? clear_bhb_loop+0x35/0x90 [ 362.987577][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 362.991568][ T817] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 362.991604][ T817] RIP: 0033:0x7fed28f8e929 [ 362.991622][ T817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.991641][ T817] RSP: 002b:00007fed29e9b038 EFLAGS: 00000246 [ 363.001364][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.003271][ T817] ORIG_RAX: 00000000000000a5 [ 363.003284][ T817] RAX: ffffffffffffffda RBX: 00007fed291b5fa0 RCX: 00007fed28f8e929 [ 363.003302][ T817] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 363.009055][ T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 363.016305][ T817] RBP: 00007fed29010b39 R08: 0000200000000340 R09: 0000000000000000 [ 363.016323][ T817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.016336][ T817] R13: 0000000000000000 R14: 00007fed291b5fa0 R15: 00007ffef5593e28 [ 363.016354][ T817] [ 363.016363][ T817] Modules linked in: [ 363.016650][ T817] ---[ end trace 0000000000000000 ]--- [ 363.022594][ T45] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 363.027446][ T817] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 363.052871][ T45] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 363.060062][ T817] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 18 af bc 77 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 52 6b f5 fb 90 90 90 90 90 90 90 90 90 [ 363.109349][ T45] usb 2-1: USB disconnect, device number 5 [ 363.120853][ T817] RSP: 0018:ffffc9000eb7f1d0 EFLAGS: 00010246 [ 363.138788][ T308] cdc_ncm 1-1:1.0: bind() failure [ 363.157340][ T820] fido_id[820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 363.179043][ T308] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 363.180524][ T817] [ 363.185475][ T308] cdc_ncm 1-1:1.1: bind() failure [ 363.193669][ T817] RAX: 000000000000005a RBX: 1ffff92001d6fe3c RCX: c81732c2570ccc00 [ 363.213481][ T308] usb 1-1: USB disconnect, device number 6 [ 363.227462][ T817] RDX: ffffc90001eb3000 RSI: 0000000000013210 RDI: 0000000000013211 [ 363.357538][ T817] RBP: ffffc9000eb7f1d0 R08: ffffc9000eb7eec7 R09: 1ffff92001d6fdd8 [ 363.365712][ T817] R10: dffffc0000000000 R11: fffff52001d6fdd9 R12: 0000000000000000 [ 363.373787][ T817] R13: dffffc0000000000 R14: ffffc9000eb7f200 R15: ffffc9000eb7f230 [ 363.381842][ T817] FS: 00007fed29e9b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 363.390871][ T817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.397513][ T817] CR2: 00007ffc3eb09fc8 CR3: 00000001077a8000 CR4: 00000000003526b0 [ 363.405528][ T817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.413548][ T817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.421567][ T817] Kernel panic - not syncing: Fatal exception [ 363.427938][ T817] Kernel Offset: disabled [ 363.432270][ T817] Rebooting in 86400 seconds..