last executing test programs: 6.748290375s ago: executing program 2 (id=870): prlimit64(0x0, 0x95cda3919a662b39, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xf) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.016222771s ago: executing program 2 (id=891): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.472139354s ago: executing program 3 (id=921): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000d2c610a808e0797d2174b8010000000100"]) faccessat2(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x100) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 3.471565424s ago: executing program 3 (id=922): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0x8, 0x9}) 3.469329374s ago: executing program 3 (id=923): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000800)={0x80000, 0x0, [0x0, 0x40, 0x3, 0x9, 0x1, 0x1, 0x8c, 0xe2e]}) ioctl$TCSBRKP(r1, 0x5425, 0x4) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000240)=@arm64) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23000f) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="c021"], 0x5) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="4000e4000000079c93b6a5c1691943a85a0e97950d1bc2c8491c47812ca25ac9f7523dd0b13b57eabebc381b5b585ba14c762ea94602d0769ea2d7771316ef6951f45cc94e8d2b49b4d848eb5383b08ef6376513e2f9b9e0dd225f150a61c9f8f9e1b6f71b652215ced36b5d9540c4aba107beeb1335276e76b038d95af9c8fb6f5926d2f7379b000000000000000000489d846d3ca371acbe06c97c38cbf0b5d6e8f2621652e59e159623768d6edef0dda7f4647518971fc4a929aa113e57c6f822c3d7c23073110a229321c6e4048e12685f397651efa49be01cb42d01aa6980df69114b8666b38e8eec3c49cddb1b59f358fb4abadf69e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2006000000345817cd247bfc49eeebaa3ad20134"], 0x0}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000100)={0x2, r8}) bind$inet(r1, &(0x7f0000000180)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mknod(&(0x7f0000001980)='./file0\x00', 0x8, 0x10000) syz_usb_control_io(r6, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="0000030000000b45817ffac3d6d015963de784b57d9aec3bcae352fbcf06e2ade8d69a0048bc51519f940866d9735b080e8a20f52d6ca9c1c42a777382e36b5dcc3e58fa86cb909752ab5d13a6d4d53e18e704b025b23696ce4bad135aae51f9f5c0cccaed9070510917f3e2aec7ddd97c7fbf26187add40f1c3c5181549a2d8fafaf9145a2f930302ee9aa35e5061fa8f5a83931cd0944a6e43e41432f9a2ba03b4cc02099e10a1195aca017939d04f155526d0c2d52db24430db45e380c77976547210c9f746420194d1b24ce97596b59d31e1042bad2ede861f4b8de8a1d619"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbmon(&(0x7f0000001880), 0x1000, 0x800) signalfd4(r5, &(0x7f0000000000)={[0x10]}, 0x8, 0x80800) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000097ff8208582005109bc10000000109021200010000100009048f008dfc"], 0x0) 3.189108279s ago: executing program 2 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) 3.153546429s ago: executing program 2 (id=925): rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000600)={0x8, 0x1007, 0x3}) r0 = gettid() wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000040)) 3.10026651s ago: executing program 2 (id=926): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b00010100000009040000120206000005240600000524"], 0x0) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'virt_wifi0\x00', {0x2, 0x4e23, @loopback}}) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000082}]}) read(r1, &(0x7f0000000000)=""/175, 0xfffffe14) 2.593937818s ago: executing program 1 (id=927): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000000)={{0x5, 0xfffffffc}, {0x7}, 0xfffffffd, 0x7}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000140)={0x77359400}, 0x10) select(0x40, &(0x7f0000000000)={0x3, 0x916, 0xd8, 0x101, 0x765, 0x6, 0x965, 0xf3}, &(0x7f0000000040)={0x79cb08f4, 0x80, 0x100000001, 0x1, 0x8, 0x9, 0x0, 0x5}, &(0x7f0000000080)={0x4, 0x2b, 0x5, 0x81, 0x7, 0x7ccc, 0x2f, 0x5b05}, &(0x7f0000000100)={r0, r1/1000+10000}) 1.747459761s ago: executing program 1 (id=928): ioprio_set$uid(0x3, 0x0, 0x64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r1, 0xc, 0x2e, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000007980)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x75, 0x2, 0x100, 0xffffffff, 0x4000000}) 1.687830662s ago: executing program 1 (id=929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) r3 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x12) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x108202, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000280)={0x6000, 0x84000}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x541b, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x8080000) r8 = ioctl$TUNGETDEVNETNS(r7, 0xff03, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000000180)={0x0, 0x7f, 0xff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) 1.614497733s ago: executing program 0 (id=930): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x40) r3 = epoll_create1(0x80000) r4 = inotify_init1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) poll(&(0x7f0000000200)=[{r1, 0x600}], 0x1, 0xc547) 1.613846853s ago: executing program 1 (id=931): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') pwritev(r0, 0x0, 0x0, 0x43b, 0xf) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1.587051774s ago: executing program 0 (id=932): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0xfffffffffffffffe}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/83, 0x53, 0x2, 0x2}, @fd, @fda={0x66646185, 0x7, 0x1, 0x2f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) bind$tipc(r2, &(0x7f0000000380)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x2}}, 0x10) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5432, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000070000040"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) 1.532238504s ago: executing program 1 (id=933): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.502377155s ago: executing program 0 (id=934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, 0x0) 1.423659926s ago: executing program 0 (id=935): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pwritev(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)="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", 0xfa}, {&(0x7f0000000000)="dcac76c06538dc1fee9eef65fafdf21117a112ea9c67d998211e1fd0cef00763b921d161c47c490f47ae3afde75357a6d8b853b863caa2adbfc69a5cededff", 0x3f}, {&(0x7f0000000180)="563343b843d2cfcd6258113469d3046f06d840ef4ec9f7be2fb0af5a29081a2dbf0ac4b8ea6cfef3f575492a96efac6e7ac3fc1104d8ba4870b110101c5e844f440f519a1a280bbb7d07cd0b19bb7fa518e3dc29ac2507c47c9940f42e6f25976784a222207ef56a09ecbeadd8e6da1bba7128ce775ee1f953b0228a04eb52ea2fabb4a6532083114fdea752305d3a9fe86ad153b456eefd6aaacf1f39ba8c6687f44f5199ea9f14887b7c4d15c08e1dfb8b39f5d6b63881002132d14ae6df65090007b28cfd79bfb7d9ad8115466917aae05dd5212dcd11", 0xd8}, {&(0x7f0000000280)="d098fc8f947182586ac9a2d1be2e97740cf2a7329d38af54bafaa5859045d633b0b7eae1abc40652a60e0e78723b796968ff4c228d2155da176f069c739dc939ab35fa18ff7763f31684aa5e3e2a576ee02f21c8791d253266e96186bea614c408ef0fbe5f94bd5c1ce6c488bc588bd896", 0x71}, {&(0x7f00000003c0)="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", 0xcd4}], 0x5, 0xff, 0x0) 1.410765465s ago: executing program 0 (id=936): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, 0x0, 0x0) 1.352239087s ago: executing program 0 (id=937): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008e02"]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201a104000000402505a8a440000200000009021b000101ff10090904000802070103060932f35163fffff1000000000d9796e8abd200559e72db0501"], &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xb2, 0x0}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) read(r4, &(0x7f0000000140)=""/106, 0x6a) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x3c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0) 342.058405ms ago: executing program 3 (id=938): openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x101100, 0x0) syz_clone3(0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x9250) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020}, 0x2020) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r2, 0x5db19000) (fail_nth: 10) 313.856975ms ago: executing program 3 (id=939): ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) syz_io_uring_setup(0x51ca, &(0x7f0000000080)={0x0, 0x0, 0x20000, 0x1, 0x2000026c, 0x0, 0x0}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) getdents64(r4, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x90}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000005f98000040000005000000000000000000"]) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x101240) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000001300)=""/92, 0x80a0000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) syslog(0x3, &(0x7f0000000000)=""/64, 0x40) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x6, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x10001, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, 0x0) close_range(r0, r2, 0x0) 171.988967ms ago: executing program 3 (id=940): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f00000000c0)=ANY=[]) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x51bf3295, 0x101040) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0x40084503, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000100)={0x1d, r2}, 0x10) splice(r1, &(0x7f0000000000)=0x8, 0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x3, 0x5) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5432, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) write$vga_arbiter(r7, &(0x7f0000000dc0)=ANY=[@ANYBLOB="740500090000e13200007ec634552a4900f47469e1", @ANYRESDEC=r1], 0xf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) writev(r8, &(0x7f0000001380)=[{&(0x7f0000000380)="46da0b59cc34b45a92b00bb35b8cf82fa5043aad8050714fb9385f3f8ecbaf1d5d718bc7205b6cda3653d8450303feeacbd820deda3db79ef709a13cca8153f15e7bef4932ad9f6dbbc9f4c52c053de9bdbba613ca49e325f805dcdcbd95c03792bd885feab6cec23fa85b5dc14ce7f8f93e5ad329f5c08831a4067af523dc6b81ebb4ae72f503e94479eef4c76f3b8478cec98d41908730b025cc3cc1d48afb7f496b59f74215c3270959775d0970c231fef529b945f3e401abbd74f7ea7db64933bc6e633490f0e2485fae2aecdf5f2716464d545a4daa140795d69ae2b1d3d98f9a8a419866de73df311ae9a482f161d5b589a37e83c680bf6bfc857f1dc7652838e1a78d9fcdf4e6a9a9655a10e82b0ecf9b11b7aa9584f1369d2f3e4a2c9f0f9e5fc27b61f38bd850665009026c41f55dd1574b307abd7b6959063ef9fff0897931a8de20533885b11c1caabb3704b2b15aaa0c83e20509e38530f7be89fad03614ba00103f160a8ba12b71a1d021f5f3c60e6a6c9d1272e94620d7a71e4ffe99170a301a0600198f03c40253d746e1bd14eb2d1d579b6fd8707be1773266bd1bf4c228ee0b803ef887e5ab68719c6276dc35b08df09174007391d5a7414389185566d68a8cbf2c48ed35506593e4c97fe5acc83aeec0ea584d8b3359a8b30af9dbce856b9d43a8e431e2f21068ca52b9d5e7a8e5418c7d4bcb930f8493c02530c47aabc34a001db109e0a21aa7c5ec4bdc14d20ecb8ff5e7192c003ab1d4bb39c7b4e8f7ba86a4f6674fa61014920d745fe856460cac7d4309a25b796f8963c8d49d0d248146cec99ca7fbb2234cafb3cf3f318a5ffa63c9d3113e0001120f0c7e8f5e67169310bc3f122927638d347db7652b50c97775491a6cda8efe41adbd13227b45a2f1eab8ec491ec173f76fdd7354c2cf1110a155598418f4b152362befc28b9ad82190340475b9ca34ee0dd0e63ea64de7105d1bb51ca6e2fa2f24c260930372cc99edd2c1bf78cea1809e5d424b275ebc30c6a73e1011bce67f9977f2dab0b17e67aedf20bdc6b8d1767d973a6c55b61cc20fe5a5056cee90b136abb117fd6b0c4ae6f5a8d504d2b592b54eea0a6d8fc5f5bd91a9f45e5863da825baf11a4c3f014efa412060b6061c81a098e2101920cc21c7a91490079e9a42c97b6f74f35baecdd982dae244cdb443fed6c5220d3a440b2cb4e1cc4c2174c85915b5ddfff7e46a30c2e2e21272b10e2ab1d3539f3ec08c9aeec7d5d55c6722c933f33c61edba1c8db99236e46d0f39f7e145f52f5031d5b44be2a421db2fc70a1855274150797c2be72044050f9640491d5fc456da0e1051565fc3343c40424218ae74ee564f19cfe4626bd7604ef22ebd0caffa1853e8233f29967971d9f19b56772652d5fd5bfc96c4064e803c83cad621ff7084cee3f1f5b0134f91f8e92715a635b61365aba96cb516dde8af22713e161a4edfd814b59877d7d45163eab0ab5c195fa4ef23eabc7f959f23c2c5a6708774b9283db6c3d2f465fb3146bc1f6d8148c9ed5b4a64d5d835a69443c5d017e5edc90c23737a92b3d32b80c0175036717166ad4c1f1bbacf0366c88049862a62d6bab8e742ebc382f68d3fbe749a95f052df37990fe30fe928e72e7d3e78b7c9679d3cb59e5d27ef59dded033bc731c2183d33bd2e7f8ecbadc666a62b040e1b7dcd40f6a6096d0b10441620970832034635c01b09e44288e2396d1f982dc86b538175dd93bb76b20b5bcb7b1ac360d4b10a2926ff76e7d115ada8e8c7d8d092941773e012b194d8434153b39f32c6fedbad029dc23449415cb68e72c5f79af01b14272937570b37134680dafb587a6e4d37187eb540c18004b1ec5b49bed56dc1f512a159a7cbbd9b54071d6a34d42b829cafa32ba8dfaf6fe312a9103fc622dcaa861e59a4c52c972ea1a7ae80f197cc9e9dba82de07e300fe74ac24f5f0ed4a7dc6092539baf0a4899470b5f47734af05bbf7e1840c2448fc99c15f1d7cb61983ab5950b8f7afe0c7816146a9d82cbcc33c0a9f11281a34179230f2029c53cf52814ed9d3514b07df3b2eff30b9dc1b65b1bb3768fc4f1d8305244b48db85a275064ca5f8ac285e4ea09fd8dc10f4dd414b926b5d5dada6785af5630c195604013c0eeb4b598c02f0dd7ff2e02df7d3f490e00bf9e1d8ed52d7a40cbc928b55b5ab22ef28841c858906d0c4de960fde715340e92bc9770e738572f9b8552a68658b0091e46a5809768bedf69035fbc0a7f27eade06bd1fc1b908ae83066d3ac076b83a51158f2eef1ec0bd035e60bd8e00031c7c659dc0a7fddd428dc970be6ac76a2601b55dfb752526f5cd0520a3cef6ce9f3d1b9409fc85c6a27367bfbedd74362cbb478622f8a3355e0bc9ec57006eef5ce36813d46750b57416e9fb5e5c8e6bf7521d4fb45b4e7a99138841dba7c9ea06a84a264a1d06f74a519a38086c44cf4970aebe2dc5d4189cee1493e64ea1e163fb5e1d50f7cbbdf088095888219f6d9ef933ca78b938b96cca4ce319347ce6a7e6a0707426996f873f10b9bb524fb36f96904f22d03737eac3ecfd8c115c0b50721b17655f2989efe8d49f981545ef6fc6fddd4c2c9fe90466a8d1624919c8a7779c58005a26f53b6c722da133488152042c8bf235fdf2fcdaf3f4270aea53dc7ee62a5b97d74a1f36b25f12000094798c2fd7d128b5ad92c934ae442ff1b2be331ab5a91a3bdac2e323e140f5f90b681bf9f44a496e5b6aefb520e989d8a6f1b9b63e85532335395b6ef6b600615389a8353286bf82cb9d832f65c548383799d7d14d5f9ca610caf9215de9b7075c3da158546fe464115792c5e529642bc3e78933f34ef762ea0974b9752b", 0x7f5}], 0x1) sendto$unix(r8, &(0x7f0000001900)="d46ddd0277d72621bfa5ba13", 0xc, 0x0, 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) splice(r4, &(0x7f0000000080)=0x6, r9, &(0x7f0000000200)=0x5, 0x1, 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x3325, 0x6, 0x1, {0x22, 0x4d0}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xfd}}}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x44, 0x4, 0xff, 0xbf, 0x83}, 0x26, &(0x7f0000000300)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x81, 0xf3, 0x1}, @wireless={0xffffffffffffff00, 0x10, 0x1, 0xc, 0x6, 0x3, 0x84, 0x81, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x0, 0xf00f, 0x7}]}, 0x5, [{0x6, &(0x7f0000000b80)=@lang_id={0x0, 0x3, 0x455}}, {0xa9, &(0x7f0000000bc0)=@string={0xa9, 0x3, "f189db04b47ded666a30d68eda315fe39a30ede97a6c5c41a688b6cb820d27af1d21e4ef391469cf5bb5ec9c8de686d6ea78fc31b4e1422d627c7ccc22a0b4bed270cfceb7db51a50e354c7188ed02deb44300105e9782611b771ec21cb6a5858d157850f150b28e3c439683e9f9c05685ef0e05b2748163f41bb06de4facb360625a42ecd4cfffe3ee57ef6ec2acc784b9879ff07b9525ac136f1fe3ccae02db21d352f53c3fb"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x1a, &(0x7f0000000d00)=@string={0x1a, 0x3, "500856112658584e1ec9c32b87621ca54fa9922b7cd55a21"}}]}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r9, &(0x7f0000000140)={0x80000002}) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x301201, 0x0) ioctl$BLKBSZSET(r10, 0x40081271, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendfile(r8, r6, 0x0, 0x80000005e7d) 5.06421ms ago: executing program 1 (id=941): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffff) mmap(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003780)=[{{&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/146, 0x92}, {&(0x7f0000000180)=""/100, 0x64}], 0x2, &(0x7f0000000240)=""/4096, 0x1000}, 0xfffffffa}, {{&(0x7f0000001240)=@qipcrtr, 0x80, &(0x7f00000036c0)=[{&(0x7f00000012c0)=""/184, 0xb8}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/25, 0x19}, {&(0x7f00000023c0)=""/66, 0x42}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/240, 0xf0}, {&(0x7f0000003540)=""/213, 0xd5}, {&(0x7f0000003640)=""/109, 0x6d}], 0x8, &(0x7f0000003740)=""/62, 0x3e}}], 0x2, 0x21, 0x0) 0s ago: executing program 2 (id=942): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x12000000, 0x483, 0x0, 0x0) kernel console output (not intermixed with test programs): 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.485880][ T347] usb 1-1: config 1 interface 0 has no altsetting 0 [ 55.495324][ T347] usb 1-1: language id specifier not provided by device, defaulting to English [ 55.506279][ T347] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 55.521763][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.529912][ T347] usb 1-1: Product: syz [ 55.534152][ T347] usb 1-1: Manufacturer: syz [ 55.538861][ T347] usb 1-1: SerialNumber: syz [ 55.697222][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 55.752054][ T347] usb 1-1: USB disconnect, device number 11 [ 55.857539][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 55.869664][ T45] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.886524][ T36] audit: type=1326 audit(1750461183.350:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1256 comm="syz.2.344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128ab8e929 code=0x0 [ 55.886953][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 55.918128][ T45] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 55.927304][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.935312][ T45] usb 2-1: Product: ᠆ [ 55.950034][ T45] usb 2-1: Manufacturer: 왢㢝欮㞊뻂梅Ͼ쟒嶃ᴷ啰짿槷癥 [ 55.965123][ T45] usb 2-1: SerialNumber: syz [ 56.183169][ T45] usbhid 2-1:1.0: can't add hid device: -71 [ 56.189272][ T45] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 56.202853][ T45] usb 2-1: USB disconnect, device number 13 [ 56.364042][ T1263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 56.411939][ T1269] rust_binder: Write failure EFAULT in pid:197 [ 56.824382][ T36] audit: type=1400 audit(1750461184.290:279): avc: denied { setopt } for pid=1274 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.870305][ T1277] rust_binder: Error while translating object. [ 56.870339][ T1277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 56.887279][ T1277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:188 [ 56.975701][ T1293] FAULT_INJECTION: forcing a failure. [ 56.975701][ T1293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.998531][ T1293] CPU: 0 UID: 0 PID: 1293 Comm: syz.2.357 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 56.998565][ T1293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.998577][ T1293] Call Trace: [ 56.998584][ T1293] [ 56.998593][ T1293] __dump_stack+0x21/0x30 [ 56.998622][ T1293] dump_stack_lvl+0x10c/0x190 [ 56.998646][ T1293] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.998672][ T1293] dump_stack+0x19/0x20 [ 56.998694][ T1293] should_fail_ex+0x3d9/0x530 [ 56.998717][ T1293] should_fail+0xf/0x20 [ 56.998737][ T1293] should_fail_usercopy+0x1e/0x30 [ 56.998761][ T1293] _copy_to_user+0x24/0xa0 [ 56.998788][ T1293] simple_read_from_buffer+0xed/0x160 [ 56.998819][ T1293] proc_fail_nth_read+0x19e/0x210 [ 56.998840][ T1293] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 56.998860][ T1293] ? bpf_lsm_file_permission+0xd/0x20 [ 56.998882][ T1293] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 56.998902][ T1293] vfs_read+0x278/0xb60 [ 56.998925][ T1293] ? __cfi_vsock_connectible_setsockopt+0x10/0x10 [ 56.998957][ T1293] ? __cfi_vfs_read+0x10/0x10 [ 56.998980][ T1293] ? __kasan_check_write+0x18/0x20 [ 56.999003][ T1293] ? mutex_lock+0x92/0x1c0 [ 56.999021][ T1293] ? __cfi_mutex_lock+0x10/0x10 [ 56.999038][ T1293] ? __fget_files+0x2c5/0x340 [ 56.999068][ T1293] ksys_read+0x141/0x250 [ 56.999100][ T1293] ? __cfi_ksys_read+0x10/0x10 [ 56.999124][ T1293] ? __kasan_check_write+0x18/0x20 [ 56.999147][ T1293] ? __kasan_check_read+0x15/0x20 [ 56.999170][ T1293] __x64_sys_read+0x7f/0x90 [ 56.999194][ T1293] x64_sys_call+0x2638/0x2ee0 [ 56.999220][ T1293] do_syscall_64+0x58/0xf0 [ 56.999253][ T1293] ? clear_bhb_loop+0x35/0x90 [ 56.999284][ T1293] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.999312][ T1293] RIP: 0033:0x7f128ab8d33c [ 56.999329][ T1293] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.999348][ T1293] RSP: 002b:00007f128b94e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.999370][ T1293] RAX: ffffffffffffffda RBX: 00007f128adb5fa0 RCX: 00007f128ab8d33c [ 56.999386][ T1293] RDX: 000000000000000f RSI: 00007f128b94e0a0 RDI: 0000000000000004 [ 56.999399][ T1293] RBP: 00007f128b94e090 R08: 0000000000000000 R09: 0000000000000000 [ 56.999413][ T1293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.999425][ T1293] R13: 0000000000000000 R14: 00007f128adb5fa0 R15: 00007ffd249db618 [ 56.999442][ T1293] [ 57.407249][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 57.523605][ T36] audit: type=1400 audit(1750461184.990:280): avc: denied { map } for pid=1300 comm="syz.1.360" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.567414][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 57.574628][ T45] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.599298][ T1308] netlink: 44 bytes leftover after parsing attributes in process `syz.2.362'. [ 57.605675][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 57.616739][ T45] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 57.620760][ T1308] rust_binder: Error while translating object. [ 57.625834][ T1308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 57.626216][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.642249][ T1308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:38 [ 57.650388][ T45] usb 1-1: Product: syz [ 57.668902][ T45] usb 1-1: Manufacturer: 왢㢝欮㞊뻂梅Ͼ쟒嶃ᴷ啰짿槷癥 [ 57.676896][ T45] usb 1-1: SerialNumber: syz [ 57.754829][ T1310] FAULT_INJECTION: forcing a failure. [ 57.754829][ T1310] name failslab, interval 1, probability 0, space 0, times 0 [ 57.767541][ T1310] CPU: 1 UID: 0 PID: 1310 Comm: syz.2.363 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 57.767581][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.767597][ T1310] Call Trace: [ 57.767605][ T1310] [ 57.767616][ T1310] __dump_stack+0x21/0x30 [ 57.767651][ T1310] dump_stack_lvl+0x10c/0x190 [ 57.767678][ T1310] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.767707][ T1310] ? fib6_table_lookup+0x877/0x9b0 [ 57.767736][ T1310] dump_stack+0x19/0x20 [ 57.767762][ T1310] should_fail_ex+0x3d9/0x530 [ 57.767789][ T1310] ? __cfi_ip6_dst_gc+0x10/0x10 [ 57.767810][ T1310] should_failslab+0xac/0x100 [ 57.767843][ T1310] kmem_cache_alloc_noprof+0x42/0x3a0 [ 57.767871][ T1310] ? dst_alloc+0x13c/0x250 [ 57.767893][ T1310] ? __cfi_ip6_dst_gc+0x10/0x10 [ 57.767914][ T1310] dst_alloc+0x13c/0x250 [ 57.767937][ T1310] ip6_pol_route+0xad5/0x12c0 [ 57.767964][ T1310] ? ip6_pol_route+0x42c/0x12c0 [ 57.767992][ T1310] ? __cfi_ip6_pol_route+0x10/0x10 [ 57.768020][ T1310] ? is_bpf_text_address+0x17b/0x1a0 [ 57.768053][ T1310] ? kernel_text_address+0xa9/0xe0 [ 57.768078][ T1310] ? unwind_get_return_address+0x51/0x90 [ 57.768101][ T1310] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 57.768130][ T1310] ip6_pol_route_output+0x55/0x80 [ 57.768157][ T1310] fib6_rule_lookup+0x30d/0x6b0 [ 57.768194][ T1310] ? __cfi_ip6_pol_route_output+0x10/0x10 [ 57.768220][ T1310] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 57.768258][ T1310] ip6_route_output_flags+0x2a3/0x480 [ 57.768287][ T1310] ip6_dst_lookup_tail+0x1a6/0x1470 [ 57.768312][ T1310] ? arch_stack_walk+0x10b/0x170 [ 57.768345][ T1310] ? stack_trace_save+0x9d/0xe0 [ 57.768373][ T1310] ? stack_depot_save_flags+0x38/0x800 [ 57.768401][ T1310] ? ip6_dst_lookup+0x80/0x80 [ 57.768426][ T1310] ? kasan_save_track+0x4f/0x80 [ 57.768457][ T1310] ? kasan_save_track+0x3e/0x80 [ 57.768492][ T1310] ? kasan_save_alloc_info+0x40/0x50 [ 57.768516][ T1310] ? __kasan_slab_alloc+0x73/0x90 [ 57.768547][ T1310] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 57.768573][ T1310] ? security_inode_alloc+0x51/0x200 [ 57.768602][ T1310] ? sk_dst_check+0x13a/0x290 [ 57.768631][ T1310] ip6_sk_dst_lookup_flow+0x3a2/0x790 [ 57.768659][ T1310] udpv6_sendmsg+0x1940/0x26c0 [ 57.768683][ T1310] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 57.768716][ T1310] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 57.768743][ T1310] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 57.768776][ T1310] ? _raw_spin_unlock_bh+0x54/0x60 [ 57.768807][ T1310] ? release_sock+0x171/0x1f0 [ 57.768836][ T1310] ? inet_send_prepare+0x1e7/0x4f0 [ 57.768859][ T1310] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 57.768881][ T1310] inet6_sendmsg+0xef/0x120 [ 57.768914][ T1310] ____sys_sendmsg+0x5db/0xa70 [ 57.768951][ T1310] ? __sys_sendmsg_sock+0x50/0x50 [ 57.768989][ T1310] ? import_iovec+0x81/0xb0 [ 57.769021][ T1310] ___sys_sendmsg+0x220/0x2a0 [ 57.769056][ T1310] ? __sys_sendmsg+0x280/0x280 [ 57.769092][ T1310] ? kstrtouint+0x78/0xf0 [ 57.769124][ T1310] __sys_sendmmsg+0x271/0x470 [ 57.769146][ T1310] ? __cfi___sys_sendmmsg+0x10/0x10 [ 57.769173][ T1310] ? __cfi_ksys_write+0x10/0x10 [ 57.769203][ T1310] __x64_sys_sendmmsg+0xa4/0xc0 [ 57.769225][ T1310] x64_sys_call+0xfec/0x2ee0 [ 57.769256][ T1310] do_syscall_64+0x58/0xf0 [ 57.769286][ T1310] ? clear_bhb_loop+0x35/0x90 [ 57.769321][ T1310] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.769354][ T1310] RIP: 0033:0x7f128ab8e929 [ 57.769375][ T1310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.769396][ T1310] RSP: 002b:00007f128b94e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 57.769421][ T1310] RAX: ffffffffffffffda RBX: 00007f128adb5fa0 RCX: 00007f128ab8e929 [ 57.769439][ T1310] RDX: 0000000000000001 RSI: 0000200000004700 RDI: 0000000000000003 [ 57.769455][ T1310] RBP: 00007f128b94e090 R08: 0000000000000000 R09: 0000000000000000 [ 57.769476][ T1310] R10: 00000000080040c4 R11: 0000000000000246 R12: 0000000000000001 [ 57.769491][ T1310] R13: 0000000000000000 R14: 00007f128adb5fa0 R15: 00007ffd249db618 [ 57.769511][ T1310] [ 58.190029][ T45] usbhid 1-1:1.0: can't add hid device: -71 [ 58.196061][ T45] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 58.205685][ T45] usb 1-1: USB disconnect, device number 12 [ 58.477877][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.534800][ T1316] rust_binder: Write failure EFAULT in pid:203 [ 58.628184][ T9] usb 3-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config [ 58.644719][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.658801][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.677229][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.685288][ T9] usb 3-1: SerialNumber: syz [ 58.743463][ T1320] FAULT_INJECTION: forcing a failure. [ 58.743463][ T1320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.756608][ T1320] CPU: 0 UID: 0 PID: 1320 Comm: syz.0.368 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 58.756642][ T1320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.756652][ T1320] Call Trace: [ 58.756659][ T1320] [ 58.756666][ T1320] __dump_stack+0x21/0x30 [ 58.756689][ T1320] dump_stack_lvl+0x10c/0x190 [ 58.756710][ T1320] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.756729][ T1320] ? vfs_write+0x8ba/0xe80 [ 58.756747][ T1320] dump_stack+0x19/0x20 [ 58.756764][ T1320] should_fail_ex+0x3d9/0x530 [ 58.756781][ T1320] should_fail+0xf/0x20 [ 58.756796][ T1320] should_fail_usercopy+0x1e/0x30 [ 58.756813][ T1320] _copy_from_user+0x22/0xb0 [ 58.756833][ T1320] __sys_connect+0x136/0x440 [ 58.756854][ T1320] ? __cfi___sys_connect+0x10/0x10 [ 58.756877][ T1320] ? __kasan_check_read+0x15/0x20 [ 58.756894][ T1320] __x64_sys_connect+0x7e/0x90 [ 58.756914][ T1320] x64_sys_call+0x1c2f/0x2ee0 [ 58.756933][ T1320] do_syscall_64+0x58/0xf0 [ 58.756953][ T1320] ? clear_bhb_loop+0x35/0x90 [ 58.756976][ T1320] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.756998][ T1320] RIP: 0033:0x7f832e98e929 [ 58.757011][ T1320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.757024][ T1320] RSP: 002b:00007f832f87b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 58.757040][ T1320] RAX: ffffffffffffffda RBX: 00007f832ebb5fa0 RCX: 00007f832e98e929 [ 58.757053][ T1320] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 58.757063][ T1320] RBP: 00007f832f87b090 R08: 0000000000000000 R09: 0000000000000000 [ 58.757072][ T1320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.757081][ T1320] R13: 0000000000000000 R14: 00007f832ebb5fa0 R15: 00007ffee795ff78 [ 58.757094][ T1320] [ 58.898738][ T1312] netlink: 304 bytes leftover after parsing attributes in process `syz.2.364'. [ 59.032673][ T9] usb 3-1: bad CDC descriptors [ 59.038946][ T9] usb 3-1: USB disconnect, device number 12 [ 59.250584][ T36] audit: type=1400 audit(1750461186.720:281): avc: denied { block_suspend } for pid=1326 comm="syz.0.371" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.277614][ T36] audit: type=1400 audit(1750461186.750:282): avc: denied { connect } for pid=1326 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.301841][ T36] audit: type=1400 audit(1750461186.750:283): avc: denied { ioctl } for pid=1326 comm="syz.0.371" path="socket:[14200]" dev="sockfs" ino=14200 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.353551][ T1329] tap0: tun_chr_ioctl cmd 1074025677 [ 59.369166][ T1329] tap0: linktype set to 776 [ 59.443570][ T36] audit: type=1400 audit(1750461186.910:284): avc: denied { setattr } for pid=1338 comm="syz.1.375" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.554211][ T1343] FAULT_INJECTION: forcing a failure. [ 59.554211][ T1343] name failslab, interval 1, probability 0, space 0, times 0 [ 59.567226][ T1343] CPU: 1 UID: 0 PID: 1343 Comm: syz.2.377 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 59.567265][ T1343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.567286][ T1343] Call Trace: [ 59.567293][ T1343] [ 59.567301][ T1343] __dump_stack+0x21/0x30 [ 59.567330][ T1343] dump_stack_lvl+0x10c/0x190 [ 59.567355][ T1343] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.567383][ T1343] ? __cfi_selinux_file_open+0x10/0x10 [ 59.567420][ T1343] dump_stack+0x19/0x20 [ 59.567446][ T1343] should_fail_ex+0x3d9/0x530 [ 59.567473][ T1343] should_failslab+0xac/0x100 [ 59.567506][ T1343] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 59.567535][ T1343] ? __d_alloc+0x42/0x8e0 [ 59.567562][ T1343] __d_alloc+0x42/0x8e0 [ 59.567587][ T1343] d_alloc_pseudo+0x23/0xc0 [ 59.567614][ T1343] alloc_file_pseudo_noaccount+0xce/0x300 [ 59.567650][ T1343] ? _atomic_dec_and_lock+0x98/0x120 [ 59.567676][ T1343] ? __cfi_alloc_file_pseudo_noaccount+0x10/0x10 [ 59.567721][ T1343] ? __cfi_bd_prepare_to_claim+0x10/0x10 [ 59.567753][ T1343] bdev_file_open_by_dev+0x17e/0x240 [ 59.567786][ T1343] disk_scan_partitions+0x1c5/0x2d0 [ 59.567812][ T1343] blkdev_common_ioctl+0x17e3/0x2660 [ 59.567836][ T1343] ? blkdev_bszset+0x220/0x220 [ 59.567858][ T1343] ? has_cap_mac_admin+0xd0/0xd0 [ 59.567892][ T1343] ? proc_fail_nth_write+0x17e/0x210 [ 59.567915][ T1343] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 59.567939][ T1343] ? selinux_file_ioctl+0x6e0/0x1360 [ 59.567971][ T1343] ? vfs_write+0x8ba/0xe80 [ 59.567997][ T1343] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 59.568038][ T1343] ? __cfi_vfs_write+0x10/0x10 [ 59.568065][ T1343] ? __kasan_check_write+0x18/0x20 [ 59.568090][ T1343] ? mutex_unlock+0x8b/0x240 [ 59.568112][ T1343] ? __cfi_mutex_unlock+0x10/0x10 [ 59.568132][ T1343] ? __fget_files+0x2c5/0x340 [ 59.568164][ T1343] blkdev_ioctl+0x484/0x680 [ 59.568186][ T1343] ? __cfi_blkdev_ioctl+0x10/0x10 [ 59.568207][ T1343] ? bpf_lsm_file_ioctl+0xd/0x20 [ 59.568239][ T1343] ? security_file_ioctl+0x34/0xd0 [ 59.568270][ T1343] ? __cfi_blkdev_ioctl+0x10/0x10 [ 59.568296][ T1343] __se_sys_ioctl+0x132/0x1b0 [ 59.568327][ T1343] __x64_sys_ioctl+0x7f/0xa0 [ 59.568359][ T1343] x64_sys_call+0x1878/0x2ee0 [ 59.568389][ T1343] do_syscall_64+0x58/0xf0 [ 59.568419][ T1343] ? clear_bhb_loop+0x35/0x90 [ 59.568455][ T1343] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.568487][ T1343] RIP: 0033:0x7f128ab8e929 [ 59.568506][ T1343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.568526][ T1343] RSP: 002b:00007f128b94e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.568551][ T1343] RAX: ffffffffffffffda RBX: 00007f128adb5fa0 RCX: 00007f128ab8e929 [ 59.568570][ T1343] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 59.568584][ T1343] RBP: 00007f128b94e090 R08: 0000000000000000 R09: 0000000000000000 [ 59.568599][ T1343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.568613][ T1343] R13: 0000000000000000 R14: 00007f128adb5fa0 R15: 00007ffd249db618 [ 59.568632][ T1343] [ 59.934880][ T1350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:214 [ 60.011468][ T1354] rust_binder: Write failure EFAULT in pid:218 [ 60.027198][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 60.090730][ T36] audit: type=1326 audit(1750461187.560:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1360 comm="syz.2.384" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f128ab8e929 code=0x0 [ 60.147545][ T1362] rust_binder: Error while translating object. [ 60.147598][ T1362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 60.153855][ T1362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:57 [ 60.187190][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 60.203290][ T45] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.216431][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 60.225021][ T45] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 60.234450][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.243988][ T45] usb 2-1: Product: syz [ 60.248480][ T45] usb 2-1: Manufacturer: syz [ 60.253187][ T45] usb 2-1: SerialNumber: syz [ 60.466436][ T45] usbhid 2-1:1.0: can't add hid device: -71 [ 60.472627][ T45] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 60.484908][ T45] usb 2-1: USB disconnect, device number 14 [ 60.761501][ T36] audit: type=1400 audit(1750461188.230:286): avc: denied { map } for pid=1363 comm="syz.0.385" path="socket:[15510]" dev="sockfs" ino=15510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.789669][ T36] audit: type=1400 audit(1750461188.230:287): avc: denied { accept } for pid=1363 comm="syz.0.385" path="socket:[15510]" dev="sockfs" ino=15510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.907660][ T1366] FAULT_INJECTION: forcing a failure. [ 60.907660][ T1366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.920990][ T1366] CPU: 1 UID: 0 PID: 1366 Comm: syz.0.386 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 60.921029][ T1366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.921044][ T1366] Call Trace: [ 60.921053][ T1366] [ 60.921063][ T1366] __dump_stack+0x21/0x30 [ 60.921097][ T1366] dump_stack_lvl+0x10c/0x190 [ 60.921131][ T1366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.921160][ T1366] dump_stack+0x19/0x20 [ 60.921185][ T1366] should_fail_ex+0x3d9/0x530 [ 60.921212][ T1366] should_fail+0xf/0x20 [ 60.921240][ T1366] should_fail_usercopy+0x1e/0x30 [ 60.921267][ T1366] _copy_to_user+0x24/0xa0 [ 60.921299][ T1366] simple_read_from_buffer+0xed/0x160 [ 60.921337][ T1366] proc_fail_nth_read+0x19e/0x210 [ 60.921360][ T1366] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 60.921383][ T1366] ? bpf_lsm_file_permission+0xd/0x20 [ 60.921408][ T1366] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 60.921431][ T1366] vfs_read+0x278/0xb60 [ 60.921458][ T1366] ? __cfi_vfs_read+0x10/0x10 [ 60.921484][ T1366] ? __kasan_check_write+0x18/0x20 [ 60.921509][ T1366] ? mutex_lock+0x92/0x1c0 [ 60.921530][ T1366] ? __cfi_mutex_lock+0x10/0x10 [ 60.921552][ T1366] ? __fget_files+0x2c5/0x340 [ 60.921584][ T1366] ksys_read+0x141/0x250 [ 60.921612][ T1366] ? __cfi_ksys_read+0x10/0x10 [ 60.921639][ T1366] ? __kasan_check_read+0x15/0x20 [ 60.921665][ T1366] __x64_sys_read+0x7f/0x90 [ 60.921692][ T1366] x64_sys_call+0x2638/0x2ee0 [ 60.921722][ T1366] do_syscall_64+0x58/0xf0 [ 60.921751][ T1366] ? clear_bhb_loop+0x35/0x90 [ 60.921785][ T1366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.921818][ T1366] RIP: 0033:0x7f832e98d33c [ 60.921836][ T1366] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.921856][ T1366] RSP: 002b:00007f832f87b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.921881][ T1366] RAX: ffffffffffffffda RBX: 00007f832ebb5fa0 RCX: 00007f832e98d33c [ 60.921897][ T1366] RDX: 000000000000000f RSI: 00007f832f87b0a0 RDI: 0000000000000004 [ 60.921910][ T1366] RBP: 00007f832f87b090 R08: 0000000000000000 R09: 0000000000000000 [ 60.921925][ T1366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.921944][ T1366] R13: 0000000000000000 R14: 00007f832ebb5fa0 R15: 00007ffee795ff78 [ 60.921968][ T1366] [ 61.192038][ T36] audit: type=1400 audit(1750461188.660:288): avc: denied { setopt } for pid=1371 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.246883][ T36] audit: type=1400 audit(1750461188.690:289): avc: denied { read } for pid=1371 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 61.293094][ T1381] FAULT_INJECTION: forcing a failure. [ 61.293094][ T1381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.308182][ T1381] CPU: 1 UID: 0 PID: 1381 Comm: syz.0.392 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 61.308223][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.308238][ T1381] Call Trace: [ 61.308246][ T1381] [ 61.308257][ T1381] __dump_stack+0x21/0x30 [ 61.308290][ T1381] dump_stack_lvl+0x10c/0x190 [ 61.308317][ T1381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.308346][ T1381] ? kstrtoull+0x13b/0x1e0 [ 61.308369][ T1381] dump_stack+0x19/0x20 [ 61.308394][ T1381] should_fail_ex+0x3d9/0x530 [ 61.308422][ T1381] should_fail+0xf/0x20 [ 61.308445][ T1381] should_fail_usercopy+0x1e/0x30 [ 61.308473][ T1381] _copy_from_user+0x22/0xb0 [ 61.308503][ T1381] ___sys_sendmsg+0x159/0x2a0 [ 61.308541][ T1381] ? __sys_sendmsg+0x280/0x280 [ 61.308576][ T1381] ? proc_fail_nth_write+0x17e/0x210 [ 61.308598][ T1381] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 61.308630][ T1381] __x64_sys_sendmsg+0x1eb/0x2c0 [ 61.308652][ T1381] ? fput+0x1a5/0x240 [ 61.308686][ T1381] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 61.308708][ T1381] ? ksys_write+0x1ef/0x250 [ 61.308737][ T1381] ? __kasan_check_read+0x15/0x20 [ 61.308764][ T1381] x64_sys_call+0x2a4c/0x2ee0 [ 61.308795][ T1381] do_syscall_64+0x58/0xf0 [ 61.308824][ T1381] ? clear_bhb_loop+0x35/0x90 [ 61.308863][ T1381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.308897][ T1381] RIP: 0033:0x7f832e98e929 [ 61.308917][ T1381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.308938][ T1381] RSP: 002b:00007f832f87b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.308964][ T1381] RAX: ffffffffffffffda RBX: 00007f832ebb5fa0 RCX: 00007f832e98e929 [ 61.308982][ T1381] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 61.308998][ T1381] RBP: 00007f832f87b090 R08: 0000000000000000 R09: 0000000000000000 [ 61.309013][ T1381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.309028][ T1381] R13: 0000000000000000 R14: 00007f832ebb5fa0 R15: 00007ffee795ff78 [ 61.309048][ T1381] [ 61.538737][ T1383] rust_binder: Write failure EFAULT in pid:234 [ 61.676840][ T36] audit: type=1400 audit(1750461189.140:290): avc: denied { lock } for pid=1384 comm="syz.2.394" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.811259][ T1392] FAULT_INJECTION: forcing a failure. [ 61.811259][ T1392] name failslab, interval 1, probability 0, space 0, times 0 [ 61.824193][ T1392] CPU: 0 UID: 0 PID: 1392 Comm: syz.1.397 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 61.824230][ T1392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.824243][ T1392] Call Trace: [ 61.824250][ T1392] [ 61.824259][ T1392] __dump_stack+0x21/0x30 [ 61.824288][ T1392] dump_stack_lvl+0x10c/0x190 [ 61.824312][ T1392] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.824338][ T1392] dump_stack+0x19/0x20 [ 61.824360][ T1392] should_fail_ex+0x3d9/0x530 [ 61.824384][ T1392] should_failslab+0xac/0x100 [ 61.824411][ T1392] __kmalloc_node_noprof+0x6c/0x450 [ 61.824435][ T1392] ? __kvmalloc_node_noprof+0x11d/0x300 [ 61.824459][ T1392] __kvmalloc_node_noprof+0x11d/0x300 [ 61.824483][ T1392] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 61.824506][ T1392] ? __check_object_size+0x8a/0x620 [ 61.824532][ T1392] vmemdup_user+0x40/0x190 [ 61.824553][ T1392] ? path_setxattr+0x1c1/0x560 [ 61.824579][ T1392] path_setxattr+0x231/0x560 [ 61.824606][ T1392] ? simple_xattrs_free+0x180/0x180 [ 61.824637][ T1392] ? irqentry_exit+0x4a/0x60 [ 61.824660][ T1392] __x64_sys_setxattr+0xc9/0xe0 [ 61.824683][ T1392] x64_sys_call+0x2d94/0x2ee0 [ 61.824709][ T1392] do_syscall_64+0x58/0xf0 [ 61.824735][ T1392] ? clear_bhb_loop+0x35/0x90 [ 61.824765][ T1392] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.824793][ T1392] RIP: 0033:0x7fa1efb8e929 [ 61.824811][ T1392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.824829][ T1392] RSP: 002b:00007fa1f0a31038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 61.824846][ T1392] RAX: ffffffffffffffda RBX: 00007fa1efdb5fa0 RCX: 00007fa1efb8e929 [ 61.824858][ T1392] RDX: 0000200000000480 RSI: 00002000000002c0 RDI: 0000200000000000 [ 61.824869][ T1392] RBP: 00007fa1f0a31090 R08: 0000000000000000 R09: 0000000000000000 [ 61.824879][ T1392] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 61.824888][ T1392] R13: 0000000000000000 R14: 00007fa1efdb5fa0 R15: 00007ffc5f6990a8 [ 61.824902][ T1392] [ 62.057334][ T1030] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 62.217226][ T1030] usb 1-1: Using ep0 maxpacket: 16 [ 62.237395][ T1030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.267187][ T1030] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 62.289033][ T1030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.318391][ T1030] usb 1-1: config 0 descriptor?? [ 62.732405][ T1030] hid-generic 0003:04D8:00DD.0005: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 62.931331][ T1030] usb 1-1: USB disconnect, device number 13 [ 63.275393][ T1465] rust_binder: Error while translating object. [ 63.275439][ T1465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 63.285358][ T1465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:252 [ 63.527215][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 63.572634][ T1501] rust_binder: Write failure EFAULT in pid:254 [ 63.677238][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 63.690275][ T9] usb 4-1: config 0 has an invalid interface number: 233 but max is 0 [ 63.698655][ T9] usb 4-1: config 0 has no interface number 0 [ 63.704778][ T9] usb 4-1: config 0 interface 233 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 63.717112][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=60fe, bcdDevice=af.2e [ 63.726230][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.734260][ T9] usb 4-1: Product: syz [ 63.738541][ T9] usb 4-1: Manufacturer: syz [ 63.743132][ T9] usb 4-1: SerialNumber: syz [ 63.748393][ T9] usb 4-1: config 0 descriptor?? [ 64.007200][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 64.157288][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 64.166711][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.177778][ T45] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 64.193439][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.216187][ T45] usb 1-1: config 0 descriptor?? [ 64.302247][ T1525] rust_binder: Write failure EINVAL in pid:107 [ 64.302600][ T1525] rust_binder: Read failure Err(EAGAIN) in pid:107 [ 64.597245][ T1030] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 64.624464][ T45] hid-generic 0003:04D8:00DD.0006: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 64.757229][ T1030] usb 2-1: Using ep0 maxpacket: 8 [ 64.763551][ T1030] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.773810][ T1030] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 64.782732][ T1030] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 64.793894][ T1030] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 64.805155][ T1030] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 64.814219][ T1030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.825046][ T9] usb 1-1: USB disconnect, device number 14 [ 64.825699][ T1030] hub 2-1:1.0: bad descriptor, ignoring hub [ 64.837594][ T1030] hub 2-1:1.0: probe with driver hub failed with error -5 [ 64.844910][ T1030] cdc_wdm 2-1:1.0: skipping garbage [ 64.850163][ T1030] cdc_wdm 2-1:1.0: skipping garbage [ 64.855907][ T1030] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 64.861872][ T1030] cdc_wdm 2-1:1.0: Unknown control protocol [ 65.137294][ T9] usb 2-1: USB disconnect, device number 15 [ 65.623173][ T1585] rust_binder: Write failure EFAULT in pid:283 [ 65.801015][ T1596] SELinux: policydb version -845211227 does not match my version range 15-33 [ 65.816239][ T1596] SELinux: failed to load policy [ 65.857203][ T405] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 66.017194][ T405] usb 2-1: Using ep0 maxpacket: 16 [ 66.023598][ T405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.034654][ T405] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 66.043757][ T405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.052604][ T405] usb 2-1: config 0 descriptor?? [ 66.057222][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 66.207203][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 66.214199][ T45] usb 1-1: config 1 interface 0 altsetting 19 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 66.225710][ T45] usb 1-1: config 1 interface 0 altsetting 19 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 66.239086][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 66.247330][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.256469][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.264855][ T45] usb 1-1: Product: syz [ 66.269160][ T45] usb 1-1: Manufacturer: syz [ 66.274042][ T45] usb 1-1: SerialNumber: syz [ 66.280608][ T1596] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 66.472486][ T405] hid-generic 0003:04D8:00DD.0007: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 66.671887][ T305] usb 2-1: USB disconnect, device number 16 [ 66.690917][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 66.700396][ T45] usb 1-1: USB disconnect, device number 15 [ 66.808438][ T405] usb 4-1: USB disconnect, device number 13 [ 67.488046][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 67.647190][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 67.660838][ T1747] ip6gretap0: mtu less than device minimum [ 67.663001][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.666726][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 67.666740][ T36] audit: type=1400 audit(1750526731.129:294): avc: denied { ioctl } for pid=1745 comm="syz.1.561" path="socket:[18084]" dev="sockfs" ino=18084 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.682266][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 67.720120][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 67.734218][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 67.745800][ T45] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 67.758475][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.782580][ T45] hub 4-1:1.0: bad descriptor, ignoring hub [ 67.791044][ T45] hub 4-1:1.0: probe with driver hub failed with error -5 [ 67.807319][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 67.817316][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 67.823821][ T45] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 67.830376][ T45] cdc_wdm 4-1:1.0: Unknown control protocol [ 68.027335][ T405] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 68.087382][ T45] usb 4-1: USB disconnect, device number 14 [ 68.187253][ T405] usb 2-1: Using ep0 maxpacket: 32 [ 68.199938][ T405] usb 2-1: config 0 has an invalid interface number: 233 but max is 0 [ 68.211864][ T405] usb 2-1: config 0 has no interface number 0 [ 68.220884][ T405] usb 2-1: config 0 interface 233 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 68.233240][ T405] usb 2-1: New USB device found, idVendor=0c45, idProduct=60fe, bcdDevice=af.2e [ 68.242710][ T405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.250939][ T405] usb 2-1: Product: syz [ 68.255124][ T405] usb 2-1: Manufacturer: syz [ 68.262081][ T405] usb 2-1: SerialNumber: syz [ 68.267896][ T405] usb 2-1: config 0 descriptor?? [ 68.526977][ T36] audit: type=1400 audit(1750526731.989:295): avc: denied { getopt } for pid=1829 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.565917][ T1831] SELinux: policydb version -845211227 does not match my version range 15-33 [ 68.585301][ T1831] SELinux: failed to load policy [ 68.837309][ T45] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 68.877219][ T405] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 68.897249][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 68.987240][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 68.994312][ T45] usb 1-1: config 1 interface 0 altsetting 19 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 69.005781][ T45] usb 1-1: config 1 interface 0 altsetting 19 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.018777][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 69.027411][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.036492][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.044529][ T45] usb 1-1: Product: syz [ 69.048733][ T45] usb 1-1: Manufacturer: syz [ 69.053336][ T45] usb 1-1: SerialNumber: syz [ 69.057197][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 69.059300][ T1831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.064112][ T405] usb 4-1: Using ep0 maxpacket: 8 [ 69.076462][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.086865][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 69.095878][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 69.107116][ T405] usb 4-1: unable to get BOS descriptor or descriptor too short [ 69.115040][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 69.126414][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 69.135632][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.143725][ T405] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.156916][ T405] usb 4-1: config 1 interface 0 has no altsetting 0 [ 69.165033][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 69.171055][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 69.178458][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 69.183812][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 69.190117][ T405] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 69.199519][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 69.205456][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 69.211613][ T405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.223020][ T405] usb 4-1: Product: ᠆ [ 69.229073][ T405] usb 4-1: Manufacturer: 왢㢝欮㞊뻂梅Ͼ쟒嶃ᴷ啰짿槷癥 [ 69.237189][ T405] usb 4-1: SerialNumber: 替ꡙꯠⶄꂵ瘦횄ㆡ評誘꘶珈륖훔靂㝯觔孾庍齕垬۸닜鸈ꕷ୸뒾ሽ䲔ϧ鑜턈睁ዊ票捔輨햸団繳퉉츪ㆠ켊㤒蓿琙䝊峸銂䖷퉳蹕ꍄŃ㤏寡롽楸環赕 [ 69.467851][ T405] usbhid 4-1:1.0: can't add hid device: -71 [ 69.473929][ T405] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 69.484604][ T405] usb 4-1: USB disconnect, device number 15 [ 69.497817][ T365] usb 3-1: USB disconnect, device number 13 [ 69.502507][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 69.513369][ T45] usb 1-1: USB disconnect, device number 16 [ 69.910679][ T1859] rust_binder: Write failure EFAULT in pid:254 [ 70.133788][ T1884] binder: Bad value for 'stats' [ 70.179435][ T1890] FAULT_INJECTION: forcing a failure. [ 70.179435][ T1890] name failslab, interval 1, probability 0, space 0, times 0 [ 70.192509][ T1890] CPU: 0 UID: 0 PID: 1890 Comm: syz.3.626 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 70.192545][ T1890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.192560][ T1890] Call Trace: [ 70.192567][ T1890] [ 70.192576][ T1890] __dump_stack+0x21/0x30 [ 70.192606][ T1890] dump_stack_lvl+0x10c/0x190 [ 70.192631][ T1890] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.192658][ T1890] dump_stack+0x19/0x20 [ 70.192681][ T1890] should_fail_ex+0x3d9/0x530 [ 70.192704][ T1890] should_failslab+0xac/0x100 [ 70.192734][ T1890] kmem_cache_alloc_noprof+0x42/0x3a0 [ 70.192758][ T1890] ? security_file_alloc+0x49/0x200 [ 70.192788][ T1890] security_file_alloc+0x49/0x200 [ 70.192814][ T1890] init_file+0x9e/0x210 [ 70.192843][ T1890] alloc_empty_file+0xd9/0x280 [ 70.192873][ T1890] ? _raw_spin_unlock+0x45/0x60 [ 70.192901][ T1890] alloc_file_pseudo+0x13a/0x1e0 [ 70.192931][ T1890] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 70.192960][ T1890] ? inet6_create+0xd09/0x11d0 [ 70.192992][ T1890] sock_alloc_file+0xbe/0x2b0 [ 70.193030][ T1890] __sys_socket+0x14a/0x1c0 [ 70.193055][ T1890] __x64_sys_socket+0x7e/0x90 [ 70.193081][ T1890] x64_sys_call+0x2608/0x2ee0 [ 70.193107][ T1890] do_syscall_64+0x58/0xf0 [ 70.193134][ T1890] ? clear_bhb_loop+0x35/0x90 [ 70.193165][ T1890] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.193195][ T1890] RIP: 0033:0x7f985e78e929 [ 70.193212][ T1890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.193230][ T1890] RSP: 002b:00007f985f51d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 70.193254][ T1890] RAX: ffffffffffffffda RBX: 00007f985e9b5fa0 RCX: 00007f985e78e929 [ 70.193270][ T1890] RDX: 0000000000000011 RSI: 0000000000000002 RDI: 000000000000000a [ 70.193285][ T1890] RBP: 00007f985f51d090 R08: 0000000000000000 R09: 0000000000000000 [ 70.193297][ T1890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.193309][ T1890] R13: 0000000000000001 R14: 00007f985e9b5fa0 R15: 00007ffd65bbb348 [ 70.193326][ T1890] [ 70.233971][ T1896] rust_binder: Write failure EFAULT in pid:273 [ 70.237183][ T405] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 70.483783][ T1907] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 70.487203][ T1030] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 70.587206][ T405] usb 1-1: Using ep0 maxpacket: 8 [ 70.593495][ T405] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.603998][ T405] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 70.613104][ T405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 70.624690][ T405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 70.635909][ T405] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 70.644999][ T405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.656967][ T405] hub 1-1:1.0: bad descriptor, ignoring hub [ 70.663457][ T405] hub 1-1:1.0: probe with driver hub failed with error -5 [ 70.667194][ T1030] usb 3-1: Using ep0 maxpacket: 16 [ 70.670929][ T405] cdc_wdm 1-1:1.0: skipping garbage [ 70.677617][ T1030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.682549][ T405] cdc_wdm 1-1:1.0: skipping garbage [ 70.698097][ T405] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 70.703103][ T1030] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 70.708806][ T405] cdc_wdm 1-1:1.0: Unknown control protocol [ 70.718133][ T1030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.730839][ T1030] usb 3-1: config 0 descriptor?? [ 71.007438][ T305] usb 1-1: USB disconnect, device number 17 [ 71.105250][ T36] audit: type=1400 audit(1750526734.569:296): avc: denied { getopt } for pid=1940 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.143147][ T1030] hid-generic 0003:04D8:00DD.0008: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 71.203784][ T1948] FAULT_INJECTION: forcing a failure. [ 71.203784][ T1948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.217035][ T1948] CPU: 0 UID: 0 PID: 1948 Comm: syz.3.651 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 71.217062][ T1948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.217073][ T1948] Call Trace: [ 71.217080][ T1948] [ 71.217086][ T1948] __dump_stack+0x21/0x30 [ 71.217109][ T1948] dump_stack_lvl+0x10c/0x190 [ 71.217133][ T1948] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.217160][ T1948] dump_stack+0x19/0x20 [ 71.217181][ T1948] should_fail_ex+0x3d9/0x530 [ 71.217205][ T1948] should_fail+0xf/0x20 [ 71.217220][ T1948] should_fail_usercopy+0x1e/0x30 [ 71.217239][ T1948] _copy_from_user+0x22/0xb0 [ 71.217260][ T1948] do_sys_poll+0x246/0x1190 [ 71.217277][ T1948] ? is_bpf_text_address+0x17b/0x1a0 [ 71.217298][ T1948] ? poll_select_finish+0x600/0x600 [ 71.217313][ T1948] ? kernel_text_address+0xa9/0xe0 [ 71.217328][ T1948] ? __kernel_text_address+0x11/0x40 [ 71.217343][ T1948] ? unwind_get_return_address+0x51/0x90 [ 71.217366][ T1948] ? __kasan_check_write+0x18/0x20 [ 71.217383][ T1948] ? proc_fail_nth_write+0x17e/0x210 [ 71.217398][ T1948] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 71.217415][ T1948] ? set_user_sigmask+0xc8/0x1c0 [ 71.217432][ T1948] ? __cfi_set_user_sigmask+0x10/0x10 [ 71.217449][ T1948] ? __fget_files+0x2c5/0x340 [ 71.217470][ T1948] __se_sys_ppoll+0x200/0x260 [ 71.217484][ T1948] ? __x64_sys_ppoll+0xf0/0xf0 [ 71.217497][ T1948] ? __cfi_ksys_write+0x10/0x10 [ 71.217517][ T1948] __x64_sys_ppoll+0xc3/0xf0 [ 71.217531][ T1948] x64_sys_call+0xd20/0x2ee0 [ 71.217550][ T1948] do_syscall_64+0x58/0xf0 [ 71.217570][ T1948] ? clear_bhb_loop+0x35/0x90 [ 71.217593][ T1948] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.217615][ T1948] RIP: 0033:0x7f985e78e929 [ 71.217628][ T1948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.217641][ T1948] RSP: 002b:00007f985f51d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 71.217657][ T1948] RAX: ffffffffffffffda RBX: 00007f985e9b5fa0 RCX: 00007f985e78e929 [ 71.217669][ T1948] RDX: 0000200000000280 RSI: 0000000000000001 RDI: 0000200000000240 [ 71.217680][ T1948] RBP: 00007f985f51d090 R08: 0000000000000000 R09: 0000000000000000 [ 71.217689][ T1948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.217699][ T1948] R13: 0000000000000000 R14: 00007f985e9b5fa0 R15: 00007ffd65bbb348 [ 71.217711][ T1948] [ 71.464100][ T64] usb 3-1: USB disconnect, device number 14 [ 71.496890][ T1953] FAULT_INJECTION: forcing a failure. [ 71.496890][ T1953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.510065][ T1953] CPU: 1 UID: 0 PID: 1953 Comm: syz.3.653 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 71.510099][ T1953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.510112][ T1953] Call Trace: [ 71.510119][ T1953] [ 71.510127][ T1953] __dump_stack+0x21/0x30 [ 71.510157][ T1953] dump_stack_lvl+0x10c/0x190 [ 71.510188][ T1953] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.510214][ T1953] dump_stack+0x19/0x20 [ 71.510235][ T1953] should_fail_ex+0x3d9/0x530 [ 71.510258][ T1953] should_fail+0xf/0x20 [ 71.510277][ T1953] should_fail_usercopy+0x1e/0x30 [ 71.510299][ T1953] _copy_to_user+0x24/0xa0 [ 71.510326][ T1953] simple_read_from_buffer+0xed/0x160 [ 71.510357][ T1953] proc_fail_nth_read+0x19e/0x210 [ 71.510377][ T1953] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 71.510397][ T1953] ? bpf_lsm_file_permission+0xd/0x20 [ 71.510419][ T1953] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 71.510439][ T1953] vfs_read+0x278/0xb60 [ 71.510463][ T1953] ? __cfi_vfs_read+0x10/0x10 [ 71.510485][ T1953] ? __kasan_check_write+0x18/0x20 [ 71.510507][ T1953] ? mutex_lock+0x92/0x1c0 [ 71.510526][ T1953] ? __cfi_mutex_lock+0x10/0x10 [ 71.510540][ T1953] ? __fget_files+0x2c5/0x340 [ 71.510562][ T1953] ksys_read+0x141/0x250 [ 71.510579][ T1953] ? __cfi_ksys_read+0x10/0x10 [ 71.510604][ T1953] ? __kasan_check_read+0x15/0x20 [ 71.510621][ T1953] __x64_sys_read+0x7f/0x90 [ 71.510640][ T1953] x64_sys_call+0x2638/0x2ee0 [ 71.510667][ T1953] do_syscall_64+0x58/0xf0 [ 71.510694][ T1953] ? clear_bhb_loop+0x35/0x90 [ 71.510724][ T1953] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.510754][ T1953] RIP: 0033:0x7f985e78d33c [ 71.510771][ T1953] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 71.510790][ T1953] RSP: 002b:00007f985f51d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.510812][ T1953] RAX: ffffffffffffffda RBX: 00007f985e9b5fa0 RCX: 00007f985e78d33c [ 71.510828][ T1953] RDX: 000000000000000f RSI: 00007f985f51d0a0 RDI: 0000000000000004 [ 71.510841][ T1953] RBP: 00007f985f51d090 R08: 0000000000000000 R09: 0000000000000000 [ 71.510854][ T1953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.510876][ T1953] R13: 0000000000000000 R14: 00007f985e9b5fa0 R15: 00007ffd65bbb348 [ 71.510894][ T1953] [ 71.772266][ T405] usb 2-1: USB disconnect, device number 17 [ 71.799155][ T1964] rust_binder: Write failure EINVAL in pid:367 [ 71.814968][ T1967] binder: Unknown parameter '00000000000000000000' [ 71.843826][ T1971] FAULT_INJECTION: forcing a failure. [ 71.843826][ T1971] name failslab, interval 1, probability 0, space 0, times 0 [ 71.865724][ T1971] CPU: 1 UID: 0 PID: 1971 Comm: syz.0.662 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 71.865760][ T1971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.865773][ T1971] Call Trace: [ 71.865781][ T1971] [ 71.865789][ T1971] __dump_stack+0x21/0x30 [ 71.865819][ T1971] dump_stack_lvl+0x10c/0x190 [ 71.865843][ T1971] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.865879][ T1971] dump_stack+0x19/0x20 [ 71.865900][ T1971] should_fail_ex+0x3d9/0x530 [ 71.865924][ T1971] should_failslab+0xac/0x100 [ 71.865953][ T1971] __kmalloc_noprof+0x69/0x450 [ 71.865977][ T1971] ? security_key_alloc+0x60/0x270 [ 71.866005][ T1971] security_key_alloc+0x60/0x270 [ 71.866034][ T1971] ? __kasan_check_write+0x18/0x20 [ 71.866058][ T1971] key_alloc+0x68e/0x1070 [ 71.866085][ T1971] keyring_alloc+0x4b/0xc0 [ 71.866116][ T1971] join_session_keyring+0x13a/0x460 [ 71.866143][ T1971] lookup_user_key+0x4dd/0x1180 [ 71.866169][ T1971] ? __cfi_lookup_user_key+0x10/0x10 [ 71.866194][ T1971] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 71.866221][ T1971] ? memdup_user+0xb1/0x180 [ 71.866244][ T1971] ? strndup_user+0x40/0xd0 [ 71.866268][ T1971] __se_sys_add_key+0x2fc/0x490 [ 71.866289][ T1971] ? __x64_sys_add_key+0xf0/0xf0 [ 71.866310][ T1971] __x64_sys_add_key+0xc3/0xf0 [ 71.866331][ T1971] x64_sys_call+0x195f/0x2ee0 [ 71.866358][ T1971] do_syscall_64+0x58/0xf0 [ 71.866385][ T1971] ? clear_bhb_loop+0x35/0x90 [ 71.866417][ T1971] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.866447][ T1971] RIP: 0033:0x7f832e98e929 [ 71.866463][ T1971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.866481][ T1971] RSP: 002b:00007f832f87b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 71.866503][ T1971] RAX: ffffffffffffffda RBX: 00007f832ebb5fa0 RCX: 00007f832e98e929 [ 71.866519][ T1971] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 71.866533][ T1971] RBP: 00007f832f87b090 R08: fffffffffffffffd R09: 0000000000000000 [ 71.866547][ T1971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.866559][ T1971] R13: 0000000000000000 R14: 00007f832ebb5fa0 R15: 00007ffee795ff78 [ 71.866576][ T1971] [ 71.878695][ T36] audit: type=1400 audit(1750526735.309:297): avc: denied { setopt } for pid=1972 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.119048][ T1986] rust_binder: Error while translating object. [ 72.119076][ T1986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 72.125257][ T1986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:277 [ 72.186654][ T36] audit: type=1400 audit(1750526735.649:298): avc: denied { append } for pid=1989 comm="syz.2.672" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.227842][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 72.273688][ T36] audit: type=1400 audit(1750526735.739:299): avc: denied { bind } for pid=1996 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.326480][ T2001] rust_binder: Write failure EFAULT in pid:332 [ 72.377291][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 72.396043][ T45] usb 1-1: config 0 has an invalid interface number: 233 but max is 0 [ 72.406251][ T45] usb 1-1: config 0 has no interface number 0 [ 72.412646][ T45] usb 1-1: config 0 interface 233 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 72.437258][ T45] usb 1-1: New USB device found, idVendor=0c45, idProduct=60fe, bcdDevice=af.2e [ 72.444359][ T2007] FAULT_INJECTION: forcing a failure. [ 72.444359][ T2007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.451423][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.459715][ T2007] CPU: 0 UID: 0 PID: 2007 Comm: syz.3.678 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 72.459753][ T2007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.459769][ T2007] Call Trace: [ 72.459778][ T2007] [ 72.459787][ T2007] __dump_stack+0x21/0x30 [ 72.459833][ T2007] dump_stack_lvl+0x10c/0x190 [ 72.459860][ T2007] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.459891][ T2007] dump_stack+0x19/0x20 [ 72.459915][ T2007] should_fail_ex+0x3d9/0x530 [ 72.459942][ T2007] should_fail+0xf/0x20 [ 72.459967][ T2007] should_fail_usercopy+0x1e/0x30 [ 72.459994][ T2007] _copy_to_user+0x24/0xa0 [ 72.460025][ T2007] simple_read_from_buffer+0xed/0x160 [ 72.460064][ T2007] proc_fail_nth_read+0x19e/0x210 [ 72.460083][ T2007] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 72.460106][ T2007] ? bpf_lsm_file_permission+0xd/0x20 [ 72.460131][ T2007] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 72.460155][ T2007] vfs_read+0x278/0xb60 [ 72.460183][ T2007] ? __cfi_vfs_read+0x10/0x10 [ 72.460209][ T2007] ? __kasan_check_write+0x18/0x20 [ 72.460233][ T2007] ? mutex_lock+0x92/0x1c0 [ 72.460255][ T2007] ? __cfi_mutex_lock+0x10/0x10 [ 72.460276][ T2007] ? __fget_files+0x2c5/0x340 [ 72.460306][ T2007] ksys_read+0x141/0x250 [ 72.460333][ T2007] ? __cfi_ksys_read+0x10/0x10 [ 72.460359][ T2007] ? __kasan_check_read+0x15/0x20 [ 72.460383][ T2007] __x64_sys_read+0x7f/0x90 [ 72.460410][ T2007] x64_sys_call+0x2638/0x2ee0 [ 72.460438][ T2007] do_syscall_64+0x58/0xf0 [ 72.460469][ T2007] ? clear_bhb_loop+0x35/0x90 [ 72.460505][ T2007] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.460538][ T2007] RIP: 0033:0x7f985e78d33c [ 72.460559][ T2007] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 72.460579][ T2007] RSP: 002b:00007f985f51d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.460605][ T2007] RAX: ffffffffffffffda RBX: 00007f985e9b5fa0 RCX: 00007f985e78d33c [ 72.460623][ T2007] RDX: 000000000000000f RSI: 00007f985f51d0a0 RDI: 0000000000000003 [ 72.460639][ T2007] RBP: 00007f985f51d090 R08: 0000000000000000 R09: 0000000000000000 [ 72.460655][ T2007] R10: 5850dacc4e5078d6 R11: 0000000000000246 R12: 0000000000000001 [ 72.460669][ T2007] R13: 0000000000000001 R14: 00007f985e9b5fa0 R15: 00007ffd65bbb348 [ 72.460690][ T2007] [ 72.486868][ T36] audit: type=1326 audit(1750526735.959:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2004 comm="syz.2.679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128ab8e929 code=0x0 [ 72.494286][ T45] usb 1-1: Product: syz [ 72.577196][ T64] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 72.579839][ T45] usb 1-1: Manufacturer: syz [ 72.607772][ T2013] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 224) [ 72.608014][ T45] usb 1-1: SerialNumber: syz [ 72.616468][ T2013] rust_binder: Error while translating object. [ 72.618660][ T45] usb 1-1: config 0 descriptor?? [ 72.625386][ T2013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.768851][ T2013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283 [ 72.847226][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 72.862869][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.874116][ T64] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 72.883566][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.892345][ T64] usb 2-1: config 0 descriptor?? [ 73.053022][ T2023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.105279][ T2024] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 73.112267][ T2024] rust_binder: Got transaction with invalid offset. [ 73.120183][ T2024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.126916][ T2024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210 [ 73.301407][ T64] hid-generic 0003:04D8:00DD.0009: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 73.346822][ T36] audit: type=1400 audit(1750526736.809:301): avc: denied { checkpoint_restore } for pid=2029 comm="syz.2.687" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.503045][ T45] usb 2-1: USB disconnect, device number 18 [ 74.141536][ T36] audit: type=1400 audit(1750526737.609:302): avc: denied { setopt } for pid=2085 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.148581][ T2088] rust_binder: Write failure EFAULT in pid:238 [ 74.174950][ T36] audit: type=1400 audit(1750526737.639:303): avc: denied { nlmsg_write } for pid=2089 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 74.397278][ T365] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 74.547196][ T365] usb 4-1: Using ep0 maxpacket: 16 [ 74.553635][ T365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.564805][ T365] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 74.573938][ T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.582791][ T365] usb 4-1: config 0 descriptor?? [ 74.680196][ T36] audit: type=1400 audit(1750526738.149:304): avc: denied { ioctl } for pid=2110 comm="syz.2.719" path="socket:[19183]" dev="sockfs" ino=19183 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.821301][ T2117] binder: Unknown parameter 'X' [ 74.836141][ T2118] cgroup: fork rejected by pids controller in /syz1 [ 74.992803][ T365] hid-generic 0003:04D8:00DD.000A: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 75.191687][ T45] usb 4-1: USB disconnect, device number 16 [ 75.484424][ T2196] FAULT_INJECTION: forcing a failure. [ 75.484424][ T2196] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 75.497880][ T2196] CPU: 0 UID: 0 PID: 2196 Comm: syz.1.726 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 75.497913][ T2196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.497925][ T2196] Call Trace: [ 75.497931][ T2196] [ 75.497939][ T2196] __dump_stack+0x21/0x30 [ 75.497966][ T2196] dump_stack_lvl+0x10c/0x190 [ 75.497987][ T2196] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.498008][ T2196] ? vfs_open+0x86/0x230 [ 75.498023][ T2196] ? do_filp_open+0x1c6/0x3e0 [ 75.498050][ T2196] ? do_sys_openat2+0x12c/0x1c0 [ 75.498066][ T2196] ? __x64_sys_openat+0x13a/0x170 [ 75.498083][ T2196] ? do_syscall_64+0x58/0xf0 [ 75.498107][ T2196] dump_stack+0x19/0x20 [ 75.498126][ T2196] should_fail_ex+0x3d9/0x530 [ 75.498146][ T2196] should_fail_alloc_page+0xeb/0x110 [ 75.498172][ T2196] __alloc_pages_noprof+0x19d/0x6c0 [ 75.498189][ T2196] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 75.498210][ T2196] ? kasan_save_alloc_info+0x40/0x50 [ 75.498229][ T2196] get_zeroed_page_noprof+0x1f/0x50 [ 75.498246][ T2196] mon_alloc_buff+0x6a/0x280 [ 75.498266][ T2196] mon_bin_open+0x201/0x550 [ 75.498286][ T2196] chrdev_open+0x4db/0x5f0 [ 75.498308][ T2196] ? __cfi_chrdev_open+0x10/0x10 [ 75.498331][ T2196] ? bpf_lsm_file_open+0xd/0x20 [ 75.498350][ T2196] ? __cfi_chrdev_open+0x10/0x10 [ 75.498371][ T2196] do_dentry_open+0x978/0x1510 [ 75.498401][ T2196] vfs_open+0x86/0x230 [ 75.498415][ T2196] ? __cfi_vfs_open+0x10/0x10 [ 75.498431][ T2196] ? may_open+0x352/0x430 [ 75.498457][ T2196] path_openat+0x2b6c/0x34b0 [ 75.498501][ T2196] ? kasan_save_alloc_info+0x40/0x50 [ 75.498520][ T2196] ? getname_flags+0xc6/0x710 [ 75.498596][ T2196] ? do_sys_openat2+0xcb/0x1c0 [ 75.498612][ T2196] ? __x64_sys_openat+0x13a/0x170 [ 75.498630][ T2196] ? do_filp_open+0x3e0/0x3e0 [ 75.498659][ T2196] do_filp_open+0x1c6/0x3e0 [ 75.498685][ T2196] ? __cfi_do_filp_open+0x10/0x10 [ 75.498713][ T2196] ? alloc_fd+0x4e7/0x5a0 [ 75.498737][ T2196] do_sys_openat2+0x12c/0x1c0 [ 75.498754][ T2196] ? do_sys_open+0x100/0x100 [ 75.498771][ T2196] ? __kasan_check_write+0x18/0x20 [ 75.498792][ T2196] ? do_user_addr_fault+0xbc4/0x1200 [ 75.498814][ T2196] ? __cfi_ksys_write+0x10/0x10 [ 75.498838][ T2196] __x64_sys_openat+0x13a/0x170 [ 75.498856][ T2196] x64_sys_call+0xe69/0x2ee0 [ 75.498879][ T2196] do_syscall_64+0x58/0xf0 [ 75.498901][ T2196] ? clear_bhb_loop+0x35/0x90 [ 75.498928][ T2196] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.498953][ T2196] RIP: 0033:0x7fa1efb8d290 [ 75.498968][ T2196] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 75.498984][ T2196] RSP: 002b:00007fa1f0a30b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 75.499005][ T2196] RAX: ffffffffffffffda RBX: 0000000000000440 RCX: 00007fa1efb8d290 [ 75.499019][ T2196] RDX: 0000000000000440 RSI: 00007fa1f0a30c10 RDI: 00000000ffffff9c [ 75.499031][ T2196] RBP: 00007fa1f0a30c10 R08: 0000000000000000 R09: 00236e6f6d627375 [ 75.499043][ T2196] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 75.499055][ T2196] R13: 0000000000000001 R14: 00007fa1efdb5fa0 R15: 00007ffc5f6990a8 [ 75.499070][ T2196] [ 75.906323][ T2209] kvm: user requested TSC rate below hardware speed [ 75.910294][ T36] audit: type=1400 audit(1750526739.369:305): avc: denied { bind } for pid=2208 comm="syz.2.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.914300][ T2209] kvm: user requested TSC rate below hardware speed [ 75.982714][ T1030] usb 1-1: USB disconnect, device number 18 [ 76.245204][ T2237] FAULT_INJECTION: forcing a failure. [ 76.245204][ T2237] name failslab, interval 1, probability 0, space 0, times 0 [ 76.258132][ T2237] CPU: 0 UID: 0 PID: 2237 Comm: syz.1.743 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 76.258168][ T2237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.258182][ T2237] Call Trace: [ 76.258189][ T2237] [ 76.258198][ T2237] __dump_stack+0x21/0x30 [ 76.258227][ T2237] dump_stack_lvl+0x10c/0x190 [ 76.258251][ T2237] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.258275][ T2237] ? stack_depot_save_flags+0x38/0x800 [ 76.258301][ T2237] dump_stack+0x19/0x20 [ 76.258323][ T2237] should_fail_ex+0x3d9/0x530 [ 76.258346][ T2237] should_failslab+0xac/0x100 [ 76.258373][ T2237] __kmalloc_cache_noprof+0x41/0x3c0 [ 76.258397][ T2237] ? proc_self_get_link+0x11a/0x290 [ 76.258444][ T2237] proc_self_get_link+0x11a/0x290 [ 76.258474][ T2237] ? security_inode_follow_link+0x74/0x140 [ 76.258501][ T2237] ? __cfi_proc_self_get_link+0x10/0x10 [ 76.258531][ T2237] pick_link+0x6d5/0xe80 [ 76.258555][ T2237] step_into+0xc58/0xf50 [ 76.258578][ T2237] ? __kasan_check_read+0x15/0x20 [ 76.258600][ T2237] ? read_word_at_a_time+0x1a/0x40 [ 76.258629][ T2237] ? set_root+0x420/0x420 [ 76.258652][ T2237] ? lookup_fast+0x167/0x530 [ 76.258676][ T2237] ? inode_permission+0xf3/0x4c0 [ 76.258710][ T2237] link_path_walk+0x753/0xec0 [ 76.258737][ T2237] path_openat+0x281/0x34b0 [ 76.258769][ T2237] ? kasan_save_alloc_info+0x40/0x50 [ 76.258791][ T2237] ? getname_flags+0xc6/0x710 [ 76.258815][ T2237] ? do_sys_openat2+0xcb/0x1c0 [ 76.258835][ T2237] ? __x64_sys_openat+0x13a/0x170 [ 76.258857][ T2237] ? do_filp_open+0x3e0/0x3e0 [ 76.258888][ T2237] do_filp_open+0x1c6/0x3e0 [ 76.258916][ T2237] ? __cfi_do_filp_open+0x10/0x10 [ 76.258948][ T2237] ? alloc_fd+0x4e7/0x5a0 [ 76.258976][ T2237] do_sys_openat2+0x12c/0x1c0 [ 76.258994][ T2237] ? fput+0x1a5/0x240 [ 76.259024][ T2237] ? do_sys_open+0x100/0x100 [ 76.259042][ T2237] ? ksys_write+0x1ef/0x250 [ 76.259066][ T2237] ? __cfi_ksys_write+0x10/0x10 [ 76.259092][ T2237] __x64_sys_openat+0x13a/0x170 [ 76.259113][ T2237] x64_sys_call+0xe69/0x2ee0 [ 76.259139][ T2237] do_syscall_64+0x58/0xf0 [ 76.259166][ T2237] ? clear_bhb_loop+0x35/0x90 [ 76.259195][ T2237] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.259224][ T2237] RIP: 0033:0x7fa1efb8d290 [ 76.259241][ T2237] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 76.259257][ T2237] RSP: 002b:00007fa1f0a30f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 76.259280][ T2237] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa1efb8d290 [ 76.259294][ T2237] RDX: 0000000000000002 RSI: 00007fa1f0a30fa0 RDI: 00000000ffffff9c [ 76.259308][ T2237] RBP: 00007fa1f0a30fa0 R08: 0000000000000000 R09: 0000000000000000 [ 76.259320][ T2237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 76.259332][ T2237] R13: 0000000000000001 R14: 00007fa1efdb5fa0 R15: 00007ffc5f6990a8 [ 76.259349][ T2237] [ 76.527236][ T1030] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 76.595456][ T36] audit: type=1400 audit(1750526740.059:306): avc: denied { write } for pid=2246 comm="syz.2.748" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.727285][ T1030] usb 1-1: Using ep0 maxpacket: 16 [ 76.733689][ T1030] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.744861][ T1030] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 76.756740][ T1030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.765637][ T1030] usb 1-1: config 0 descriptor?? [ 76.796118][ T2256] SELinux: policydb version -845211227 does not match my version range 15-33 [ 76.805137][ T2256] SELinux: failed to load policy [ 76.807229][ T305] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 76.850767][ T36] audit: type=1400 audit(1750526740.319:307): avc: denied { connect } for pid=2257 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.967215][ T305] usb 2-1: Using ep0 maxpacket: 32 [ 76.973525][ T305] usb 2-1: config 0 has an invalid interface number: 233 but max is 0 [ 76.981818][ T305] usb 2-1: config 0 has no interface number 0 [ 76.987993][ T305] usb 2-1: config 0 interface 233 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 77.000140][ T305] usb 2-1: New USB device found, idVendor=0c45, idProduct=60fe, bcdDevice=af.2e [ 77.009256][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.017542][ T305] usb 2-1: Product: syz [ 77.021734][ T305] usb 2-1: Manufacturer: syz [ 77.026348][ T305] usb 2-1: SerialNumber: syz [ 77.031767][ T305] usb 2-1: config 0 descriptor?? [ 77.047214][ T64] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 77.174933][ T1030] hid-generic 0003:04D8:00DD.000B: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 77.197195][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 77.204516][ T64] usb 4-1: config 1 interface 0 altsetting 19 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 77.218240][ T64] usb 4-1: config 1 interface 0 altsetting 19 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 77.231414][ T64] usb 4-1: config 1 interface 0 has no altsetting 0 [ 77.241510][ T64] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.250705][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.258750][ T64] usb 4-1: Product: syz [ 77.262914][ T64] usb 4-1: Manufacturer: syz [ 77.267534][ T64] usb 4-1: SerialNumber: syz [ 77.273148][ T2256] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 77.375765][ T305] usb 1-1: USB disconnect, device number 19 [ 77.534256][ T36] audit: type=1400 audit(1750526740.999:308): avc: denied { write } for pid=2277 comm="syz.2.759" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 77.699839][ T64] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 77.712739][ T64] usb 4-1: USB disconnect, device number 17 [ 77.767242][ T405] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 77.918375][ T405] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.935766][ T405] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 77.947625][ T2285] FAULT_INJECTION: forcing a failure. [ 77.947625][ T2285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.948691][ T405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 77.960912][ T2285] CPU: 1 UID: 0 PID: 2285 Comm: syz.0.762 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 77.960954][ T2285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.960971][ T2285] Call Trace: [ 77.960979][ T2285] [ 77.960990][ T2285] __dump_stack+0x21/0x30 [ 77.961025][ T2285] dump_stack_lvl+0x10c/0x190 [ 77.961053][ T2285] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.961081][ T2285] ? kernel_text_address+0xa9/0xe0 [ 77.961108][ T2285] dump_stack+0x19/0x20 [ 77.961144][ T2285] should_fail_ex+0x3d9/0x530 [ 77.961171][ T2285] should_fail+0xf/0x20 [ 77.961193][ T2285] should_fail_usercopy+0x1e/0x30 [ 77.961221][ T2285] _copy_from_user+0x22/0xb0 [ 77.961254][ T2285] ___sys_sendmsg+0x159/0x2a0 [ 77.961300][ T2285] ? __sys_sendmsg+0x280/0x280 [ 77.961337][ T2285] ? kstrtouint+0x78/0xf0 [ 77.961368][ T2285] __sys_sendmmsg+0x271/0x470 [ 77.961391][ T2285] ? __cfi___sys_sendmmsg+0x10/0x10 [ 77.961417][ T2285] ? __cfi_ksys_write+0x10/0x10 [ 77.961446][ T2285] __x64_sys_sendmmsg+0xa4/0xc0 [ 77.961469][ T2285] x64_sys_call+0xfec/0x2ee0 [ 77.961499][ T2285] do_syscall_64+0x58/0xf0 [ 77.961529][ T2285] ? clear_bhb_loop+0x35/0x90 [ 77.961563][ T2285] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.961598][ T2285] RIP: 0033:0x7f832e98e929 [ 77.961617][ T2285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.961638][ T2285] RSP: 002b:00007f832f87b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 77.961664][ T2285] RAX: ffffffffffffffda RBX: 00007f832ebb5fa0 RCX: 00007f832e98e929 [ 77.961682][ T2285] RDX: 000000000000003f RSI: 00002000000000c0 RDI: 0000000000000003 [ 77.961699][ T2285] RBP: 00007f832f87b090 R08: 0000000000000000 R09: 0000000000000000 [ 77.961716][ T2285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.961729][ T2285] R13: 0000000000000000 R14: 00007f832ebb5fa0 R15: 00007ffee795ff78 [ 77.961749][ T2285] [ 78.174224][ T405] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.188478][ T405] usb 3-1: New USB device found, idVendor=084e, idProduct=0201, bcdDevice= 0.00 [ 78.197752][ T405] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 78.205902][ T405] usb 3-1: Product: syz [ 78.210288][ T405] usb 3-1: SerialNumber: syz [ 78.217071][ T405] usb 3-1: config 0 descriptor?? [ 78.223378][ T2278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.435788][ T2278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.444347][ T2278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.455670][ T2278] input: syz1 as /devices/virtual/input/input16 [ 78.463903][ T36] audit: type=1400 audit(1750526741.929:309): avc: denied { read } for pid=94 comm="acpid" name="event4" dev="devtmpfs" ino=625 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 78.485704][ T36] audit: type=1400 audit(1750526741.929:310): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=625 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 78.509563][ T36] audit: type=1400 audit(1750526741.929:311): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=625 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 78.511042][ T1030] usb 3-1: USB disconnect, device number 15 [ 78.803144][ T2307] rust_binder: Error while translating object. [ 78.803180][ T2307] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 78.809464][ T2307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:400 [ 78.894346][ T2314] SELinux: policydb version -845211227 does not match my version range 15-33 [ 78.912609][ T2314] SELinux: failed to load policy [ 79.167370][ T64] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 79.317217][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 79.324801][ T64] usb 4-1: config 1 interface 0 altsetting 19 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 79.336367][ T64] usb 4-1: config 1 interface 0 altsetting 19 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 79.349368][ T64] usb 4-1: config 1 interface 0 has no altsetting 0 [ 79.357629][ T64] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.366721][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.374763][ T64] usb 4-1: Product: syz [ 79.379286][ T64] usb 4-1: Manufacturer: syz [ 79.383899][ T64] usb 4-1: SerialNumber: syz [ 79.389534][ T2314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.437267][ T365] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 79.587214][ T365] usb 1-1: Using ep0 maxpacket: 16 [ 79.593592][ T365] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.604478][ T365] usb 1-1: config 0 has no interfaces? [ 79.610054][ T365] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 79.619197][ T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.628235][ T365] usb 1-1: config 0 descriptor?? [ 79.830189][ T64] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 79.840180][ T1030] usb 1-1: USB disconnect, device number 20 [ 79.844984][ T64] usb 4-1: USB disconnect, device number 18 [ 80.108458][ T64] usb 2-1: USB disconnect, device number 19 [ 80.122475][ T2361] FAULT_INJECTION: forcing a failure. [ 80.122475][ T2361] name failslab, interval 1, probability 0, space 0, times 0 [ 80.135285][ T2361] CPU: 0 UID: 0 PID: 2361 Comm: syz.1.792 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 80.135321][ T2361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.135335][ T2361] Call Trace: [ 80.135342][ T2361] [ 80.135350][ T2361] __dump_stack+0x21/0x30 [ 80.135378][ T2361] dump_stack_lvl+0x10c/0x190 [ 80.135401][ T2361] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.135436][ T2361] dump_stack+0x19/0x20 [ 80.135458][ T2361] should_fail_ex+0x3d9/0x530 [ 80.135482][ T2361] should_failslab+0xac/0x100 [ 80.135510][ T2361] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 80.135534][ T2361] ? proc_alloc_inode+0x48/0x150 [ 80.135556][ T2361] proc_alloc_inode+0x48/0x150 [ 80.135572][ T2361] ? __cfi_proc_alloc_inode+0x10/0x10 [ 80.135588][ T2361] alloc_inode+0x7a/0x270 [ 80.135610][ T2361] new_inode+0x25/0x1e0 [ 80.135632][ T2361] proc_pid_make_inode+0x25/0x140 [ 80.135651][ T2361] proc_pident_instantiate+0x6d/0x2c0 [ 80.135672][ T2361] proc_pident_lookup+0x1c7/0x270 [ 80.135693][ T2361] proc_tgid_base_lookup+0x2f/0x40 [ 80.135717][ T2361] __lookup_slow+0x2d4/0x400 [ 80.135744][ T2361] ? lookup_one_len+0x2f0/0x2f0 [ 80.135771][ T2361] ? down_read+0x79/0xe0 [ 80.135792][ T2361] lookup_slow+0x57/0x80 [ 80.135817][ T2361] link_path_walk+0x990/0xec0 [ 80.135843][ T2361] path_openat+0x281/0x34b0 [ 80.135873][ T2361] ? kasan_save_alloc_info+0x40/0x50 [ 80.135893][ T2361] ? getname_flags+0xc6/0x710 [ 80.135918][ T2361] ? do_sys_openat2+0xcb/0x1c0 [ 80.135937][ T2361] ? __x64_sys_openat+0x13a/0x170 [ 80.135959][ T2361] ? do_filp_open+0x3e0/0x3e0 [ 80.135991][ T2361] do_filp_open+0x1c6/0x3e0 [ 80.136021][ T2361] ? __cfi_do_filp_open+0x10/0x10 [ 80.136053][ T2361] ? __cfi_kfree_link+0x10/0x10 [ 80.136075][ T2361] ? alloc_fd+0x4e7/0x5a0 [ 80.136101][ T2361] do_sys_openat2+0x12c/0x1c0 [ 80.136132][ T2361] ? fput+0x1a5/0x240 [ 80.136161][ T2361] ? do_sys_open+0x100/0x100 [ 80.136179][ T2361] ? ksys_write+0x1ef/0x250 [ 80.136203][ T2361] ? __cfi_ksys_write+0x10/0x10 [ 80.136228][ T2361] __x64_sys_openat+0x13a/0x170 [ 80.136249][ T2361] x64_sys_call+0xe69/0x2ee0 [ 80.136275][ T2361] do_syscall_64+0x58/0xf0 [ 80.136301][ T2361] ? clear_bhb_loop+0x35/0x90 [ 80.136332][ T2361] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.136363][ T2361] RIP: 0033:0x7fa1efb8d290 [ 80.136381][ T2361] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 80.136412][ T2361] RSP: 002b:00007fa1f0a30f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 80.136434][ T2361] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa1efb8d290 [ 80.136450][ T2361] RDX: 0000000000000000 RSI: 00007fa1efc10c51 RDI: 00000000ffffff9c [ 80.136464][ T2361] RBP: 00007fa1efc10c51 R08: 0000000000000000 R09: 0000000000000000 [ 80.136477][ T2361] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 80.136490][ T2361] R13: 0000000000000001 R14: 00007fa1efdb5fa0 R15: 00007ffc5f6990a8 [ 80.136507][ T2361] [ 80.464663][ T2365] binder: Unknown parameter '' [ 80.469702][ T2366] binder: Unknown parameter '' [ 80.475114][ T36] audit: type=1400 audit(1750526743.929:312): avc: denied { read } for pid=2364 comm="syz.1.794" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.499885][ T36] audit: type=1400 audit(1750526743.929:313): avc: denied { open } for pid=2364 comm="syz.1.794" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.507384][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 80.524686][ T36] audit: type=1400 audit(1750526743.929:314): avc: denied { ioctl } for pid=2364 comm="syz.1.794" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 80.659928][ T2380] FAULT_INJECTION: forcing a failure. [ 80.659928][ T2380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.673633][ T2380] CPU: 1 UID: 0 PID: 2380 Comm: syz.1.801 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 80.673667][ T2380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.673682][ T2380] Call Trace: [ 80.673690][ T2380] [ 80.673698][ T2380] __dump_stack+0x21/0x30 [ 80.673728][ T2380] dump_stack_lvl+0x10c/0x190 [ 80.673752][ T2380] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.673776][ T2380] ? kernel_text_address+0xa9/0xe0 [ 80.673800][ T2380] dump_stack+0x19/0x20 [ 80.673824][ T2380] should_fail_ex+0x3d9/0x530 [ 80.673848][ T2380] should_fail+0xf/0x20 [ 80.673870][ T2380] should_fail_usercopy+0x1e/0x30 [ 80.673895][ T2380] _copy_from_user+0x22/0xb0 [ 80.673922][ T2380] ___sys_sendmsg+0x159/0x2a0 [ 80.673957][ T2380] ? __sys_sendmsg+0x280/0x280 [ 80.673991][ T2380] ? kstrtouint+0x78/0xf0 [ 80.674018][ T2380] __sys_sendmmsg+0x271/0x470 [ 80.674039][ T2380] ? __cfi___sys_sendmmsg+0x10/0x10 [ 80.674064][ T2380] ? __cfi_ksys_write+0x10/0x10 [ 80.674091][ T2380] __x64_sys_sendmmsg+0xa4/0xc0 [ 80.674111][ T2380] x64_sys_call+0xfec/0x2ee0 [ 80.674139][ T2380] do_syscall_64+0x58/0xf0 [ 80.674166][ T2380] ? clear_bhb_loop+0x35/0x90 [ 80.674199][ T2380] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.674230][ T2380] RIP: 0033:0x7fa1efb8e929 [ 80.674248][ T2380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.674266][ T2380] RSP: 002b:00007fa1f0a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 80.674299][ T2380] RAX: ffffffffffffffda RBX: 00007fa1efdb5fa0 RCX: 00007fa1efb8e929 [ 80.674315][ T2380] RDX: 000000000000003f RSI: 00002000000000c0 RDI: 0000000000000003 [ 80.674329][ T2380] RBP: 00007fa1f0a31090 R08: 0000000000000000 R09: 0000000000000000 [ 80.674343][ T2380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.674356][ T2380] R13: 0000000000000000 R14: 00007fa1efdb5fa0 R15: 00007ffc5f6990a8 [ 80.674373][ T2380] [ 80.879070][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 80.885792][ T45] usb 3-1: config 0 has no interfaces? [ 80.892026][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.901308][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.919141][ T45] usb 3-1: config 0 descriptor?? [ 80.980036][ T2397] FAULT_INJECTION: forcing a failure. [ 80.980036][ T2397] name failslab, interval 1, probability 0, space 0, times 0 [ 81.007275][ T2397] CPU: 1 UID: 0 PID: 2397 Comm: syz.0.808 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 81.007309][ T2397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.007323][ T2397] Call Trace: [ 81.007330][ T2397] [ 81.007338][ T2397] __dump_stack+0x21/0x30 [ 81.007368][ T2397] dump_stack_lvl+0x10c/0x190 [ 81.007391][ T2397] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.007418][ T2397] ? __kasan_check_write+0x18/0x20 [ 81.007442][ T2397] dump_stack+0x19/0x20 [ 81.007462][ T2397] should_fail_ex+0x3d9/0x530 [ 81.007485][ T2397] should_failslab+0xac/0x100 [ 81.007514][ T2397] __kmalloc_node_noprof+0x6c/0x450 [ 81.007540][ T2397] ? __kvmalloc_node_noprof+0x11d/0x300 [ 81.007564][ T2397] __kvmalloc_node_noprof+0x11d/0x300 [ 81.007588][ T2397] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 81.007611][ T2397] ? __kasan_check_write+0x18/0x20 [ 81.007633][ T2397] ? mutex_unlock+0x8b/0x240 [ 81.007654][ T2397] traverse+0xf5/0x720 [ 81.007682][ T2397] ? __cfi_mutex_lock+0x10/0x10 [ 81.007700][ T2397] ? __kasan_check_write+0x18/0x20 [ 81.007724][ T2397] seq_lseek+0x13f/0x270 [ 81.007752][ T2397] proc_reg_llseek+0x1c8/0x2b0 [ 81.007777][ T2397] __x64_sys_lseek+0x16e/0x200 [ 81.007801][ T2397] x64_sys_call+0x274c/0x2ee0 [ 81.007829][ T2397] do_syscall_64+0x58/0xf0 [ 81.007855][ T2397] ? clear_bhb_loop+0x35/0x90 [ 81.007887][ T2397] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.007916][ T2397] RIP: 0033:0x7f832e98e929 [ 81.007933][ T2397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.007953][ T2397] RSP: 002b:00007f832f87b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 81.007976][ T2397] RAX: ffffffffffffffda RBX: 00007f832ebb5fa0 RCX: 00007f832e98e929 [ 81.007993][ T2397] RDX: 0000000000000000 RSI: 0000000000007fa2 RDI: 0000000000000003 [ 81.008006][ T2397] RBP: 00007f832f87b090 R08: 0000000000000000 R09: 0000000000000000 [ 81.008019][ T2397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.008032][ T2397] R13: 0000000000000000 R14: 00007f832ebb5fa0 R15: 00007ffee795ff78 [ 81.008050][ T2397] [ 81.242848][ T2359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.251581][ T2359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.259799][ T64] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 81.290199][ T2408] input: syz0 as /devices/virtual/input/input17 [ 81.318629][ T365] usb 3-1: USB disconnect, device number 16 [ 81.336599][ T2412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.392576][ T2414] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 81.427408][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 81.441722][ T64] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 81.451114][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.460196][ T64] usb 2-1: config 0 descriptor?? [ 81.466346][ T64] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 81.487228][ T405] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 81.647199][ T405] usb 1-1: Using ep0 maxpacket: 32 [ 81.658205][ T405] usb 1-1: config 0 has an invalid interface number: 233 but max is 0 [ 81.666450][ T405] usb 1-1: config 0 has no interface number 0 [ 81.687236][ T64] usb 2-1: Detected FT232B [ 81.692119][ T405] usb 1-1: config 0 interface 233 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 81.715080][ T405] usb 1-1: New USB device found, idVendor=0c45, idProduct=60fe, bcdDevice=af.2e [ 81.724670][ T405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.732829][ T405] usb 1-1: Product: syz [ 81.737607][ T405] usb 1-1: Manufacturer: syz [ 81.742694][ T405] usb 1-1: SerialNumber: syz [ 81.752674][ T405] usb 1-1: config 0 descriptor?? [ 81.874844][ T64] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 81.892378][ T64] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 81.900224][ T64] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 81.910301][ T64] usb 2-1: USB disconnect, device number 20 [ 81.917377][ T64] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 81.926888][ T64] ftdi_sio 2-1:0.0: device disconnected [ 82.077306][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.104104][ T2454] input: syz0 as /devices/virtual/input/input18 [ 82.283960][ T2472] can: request_module (can-proto-0) failed. [ 82.290401][ T2472] rust_binder: Write failure EINVAL in pid:329 [ 82.555169][ T2492] FAULT_INJECTION: forcing a failure. [ 82.555169][ T2492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 82.574810][ T2492] CPU: 0 UID: 0 PID: 2492 Comm: syz.3.849 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 82.574846][ T2492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.574860][ T2492] Call Trace: [ 82.574866][ T2492] [ 82.574874][ T2492] __dump_stack+0x21/0x30 [ 82.574903][ T2492] dump_stack_lvl+0x10c/0x190 [ 82.574926][ T2492] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.574951][ T2492] ? __kasan_check_write+0x18/0x20 [ 82.574974][ T2492] dump_stack+0x19/0x20 [ 82.574997][ T2492] should_fail_ex+0x3d9/0x530 [ 82.575019][ T2492] should_fail_alloc_page+0xeb/0x110 [ 82.575043][ T2492] __alloc_pages_noprof+0x19d/0x6c0 [ 82.575058][ T2492] ? __cfi___fsnotify_parent+0x10/0x10 [ 82.575074][ T2492] ? chrdev_open+0x5b8/0x5f0 [ 82.575093][ T2492] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 82.575120][ T2492] pte_alloc_one+0x97/0x520 [ 82.575140][ T2492] ? __cfi_pte_alloc_one+0x10/0x10 [ 82.575159][ T2492] ? kernel_text_address+0xa9/0xe0 [ 82.575175][ T2492] ? __kernel_text_address+0x11/0x40 [ 82.575189][ T2492] ? unwind_get_return_address+0x51/0x90 [ 82.575203][ T2492] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 82.575221][ T2492] ? arch_stack_walk+0x10b/0x170 [ 82.575241][ T2492] __pte_alloc+0x79/0x420 [ 82.575258][ T2492] ? __cfi___pte_alloc+0x10/0x10 [ 82.575274][ T2492] ? stack_trace_save+0x9d/0xe0 [ 82.575292][ T2492] do_pte_missing+0x2c30/0x3e50 [ 82.575315][ T2492] ? kasan_save_track+0x4f/0x80 [ 82.575333][ T2492] ? kasan_save_track+0x3e/0x80 [ 82.575351][ T2492] ? kasan_save_free_info+0x4a/0x60 [ 82.575367][ T2492] ? kmem_cache_free+0x1c1/0x4c0 [ 82.575384][ T2492] ? putname+0x113/0x150 [ 82.575402][ T2492] ? do_sys_openat2+0x168/0x1c0 [ 82.575416][ T2492] ? __x64_sys_openat+0x13a/0x170 [ 82.575430][ T2492] ? do_syscall_64+0x58/0xf0 [ 82.575450][ T2492] ? pte_marker_clear+0x1b0/0x1b0 [ 82.575472][ T2492] ? mtree_range_walk+0x573/0x730 [ 82.575488][ T2492] handle_mm_fault+0x1166/0x1b90 [ 82.575510][ T2492] ? __cfi_handle_mm_fault+0x10/0x10 [ 82.575530][ T2492] ? lock_vma_under_rcu+0x49d/0x530 [ 82.575553][ T2492] ? do_sys_openat2+0x168/0x1c0 [ 82.575566][ T2492] ? do_sys_open+0x100/0x100 [ 82.575580][ T2492] do_user_addr_fault+0x96c/0x1200 [ 82.575597][ T2492] ? __cfi_ksys_write+0x10/0x10 [ 82.575617][ T2492] exc_page_fault+0x59/0xc0 [ 82.575632][ T2492] asm_exc_page_fault+0x2b/0x30 [ 82.575653][ T2492] RIP: 0033:0x7f985e660020 [ 82.575666][ T2492] Code: d1 12 00 89 c3 85 c0 0f 88 f5 07 00 00 83 f8 1d 0f 8f 4d 09 00 00 48 8d 3d 4d e0 18 00 31 c0 e8 06 e0 fe ff 41 ba 01 00 00 00 44 0f c1 15 d7 02 48 00 41 83 fa 05 7f 06 49 83 fd 1a 77 1b 48 [ 82.575680][ T2492] RSP: 002b:00007f985f51af70 EFLAGS: 00010206 [ 82.575693][ T2492] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 82.575703][ T2492] RDX: 0000000000000000 RSI: 00007f985e810814 RDI: 00007f985e7ee060 [ 82.575713][ T2492] RBP: 00007f985f51d090 R08: 0000000000000000 R09: 0000000000000000 [ 82.575724][ T2492] R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000000002 [ 82.575733][ T2492] R13: 0000000000000036 R14: 0000200000003100 R15: 00007ffd65bbb348 [ 82.575746][ T2492] [ 82.575836][ T2492] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 82.652677][ T2494] tipc: Enabling of bearer rejected, failed to enable media [ 82.897217][ T405] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 83.060135][ T405] usb 4-1: unable to get BOS descriptor or descriptor too short [ 83.068620][ T405] usb 4-1: not running at top speed; connect to a high speed hub [ 83.082227][ T405] usb 4-1: config 1 interface 0 has no altsetting 0 [ 83.090389][ T405] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 83.101466][ T405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.109575][ T405] usb 4-1: Product: syz [ 83.118450][ T405] usb 4-1: Manufacturer: syz [ 83.123265][ T405] usb 4-1: SerialNumber: syz [ 83.308281][ T36] audit: type=1400 audit(1750526746.779:315): avc: denied { read } for pid=2512 comm="syz.1.857" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 83.314497][ T2513] Zero length message leads to an empty skb [ 83.332822][ T36] audit: type=1400 audit(1750526746.779:316): avc: denied { open } for pid=2512 comm="syz.1.857" path="/171/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 83.361482][ T405] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 83.376020][ T405] usb 4-1: USB disconnect, device number 19 [ 83.383995][ T405] usblp0: removed [ 83.437825][ T2522] binder: Unknown parameter 'defcontext01777777777777777777777' [ 83.509544][ T2526] FAULT_INJECTION: forcing a failure. [ 83.509544][ T2526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.522686][ T2526] CPU: 1 UID: 0 PID: 2526 Comm: syz.1.861 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 83.522720][ T2526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.522735][ T2526] Call Trace: [ 83.522742][ T2526] [ 83.522751][ T2526] __dump_stack+0x21/0x30 [ 83.522781][ T2526] dump_stack_lvl+0x10c/0x190 [ 83.522809][ T2526] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.522828][ T2526] dump_stack+0x19/0x20 [ 83.522844][ T2526] should_fail_ex+0x3d9/0x530 [ 83.522861][ T2526] should_fail+0xf/0x20 [ 83.522876][ T2526] should_fail_usercopy+0x1e/0x30 [ 83.522893][ T2526] _copy_from_user+0x22/0xb0 [ 83.522913][ T2526] do_tcp_setsockopt+0x541/0x1f60 [ 83.522930][ T2526] ? __cfi_do_tcp_setsockopt+0x10/0x10 [ 83.522944][ T2526] ? selinux_socket_setsockopt+0x2ea/0x390 [ 83.522963][ T2526] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 83.522984][ T2526] tcp_setsockopt+0x58/0x110 [ 83.522998][ T2526] sock_common_setsockopt+0xb5/0xd0 [ 83.523015][ T2526] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 83.523033][ T2526] do_sock_setsockopt+0x26a/0x400 [ 83.523057][ T2526] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 83.523082][ T2526] __x64_sys_setsockopt+0x1b8/0x250 [ 83.523104][ T2526] x64_sys_call+0x2adc/0x2ee0 [ 83.523124][ T2526] do_syscall_64+0x58/0xf0 [ 83.523144][ T2526] ? clear_bhb_loop+0x35/0x90 [ 83.523168][ T2526] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.523189][ T2526] RIP: 0033:0x7fa1efb8e929 [ 83.523202][ T2526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.523215][ T2526] RSP: 002b:00007fa1f0a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.523233][ T2526] RAX: ffffffffffffffda RBX: 00007fa1efdb5fa0 RCX: 00007fa1efb8e929 [ 83.523244][ T2526] RDX: 0000000000000019 RSI: 0000000000000006 RDI: 0000000000000003 [ 83.523254][ T2526] RBP: 00007fa1f0a31090 R08: 0000000000000004 R09: 0000000000000000 [ 83.523263][ T2526] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.523273][ T2526] R13: 0000000000000000 R14: 00007fa1efdb5fa0 R15: 00007ffc5f6990a8 [ 83.523286][ T2526] [ 83.924283][ T36] audit: type=1400 audit(1750526747.389:317): avc: denied { map } for pid=2538 comm="syz.3.867" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 84.027250][ T405] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 84.077566][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.099449][ T2543] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 84.107115][ T2543] SELinux: failed to load policy [ 84.178539][ T405] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.197340][ T405] usb 2-1: not running at top speed; connect to a high speed hub [ 84.205799][ T405] usb 2-1: config 1 interface 0 has no altsetting 0 [ 84.218672][ T405] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 84.228004][ T405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.236217][ T405] usb 2-1: Product: syz [ 84.242135][ T405] usb 2-1: Manufacturer: syz [ 84.247021][ T405] usb 2-1: SerialNumber: syz [ 84.460907][ T405] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 84.467233][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 84.476163][ T405] usb 2-1: USB disconnect, device number 21 [ 84.487746][ T405] usblp0: removed [ 84.627221][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 84.633522][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.643698][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.652632][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 84.663799][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 84.675176][ T45] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.684257][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.694249][ T45] hub 3-1:1.0: bad descriptor, ignoring hub [ 84.700301][ T45] hub 3-1:1.0: probe with driver hub failed with error -5 [ 84.707588][ T45] cdc_wdm 3-1:1.0: skipping garbage [ 84.712801][ T45] cdc_wdm 3-1:1.0: skipping garbage [ 84.719285][ T45] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 84.725209][ T45] cdc_wdm 3-1:1.0: Unknown control protocol [ 84.869302][ T45] usb 1-1: USB disconnect, device number 21 [ 84.911076][ T2567] fuse: Unknown parameter 'Z.Y rqG@ č [ 84.911076][ T2567] ' [ 85.017266][ T9] usb 3-1: USB disconnect, device number 17 [ 85.041510][ T2573] FAULT_INJECTION: forcing a failure. [ 85.041510][ T2573] name failslab, interval 1, probability 0, space 0, times 0 [ 85.055089][ T2573] CPU: 1 UID: 0 PID: 2573 Comm: syz.0.879 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 85.055125][ T2573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.055140][ T2573] Call Trace: [ 85.055147][ T2573] [ 85.055156][ T2573] __dump_stack+0x21/0x30 [ 85.055185][ T2573] dump_stack_lvl+0x10c/0x190 [ 85.055209][ T2573] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.055234][ T2573] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 85.055263][ T2573] ? ref_tracker_alloc+0x29e/0x540 [ 85.055289][ T2573] dump_stack+0x19/0x20 [ 85.055311][ T2573] should_fail_ex+0x3d9/0x530 [ 85.055334][ T2573] should_failslab+0xac/0x100 [ 85.055361][ T2573] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 85.055386][ T2573] ? __alloc_skb+0x10c/0x370 [ 85.055412][ T2573] __alloc_skb+0x10c/0x370 [ 85.055438][ T2573] alloc_skb_with_frags+0xce/0x8b0 [ 85.055463][ T2573] ? ip6_pol_route+0x42c/0x12c0 [ 85.055486][ T2573] ? ip6_pol_route+0xe67/0x12c0 [ 85.055508][ T2573] ? ip6_pol_route+0x42c/0x12c0 [ 85.055529][ T2573] sock_alloc_send_pskb+0x858/0x990 [ 85.055561][ T2573] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 85.055591][ T2573] ? __kasan_check_write+0x18/0x20 [ 85.055614][ T2573] ? ipv6_get_saddr_eval+0xb2a/0xff0 [ 85.055652][ T2573] __ip6_append_data+0x286c/0x3ab0 [ 85.055674][ T2573] ? __asan_memcpy+0x5a/0x80 [ 85.055701][ T2573] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 85.055729][ T2573] ? __asan_memset+0x39/0x50 [ 85.055753][ T2573] ? ip6_setup_cork+0x1390/0x1390 [ 85.055775][ T2573] ip6_make_skb+0x41c/0x850 [ 85.055799][ T2573] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 85.055826][ T2573] ? __cfi_ip6_make_skb+0x10/0x10 [ 85.055848][ T2573] ? ip6_sk_dst_lookup_flow+0x463/0x790 [ 85.055872][ T2573] udpv6_sendmsg+0x1c46/0x26c0 [ 85.055892][ T2573] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 85.055920][ T2573] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 85.055943][ T2573] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 85.055971][ T2573] ? _raw_spin_unlock_bh+0x54/0x60 [ 85.055997][ T2573] ? release_sock+0x171/0x1f0 [ 85.056022][ T2573] ? inet_send_prepare+0x1e7/0x4f0 [ 85.056041][ T2573] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 85.056060][ T2573] inet6_sendmsg+0xef/0x120 [ 85.056090][ T2573] ____sys_sendmsg+0x5db/0xa70 [ 85.056122][ T2573] ? __sys_sendmsg_sock+0x50/0x50 [ 85.056155][ T2573] ? import_iovec+0x81/0xb0 [ 85.056186][ T2573] ___sys_sendmsg+0x220/0x2a0 [ 85.056217][ T2573] ? __sys_sendmsg+0x280/0x280 [ 85.056248][ T2573] ? kstrtouint+0x78/0xf0 [ 85.056276][ T2573] __sys_sendmmsg+0x271/0x470 [ 85.056295][ T2573] ? __cfi___sys_sendmmsg+0x10/0x10 [ 85.056320][ T2573] ? __cfi_ksys_write+0x10/0x10 [ 85.056344][ T2573] ? fd_install+0x175/0x2e0 [ 85.056371][ T2573] __x64_sys_sendmmsg+0xa4/0xc0 [ 85.056390][ T2573] x64_sys_call+0xfec/0x2ee0 [ 85.056417][ T2573] do_syscall_64+0x58/0xf0 [ 85.056443][ T2573] ? clear_bhb_loop+0x35/0x90 [ 85.056474][ T2573] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.056503][ T2573] RIP: 0033:0x7f832e98e929 [ 85.056520][ T2573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.056539][ T2573] RSP: 002b:00007f832f87b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.056562][ T2573] RAX: ffffffffffffffda RBX: 00007f832ebb5fa0 RCX: 00007f832e98e929 [ 85.056578][ T2573] RDX: 0000000000000001 RSI: 0000200000004700 RDI: 0000000000000003 [ 85.056592][ T2573] RBP: 00007f832f87b090 R08: 0000000000000000 R09: 0000000000000000 [ 85.056605][ T2573] R10: 00000000080040c4 R11: 0000000000000246 R12: 0000000000000001 [ 85.056618][ T2573] R13: 0000000000000000 R14: 00007f832ebb5fa0 R15: 00007ffee795ff78 [ 85.056642][ T2573] [ 85.445438][ T2582] FAULT_INJECTION: forcing a failure. [ 85.445438][ T2582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.458814][ T2582] CPU: 1 UID: 0 PID: 2582 Comm: syz.1.884 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 85.458859][ T2582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.458873][ T2582] Call Trace: [ 85.458881][ T2582] [ 85.458889][ T2582] __dump_stack+0x21/0x30 [ 85.458918][ T2582] dump_stack_lvl+0x10c/0x190 [ 85.458942][ T2582] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.458968][ T2582] ? _parse_integer+0x2e/0x40 [ 85.458988][ T2582] dump_stack+0x19/0x20 [ 85.459009][ T2582] should_fail_ex+0x3d9/0x530 [ 85.459031][ T2582] should_fail+0xf/0x20 [ 85.459051][ T2582] should_fail_usercopy+0x1e/0x30 [ 85.459076][ T2582] _copy_from_user+0x22/0xb0 [ 85.459103][ T2582] do_ip_setsockopt+0x3cb/0x29e0 [ 85.459136][ T2582] ? __cfi_do_ip_setsockopt+0x10/0x10 [ 85.459167][ T2582] ? selinux_socket_setsockopt+0x2ea/0x390 [ 85.459194][ T2582] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 85.459221][ T2582] ip_setsockopt+0x63/0x100 [ 85.459251][ T2582] raw_setsockopt+0xf4/0x1a0 [ 85.459276][ T2582] sock_common_setsockopt+0xb5/0xd0 [ 85.459301][ T2582] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 85.459326][ T2582] do_sock_setsockopt+0x26a/0x400 [ 85.459359][ T2582] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 85.459392][ T2582] __x64_sys_setsockopt+0x1b8/0x250 [ 85.459426][ T2582] x64_sys_call+0x2adc/0x2ee0 [ 85.459454][ T2582] do_syscall_64+0x58/0xf0 [ 85.459481][ T2582] ? clear_bhb_loop+0x35/0x90 [ 85.459522][ T2582] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.459552][ T2582] RIP: 0033:0x7fa1efb8e929 [ 85.459569][ T2582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.459588][ T2582] RSP: 002b:00007fa1f0a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 85.459610][ T2582] RAX: ffffffffffffffda RBX: 00007fa1efdb5fa0 RCX: 00007fa1efb8e929 [ 85.459624][ T2582] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000003 [ 85.459635][ T2582] RBP: 00007fa1f0a31090 R08: 0000000000000004 R09: 0000000000000000 [ 85.459646][ T2582] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 85.459657][ T2582] R13: 0000000000000000 R14: 00007fa1efdb5fa0 R15: 00007ffc5f6990a8 [ 85.459675][ T2582] [ 85.722938][ T2589] rust_binder: Write failure EFAULT in pid:517 [ 85.750148][ T2593] FAULT_INJECTION: forcing a failure. [ 85.750148][ T2593] name failslab, interval 1, probability 0, space 0, times 0 [ 85.788026][ T2593] CPU: 0 UID: 0 PID: 2593 Comm: syz.3.887 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 85.788063][ T2593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.788077][ T2593] Call Trace: [ 85.788085][ T2593] [ 85.788093][ T2593] __dump_stack+0x21/0x30 [ 85.788124][ T2593] dump_stack_lvl+0x10c/0x190 [ 85.788148][ T2593] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.788175][ T2593] dump_stack+0x19/0x20 [ 85.788197][ T2593] should_fail_ex+0x3d9/0x530 [ 85.788221][ T2593] should_failslab+0xac/0x100 [ 85.788250][ T2593] __kmalloc_node_noprof+0x6c/0x450 [ 85.788276][ T2593] ? __kvmalloc_node_noprof+0x11d/0x300 [ 85.788300][ T2593] __kvmalloc_node_noprof+0x11d/0x300 [ 85.788324][ T2593] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 85.788348][ T2593] ? tokenize_frame_descr+0x30/0xc0 [ 85.788372][ T2593] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 85.788396][ T2593] io_ring_ctx_alloc+0x533/0x1e10 [ 85.788420][ T2593] ? __cfi_vfs_write+0x10/0x10 [ 85.788445][ T2593] io_uring_create+0x2e0/0x13d0 [ 85.788470][ T2593] __se_sys_io_uring_setup+0x24b/0x260 [ 85.788501][ T2593] ? __x64_sys_io_uring_setup+0x80/0x80 [ 85.788541][ T2593] ? __kasan_check_read+0x15/0x20 [ 85.788564][ T2593] __x64_sys_io_uring_setup+0x5f/0x80 [ 85.788593][ T2593] x64_sys_call+0x22c0/0x2ee0 [ 85.788621][ T2593] do_syscall_64+0x58/0xf0 [ 85.788648][ T2593] ? clear_bhb_loop+0x35/0x90 [ 85.788679][ T2593] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.788708][ T2593] RIP: 0033:0x7f985e78e929 [ 85.788726][ T2593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.788744][ T2593] RSP: 002b:00007f985f51cfc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 85.788768][ T2593] RAX: ffffffffffffffda RBX: 00007f985e9b5fa0 RCX: 00007f985e78e929 [ 85.788784][ T2593] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000000000000f00 [ 85.788798][ T2593] RBP: 0000200000000080 R08: 0000000000000000 R09: 0000200000000140 [ 85.788813][ T2593] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 85.788826][ T2593] R13: 0000200000000040 R14: 0000000000000f00 R15: 0000200000000140 [ 85.788843][ T2593] [ 85.904899][ T2597] netlink: 192 bytes leftover after parsing attributes in process `syz.3.890'. [ 85.908555][ T36] audit: type=1400 audit(1750526749.269:318): avc: denied { ioctl } for pid=2590 comm="syz.1.888" path="socket:[24125]" dev="sockfs" ino=24125 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.101646][ T2601] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 86.197199][ T347] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 86.225690][ T36] audit: type=1400 audit(1750526749.689:319): avc: denied { read } for pid=2606 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.254983][ T36] audit: type=1400 audit(1750526749.719:320): avc: denied { ioctl } for pid=2606 comm="syz.0.895" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 86.367226][ T347] usb 3-1: Using ep0 maxpacket: 16 [ 86.378013][ T347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.389520][ T2630] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 86.389558][ T2630] rust_binder: Error while translating object. [ 86.402071][ T347] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 86.418078][ T2630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.418111][ T2630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 86.429282][ T347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.447162][ T347] usb 3-1: config 0 descriptor?? [ 86.564720][ T2644] FAULT_INJECTION: forcing a failure. [ 86.564720][ T2644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.577939][ T2644] CPU: 0 UID: 0 PID: 2644 Comm: syz.1.911 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 86.577973][ T2644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.577987][ T2644] Call Trace: [ 86.577994][ T2644] [ 86.578003][ T2644] __dump_stack+0x21/0x30 [ 86.578034][ T2644] dump_stack_lvl+0x10c/0x190 [ 86.578057][ T2644] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.578083][ T2644] dump_stack+0x19/0x20 [ 86.578105][ T2644] should_fail_ex+0x3d9/0x530 [ 86.578129][ T2644] should_fail+0xf/0x20 [ 86.578150][ T2644] should_fail_usercopy+0x1e/0x30 [ 86.578174][ T2644] _copy_to_user+0x24/0xa0 [ 86.578202][ T2644] usbdev_read+0x24c/0x720 [ 86.578233][ T2644] ? __cfi_selinux_file_permission+0x10/0x10 [ 86.578263][ T2644] ? __cfi_usbdev_read+0x10/0x10 [ 86.578291][ T2644] ? proc_fail_nth_write+0x17e/0x210 [ 86.578312][ T2644] ? proc_pid_readdir+0x511/0x670 [ 86.578338][ T2644] ? bpf_lsm_file_permission+0xd/0x20 [ 86.578360][ T2644] ? __cfi_usbdev_read+0x10/0x10 [ 86.578387][ T2644] vfs_read+0x278/0xb60 [ 86.578411][ T2644] ? __cfi_vfs_read+0x10/0x10 [ 86.578435][ T2644] ? __fget_files+0x2c5/0x340 [ 86.578464][ T2644] ksys_read+0x141/0x250 [ 86.578487][ T2644] ? __cfi_ksys_read+0x10/0x10 [ 86.578523][ T2644] ? __kasan_check_read+0x15/0x20 [ 86.578545][ T2644] __x64_sys_read+0x7f/0x90 [ 86.578570][ T2644] x64_sys_call+0x2638/0x2ee0 [ 86.578598][ T2644] do_syscall_64+0x58/0xf0 [ 86.578624][ T2644] ? clear_bhb_loop+0x35/0x90 [ 86.578655][ T2644] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.578684][ T2644] RIP: 0033:0x7fa1efb8e929 [ 86.578702][ T2644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.578720][ T2644] RSP: 002b:00007fa1f0a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.578743][ T2644] RAX: ffffffffffffffda RBX: 00007fa1efdb5fa0 RCX: 00007fa1efb8e929 [ 86.578759][ T2644] RDX: 000000000000002e RSI: 0000200000002580 RDI: 0000000000000004 [ 86.578774][ T2644] RBP: 00007fa1f0a31090 R08: 0000000000000000 R09: 0000000000000000 [ 86.578787][ T2644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.578800][ T2644] R13: 0000000000000000 R14: 00007fa1efdb5fa0 R15: 00007ffc5f6990a8 [ 86.578818][ T2644] [ 86.818442][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 86.967227][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 86.973610][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.983388][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 86.993123][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 87.002947][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 87.012737][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 87.025788][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 87.034942][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.043771][ T9] usb 1-1: config 0 descriptor?? [ 87.049702][ T347] hid-generic 0003:04D8:00DD.000C: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 87.101457][ T2663] FAULT_INJECTION: forcing a failure. [ 87.101457][ T2663] name failslab, interval 1, probability 0, space 0, times 0 [ 87.119350][ T2663] CPU: 0 UID: 0 PID: 2663 Comm: syz.3.918 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 87.119384][ T2663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.119396][ T2663] Call Trace: [ 87.119402][ T2663] [ 87.119410][ T2663] __dump_stack+0x21/0x30 [ 87.119440][ T2663] dump_stack_lvl+0x10c/0x190 [ 87.119464][ T2663] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.119489][ T2663] ? get_cached_acl+0x278/0x2c0 [ 87.119510][ T2663] dump_stack+0x19/0x20 [ 87.119534][ T2663] should_fail_ex+0x3d9/0x530 [ 87.119559][ T2663] should_failslab+0xac/0x100 [ 87.119589][ T2663] ? __cfi_shmem_initxattrs+0x10/0x10 [ 87.119608][ T2663] __kmalloc_noprof+0x69/0x450 [ 87.119626][ T2663] ? security_inode_init_security+0x120/0x560 [ 87.119646][ T2663] ? __cfi_shmem_initxattrs+0x10/0x10 [ 87.119662][ T2663] security_inode_init_security+0x120/0x560 [ 87.119690][ T2663] ? __cfi_shmem_initxattrs+0x10/0x10 [ 87.119706][ T2663] ? __cfi_security_inode_init_security+0x10/0x10 [ 87.119725][ T2663] ? __kasan_check_write+0x18/0x20 [ 87.119742][ T2663] ? set_cached_acl+0xe1/0x1a0 [ 87.119756][ T2663] ? simple_acl_create+0x190/0x1c0 [ 87.119774][ T2663] shmem_mknod+0xd5/0x200 [ 87.119790][ T2663] shmem_create+0x38/0x50 [ 87.119805][ T2663] ? __cfi_shmem_create+0x10/0x10 [ 87.119820][ T2663] path_openat+0x14ff/0x34b0 [ 87.119848][ T2663] ? do_filp_open+0x3e0/0x3e0 [ 87.119872][ T2663] do_filp_open+0x1c6/0x3e0 [ 87.119895][ T2663] ? __cfi_do_filp_open+0x10/0x10 [ 87.119920][ T2663] ? alloc_fd+0x4e7/0x5a0 [ 87.119941][ T2663] do_sys_openat2+0x12c/0x1c0 [ 87.119956][ T2663] ? do_sys_open+0x100/0x100 [ 87.119970][ T2663] ? __kasan_check_write+0x18/0x20 [ 87.119987][ T2663] ? do_user_addr_fault+0xbc4/0x1200 [ 87.120005][ T2663] ? __cfi_ksys_write+0x10/0x10 [ 87.120024][ T2663] __x64_sys_openat+0x13a/0x170 [ 87.120039][ T2663] x64_sys_call+0xe69/0x2ee0 [ 87.120059][ T2663] do_syscall_64+0x58/0xf0 [ 87.120080][ T2663] ? clear_bhb_loop+0x35/0x90 [ 87.120103][ T2663] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.120125][ T2663] RIP: 0033:0x7f985e78d290 [ 87.120139][ T2663] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 87.120153][ T2663] RSP: 002b:00007f985f51cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 87.120171][ T2663] RAX: ffffffffffffffda RBX: 00000000000040c0 RCX: 00007f985e78d290 [ 87.120183][ T2663] RDX: 00000000000040c0 RSI: 00007f985f51cc10 RDI: 00000000ffffff9c [ 87.120194][ T2663] RBP: 00007f985f51cc10 R08: 0000000000000000 R09: 0000000000000000 [ 87.120204][ T2663] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 87.120214][ T2663] R13: 0000000000000000 R14: 00007f985e9b5fa0 R15: 00007ffd65bbb348 [ 87.120227][ T2663] [ 87.245369][ T347] usb 3-1: USB disconnect, device number 18 [ 87.270962][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 87.417207][ T45] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 87.452552][ T2667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 87.452578][ T2667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:407 [ 87.578618][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.595884][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 87.604531][ T45] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 87.617713][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 87.625657][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 87.634770][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.642800][ T45] usb 2-1: Product: syz [ 87.646959][ T45] usb 2-1: Manufacturer: syz [ 87.651580][ T45] usb 2-1: SerialNumber: syz [ 87.747227][ T347] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 87.861709][ T45] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 22 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 87.873846][ T45] usb 2-1: USB disconnect, device number 22 [ 87.881387][ T45] usblp1: removed [ 87.898356][ T347] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.910040][ T347] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.921519][ T347] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 87.933015][ T347] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 87.942124][ T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.951110][ T2674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.057198][ T1030] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 88.187189][ T1030] usb 3-1: device descriptor read/64, error -71 [ 88.427190][ T1030] usb 3-1: device descriptor read/64, error -71 [ 88.667191][ T1030] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 88.767640][ T347] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 88.775285][ T347] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input19 [ 88.797195][ T1030] usb 3-1: device descriptor read/64, error -71 [ 89.037416][ T1030] usb 3-1: device descriptor read/64, error -71 [ 89.147364][ T1030] usb usb3-port1: attempt power cycle [ 89.247809][ T36] audit: type=1400 audit(1750526752.719:321): avc: denied { ioctl } for pid=2689 comm="syz.1.929" path="mnt:[4026532397]" dev="nsfs" ino=4026532397 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.331545][ T347] usb 1-1: USB disconnect, device number 22 [ 89.352728][ T347] usblp0: removed [ 89.383582][ T2700] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 89.476693][ T2705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.493179][ T1030] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 89.494380][ T2705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.518249][ T1030] usb 3-1: device descriptor read/8, error -71 [ 89.637275][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 89.648340][ T1030] usb 3-1: device descriptor read/8, error -71 [ 89.787185][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 89.793437][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.804498][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 89.813641][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.817220][ T347] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 89.825437][ T9] usb 2-1: config 0 descriptor?? [ 89.887230][ T1030] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 89.908271][ T1030] usb 3-1: device descriptor read/8, error -71 [ 89.978627][ T347] usb 1-1: unable to get BOS descriptor or descriptor too short [ 89.986355][ T347] usb 1-1: no configurations [ 89.991086][ T347] usb 1-1: can't read configurations, error -22 [ 90.038267][ T1030] usb 3-1: device descriptor read/8, error -71 [ 90.127246][ T347] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 90.147330][ T1030] usb usb3-port1: unable to enumerate USB device [ 90.240487][ T9] hid-generic 0003:04D8:00DD.000D: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 90.288701][ T347] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.296548][ T347] usb 1-1: no configurations [ 90.301256][ T347] usb 1-1: can't read configurations, error -22 [ 90.307730][ T347] usb usb1-port1: attempt power cycle [ 90.442328][ T1030] usb 2-1: USB disconnect, device number 23 [ 90.549030][ T31] usb 4-1: USB disconnect, device number 20 [ 90.549042][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 90.626856][ T2714] FAULT_INJECTION: forcing a failure. [ 90.626856][ T2714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.640277][ T2714] CPU: 0 UID: 0 PID: 2714 Comm: syz.3.938 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 90.640304][ T2714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.640315][ T2714] Call Trace: [ 90.640321][ T2714] [ 90.640327][ T2714] __dump_stack+0x21/0x30 [ 90.640350][ T2714] dump_stack_lvl+0x10c/0x190 [ 90.640376][ T2714] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.640395][ T2714] ? vsnprintf+0x7b4/0x1aa0 [ 90.640415][ T2714] ? __asan_memcpy+0x5a/0x80 [ 90.640432][ T2714] dump_stack+0x19/0x20 [ 90.640449][ T2714] should_fail_ex+0x3d9/0x530 [ 90.640466][ T2714] should_fail+0xf/0x20 [ 90.640482][ T2714] should_fail_usercopy+0x1e/0x30 [ 90.640501][ T2714] _copy_from_user+0x22/0xb0 [ 90.640530][ T2714] kstrtouint_from_user+0xc2/0x150 [ 90.640555][ T2714] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 90.640576][ T2714] ? selinux_file_permission+0x309/0xb30 [ 90.640600][ T2714] ? __cfi_selinux_file_permission+0x10/0x10 [ 90.640623][ T2714] proc_fail_nth_write+0x89/0x210 [ 90.640638][ T2714] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 90.640653][ T2714] ? bpf_lsm_file_permission+0xd/0x20 [ 90.640670][ T2714] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 90.640684][ T2714] vfs_write+0x3c0/0xe80 [ 90.640703][ T2714] ? __cfi_down_write_killable+0x10/0x10 [ 90.640721][ T2714] ? __cfi_vfs_write+0x10/0x10 [ 90.640738][ T2714] ? __kasan_check_write+0x18/0x20 [ 90.640755][ T2714] ? mutex_lock+0x92/0x1c0 [ 90.640769][ T2714] ? __cfi_mutex_lock+0x10/0x10 [ 90.640783][ T2714] ? __fget_files+0x2c5/0x340 [ 90.640805][ T2714] ksys_write+0x141/0x250 [ 90.640823][ T2714] ? __cfi_ksys_write+0x10/0x10 [ 90.640843][ T2714] ? __kasan_check_read+0x15/0x20 [ 90.640860][ T2714] __x64_sys_write+0x7f/0x90 [ 90.640878][ T2714] x64_sys_call+0x271c/0x2ee0 [ 90.640898][ T2714] do_syscall_64+0x58/0xf0 [ 90.640918][ T2714] ? clear_bhb_loop+0x35/0x90 [ 90.640941][ T2714] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.640964][ T2714] RIP: 0033:0x7f985e78d3df [ 90.640977][ T2714] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 90.640991][ T2714] RSP: 002b:00007f985f51d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 90.641008][ T2714] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f985e78d3df [ 90.641019][ T2714] RDX: 0000000000000001 RSI: 00007f985f51d0a0 RDI: 0000000000000004 [ 90.641030][ T2714] RBP: 00007f985f51d090 R08: 0000000000000000 R09: 000000005db19000 [ 90.641040][ T2714] R10: 0000000000000011 R11: 0000000000000293 R12: 0000000000000002 [ 90.641050][ T2714] R13: 0000000000000000 R14: 00007f985e9b5fa0 R15: 00007ffd65bbb348 [ 90.641063][ T2714] [ 90.649777][ T347] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 90.939257][ T347] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.947042][ T347] usb 1-1: no configurations [ 90.951746][ T347] usb 1-1: can't read configurations, error -22 [ 90.969851][ T2722] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 90.969851][ T2722] attempt to add with overflow [ 90.991838][ T2722] ------------[ cut here ]------------ [ 90.997659][ T2722] kernel BUG at rust/helpers/bug.c:7! [ 91.003967][ T2722] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 91.011376][ T2722] CPU: 0 UID: 0 PID: 2722 Comm: syz.1.941 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 91.024755][ T2722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.034931][ T2722] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 91.040253][ T2722] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ad 38 58 13 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 e7 fc 11 9f 90 90 90 90 90 90 90 90 90 [ 91.059871][ T2722] RSP: 0018:ffffc9000e11f3f0 EFLAGS: 00010246 [ 91.065948][ T2722] RAX: 000000000000008c RBX: 1ffff92001c23e80 RCX: fa776be7bfc27800 [ 91.073935][ T2722] RDX: ffffc900015f1000 RSI: 000000000000406c RDI: 000000000000406d [ 91.077247][ T36] audit: type=1400 audit(1750526754.469:322): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 91.081913][ T2722] RBP: ffffc9000e11f3f0 R08: ffffc9000e11f0e7 R09: 1ffff92001c23e1c [ 91.081935][ T2722] R10: dffffc0000000000 R11: fffff52001c23e1d R12: 0000000000000000 [ 91.081954][ T2722] R13: dffffc0000000000 R14: ffffc9000e11f420 R15: ffffc9000e11f450 [ 91.104416][ T36] audit: type=1400 audit(1750526754.489:323): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.111654][ T2722] FS: 00007fa1f0a316c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 91.111681][ T2722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.111698][ T2722] CR2: 0000000000000000 CR3: 000000011a8e6000 CR4: 00000000003526b0 [ 91.121017][ T36] audit: type=1400 audit(1750526754.489:324): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.127834][ T2722] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.127853][ T2722] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.127872][ T2722] Call Trace: [ 91.150415][ T347] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 91.158234][ T2722] [ 91.158248][ T2722] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 91.165277][ T36] audit: type=1400 audit(1750526754.489:325): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.172944][ T2722] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 91.172983][ T2722] ? kernel_text_address+0xa9/0xe0 [ 91.173006][ T2722] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 91.194963][ T36] audit: type=1400 audit(1750526754.489:326): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.202277][ T2722] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 91.202319][ T2722] ? arch_stack_walk+0x10b/0x170 [ 91.210980][ T36] audit: type=1400 audit(1750526754.489:327): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.213746][ T2722] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 91.221777][ T36] audit: type=1400 audit(1750526754.489:328): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.224282][ T2722] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 91.278859][ T347] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.278972][ T2722] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 91.299659][ T347] usb 1-1: no configurations [ 91.305532][ T2722] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 91.311083][ T347] usb 1-1: can't read configurations, error -22 [ 91.333358][ T2722] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 91.333411][ T2722] ? mas_wr_store_type+0x8eb/0x1ad0 [ 91.333435][ T2722] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 91.341287][ T347] usb usb1-port1: unable to enumerate USB device [ 91.363130][ T2722] ? mas_preallocate+0x56e/0xc60 [ 91.363167][ T2722] ? __cfi_mas_preallocate+0x10/0x10 [ 91.363186][ T2722] ? kasan_save_alloc_info+0x40/0x50 [ 91.363211][ T2722] ? __asan_memset+0x39/0x50 [ 91.363235][ T2722] mmap_region+0x1371/0x1bd0 [ 91.363262][ T2722] ? __cfi_mmap_region+0x10/0x10 [ 91.363285][ T2722] ? __futex_queue+0x19a/0x340 [ 91.372118][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 91.378830][ T2722] ? __kasan_check_read+0x15/0x20 [ 91.378864][ T2722] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 91.499737][ T2722] ? file_mmap_ok+0x147/0x1a0 [ 91.504426][ T2722] do_mmap+0xb6d/0x13c0 [ 91.508596][ T2722] ? __cfi_do_mmap+0x10/0x10 [ 91.513195][ T2722] ? down_write_killable+0xe9/0x2d0 [ 91.518488][ T2722] ? __cfi_down_write_killable+0x10/0x10 [ 91.524127][ T2722] vm_mmap_pgoff+0x38f/0x4e0 [ 91.528724][ T2722] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 91.533846][ T2722] ? __fget_files+0x2c5/0x340 [ 91.538562][ T2722] ksys_mmap_pgoff+0x166/0x1e0 [ 91.543342][ T2722] __x64_sys_mmap+0x121/0x140 [ 91.548287][ T2722] x64_sys_call+0x13bf/0x2ee0 [ 91.553096][ T2722] do_syscall_64+0x58/0xf0 [ 91.557535][ T2722] ? clear_bhb_loop+0x35/0x90 [ 91.562226][ T2722] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.568133][ T2722] RIP: 0033:0x7fa1efb8e929 [ 91.572552][ T2722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.592164][ T2722] RSP: 002b:00007fa1f0a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 91.600599][ T2722] RAX: ffffffffffffffda RBX: 00007fa1efdb5fa0 RCX: 00007fa1efb8e929 [ 91.608583][ T2722] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000ff0000 [ 91.616563][ T2722] RBP: 00007fa1efc10b39 R08: 0000000000000003 R09: 0000000000000000 [ 91.624553][ T2722] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 91.632530][ T2722] R13: 0000000000000000 R14: 00007fa1efdb5fa0 R15: 00007ffc5f6990a8 [ 91.640519][ T2722] [ 91.643543][ T2722] Modules linked in: [ 91.647931][ T2722] ---[ end trace 0000000000000000 ]--- [ 91.654143][ T2722] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 91.657198][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 91.659545][ T2722] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ad 38 58 13 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 e7 fc 11 9f 90 90 90 90 90 90 90 90 90 [ 91.668025][ T31] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.685477][ T2722] RSP: 0018:ffffc9000e11f3f0 EFLAGS: 00010246 [ 91.703759][ T2722] RAX: 000000000000008c RBX: 1ffff92001c23e80 RCX: fa776be7bfc27800 [ 91.705380][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 91.711974][ T2722] RDX: ffffc900015f1000 RSI: 000000000000406c RDI: 000000000000406d [ 91.719241][ T31] usb 4-1: string descriptor 0 read error: -22 [ 91.726629][ T2722] RBP: ffffc9000e11f3f0 R08: ffffc9000e11f0e7 R09: 1ffff92001c23e1c [ 91.733024][ T31] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.40 [ 91.740837][ T2722] R10: dffffc0000000000 R11: fffff52001c23e1d R12: 0000000000000000 [ 91.750191][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.758610][ T2722] R13: dffffc0000000000 R14: ffffc9000e11f420 R15: ffffc9000e11f450 [ 91.774155][ T2722] FS: 00007fa1f0a316c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 91.783285][ T2722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.790000][ T2722] CR2: 0000000000000000 CR3: 000000011a8e6000 CR4: 00000000003526b0 [ 91.798106][ T2722] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.806172][ T2722] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.814221][ T2722] Kernel panic - not syncing: Fatal exception [ 91.820632][ T2722] Kernel Offset: disabled [ 91.824963][ T2722] Rebooting in 86400 seconds..