last executing test programs: 3.480015019s ago: executing program 0 (id=1148): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000280)={0xa3, 0x0, &(0x7f0000000100)}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TUNGETSNDBUF(r4, 0x400454dc, &(0x7f0000001700)) close_range(r2, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000580)={{0x6000, 0xd000, 0x10, 0x6, 0x2, 0x4, 0xf, 0x0, 0x10, 0x1, 0xff, 0x6}, {0x5000, 0xeeee0000, 0x8, 0x45, 0x7, 0x0, 0x9, 0xbb, 0x9, 0x6, 0x1e, 0xfa}, {0x0, 0xdddd1000, 0xa, 0x60, 0x4, 0xb9, 0xbb, 0x4, 0x6, 0x6e, 0x8, 0xc}, {0x80a0000, 0x1000, 0x8, 0x9, 0xf6, 0x6e, 0x7, 0x1, 0x5, 0xaa, 0x9, 0x2}, {0xdddd0000, 0x8000000, 0xb, 0x9, 0x9, 0xc, 0x7f, 0x0, 0x3, 0x9, 0x8, 0x4}, {0x6000, 0xeeee0000, 0xc, 0x30, 0xcf, 0x3, 0x4, 0x96, 0x4, 0x6, 0xf0, 0x3}, {0x6000, 0x1, 0x9, 0x5, 0x6, 0x4, 0x59, 0x5b, 0x2, 0xd, 0x7, 0x35}, {0xe6e50800, 0xdddd1000, 0x3, 0x8, 0x9, 0x7a, 0x3, 0x0, 0x5, 0x0, 0xb0, 0x1}, {0xffff1000, 0x9}, {0x1, 0x6}, 0x20, 0x0, 0xeeee8000, 0x210040, 0x400000000000000f, 0x1, 0x8080000, [0x4, 0x5, 0xd95e, 0x1]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x4) ioctl$PPPIOCSDEBUG(r6, 0x40047440, 0x0) close(r8) openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000001c0), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) 3.149860124s ago: executing program 3 (id=1151): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 3.149422624s ago: executing program 3 (id=1152): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x8101, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000000)=0x97, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000300)=0x80, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"dd35fb96bcc34ce37980fe518e12f6ba", 0x0, 0x0, {0x7, 0x80000001}, {0x9, 0x5}, 0x1000b4ba, [0x0, 0x10001, 0x0, 0x7fffffffffffffff, 0xa36, 0x3, 0x9, 0x2, 0x6, 0x3, 0x2, 0x0, 0x2, 0x7, 0x40, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000400)={{r0}, r4, 0x16, @inherit={0x48, &(0x7f0000000100)={0x0, 0x0, 0x8001, 0x3, {0x2, 0x4, 0x8, 0x8, 0x7}}}, @name="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"}) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000001440)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000001400), 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x14, r7, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', r8, 0x2f, 0x7, 0xb, 0x4, 0x18, @dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x700, 0x7, 0x1}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r10}, 0x10) 3.149250264s ago: executing program 3 (id=1153): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000800)={0x80000, 0x0, [0x0, 0x40, 0x3, 0x9, 0x1, 0x1, 0x8c, 0xe2e]}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000240)=@arm64) readahead(r0, 0xa, 0x8) 3.002053146s ago: executing program 3 (id=1155): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/163, 0xbb) epoll_pwait2(r0, &(0x7f0000000080)=[{}, {}, {}], 0x3, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0xfffffffffffffffa]}, 0x8) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) keyctl$read(0xb, r2, 0x0, 0x0) 2.925326597s ago: executing program 3 (id=1157): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040010}, 0x4) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) (fail_nth: 8) 2.925158567s ago: executing program 3 (id=1158): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, 0x0, &(0x7f0000002380)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x2) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) write$binfmt_script(r4, &(0x7f0000020240), 0x10010) splice(r3, 0x0, r5, 0x0, 0x100000004, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x10040, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64=r1, @ANYRES32=r2, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES16=r0]) 2.69724156s ago: executing program 0 (id=1160): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 2.644121081s ago: executing program 0 (id=1161): setuid(0xee00) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 2.640347461s ago: executing program 0 (id=1163): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'bridge_slave_1\x00', {}, 0x5319}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x1f0, r2, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffff801, 0x4a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x1cc, 0x11d, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x12c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x5}, {0x1, 0x9}, {0x5}, {0x1, 0x7}, {}, {0x7, 0x1}, {0x0, 0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x5, 0x6}, {0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x7, 0x1}, {0x6, 0x4}, {0x0, 0x1}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x3, 0x6c, 0x30, 0x36, 0x24, 0x0, 0x0, 0xc]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x5, 0x5f, 0x6c, 0x60, 0xc, 0x24, 0x12, 0x48, 0x1, 0x48, 0x48, 0x1, 0x1b, 0x18, 0x3, 0x48, 0x9, 0x1b, 0x5, 0x5c, 0x16, 0x16, 0x17, 0x4, 0x48, 0x6, 0x0, 0x30, 0x1, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xec, 0xfffd, 0x1, 0x28, 0x0, 0x6, 0xfffe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0xb, 0x24, 0x18, 0x6c, 0x1, 0x3, 0x9, 0x5, 0x4, 0x16, 0x1f, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x616, 0x9c5, 0x8001, 0x1, 0x10, 0x3, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x7}, {0x0, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x5, 0x6}, {0x4, 0x6}, {0x5, 0x1}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0x8}, {0x6, 0x2}, {0x3, 0x9}, {0x3, 0x9}, {0x2, 0x5}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0x2}, {0x1, 0x9}, {0x3, 0xa}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x8}, {0x3}, {0x2}, {0x4, 0x7}, {0x7, 0x9}, {0x7, 0x1}, {0x4, 0x7}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x1}, {0x3, 0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x5}, {0x4, 0x8}, {0x4, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1, 0xa}, {0x5, 0x1}, {0x2, 0x5}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0x4}, {0x6, 0x1}, {0x5, 0x7}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x5}, {0x7, 0x9}, {0x1, 0x4}, {0x7}, {0x4, 0x8}, {0x7, 0x6}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x4, 0x6, 0x800, 0x9, 0x1, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x4096, 0x7, 0x0, 0x200, 0xe, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xaf}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x8000}, 0x44) pidfd_send_signal(r1, 0x25, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0x1, 0x1, 0x8, 0xf8, 0x8, 0x5, 0x68, 0x2, 0x3, 0x9c, 0xfd, 0xa6, 0x81, 0x1, 0x2, 0x5}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x821, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r7, &(0x7f0000000640)={0x2, 0x4e22, @broadcast}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/45, 0x2d) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@migrate={0x164, 0x21, 0x400, 0x70bd25, 0x25dfdbfd, {{@in=@broadcast, @in=@empty, 0x4e21, 0x6, 0x4e21, 0x9, 0x2, 0x20, 0x0, 0x2e, r3, r8}, 0x6e6bb9, 0x2}, [@algo_aead={0x113, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x638, 0x1a0, "8e0787229e4b15fcdaab914e9eb05f3d1e64795df94702b834ab49d4929bf8a2f2cd8abc087556fbd7147bfb00ee7df968c867d67e34289b9dd0f75eafa25a9a94858390fccb4de6fe7b650eb06353e9097112d59aff790f6814d579ac65644851ec241d7b30c068e0e40aea800425f3692742268259774014d4f5ed52bd8c7dbf53e7810ee1515f85a3cbb1d2101cbeafa45ff95aa2d3a34598cf3fbd4b8c5007cec49e45e86dac1782dca38ab7b7e0bb51930e9a42f054ecf1f5203389ae16d7ec2107f4da02"}}]}, 0x164}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 2.544884663s ago: executing program 0 (id=1164): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000002ac0)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002800)=[{&(0x7f00000001c0)="a51d", 0x2}], 0x1}}], 0x1, 0x40000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\f\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\x17\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vEY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xd64\xc7\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+XB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\v\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00F\x0e\xb7\x88P\x92\xdf=\xedZ\xc3_\x99\xb87\x05\xf5L\x17W\xa5\xa0\xc2\xd5\xe5\xc9aq:\xff\x14\x17\xd8\xb5\xcd\xa2\x7f\x1a\x8fn\xa1cn\\\xf3)v\xcd,\xb4aC\x91c\x1a^\xfe\x03\'\xf2\x01\x8dj\xec_\xc6\x19\xed\xc4\x9a\t\x9b\xb6\x0e\x8d\xfd~Q\tSQ\x86\xa0\xc2\xd7\xc9\x8d\x00\x00\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r3], 0x1}, 0x58) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, &(0x7f00000003c0)=0x3e) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/nf_conntrack_expect\x00') ioctl$ASHMEM_SET_NAME(r4, 0x40087707, &(0x7f0000000880)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00g{ \xed\xee\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\x97\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\x91\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbf\xf2\xd7]\'D\xc0-\x15\xb2\fLs\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa15o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xdcy\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\xab*\x99\b\xaaI!\xda\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xbe\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xfd\xff\xff\xff\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\xce\x9bA\xbfwi\xfc\x8a\xd3FUQ\xee}\xc4QpE.>') 2.532904583s ago: executing program 0 (id=1165): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[], 0x0) 1.672308385s ago: executing program 1 (id=1179): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) socket(0x2c, 0x1, 0x7) 1.670883845s ago: executing program 1 (id=1180): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003340), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x4, "52b16000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x20, 0x15, 0x4, "b03f99ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x25, "4372070000001000476fb2940acfbe4c0e24fa98ddf306e50000b646376f385355617a34d3"}}) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0xfffffffffffffe6b) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000012ff010023bd70000000000004001e80"], 0x14}], 0x1}, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000000)) read$FUSE(r0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) 1.168136283s ago: executing program 2 (id=1183): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, 0x0) r5 = eventfd(0x6) futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1) r6 = gettid() r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="df6427f30fc7340fc7ab0000baf80c66b8520e508266efbafc0cb83739ef0f01c2baf80c66b8584c788d66efbafc0c66b80010000066ef0f206165f30faeecba6100ec66b97d03000066b80000000066ba010000000f30", 0x57}], 0x1, 0x57, &(0x7f00000001c0)=[@cstype3={0x5, 0xd}], 0x1) r11 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r7, &(0x7f0000000040)={r11, 0xffffffffffffffff, 0x5}) io_submit(r0, 0x2, &(0x7f0000003440)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x0, 0x0, 0x1, 0x0, 0x1, r5}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0xd, r1, 0x0, 0x0, 0x7ff, 0x0, 0x3}]) 1.167665623s ago: executing program 1 (id=1184): keyctl$get_keyring_id(0x0, 0x0, 0x4) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000002100)='freezer.parent_freezing\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000002240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'lo\x00', 0x400}) close(r4) read$FUSE(r2, &(0x7f0000007940)={0x2020}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000002100)=ANY=[@ANYBLOB="12011001000000106b1d0101400001020301090292000301a600020904000000010100000a240102000602010205240501090904010000010200000904010101010200000e240201580200012506214292c309050109000400020707250106030080090402000001020000090402010101020009092402020200d7750910240201080405ff2842dcdbe38f35f3072401bf06011009058209200040000307250103010200"], 0x0) syz_open_procfs(0x0, 0x0) open(&(0x7f00000020c0)='./cgroup/cgroup.procs\x00', 0x35da00, 0x104) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$nl_audit(0x10, 0x3, 0x9) 965.140266ms ago: executing program 2 (id=1185): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 654.09442ms ago: executing program 1 (id=1186): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x2f}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) fsopen(&(0x7f00000007c0)='nsfs\x00', 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x700) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = fcntl$dupfd(r0, 0x0, r0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r5) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000329bd7000ffdbdf250200000014000700fe8000000000000000000000000000bb0500040000000000050003002900000008000b00", @ANYRES16=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf25140000000c00018008000100", @ANYRES32=r7, @ANYBLOB="d4aba9fc299a9949b1a48405e0d1975639d7fb0b69e93ab2ae9544afbc1131489d312c3e343277f60a0f32bbd6d2c1c267592590e9b31245389d6e5c8b551ad66503bc3947f68008998822e40efef638f5460bd9e06405a9ae08324f91ad2530acfbb072a9877b872e38dc5b3d19dbe8cce5c5535ee2c5c4a341ac841b272c936b4e463b1c074a622f514d3bd98d420eaa3e9deafa93f5fb7144af"], 0x20}}, 0x4400404c) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000004900)=ANY=[@ANYBLOB="12010003000000402505a8a44000010203010902"], &(0x7f0000004d80)={0x0, 0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="050f0c00"]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) (async) r9 = syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x1000400, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x41}, &(0x7f0000000200)=""/188, 0xbc, &(0x7f00000002c0)=""/4, &(0x7f0000000300)=[r9, r9, r9], 0x3}, 0x58) capget(&(0x7f00000003c0)={0x20080522, r10}, &(0x7f0000000400)={0xb, 0x8001, 0xb, 0x200, 0x1, 0x7c}) (async) brk(0xe3a) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@decrefs={0x40046307, 0x2}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 390.890024ms ago: executing program 2 (id=1187): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000002300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3ff, 0x3a, '.', 0x3a, '#:', 0x3a, './file0'}, 0x2a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e240500000000000000b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63174a0b00000000000046554ba6136cbc83c6268ee40318f3c9d4718025288b35d2265bf60bf889ff629f7834586ef4987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfe2541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d1d34ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404ab33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945eacf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c372d4b9c78ba6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 390.645624ms ago: executing program 2 (id=1188): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r1) 218.139637ms ago: executing program 2 (id=1189): mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x5, 0xfb8a6e469ba80ffb, 0x80a0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f00000013c0)=r1, 0x4117e2d3) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000002b40)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone(0xc8900800, &(0x7f0000000580)="bd2f439b05bc3065e30f360ff4e44a2282ddbf04c6b303dae3d1dd413c4c64199f02957322e80f57b783a2e72631a39d0567cfcb255ff28489e3fa087a7c6e6f3acf4df579192cf235edefa44839fff3bb8be3680c91c9a2b3a0bac5dcb0f6dac53d8b929f90e5aacd2eca4d7f1dd4c295e1ec76997d9ca11e33ac4fa0356344a10b3aab753f7f53e34cca6cb6d0664b14225a5a7c83e43f632ed79b3cdfff55be4f645640f9295be58ca60391b282abb5c65f69c117969a07a280d7ac9650c2", 0xc0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)="de34ef58f8fef823fcb6eda6cdf86959203ff483459c0f") r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) io_setup(0xe4, &(0x7f0000000000)=0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) io_submit(r7, 0x1, &(0x7f00000047c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfc, r8, 0x0, 0x0, 0xc00000}]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) read$FUSE(r2, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x3, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x7c9e, 0x44000004, 0xfb4, 0x8, 0x2d7, 0x5, 0x0, 0x0, 0x80, 0xfffffffc}}, 0xb1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setresgid(0x0, 0x0, r10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rkotmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r10, @ANYBLOB=',max_read=0x0000000000000000,blksize=0x0000000000001800,blksize=0x0000000000000600,allow_other,allow_other,max_read=0x0000000000000008,subj_user=./binderfs\x00,fsmagic=0x00000000000001ea,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',obj_user=),\x00']) 141.042498ms ago: executing program 1 (id=1190): r0 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='(&@#\x00', 0xfffffffffffffffe) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x110, r1, 0x217e9000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000e80)={0x281}) keyctl$setperm(0x5, r0, 0x1000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180)) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r3, 0x2, 0x5010, r1, 0x0) keyctl$invalidate(0x15, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 126.404798ms ago: executing program 1 (id=1191): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0x16, 0x4, "a6f5de1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r2, 0x485a, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20, &(0x7f0000000080)={[{@default_permissions}, {@redirect_dir_off}], [{@dont_measure}, {@seclabel}, {@appraise}, {@fsmagic}, {@fsname={'fsname', 0x3d, '\x1b$-$$'}}, {@obj_type={'obj_type', 0x3d, '.'}}, {@euid_eq}]}) 0s ago: executing program 2 (id=1192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x440, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000005c0), 0x183400, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xffffffffffffffdd) read$FUSE(r1, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x10, r3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r4 = socket$inet(0x2, 0x4000000000000001, 0x1) lseek(r2, 0x7, 0x4) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000400)={0x4, 0x3}, 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r5 = socket$inet(0x2, 0x801, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0xfffffffffffffd99) sendto$inet(r5, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ptrace$peek(0xffffffffffffffff, r3, &(0x7f0000000380)) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b00010100000009040000120206"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r1, &(0x7f0000005940)={0x2020}, 0x1514) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/37, 0x25, 0x0, 0x9}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/43, 0x2b, 0x0, 0xb}}, &(0x7f00000004c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Call Trace: [ 56.185106][ T1191] [ 56.185113][ T1191] __dump_stack+0x21/0x30 [ 56.185138][ T1191] dump_stack_lvl+0x10c/0x190 [ 56.185155][ T1191] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.185175][ T1191] ? __virt_addr_valid+0x2a6/0x380 [ 56.185197][ T1191] dump_stack+0x19/0x20 [ 56.185212][ T1191] should_fail_ex+0x3d9/0x530 [ 56.185230][ T1191] should_failslab+0xac/0x100 [ 56.185250][ T1191] kmem_cache_alloc_noprof+0x42/0x3a0 [ 56.185267][ T1191] ? getname_flags+0xc6/0x710 [ 56.185287][ T1191] getname_flags+0xc6/0x710 [ 56.185306][ T1191] __x64_sys_link+0x6e/0xa0 [ 56.185365][ T1191] x64_sys_call+0x1cf5/0x2ee0 [ 56.185385][ T1191] do_syscall_64+0x58/0xf0 [ 56.185406][ T1191] ? clear_bhb_loop+0x35/0x90 [ 56.185430][ T1191] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.185452][ T1191] RIP: 0033:0x7fd18a78e929 [ 56.185468][ T1191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.185483][ T1191] RSP: 002b:00007fd18b582038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 56.185503][ T1191] RAX: ffffffffffffffda RBX: 00007fd18a9b5fa0 RCX: 00007fd18a78e929 [ 56.185517][ T1191] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 56.185529][ T1191] RBP: 00007fd18b582090 R08: 0000000000000000 R09: 0000000000000000 [ 56.185541][ T1191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.185551][ T1191] R13: 0000000000000000 R14: 00007fd18a9b5fa0 R15: 00007ffc22d6e5b8 [ 56.185565][ T1191] [ 56.387590][ T305] usbhid 1-1:0.0: can't add hid device: -71 [ 56.393838][ T305] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 56.403569][ T305] usb 1-1: USB disconnect, device number 14 [ 56.651549][ T342] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 56.791470][ T342] usb 4-1: device descriptor read/64, error -71 [ 56.821459][ T305] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 56.861444][ T452] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 56.972668][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.984181][ T305] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 56.993998][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.004288][ T305] usb 1-1: config 0 descriptor?? [ 57.011012][ T1209] overlayfs: failed to clone upperpath [ 57.022385][ T452] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 57.031934][ T342] usb 4-1: device descriptor read/64, error -71 [ 57.038489][ T452] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.048957][ T452] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 57.059990][ T452] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.069803][ T452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 57.078072][ T452] usb 3-1: SerialNumber: syz [ 57.271433][ T342] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 57.288622][ T1207] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 57.288645][ T1207] rust_binder: Error while translating object. [ 57.297593][ T1207] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.303900][ T1207] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 57.317253][ T452] usb 3-1: USB disconnect, device number 18 [ 57.411920][ T305] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 57.420671][ T342] usb 4-1: device descriptor read/64, error -71 [ 57.428726][ T305] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input8 [ 57.493531][ T305] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 57.619032][ T1176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.628704][ T1176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.661387][ T342] usb 4-1: device descriptor read/64, error -71 [ 57.771584][ T342] usb usb4-port1: attempt power cycle [ 57.771904][ T65] usb 1-1: USB disconnect, device number 15 [ 57.801508][ T1214] overlayfs: failed to clone upperpath [ 57.824456][ T1218] overlayfs: failed to clone upperpath [ 57.916201][ T36] audit: type=1400 audit(1750434796.249:277): avc: denied { nlmsg_read } for pid=1226 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.111483][ T342] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 58.132499][ T342] usb 4-1: device descriptor read/8, error -71 [ 58.192871][ T1239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.193664][ T36] audit: type=1400 audit(1750434796.529:278): avc: denied { setopt } for pid=1237 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.194479][ T1238] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 58.273325][ T342] usb 4-1: device descriptor read/8, error -71 [ 58.521430][ T342] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 58.542464][ T342] usb 4-1: device descriptor read/8, error -71 [ 58.673000][ T342] usb 4-1: device descriptor read/8, error -71 [ 58.791508][ T342] usb usb4-port1: unable to enumerate USB device [ 58.839257][ T1281] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 58.901523][ T65] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 58.949519][ T36] audit: type=1400 audit(1750434797.279:279): avc: denied { bind } for pid=1284 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.969331][ T36] audit: type=1400 audit(1750434797.279:280): avc: denied { name_bind } for pid=1284 comm="syz.2.406" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 58.991008][ T36] audit: type=1400 audit(1750434797.279:281): avc: denied { node_bind } for pid=1284 comm="syz.2.406" saddr=100.9.1.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 59.062764][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.074055][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.089626][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.105325][ T65] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.116706][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.130174][ T65] usb 1-1: config 0 descriptor?? [ 59.409502][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 59.409519][ T36] audit: type=1400 audit(1750434797.739:284): avc: denied { block_suspend } for pid=1309 comm="syz.3.416" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.585712][ T1275] rust_binder: Write failure EFAULT in pid:252 [ 59.586973][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 59.600416][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 59.610268][ T65] usb 1-1: USB disconnect, device number 16 [ 59.791427][ T342] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 59.897904][ T36] audit: type=1400 audit(1750434798.229:285): avc: denied { ioctl } for pid=1311 comm="syz.1.417" path="socket:[11515]" dev="sockfs" ino=11515 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.923529][ T36] audit: type=1400 audit(1750434798.239:286): avc: denied { connect } for pid=1311 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.963061][ T342] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 59.973130][ T342] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 59.987267][ T342] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.997680][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 60.007452][ T342] usb 4-1: SerialNumber: syz [ 60.017219][ T1310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.084835][ T36] audit: type=1400 audit(1750434798.419:287): avc: denied { compute_member } for pid=1320 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 60.125763][ T1325] binder: Unknown parameter 'posixacl' [ 60.225957][ T1310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.382093][ T65] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 60.531437][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 60.537234][ T65] usb 1-1: no configurations [ 60.544609][ T65] usb 1-1: can't read configurations, error -22 [ 60.636350][ T342] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 60.681464][ T65] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 60.759575][ T36] audit: type=1400 audit(1750434799.089:288): avc: denied { lock } for pid=1343 comm="syz.1.432" path="socket:[11631]" dev="sockfs" ino=11631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 60.762747][ T1344] fuse: Bad value for 'fd' [ 60.792500][ T1344] overlayfs: failed to clone upperpath [ 60.808761][ T1346] 9pnet_virtio: no channels available for device syz [ 60.831432][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 60.836964][ T65] usb 1-1: no configurations [ 60.841733][ T65] usb 1-1: can't read configurations, error -22 [ 60.844469][ T342] usb 4-1: USB disconnect, device number 16 [ 60.848135][ T65] usb usb1-port1: attempt power cycle [ 61.191442][ T65] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 61.211897][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 61.217672][ T65] usb 1-1: no configurations [ 61.222572][ T65] usb 1-1: can't read configurations, error -22 [ 61.351472][ T65] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 61.367713][ T1359] overlayfs: failed to resolve './file1': -2 [ 61.371789][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 61.380404][ T65] usb 1-1: no configurations [ 61.385453][ T65] usb 1-1: can't read configurations, error -22 [ 61.392769][ T65] usb usb1-port1: unable to enumerate USB device [ 61.401525][ T370] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 61.412556][ T1363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.412865][ T1363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.419446][ T1363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:183 [ 61.552715][ T370] usb 3-1: config 0 has an invalid interface number: 138 but max is 0 [ 61.571433][ T370] usb 3-1: config 0 has no interface number 0 [ 61.577783][ T370] usb 3-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 61.590936][ T370] usb 3-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 61.601537][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.610265][ T370] usb 3-1: Product: syz [ 61.615269][ T370] usb 3-1: Manufacturer: syz [ 61.619965][ T370] usb 3-1: SerialNumber: syz [ 61.625754][ T370] usb 3-1: config 0 descriptor?? [ 61.631188][ T1357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 61.639683][ T370] ums-datafab 3-1:0.138: USB Mass Storage device detected [ 61.648417][ T370] scsi host1: usb-storage 3-1:0.138 [ 61.681577][ T65] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 61.777471][ T36] audit: type=1400 audit(1750434800.109:289): avc: denied { name_bind } for pid=1375 comm="syz.1.446" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 61.805676][ T1379] overlayfs: failed to clone upperpath [ 61.819458][ T1381] overlayfs: failed to resolve './file1': -2 [ 61.832557][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.837692][ T1383] overlayfs: failed to resolve './file1': -2 [ 61.847098][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.866395][ T65] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 61.877645][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.887207][ T65] usb 4-1: config 0 descriptor?? [ 62.057286][ T1357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.067267][ T1357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.078720][ T342] usb 3-1: USB disconnect, device number 19 [ 62.295041][ T1365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.304560][ T1365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.314359][ T65] holtek_kbd 0003:04D9:A055.0006: item fetching failed at offset 0/3 [ 62.322871][ T65] holtek_kbd 0003:04D9:A055.0006: probe with driver holtek_kbd failed with error -22 [ 62.516571][ T1365] capability: warning: `syz.3.442' uses 32-bit capabilities (legacy support in use) [ 62.526713][ T65] usb 4-1: USB disconnect, device number 17 [ 62.610938][ T1390] syzkaller0: entered allmulticast mode [ 62.701702][ T1408] overlayfs: failed to resolve './file1': -2 [ 62.713260][ T1410] overlayfs: failed to resolve './file1': -2 [ 62.790236][ T1424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 62.813196][ T36] audit: type=1400 audit(1750434801.149:290): avc: denied { accept } for pid=1425 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 62.851871][ T1430] overlayfs: failed to resolve './file1': -2 [ 62.871707][ T1432] fuse: Bad value for 'fd' [ 63.131504][ T305] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 63.241452][ T1446] binder: Unknown parameter 's' [ 63.291482][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 63.291493][ T65] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 63.307400][ T305] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 63.315558][ T305] usb 3-1: config 0 has no interface number 0 [ 63.328962][ T305] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 63.338506][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.347716][ T305] usb 3-1: Product: syz [ 63.352258][ T305] usb 3-1: Manufacturer: syz [ 63.356995][ T305] usb 3-1: SerialNumber: syz [ 63.364400][ T305] usb 3-1: config 0 descriptor?? [ 63.374297][ T305] smsc95xx v2.0.0 [ 63.401615][ T36] audit: type=1400 audit(1750434801.739:291): avc: denied { bind } for pid=1462 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.422348][ T36] audit: type=1400 audit(1750434801.739:292): avc: denied { connect } for pid=1462 comm="syz.0.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.471410][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 63.481626][ T65] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 63.490279][ T65] usb 4-1: config 0 has no interface number 0 [ 63.497095][ T65] usb 4-1: config 0 interface 27 has no altsetting 0 [ 63.506538][ T65] usb 4-1: New USB device found, idVendor=04a5, idProduct=4027, bcdDevice=f2.12 [ 63.516167][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.523789][ T1476] overlayfs: failed to resolve './file0': -2 [ 63.525612][ T65] usb 4-1: Product: syz [ 63.535236][ T65] usb 4-1: Manufacturer: syz [ 63.540120][ T65] usb 4-1: SerialNumber: syz [ 63.548853][ T65] usb 4-1: config 0 descriptor?? [ 63.757163][ T1438] rust_binder: Read failure Err(EAGAIN) in pid:189 [ 63.758798][ T65] pl2303 4-1:0.27: required endpoints missing [ 63.772755][ T65] usb 4-1: USB disconnect, device number 18 [ 63.774372][ T305] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 63.789935][ T305] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 63.931424][ T370] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 64.002131][ T305] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 64.014319][ T305] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 64.083030][ T370] usb 1-1: config 0 has an invalid interface number: 138 but max is 0 [ 64.092114][ T370] usb 1-1: config 0 has no interface number 0 [ 64.098943][ T370] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 64.113057][ T370] usb 1-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 64.124419][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.133036][ T370] usb 1-1: Product: syz [ 64.138557][ T370] usb 1-1: Manufacturer: syz [ 64.144487][ T370] usb 1-1: SerialNumber: syz [ 64.152806][ T370] usb 1-1: config 0 descriptor?? [ 64.159812][ T1483] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 64.169628][ T370] ums-datafab 1-1:0.138: USB Mass Storage device detected [ 64.178372][ T370] scsi host1: usb-storage 1-1:0.138 [ 64.289015][ T1491] binder: Unknown parameter 'smackfshat' [ 64.312535][ T1495] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 64.329758][ T1497] FAULT_INJECTION: forcing a failure. [ 64.329758][ T1497] name failslab, interval 1, probability 0, space 0, times 0 [ 64.343428][ T1497] CPU: 0 UID: 0 PID: 1497 Comm: syz.3.498 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 64.343464][ T1497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.343474][ T1497] Call Trace: [ 64.343479][ T1497] [ 64.343485][ T1497] __dump_stack+0x21/0x30 [ 64.343507][ T1497] dump_stack_lvl+0x10c/0x190 [ 64.343518][ T1497] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.343530][ T1497] dump_stack+0x19/0x20 [ 64.343540][ T1497] should_fail_ex+0x3d9/0x530 [ 64.343551][ T1497] should_failslab+0xac/0x100 [ 64.343564][ T1497] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 64.343576][ T1497] ? __alloc_skb+0x10c/0x370 [ 64.343588][ T1497] __alloc_skb+0x10c/0x370 [ 64.343599][ T1497] alloc_skb_with_frags+0xce/0x8b0 [ 64.343611][ T1497] sock_alloc_send_pskb+0x858/0x990 [ 64.343626][ T1497] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 64.343639][ T1497] ? unwind_get_return_address+0x51/0x90 [ 64.343649][ T1497] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.343661][ T1497] ? arch_stack_walk+0x10b/0x170 [ 64.343673][ T1497] __ip6_append_data+0x286c/0x3ab0 [ 64.343693][ T1497] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 64.343706][ T1497] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.343719][ T1497] ? ip6_setup_cork+0x1390/0x1390 [ 64.343729][ T1497] ip6_make_skb+0x41c/0x850 [ 64.343740][ T1497] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 64.343751][ T1497] ? __cfi_ip6_make_skb+0x10/0x10 [ 64.343761][ T1497] ? sk_dst_check+0x12e/0x290 [ 64.343772][ T1497] ? ip6_sk_dst_lookup_flow+0x64c/0x790 [ 64.343782][ T1497] udpv6_sendmsg+0x1c46/0x26c0 [ 64.343791][ T1497] ? avc_has_perm_noaudit+0x268/0x360 [ 64.343802][ T1497] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 64.343814][ T1497] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 64.343822][ T1497] ? avc_has_perm+0x144/0x220 [ 64.343832][ T1497] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 64.343844][ T1497] ? do_user_addr_fault+0xbc4/0x1200 [ 64.343855][ T1497] ? inet_send_prepare+0x64/0x4f0 [ 64.343864][ T1497] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 64.343873][ T1497] inet6_sendmsg+0xef/0x120 [ 64.343885][ T1497] ____sys_sendmsg+0x5db/0xa70 [ 64.343899][ T1497] ? __sys_sendmsg_sock+0x50/0x50 [ 64.343912][ T1497] ? import_iovec+0x81/0xb0 [ 64.343925][ T1497] ___sys_sendmsg+0x220/0x2a0 [ 64.343940][ T1497] ? __sys_sendmsg+0x280/0x280 [ 64.343953][ T1497] ? kstrtouint+0x78/0xf0 [ 64.343965][ T1497] __sys_sendmmsg+0x271/0x470 [ 64.343973][ T1497] ? __cfi___sys_sendmmsg+0x10/0x10 [ 64.343983][ T1497] ? __cfi_ksys_write+0x10/0x10 [ 64.343995][ T1497] __x64_sys_sendmmsg+0xa4/0xc0 [ 64.344004][ T1497] x64_sys_call+0xfec/0x2ee0 [ 64.344015][ T1497] do_syscall_64+0x58/0xf0 [ 64.344027][ T1497] ? clear_bhb_loop+0x35/0x90 [ 64.344040][ T1497] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.344053][ T1497] RIP: 0033:0x7fd18a78e929 [ 64.344062][ T1497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.344070][ T1497] RSP: 002b:00007fd18b582038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.344082][ T1497] RAX: ffffffffffffffda RBX: 00007fd18a9b5fa0 RCX: 00007fd18a78e929 [ 64.344090][ T1497] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 0000000000000004 [ 64.344096][ T1497] RBP: 00007fd18b582090 R08: 0000000000000000 R09: 0000000000000000 [ 64.344103][ T1497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.344109][ T1497] R13: 0000000000000000 R14: 00007fd18a9b5fa0 R15: 00007ffc22d6e5b8 [ 64.344117][ T1497] [ 64.353223][ T1499] overlayfs: failed to resolve './file0': -2 [ 64.580286][ T1483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.760779][ T1483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.774907][ T65] usb 1-1: USB disconnect, device number 21 [ 64.888596][ T1515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 64.899553][ T1515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 64.910454][ T1515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 64.911089][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 64.911104][ T36] audit: type=1326 audit(1750434803.239:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1513 comm="syz.3.505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a78e929 code=0x7fc00000 [ 65.281191][ T36] audit: type=1326 audit(1750434803.609:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac558e929 code=0x7fc00000 [ 65.307556][ T36] audit: type=1326 audit(1750434803.609:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1509 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feac558e929 code=0x7fc00000 [ 65.373120][ T1539] overlayfs: failed to resolve './file0': -2 [ 65.400712][ T1545] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 65.400740][ T1545] rust_binder: Error while translating object. [ 65.409713][ T1545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.416154][ T1545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:289 [ 65.518811][ T1564] overlayfs: failed to resolve './file0': -2 [ 65.801458][ T451] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 65.906388][ T370] usb 3-1: USB disconnect, device number 20 [ 65.953155][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.968047][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.978001][ T451] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.992705][ T451] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.002184][ T451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.012623][ T451] usb 1-1: config 0 descriptor?? [ 66.098715][ T1587] overlayfs: failed to resolve './file0': -2 [ 66.148234][ T36] audit: type=1400 audit(1750434804.479:296): avc: denied { map } for pid=1592 comm="syz.3.535" path="socket:[13498]" dev="sockfs" ino=13498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 66.193907][ T1602] capability: warning: `syz.1.538' uses deprecated v2 capabilities in a way that may be insecure [ 66.253613][ T1613] overlayfs: failed to resolve './file0': -2 [ 66.421740][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.429792][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.438275][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.447416][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.456975][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.465921][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.473688][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.482652][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.490781][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.499442][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.507479][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.516597][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.521412][ T370] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 66.524833][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.542798][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.550928][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.558699][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.566562][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.574213][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.583334][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.592173][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.600538][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.608178][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.616141][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.624136][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.632621][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.640454][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.647985][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.656392][ T451] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 66.664094][ T451] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 66.673778][ T451] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 66.689668][ T451] usb 1-1: USB disconnect, device number 22 [ 66.703239][ T370] usb 4-1: config 0 has an invalid interface number: 138 but max is 0 [ 66.712180][ T370] usb 4-1: config 0 has no interface number 0 [ 66.713815][ T1628] fido_id[1628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 66.719077][ T370] usb 4-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 66.750526][ T370] usb 4-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 66.760412][ T370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.769680][ T370] usb 4-1: Product: syz [ 66.774028][ T370] usb 4-1: Manufacturer: syz [ 66.779988][ T370] usb 4-1: SerialNumber: syz [ 66.785965][ T370] usb 4-1: config 0 descriptor?? [ 66.791770][ T1617] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.801266][ T370] ums-datafab 4-1:0.138: USB Mass Storage device detected [ 66.809370][ T370] scsi host1: usb-storage 4-1:0.138 [ 66.912804][ T36] audit: type=1400 audit(1750434805.249:297): avc: denied { create } for pid=1644 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.987723][ T1651] rust_binder: Write failure EINVAL in pid:260 [ 66.987962][ T1651] rust_binder: Read failure Err(EAGAIN) in pid:260 [ 67.121433][ T1677] fuse: blksize only supported for fuseblk [ 67.174593][ T36] audit: type=1400 audit(1750434805.509:298): avc: denied { load_policy } for pid=1664 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 67.174603][ T1678] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 67.174632][ T1678] SELinux: failed to load policy [ 67.221697][ T1617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.242665][ T1617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.274354][ T305] usb 4-1: USB disconnect, device number 19 [ 67.312434][ T1693] fuse: Unknown parameter 'fowner>00000000000000000000' [ 67.326563][ T36] audit: type=1400 audit(1750434805.659:299): avc: denied { nlmsg_read } for pid=1692 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 67.813916][ T1697] netlink: 64 bytes leftover after parsing attributes in process `syz.3.580'. [ 67.862388][ T1702] syzkaller0: entered promiscuous mode [ 67.873451][ T1702] syzkaller0: entered allmulticast mode [ 68.090432][ T36] audit: type=1400 audit(1750434806.419:300): avc: denied { setattr } for pid=1713 comm="syz.2.586" name="NETLINK" dev="sockfs" ino=13120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.122260][ T36] audit: type=1400 audit(1750434806.439:301): avc: denied { map } for pid=1718 comm="syz.1.588" path="socket:[13126]" dev="sockfs" ino=13126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.148007][ T1725] rust_binder: Write failure EINVAL in pid:325 [ 68.163116][ T36] audit: type=1400 audit(1750434806.499:302): avc: denied { read } for pid=1728 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.208432][ T1734] fuse: blksize only supported for fuseblk [ 68.238167][ T1736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244 [ 68.257803][ T1742] random: crng reseeded on system resumption [ 68.295455][ T1742] Restarting kernel threads ... done. [ 68.325673][ T451] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 68.491476][ T451] usb 3-1: Using ep0 maxpacket: 8 [ 68.498045][ T451] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 68.507112][ T451] usb 3-1: config 179 has no interface number 0 [ 68.514535][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 68.526373][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 68.538317][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.549806][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 68.561385][ T451] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 68.577285][ T451] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 68.587603][ T451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.598105][ T1714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.606605][ T305] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 68.773551][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.787051][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.798500][ T305] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 68.809449][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.821395][ T305] usb 1-1: config 0 descriptor?? [ 68.835123][ T1714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.845881][ T1714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.047062][ T1753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.066014][ T1753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.067962][ T342] usb 3-1: USB disconnect, device number 21 [ 69.078959][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 69.078994][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 69.329722][ T305] elo 0003:04E7:0030.0008: unknown main item tag 0x0 [ 69.337392][ T305] elo 0003:04E7:0030.0008: unknown main item tag 0x4 [ 69.346004][ T305] elo 0003:04E7:0030.0008: item fetching failed at offset 3/7 [ 69.355288][ T305] elo 0003:04E7:0030.0008: parse failed [ 69.362599][ T305] elo 0003:04E7:0030.0008: probe with driver elo failed with error -22 [ 69.552386][ T305] usb 1-1: USB disconnect, device number 23 [ 69.653743][ T370] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 69.660871][ T1788] overlayfs: failed to resolve './file1': -2 [ 69.776664][ T1811] overlayfs: failed to resolve './file1': -2 [ 69.811437][ T370] usb 4-1: Using ep0 maxpacket: 16 [ 69.827624][ T370] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.839092][ T370] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 69.849990][ T370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.860531][ T370] usb 4-1: config 0 descriptor?? [ 69.934965][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 69.934984][ T36] audit: type=1326 audit(1750434808.269:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1829 comm="syz.2.637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f903918e929 code=0x0 [ 70.311478][ T342] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 70.370705][ T36] audit: type=1400 audit(1750434808.699:349): avc: denied { nlmsg_write } for pid=1839 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 70.470941][ T370] usbhid 4-1:0.0: can't add hid device: -71 [ 70.471564][ T342] usb 1-1: Using ep0 maxpacket: 32 [ 70.477406][ T370] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 70.485194][ T342] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.494005][ T370] usb 4-1: USB disconnect, device number 20 [ 70.510616][ T342] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 70.520180][ T342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.528285][ T342] usb 1-1: Product: syz [ 70.534224][ T342] usb 1-1: Manufacturer: syz [ 70.539263][ T342] usb 1-1: SerialNumber: syz [ 70.545612][ T342] usb 1-1: config 0 descriptor?? [ 70.755131][ T342] usb 1-1: USB disconnect, device number 24 [ 70.818021][ T36] audit: type=1400 audit(1750434809.149:350): avc: denied { bind } for pid=1845 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.820934][ T1846] SELinux: Context system_u:object_r:hald_var_run_t:s0 is not valid (left unmapped). [ 70.847716][ T36] audit: type=1400 audit(1750434809.179:351): avc: denied { relabelto } for pid=1845 comm="syz.2.644" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_var_run_t:s0" [ 70.877695][ T36] audit: type=1400 audit(1750434809.179:352): avc: denied { associate } for pid=1845 comm="syz.2.644" name="udmabuf" dev="devtmpfs" ino=83 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_run_t:s0" [ 70.941887][ T1850] FAULT_INJECTION: forcing a failure. [ 70.941887][ T1850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.955657][ T1850] CPU: 1 UID: 0 PID: 1850 Comm: syz.2.646 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 70.955688][ T1850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.955698][ T1850] Call Trace: [ 70.955704][ T1850] [ 70.955711][ T1850] __dump_stack+0x21/0x30 [ 70.955734][ T1850] dump_stack_lvl+0x10c/0x190 [ 70.955752][ T1850] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.955769][ T1850] dump_stack+0x19/0x20 [ 70.955784][ T1850] should_fail_ex+0x3d9/0x530 [ 70.955802][ T1850] should_fail+0xf/0x20 [ 70.955817][ T1850] should_fail_usercopy+0x1e/0x30 [ 70.955834][ T1850] _copy_to_user+0x24/0xa0 [ 70.955853][ T1850] simple_read_from_buffer+0xed/0x160 [ 70.955871][ T1850] proc_fail_nth_read+0x19e/0x210 [ 70.955882][ T1850] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 70.955891][ T1850] ? bpf_lsm_file_permission+0xd/0x20 [ 70.955903][ T1850] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 70.955912][ T1850] vfs_read+0x278/0xb60 [ 70.955923][ T1850] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 70.955937][ T1850] ? __cfi_vfs_read+0x10/0x10 [ 70.955947][ T1850] ? __kasan_check_write+0x18/0x20 [ 70.955957][ T1850] ? mutex_lock+0x92/0x1c0 [ 70.955967][ T1850] ? __cfi_mutex_lock+0x10/0x10 [ 70.955975][ T1850] ? __fget_files+0x2c5/0x340 [ 70.955989][ T1850] ksys_read+0x141/0x250 [ 70.956000][ T1850] ? __cfi_ksys_read+0x10/0x10 [ 70.956011][ T1850] ? __kasan_check_read+0x15/0x20 [ 70.956021][ T1850] __x64_sys_read+0x7f/0x90 [ 70.956032][ T1850] x64_sys_call+0x2638/0x2ee0 [ 70.956043][ T1850] do_syscall_64+0x58/0xf0 [ 70.956056][ T1850] ? clear_bhb_loop+0x35/0x90 [ 70.956070][ T1850] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.956083][ T1850] RIP: 0033:0x7f903918d33c [ 70.956093][ T1850] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.956101][ T1850] RSP: 002b:00007f9039f8b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.956114][ T1850] RAX: ffffffffffffffda RBX: 00007f90393b5fa0 RCX: 00007f903918d33c [ 70.956122][ T1850] RDX: 000000000000000f RSI: 00007f9039f8b0a0 RDI: 0000000000000007 [ 70.956129][ T1850] RBP: 00007f9039f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 70.956135][ T1850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.956141][ T1850] R13: 0000000000000000 R14: 00007f90393b5fa0 R15: 00007ffd0e9bc3c8 [ 70.956149][ T1850] [ 71.383771][ T36] audit: type=1400 audit(1750434809.719:353): avc: denied { read append } for pid=1874 comm="syz.3.658" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.388721][ T1876] binder: Unknown parameter 'appraise_type' [ 71.411160][ T1877] binder: Unknown parameter 'appraise_type' [ 71.416448][ T36] audit: type=1400 audit(1750434809.719:354): avc: denied { open } for pid=1874 comm="syz.3.658" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.447247][ T36] audit: type=1400 audit(1750434809.719:355): avc: denied { ioctl } for pid=1874 comm="syz.3.658" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.611475][ T342] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 71.682120][ T1899] syzkaller0: entered allmulticast mode [ 71.771417][ T342] usb 3-1: Using ep0 maxpacket: 16 [ 71.777838][ T342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.784940][ T451] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 71.792802][ T342] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 71.802454][ T342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.811733][ T342] usb 3-1: config 0 descriptor?? [ 71.834702][ T1903] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.844515][ T1903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 71.844684][ T1903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:294 [ 71.915657][ T36] audit: type=1400 audit(1750434810.249:356): avc: denied { read } for pid=1913 comm="syz.3.675" path="socket:[14875]" dev="sockfs" ino=14875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.962497][ T451] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 71.973682][ T451] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.990145][ T451] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.000401][ T451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.008762][ T451] usb 1-1: SerialNumber: syz [ 72.015191][ T1887] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 72.120883][ T1921] syzkaller0: entered allmulticast mode [ 72.175443][ T1925] netlink: 104 bytes leftover after parsing attributes in process `syz.3.679'. [ 72.224710][ T1887] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 72.432783][ T342] usbhid 3-1:0.0: can't add hid device: -71 [ 72.438942][ T342] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 72.447996][ T342] usb 3-1: USB disconnect, device number 22 [ 72.631470][ T370] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 72.717080][ T451] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 72.792505][ T370] usb 4-1: config 0 has an invalid interface number: 138 but max is 0 [ 72.801295][ T370] usb 4-1: config 0 has no interface number 0 [ 72.808426][ T370] usb 4-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 72.821846][ T370] usb 4-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 72.831202][ T370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.840029][ T370] usb 4-1: Product: syz [ 72.844781][ T370] usb 4-1: Manufacturer: syz [ 72.849670][ T370] usb 4-1: SerialNumber: syz [ 72.855628][ T370] usb 4-1: config 0 descriptor?? [ 72.861798][ T1940] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 72.869948][ T370] ums-datafab 4-1:0.138: USB Mass Storage device detected [ 72.880409][ T370] scsi host1: usb-storage 4-1:0.138 [ 72.986859][ T1956] rust_binder: Write failure EFAULT in pid:317 [ 73.276364][ T1940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.287451][ T1940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.298341][ T305] usb 4-1: USB disconnect, device number 21 [ 73.331420][ T451] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 73.501398][ T451] usb 3-1: Using ep0 maxpacket: 16 [ 73.508386][ T451] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 73.518145][ T451] usb 3-1: config 4 has no interface number 0 [ 73.530777][ T451] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 73.549046][ T451] usb 3-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 73.559891][ T451] usb 3-1: config 4 interface 15 has no altsetting 0 [ 73.568477][ T451] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 73.578973][ T451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.587857][ T451] usb 3-1: Product: syz [ 73.592462][ T451] usb 3-1: Manufacturer: syz [ 73.597428][ T451] usb 3-1: SerialNumber: syz [ 73.611927][ T1960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.620009][ T1960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.842019][ T1960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.850449][ T1960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.910795][ T36] audit: type=1400 audit(1750434812.239:357): avc: denied { write } for pid=1967 comm="syz.3.697" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 73.997740][ T1971] syzkaller0: entered allmulticast mode [ 74.311425][ T305] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 74.471431][ T305] usb 4-1: Using ep0 maxpacket: 16 [ 74.477935][ T305] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.484808][ T305] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 74.494782][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.505911][ T305] usb 4-1: config 0 descriptor?? [ 74.593453][ T452] usb 1-1: USB disconnect, device number 25 [ 74.626843][ T1991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 74.626865][ T1991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:356 [ 74.655844][ T1994] syzkaller0: entered allmulticast mode [ 74.797936][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.797965][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.805939][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.813447][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.820246][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.827296][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.834546][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.842037][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.849348][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.855949][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.862631][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.869516][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.876315][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.883145][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.890283][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.897441][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.904048][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.910489][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.917515][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.924055][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.930699][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.937622][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.944259][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.950790][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.957452][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.964046][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.970922][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.978372][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.986263][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 74.998083][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.004519][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.012342][ T36] audit: type=1400 audit(1750434813.349:358): avc: denied { write } for pid=2004 comm="syz.2.711" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 75.045098][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.045139][ T2001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.046423][ T2011] netlink: 220 bytes leftover after parsing attributes in process `syz.1.714'. [ 75.092658][ T2021] overlayfs: missing 'lowerdir' [ 75.119783][ T305] usbhid 4-1:0.0: can't add hid device: -71 [ 75.126987][ T305] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 75.136481][ T305] usb 4-1: USB disconnect, device number 22 [ 75.194404][ T36] audit: type=1400 audit(1750434813.529:359): avc: denied { getopt } for pid=2037 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.221953][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 75.233822][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 75.245174][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 75.257044][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 75.268404][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 75.280476][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.291963][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.304440][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.317529][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.331408][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 75.341418][ T2048] overlayfs: missing 'lowerdir' [ 75.345535][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.361294][ T452] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 75.371164][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 75.376500][ T2050] overlayfs: failed to clone upperpath [ 75.382951][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 75.401645][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 75.413967][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 75.425674][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 75.437741][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 75.449383][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 75.461149][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 75.473002][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 75.485705][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 75.497901][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 75.511252][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 75.524851][ T452] usb 1-1: Using ep0 maxpacket: 8 [ 75.530541][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 75.542200][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 75.553670][ T452] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.564247][ T452] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 75.573442][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 75.584849][ T451] ax88179_178a 3-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 75.597415][ T452] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 75.608718][ T451] ax88179_178a 3-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter, 82:09:3c:e7:eb:b9 [ 75.622008][ T452] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 75.635909][ T452] usb 1-1: Product: syz [ 75.646488][ T2070] overlayfs: missing 'lowerdir' [ 75.646969][ T452] usb 1-1: Manufacturer: syz [ 75.656783][ T451] usb 3-1: USB disconnect, device number 23 [ 75.666965][ T451] ax88179_178a 3-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, Toshiba USB Ethernet Adapter [ 75.678901][ T452] usb 1-1: SerialNumber: syz [ 75.684404][ T36] audit: type=1400 audit(1750434814.009:360): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 75.707039][ T452] usb 1-1: config 0 descriptor?? [ 75.721049][ T36] audit: type=1400 audit(1750434814.019:361): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.745048][ T2085] FAULT_INJECTION: forcing a failure. [ 75.745048][ T2085] name failslab, interval 1, probability 0, space 0, times 0 [ 75.757598][ T36] audit: type=1400 audit(1750434814.019:362): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.760066][ T2085] CPU: 1 UID: 0 PID: 2085 Comm: syz.3.743 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 75.760097][ T2085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.760108][ T2085] Call Trace: [ 75.760113][ T2085] [ 75.760120][ T2085] __dump_stack+0x21/0x30 [ 75.760145][ T2085] dump_stack_lvl+0x10c/0x190 [ 75.760162][ T2085] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.760182][ T2085] dump_stack+0x19/0x20 [ 75.760198][ T2085] should_fail_ex+0x3d9/0x530 [ 75.760216][ T2085] should_failslab+0xac/0x100 [ 75.760238][ T2085] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 75.760256][ T2085] ? __alloc_skb+0x10c/0x370 [ 75.760276][ T2085] __alloc_skb+0x10c/0x370 [ 75.760294][ T2085] rtmsg_ifinfo_build_skb+0x85/0x270 [ 75.760310][ T2085] ? __cfi_mutex_unlock+0x10/0x10 [ 75.760326][ T2085] rtnetlink_event+0x1cc/0x290 [ 75.760344][ T2085] ? __cfi_rtnetlink_event+0x10/0x10 [ 75.760362][ T2085] notifier_call_chain+0x10b/0x2c0 [ 75.760382][ T2085] raw_notifier_call_chain+0x31/0x40 [ 75.760401][ T2085] call_netdevice_notifiers_info+0xcf/0x120 [ 75.760423][ T2085] dev_set_mtu_ext+0x4d3/0x6e0 [ 75.760440][ T2085] ? __cfi_dev_set_mtu_ext+0x10/0x10 [ 75.760455][ T2085] ? do_vfs_ioctl+0xeda/0x1e30 [ 75.760474][ T2085] ? arch_stack_walk+0x10b/0x170 [ 75.760495][ T2085] dev_set_mtu+0xb9/0x180 [ 75.760509][ T2085] ? __cfi_dev_set_mtu+0x10/0x10 [ 75.760526][ T2085] ? full_name_hash+0xa1/0xf0 [ 75.760546][ T2085] dev_ifsioc+0x545/0xe60 [ 75.760566][ T2085] ? dev_ioctl+0x1030/0x1030 [ 75.760585][ T2085] ? dev_get_by_name_rcu+0xe9/0x140 [ 75.760607][ T2085] dev_ioctl+0x9fa/0x1030 [ 75.760627][ T2085] sock_do_ioctl+0x244/0x330 [ 75.760644][ T2085] ? sock_show_fdinfo+0xd0/0xd0 [ 75.760661][ T2085] ? __cfi_vfs_write+0x10/0x10 [ 75.760679][ T2085] ? __kasan_check_write+0x18/0x20 [ 75.760696][ T2085] ? mutex_unlock+0x8b/0x240 [ 75.760711][ T2085] sock_ioctl+0x634/0x7b0 [ 75.760727][ T2085] ? __cfi_sock_ioctl+0x10/0x10 [ 75.760743][ T2085] ? __fget_files+0x2c5/0x340 [ 75.760763][ T2085] ? bpf_lsm_file_ioctl+0xd/0x20 [ 75.760779][ T2085] ? security_file_ioctl+0x34/0xd0 [ 75.760799][ T2085] ? __cfi_sock_ioctl+0x10/0x10 [ 75.760815][ T2085] __se_sys_ioctl+0x132/0x1b0 [ 75.760835][ T2085] __x64_sys_ioctl+0x7f/0xa0 [ 75.760854][ T2085] x64_sys_call+0x1878/0x2ee0 [ 75.760874][ T2085] do_syscall_64+0x58/0xf0 [ 75.760893][ T2085] ? clear_bhb_loop+0x35/0x90 [ 75.760915][ T2085] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.760936][ T2085] RIP: 0033:0x7fd18a78e929 [ 75.760950][ T2085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.760963][ T2085] RSP: 002b:00007fd18b582038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.760982][ T2085] RAX: ffffffffffffffda RBX: 00007fd18a9b5fa0 RCX: 00007fd18a78e929 [ 75.761000][ T2085] RDX: 0000200000000040 RSI: 0000000000008922 RDI: 0000000000000003 [ 75.761011][ T2085] RBP: 00007fd18b582090 R08: 0000000000000000 R09: 0000000000000000 [ 75.761021][ T2085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.761031][ T2085] R13: 0000000000000000 R14: 00007fd18a9b5fa0 R15: 00007ffc22d6e5b8 [ 75.761045][ T2085] [ 75.790668][ T2091] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 75.804207][ T36] audit: type=1400 audit(1750434814.019:363): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.822145][ T2091] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 75.825574][ T36] audit: type=1400 audit(1750434814.019:364): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.062287][ T2118] overlayfs: missing 'lowerdir' [ 76.077704][ T36] audit: type=1400 audit(1750434814.039:365): avc: denied { getopt } for pid=2074 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.206592][ T36] audit: type=1400 audit(1750434814.049:366): avc: denied { read } for pid=2084 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.232305][ T36] audit: type=1400 audit(1750434814.049:367): avc: denied { open } for pid=2084 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.291472][ T451] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 76.327442][ T2128] overlayfs: missing 'lowerdir' [ 76.441500][ T451] usb 4-1: Using ep0 maxpacket: 16 [ 76.448192][ T451] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.455221][ T451] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 76.464981][ T451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.474423][ T451] usb 4-1: config 0 descriptor?? [ 76.559258][ T2145] overlayfs: missing 'lowerdir' [ 76.693608][ T2151] overlayfs: missing 'lowerdir' [ 77.084182][ T451] usbhid 4-1:0.0: can't add hid device: -71 [ 77.090679][ T451] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 77.100885][ T451] usb 4-1: USB disconnect, device number 23 [ 77.599575][ T2168] overlayfs: missing 'lowerdir' [ 77.648465][ T2167] FAULT_INJECTION: forcing a failure. [ 77.648465][ T2167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.658611][ T2173] overlayfs: missing 'lowerdir' [ 77.662191][ T2167] CPU: 1 UID: 0 PID: 2167 Comm: syz.3.767 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 77.662232][ T2167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.662243][ T2167] Call Trace: [ 77.662256][ T2167] [ 77.662264][ T2167] __dump_stack+0x21/0x30 [ 77.662290][ T2167] dump_stack_lvl+0x10c/0x190 [ 77.662309][ T2167] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.662330][ T2167] dump_stack+0x19/0x20 [ 77.662346][ T2167] should_fail_ex+0x3d9/0x530 [ 77.662364][ T2167] should_fail+0xf/0x20 [ 77.662380][ T2167] should_fail_usercopy+0x1e/0x30 [ 77.662398][ T2167] _copy_to_user+0x24/0xa0 [ 77.662419][ T2167] simple_read_from_buffer+0xed/0x160 [ 77.662444][ T2167] proc_fail_nth_read+0x19e/0x210 [ 77.662461][ T2167] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 77.662477][ T2167] ? bpf_lsm_file_permission+0xd/0x20 [ 77.662494][ T2167] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 77.662509][ T2167] vfs_read+0x278/0xb60 [ 77.662528][ T2167] ? __cfi_vfs_read+0x10/0x10 [ 77.662545][ T2167] ? __kasan_check_write+0x18/0x20 [ 77.662563][ T2167] ? mutex_lock+0x92/0x1c0 [ 77.662579][ T2167] ? __cfi_mutex_lock+0x10/0x10 [ 77.662594][ T2167] ? __fget_files+0x2c5/0x340 [ 77.662615][ T2167] ksys_read+0x141/0x250 [ 77.662633][ T2167] ? xfd_validate_state+0x68/0x150 [ 77.662650][ T2167] ? __cfi_ksys_read+0x10/0x10 [ 77.662669][ T2167] ? __kasan_check_write+0x18/0x20 [ 77.662685][ T2167] ? fpregs_restore_userregs+0x11d/0x260 [ 77.662708][ T2167] __x64_sys_read+0x7f/0x90 [ 77.662727][ T2167] x64_sys_call+0x2638/0x2ee0 [ 77.662747][ T2167] do_syscall_64+0x58/0xf0 [ 77.662767][ T2167] ? clear_bhb_loop+0x35/0x90 [ 77.662797][ T2167] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.662825][ T2167] RIP: 0033:0x7fd18a78d33c [ 77.662840][ T2167] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.662860][ T2167] RSP: 002b:00007fd18b582030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.662878][ T2167] RAX: ffffffffffffffda RBX: 00007fd18a9b5fa0 RCX: 00007fd18a78d33c [ 77.662888][ T2167] RDX: 000000000000000f RSI: 00007fd18b5820a0 RDI: 0000000000000007 [ 77.662898][ T2167] RBP: 00007fd18b582090 R08: 0000000000000000 R09: 0000000000000000 [ 77.662910][ T2167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.662920][ T2167] R13: 0000000000000000 R14: 00007fd18a9b5fa0 R15: 00007ffc22d6e5b8 [ 77.662935][ T2167] [ 77.983699][ T2188] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 77.992738][ T2188] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.106933][ T479] usb 1-1: USB disconnect, device number 26 [ 78.254153][ T2200] rust_binder: Write failure EFAULT in pid:381 [ 78.310053][ T2201] rust_binder: Write failure EINVAL in pid:381 [ 78.357436][ T2203] kvm: pic: level sensitive irq not supported [ 78.401670][ T2208] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 78.416835][ T2208] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.551447][ T479] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 78.702586][ T479] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 78.712839][ T479] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 78.727735][ T479] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.737031][ T479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.745177][ T479] usb 1-1: SerialNumber: syz [ 78.750609][ T2201] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.758305][ T479] usb 1-1: bad CDC descriptors [ 78.761398][ T451] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 78.921455][ T451] usb 4-1: Using ep0 maxpacket: 16 [ 78.927797][ T451] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.938310][ T451] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.955749][ T451] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 78.965054][ T451] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=164 [ 78.973831][ T451] usb 4-1: Product: syz [ 78.978202][ T451] usb 4-1: SerialNumber: syz [ 78.984070][ T451] usb 4-1: config 0 descriptor?? [ 78.992503][ T451] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 79.031629][ T2230] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 79.040972][ T2230] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 79.108255][ T2240] 9pnet_virtio: no channels available for device syz [ 79.195225][ T479] usb 4-1: USB disconnect, device number 24 [ 79.651434][ T451] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 79.713914][ T2253] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 79.723938][ T2253] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 79.806775][ T451] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.814947][ T451] usb 3-1: no configurations [ 79.819571][ T451] usb 3-1: can't read configurations, error -22 [ 80.001456][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 80.152821][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.163959][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.174158][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.189086][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.198809][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.208635][ T45] usb 4-1: config 0 descriptor?? [ 80.616786][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 80.624773][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 80.632695][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 80.640226][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 80.648010][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 80.655897][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 80.663617][ T451] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 80.671292][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 80.679129][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 80.686839][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 80.694394][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 80.701899][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 80.709560][ T45] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 80.718400][ T45] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 80.819881][ T2279] @: renamed from vlan0 (while UP) [ 80.833154][ T2283] overlayfs: missing 'lowerdir' [ 80.841611][ T451] usb 3-1: Using ep0 maxpacket: 16 [ 80.851744][ T451] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.862419][ T451] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.871874][ T2259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.880347][ T451] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 80.884510][ T2259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.896658][ T451] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=164 [ 80.911485][ T451] usb 3-1: Product: syz [ 80.915748][ T451] usb 3-1: SerialNumber: syz [ 80.925029][ T451] usb 3-1: config 0 descriptor?? [ 80.932750][ T451] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 81.122106][ T479] usb 4-1: USB disconnect, device number 25 [ 81.138097][ T451] usb 3-1: USB disconnect, device number 25 [ 81.259998][ T45] usb 1-1: USB disconnect, device number 27 [ 81.270583][ T2300] overlayfs: missing 'workdir' [ 81.392105][ T2304] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 81.392128][ T2304] rust_binder: Error in use_page_slow: EBUSY [ 81.403897][ T2304] rust_binder: use_range failure EBUSY [ 81.410852][ T2304] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 81.417433][ T2304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 81.426605][ T2304] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 81.436777][ T2304] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:388 [ 81.457823][ T2307] overlayfs: missing 'lowerdir' [ 81.496966][ T2313] FAULT_INJECTION: forcing a failure. [ 81.496966][ T2313] name failslab, interval 1, probability 0, space 0, times 0 [ 81.510029][ T2313] CPU: 1 UID: 0 PID: 2313 Comm: syz.0.827 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 81.510061][ T2313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.510070][ T2313] Call Trace: [ 81.510075][ T2313] [ 81.510080][ T2313] __dump_stack+0x21/0x30 [ 81.510097][ T2313] dump_stack_lvl+0x10c/0x190 [ 81.510108][ T2313] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.510119][ T2313] ? kasan_save_track+0x4f/0x80 [ 81.510132][ T2313] dump_stack+0x19/0x20 [ 81.510142][ T2313] should_fail_ex+0x3d9/0x530 [ 81.510153][ T2313] should_failslab+0xac/0x100 [ 81.510165][ T2313] __kmalloc_noprof+0x69/0x450 [ 81.510177][ T2313] ? ip_options_get+0x5c/0x540 [ 81.510188][ T2313] ip_options_get+0x5c/0x540 [ 81.510198][ T2313] ? __asan_memcpy+0x5a/0x80 [ 81.510209][ T2313] ip_cmsg_send+0x65f/0xad0 [ 81.510221][ T2313] udp_sendmsg+0xb26/0x21f0 [ 81.510235][ T2313] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 81.510246][ T2313] ? __cfi_udp_sendmsg+0x10/0x10 [ 81.510258][ T2313] ? ip4_datagram_release_cb+0x652/0x820 [ 81.510268][ T2313] ? __cfi_udp_lib_get_port+0x10/0x10 [ 81.510280][ T2313] ? _raw_spin_unlock_bh+0x54/0x60 [ 81.510292][ T2313] ? release_sock+0x171/0x1f0 [ 81.510304][ T2313] ? inet_send_prepare+0x1e7/0x4f0 [ 81.510313][ T2313] ? __cfi_udp_sendmsg+0x10/0x10 [ 81.510324][ T2313] inet_sendmsg+0xef/0x120 [ 81.510333][ T2313] ____sys_sendmsg+0x82a/0xa70 [ 81.510347][ T2313] ? __sys_sendmsg_sock+0x50/0x50 [ 81.510360][ T2313] ? import_iovec+0x81/0xb0 [ 81.510393][ T2313] ___sys_sendmsg+0x220/0x2a0 [ 81.510413][ T2313] ? __sys_sendmsg+0x280/0x280 [ 81.510435][ T2313] ? proc_fail_nth_write+0x17e/0x210 [ 81.510450][ T2313] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 81.510466][ T2313] __x64_sys_sendmsg+0x1eb/0x2c0 [ 81.510475][ T2313] ? fput+0x1a5/0x240 [ 81.510488][ T2313] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 81.510496][ T2313] ? ksys_write+0x1ef/0x250 [ 81.510507][ T2313] ? __kasan_check_read+0x15/0x20 [ 81.510517][ T2313] x64_sys_call+0x2a4c/0x2ee0 [ 81.510529][ T2313] do_syscall_64+0x58/0xf0 [ 81.510540][ T2313] ? clear_bhb_loop+0x35/0x90 [ 81.510555][ T2313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.510568][ T2313] RIP: 0033:0x7f4be078e929 [ 81.510577][ T2313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.510595][ T2313] RSP: 002b:00007f4be158e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.510607][ T2313] RAX: ffffffffffffffda RBX: 00007f4be09b5fa0 RCX: 00007f4be078e929 [ 81.510615][ T2313] RDX: 000000000000c804 RSI: 0000200000000380 RDI: 0000000000000003 [ 81.510621][ T2313] RBP: 00007f4be158e090 R08: 0000000000000000 R09: 0000000000000000 [ 81.510628][ T2313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.510634][ T2313] R13: 0000000000000000 R14: 00007f4be09b5fa0 R15: 00007ffcc9458af8 [ 81.510642][ T2313] [ 81.681256][ T2317] FAULT_INJECTION: forcing a failure. [ 81.681256][ T2317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.743153][ T2324] overlayfs: missing 'workdir' [ 81.761869][ T2317] CPU: 0 UID: 0 PID: 2317 Comm: syz.2.829 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 81.761901][ T2317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.761913][ T2317] Call Trace: [ 81.761920][ T2317] [ 81.761928][ T2317] __dump_stack+0x21/0x30 [ 81.761955][ T2317] dump_stack_lvl+0x10c/0x190 [ 81.761973][ T2317] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.761995][ T2317] dump_stack+0x19/0x20 [ 81.762013][ T2317] should_fail_ex+0x3d9/0x530 [ 81.762032][ T2317] should_fail+0xf/0x20 [ 81.762049][ T2317] should_fail_usercopy+0x1e/0x30 [ 81.762067][ T2317] _copy_to_user+0x24/0xa0 [ 81.762088][ T2317] simple_read_from_buffer+0xed/0x160 [ 81.762114][ T2317] proc_fail_nth_read+0x19e/0x210 [ 81.762131][ T2317] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 81.762148][ T2317] ? bpf_lsm_file_permission+0xd/0x20 [ 81.762166][ T2317] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 81.762183][ T2317] vfs_read+0x278/0xb60 [ 81.762203][ T2317] ? __cfi_vfs_read+0x10/0x10 [ 81.762221][ T2317] ? __kasan_check_write+0x18/0x20 [ 81.762239][ T2317] ? mutex_lock+0x92/0x1c0 [ 81.762254][ T2317] ? __cfi_mutex_lock+0x10/0x10 [ 81.762270][ T2317] ? __fget_files+0x2c5/0x340 [ 81.762293][ T2317] ksys_read+0x141/0x250 [ 81.762311][ T2317] ? __cfi_ksys_read+0x10/0x10 [ 81.762330][ T2317] ? __se_sys_ioprio_set+0x44b/0x710 [ 81.762350][ T2317] ? __kasan_check_read+0x15/0x20 [ 81.762368][ T2317] __x64_sys_read+0x7f/0x90 [ 81.762387][ T2317] x64_sys_call+0x2638/0x2ee0 [ 81.762407][ T2317] do_syscall_64+0x58/0xf0 [ 81.762428][ T2317] ? clear_bhb_loop+0x35/0x90 [ 81.762451][ T2317] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.762474][ T2317] RIP: 0033:0x7f903918d33c [ 81.762491][ T2317] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 81.762504][ T2317] RSP: 002b:00007f9039f8b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.762530][ T2317] RAX: ffffffffffffffda RBX: 00007f90393b5fa0 RCX: 00007f903918d33c [ 81.762543][ T2317] RDX: 000000000000000f RSI: 00007f9039f8b0a0 RDI: 0000000000000003 [ 81.762555][ T2317] RBP: 00007f9039f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 81.762567][ T2317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.762577][ T2317] R13: 0000000000000000 R14: 00007f90393b5fa0 R15: 00007ffd0e9bc3c8 [ 81.762592][ T2317] [ 81.812854][ T2329] overlayfs: missing 'lowerdir' [ 81.916946][ T2338] input: syz1 as /devices/virtual/input/input10 [ 82.102144][ T45] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 82.212759][ T2363] overlayfs: missing 'workdir' [ 82.251484][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 82.258000][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.269610][ T45] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.295742][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.311339][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.329391][ T45] usb 4-1: Product: syz [ 82.335372][ T2371] rust_binder: Error while translating object. [ 82.335408][ T2371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 82.337349][ T2373] FAULT_INJECTION: forcing a failure. [ 82.337349][ T2373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.341805][ T45] usb 4-1: Manufacturer: syz [ 82.341823][ T45] usb 4-1: SerialNumber: syz [ 82.352696][ T2373] CPU: 0 UID: 0 PID: 2373 Comm: syz.0.853 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 82.352724][ T2373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.352735][ T2373] Call Trace: [ 82.352741][ T2373] [ 82.352749][ T2373] __dump_stack+0x21/0x30 [ 82.352772][ T2373] dump_stack_lvl+0x10c/0x190 [ 82.352791][ T2373] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.352819][ T2373] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.352844][ T2373] dump_stack+0x19/0x20 [ 82.352861][ T2373] should_fail_ex+0x3d9/0x530 [ 82.352879][ T2373] should_fail+0xf/0x20 [ 82.352896][ T2373] should_fail_usercopy+0x1e/0x30 [ 82.352913][ T2373] _copy_from_iter+0x1a3/0x14b0 [ 82.352935][ T2373] ? __cfi__copy_from_iter+0x10/0x10 [ 82.352956][ T2373] ? __kasan_check_read+0x15/0x20 [ 82.352973][ T2373] ? __check_object_size+0x455/0x620 [ 82.352993][ T2373] ? __build_skb_around+0x2a4/0x5a0 [ 82.353012][ T2373] skb_copy_datagram_from_iter+0x100/0x700 [ 82.353034][ T2373] ? __cfi_mutex_lock+0x10/0x10 [ 82.353051][ T2373] tun_get_user+0x1616/0x3450 [ 82.353071][ T2373] ? _parse_integer_limit+0x195/0x1e0 [ 82.353088][ T2373] ? ptr_ring_consume+0x430/0x430 [ 82.353104][ T2373] ? _parse_integer+0x2e/0x40 [ 82.353119][ T2373] ? kstrtoull+0x13b/0x1e0 [ 82.353135][ T2373] ? __kasan_check_write+0x18/0x20 [ 82.353153][ T2373] ? ref_tracker_alloc+0x308/0x540 [ 82.353172][ T2373] ? __x64_sys_openat+0x13a/0x170 [ 82.353188][ T2373] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 82.353207][ T2373] ? selinux_file_permission+0x309/0xb30 [ 82.353230][ T2373] ? __kasan_check_write+0x18/0x20 [ 82.353249][ T2373] tun_chr_write_iter+0x1fc/0x310 [ 82.353266][ T2373] vfs_write+0x694/0xe80 [ 82.353285][ T2373] ? __cfi_tun_chr_write_iter+0x10/0x10 [ 82.353301][ T2373] ? __cfi_vfs_write+0x10/0x10 [ 82.353321][ T2373] ksys_write+0x141/0x250 [ 82.353339][ T2373] ? __cfi_ksys_write+0x10/0x10 [ 82.353358][ T2373] ? __kasan_check_read+0x15/0x20 [ 82.353375][ T2373] __x64_sys_write+0x7f/0x90 [ 82.353394][ T2373] x64_sys_call+0x271c/0x2ee0 [ 82.353413][ T2373] do_syscall_64+0x58/0xf0 [ 82.353432][ T2373] ? clear_bhb_loop+0x35/0x90 [ 82.353455][ T2373] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.353478][ T2373] RIP: 0033:0x7f4be078e929 [ 82.353493][ T2373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.353506][ T2373] RSP: 002b:00007f4be158e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.353525][ T2373] RAX: ffffffffffffffda RBX: 00007f4be09b5fa0 RCX: 00007f4be078e929 [ 82.353538][ T2373] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000003 [ 82.353550][ T2373] RBP: 00007f4be158e090 R08: 0000000000000000 R09: 0000000000000000 [ 82.353561][ T2373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.353571][ T2373] R13: 0000000000000000 R14: 00007f4be09b5fa0 R15: 00007ffcc9458af8 [ 82.353586][ T2373] [ 82.366063][ T2371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:404 [ 82.777219][ T2383] FAULT_INJECTION: forcing a failure. [ 82.777219][ T2383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.803937][ T2387] rust_binder: Got transaction with invalid offset. [ 82.803982][ T2387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.805425][ T2383] CPU: 0 UID: 0 PID: 2383 Comm: syz.0.857 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 82.805454][ T2383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.805465][ T2383] Call Trace: [ 82.805471][ T2383] [ 82.805478][ T2383] __dump_stack+0x21/0x30 [ 82.805517][ T2383] dump_stack_lvl+0x10c/0x190 [ 82.805536][ T2383] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.805557][ T2383] dump_stack+0x19/0x20 [ 82.805574][ T2383] should_fail_ex+0x3d9/0x530 [ 82.805594][ T2383] should_fail+0xf/0x20 [ 82.805610][ T2383] should_fail_usercopy+0x1e/0x30 [ 82.805630][ T2383] _copy_from_user+0x22/0xb0 [ 82.805652][ T2383] do_ip_getsockopt+0x229/0x1810 [ 82.805676][ T2383] ? arch_stack_walk+0x10b/0x170 [ 82.805696][ T2383] ? __cfi_do_ip_getsockopt+0x10/0x10 [ 82.805719][ T2383] ? _parse_integer+0x2e/0x40 [ 82.805735][ T2383] ? avc_has_perm_noaudit+0x268/0x360 [ 82.805752][ T2383] ? __asan_memcpy+0x5a/0x80 [ 82.805771][ T2383] ? avc_has_perm_noaudit+0x286/0x360 [ 82.805788][ T2383] ? avc_has_perm+0x144/0x220 [ 82.805805][ T2383] ? __cfi_avc_has_perm+0x10/0x10 [ 82.805824][ T2383] ip_getsockopt+0xbc/0x1e0 [ 82.805848][ T2383] ? __cfi_ip_getsockopt+0x10/0x10 [ 82.805871][ T2383] ? vfs_write+0x8ba/0xe80 [ 82.805892][ T2383] raw_getsockopt+0xdb/0x1e0 [ 82.805913][ T2383] sock_common_getsockopt+0xaf/0xd0 [ 82.805933][ T2383] ? __cfi_sock_common_getsockopt+0x10/0x10 [ 82.805953][ T2383] do_sock_getsockopt+0x3a3/0x6d0 [ 82.805977][ T2383] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 82.806002][ T2383] ? __fget_files+0x2c5/0x340 [ 82.806026][ T2383] __x64_sys_getsockopt+0x1d5/0x280 [ 82.806052][ T2383] x64_sys_call+0x10db/0x2ee0 [ 82.806074][ T2383] do_syscall_64+0x58/0xf0 [ 82.806096][ T2383] ? clear_bhb_loop+0x35/0x90 [ 82.806119][ T2383] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.806143][ T2383] RIP: 0033:0x7f4be078e929 [ 82.806158][ T2383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.806173][ T2383] RSP: 002b:00007f4be158e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 82.806195][ T2383] RAX: ffffffffffffffda RBX: 00007f4be09b5fa0 RCX: 00007f4be078e929 [ 82.806209][ T2383] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000003 [ 82.806221][ T2383] RBP: 00007f4be158e090 R08: 00002000000000c0 R09: 0000000000000000 [ 82.806234][ T2383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.806245][ T2383] R13: 0000000000000000 R14: 00007f4be09b5fa0 R15: 00007ffcc9458af8 [ 82.806260][ T2383] [ 82.845990][ T2322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.850784][ T2387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:408 [ 82.858221][ T2322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.140718][ T2322] kvm: kvm [2321]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 83.391440][ T342] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 83.461595][ T305] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 83.541663][ T342] usb 3-1: Using ep0 maxpacket: 8 [ 83.549535][ T342] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 83.559618][ T342] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.567949][ T342] usb 3-1: Product: syz [ 83.572160][ T342] usb 3-1: Manufacturer: syz [ 83.576951][ T342] usb 3-1: SerialNumber: syz [ 83.582330][ T342] usb 3-1: config 0 descriptor?? [ 83.621467][ T305] usb 1-1: Using ep0 maxpacket: 16 [ 83.628476][ T305] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 83.637938][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.647233][ T305] usb 1-1: config 0 descriptor?? [ 83.653885][ T305] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 83.792400][ T45] cdc_ncm 4-1:1.0: bind() failure [ 83.799030][ T45] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 83.807288][ T45] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 83.820389][ T45] usb 4-1: USB disconnect, device number 26 [ 83.854439][ T305] usb 1-1: Detected FT232B [ 84.260501][ T305] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 84.318403][ T2416] input: syz0 as /devices/virtual/input/input11 [ 84.461943][ T479] usb 1-1: USB disconnect, device number 28 [ 84.470201][ T479] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 84.481667][ T479] ftdi_sio 1-1:0.0: device disconnected [ 84.596862][ T2423] block device autoloading is deprecated and will be removed. [ 84.604727][ T2423] syz.3.875: attempt to access beyond end of device [ 84.604727][ T2423] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 84.752076][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 84.752092][ T36] audit: type=1400 audit(1750434823.089:382): avc: denied { map } for pid=2434 comm="syz.1.880" path="socket:[17981]" dev="sockfs" ino=17981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 84.871443][ T305] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 85.004118][ T2449] syzkaller0: entered allmulticast mode [ 85.021498][ T305] usb 4-1: Using ep0 maxpacket: 16 [ 85.028445][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.044070][ T305] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.062139][ T305] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=164 [ 85.071222][ T305] usb 4-1: Product: syz [ 85.077761][ T305] usb 4-1: SerialNumber: syz [ 85.086253][ T305] usb 4-1: config 0 descriptor?? [ 85.094255][ T305] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 85.296073][ T65] usb 4-1: USB disconnect, device number 27 [ 85.361460][ T305] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 85.513418][ T305] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.522338][ T305] usb 1-1: not running at top speed; connect to a high speed hub [ 85.531153][ T305] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 85.540028][ T305] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 85.552251][ T305] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.565647][ T305] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.575649][ T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.584415][ T305] usb 1-1: Product: syz [ 85.588962][ T305] usb 1-1: Manufacturer: syz [ 85.593720][ T305] usb 1-1: SerialNumber: syz [ 85.857361][ T2476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.859358][ T2476] rust_binder: Write failure EINVAL in pid:407 [ 85.900778][ T305] usb 1-1: 0:2 : does not exist [ 85.917487][ T305] usb 1-1: USB disconnect, device number 29 [ 86.060085][ T2492] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.060958][ T2494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.068682][ T2494] rust_binder: Error while translating object. [ 86.075648][ T2494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.082000][ T2494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:423 [ 86.101157][ T36] audit: type=1326 audit(1750434824.429:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2496 comm="syz.3.908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd18a78e929 code=0x0 [ 86.165165][ T479] usb 3-1: USB disconnect, device number 26 [ 86.317088][ T2500] fuse: Bad value for 'user_id' [ 86.322264][ T2500] fuse: Bad value for 'user_id' [ 86.406789][ T2520] overlayfs: failed to clone upperpath [ 86.741488][ T479] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 86.892531][ T479] usb 1-1: config 0 has an invalid interface number: 138 but max is 0 [ 86.901761][ T479] usb 1-1: config 0 has no interface number 0 [ 86.901859][ T36] audit: type=1400 audit(1750434825.239:384): avc: denied { setopt } for pid=2536 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.908179][ T479] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 86.943300][ T479] usb 1-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 86.953836][ T479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.962267][ T479] usb 1-1: Product: syz [ 86.967496][ T479] usb 1-1: Manufacturer: syz [ 86.972502][ T479] usb 1-1: SerialNumber: syz [ 86.991060][ T479] usb 1-1: config 0 descriptor?? [ 87.005332][ T2528] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.029483][ T2543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.029596][ T2543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.036765][ T2543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:433 [ 87.038080][ T479] ums-datafab 1-1:0.138: USB Mass Storage device detected [ 87.067850][ T479] scsi host1: usb-storage 1-1:0.138 [ 87.393353][ T2563] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.411606][ T36] audit: type=1400 audit(1750434825.749:385): avc: denied { create } for pid=2561 comm="syz.3.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.460906][ T2528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.472950][ T2528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.484187][ T342] usb 1-1: USB disconnect, device number 30 [ 87.512044][ T36] audit: type=1400 audit(1750434825.849:386): avc: denied { create } for pid=2566 comm="syz.3.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 87.523161][ T2567] Invalid logical block size (18) [ 87.534055][ T36] audit: type=1400 audit(1750434825.849:387): avc: denied { write } for pid=2566 comm="syz.3.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 87.570295][ T36] audit: type=1400 audit(1750434825.889:388): avc: denied { write } for pid=2566 comm="syz.3.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 87.692857][ T36] audit: type=1400 audit(1750434826.029:389): avc: denied { accept } for pid=2573 comm="syz.3.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.713351][ T36] audit: type=1400 audit(1750434826.049:390): avc: denied { read } for pid=2573 comm="syz.3.938" path="socket:[19557]" dev="sockfs" ino=19557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.037784][ T2579] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 88.571412][ T36] audit: type=1400 audit(1750434826.899:391): avc: denied { load_policy } for pid=2586 comm="syz.3.943" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 88.572307][ T2587] SELinux: failed to load policy [ 88.953111][ T2612] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 89.051414][ T479] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 89.221437][ T479] usb 4-1: Using ep0 maxpacket: 32 [ 89.228059][ T479] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 89.241393][ T479] usb 4-1: config 0 has no interface number 0 [ 89.259244][ T479] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 89.277280][ T479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.291383][ T479] usb 4-1: Product: syz [ 89.295667][ T479] usb 4-1: Manufacturer: syz [ 89.304677][ T2619] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.307890][ T479] usb 4-1: SerialNumber: syz [ 89.333292][ T479] usb 4-1: config 0 descriptor?? [ 89.339528][ T479] smsc95xx v2.0.0 [ 89.741767][ T479] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 89.753517][ T479] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 89.964093][ T479] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 89.976688][ T479] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 89.987477][ T479] usb 4-1: USB disconnect, device number 28 [ 90.098877][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 90.098895][ T36] audit: type=1400 audit(1750434828.429:396): avc: denied { mount } for pid=2633 comm="syz.1.963" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 90.131529][ T36] audit: type=1400 audit(1750434828.459:397): avc: denied { search } for pid=2633 comm="syz.1.963" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.157496][ T36] audit: type=1400 audit(1750434828.469:398): avc: denied { write } for pid=2633 comm="syz.1.963" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.180608][ T36] audit: type=1400 audit(1750434828.469:399): avc: denied { add_name } for pid=2633 comm="syz.1.963" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.204143][ T36] audit: type=1400 audit(1750434828.469:400): avc: denied { create } for pid=2633 comm="syz.1.963" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 90.320935][ T36] audit: type=1400 audit(1750434828.649:401): avc: denied { watch watch_reads } for pid=2643 comm="syz.0.966" path="/191/file0" dev="tmpfs" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.432386][ T36] audit: type=1400 audit(1750434828.769:402): avc: denied { validate_trans } for pid=2646 comm="syz.0.967" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 90.592392][ T2656] FAULT_INJECTION: forcing a failure. [ 90.592392][ T2656] name fail_futex, interval 1, probability 0, space 0, times 1 [ 90.605654][ T2656] CPU: 0 UID: 0 PID: 2656 Comm: syz.3.971 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 90.605685][ T2656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.605693][ T2656] Call Trace: [ 90.605698][ T2656] [ 90.605703][ T2656] __dump_stack+0x21/0x30 [ 90.605720][ T2656] dump_stack_lvl+0x10c/0x190 [ 90.605732][ T2656] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.605744][ T2656] ? stack_depot_save_flags+0x38/0x800 [ 90.605758][ T2656] dump_stack+0x19/0x20 [ 90.605769][ T2656] should_fail_ex+0x3d9/0x530 [ 90.605780][ T2656] should_fail+0xf/0x20 [ 90.605789][ T2656] get_futex_key+0x16b/0x930 [ 90.605819][ T2656] ? __cfi_get_futex_key+0x10/0x10 [ 90.605830][ T2656] futex_wait_multiple_setup+0x151/0x5a0 [ 90.605841][ T2656] ? __cfi_futex_wait_multiple_setup+0x10/0x10 [ 90.605851][ T2656] futex_wait_multiple+0xb1/0x360 [ 90.605861][ T2656] __se_sys_futex_waitv+0x54a/0x690 [ 90.605874][ T2656] ? __x64_sys_futex_waitv+0xf0/0xf0 [ 90.605887][ T2656] ? __kasan_check_write+0x18/0x20 [ 90.605898][ T2656] ? fput+0x1a5/0x240 [ 90.605912][ T2656] ? __cfi_ksys_write+0x10/0x10 [ 90.605924][ T2656] __x64_sys_futex_waitv+0xc3/0xf0 [ 90.605936][ T2656] x64_sys_call+0x2dc4/0x2ee0 [ 90.605951][ T2656] do_syscall_64+0x58/0xf0 [ 90.605970][ T2656] ? clear_bhb_loop+0x35/0x90 [ 90.605999][ T2656] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.606018][ T2656] RIP: 0033:0x7fd18a78e929 [ 90.606027][ T2656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.606036][ T2656] RSP: 002b:00007fd18b582038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 90.606048][ T2656] RAX: ffffffffffffffda RBX: 00007fd18a9b5fa0 RCX: 00007fd18a78e929 [ 90.606056][ T2656] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 90.606062][ T2656] RBP: 00007fd18b582090 R08: 0000000000000001 R09: 0000000000000000 [ 90.606069][ T2656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.606075][ T2656] R13: 0000000000000000 R14: 00007fd18a9b5fa0 R15: 00007ffc22d6e5b8 [ 90.606083][ T2656] [ 90.881439][ T479] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 91.031524][ T479] usb 1-1: device descriptor read/64, error -71 [ 91.171959][ T2673] overlayfs: failed to clone upperpath [ 91.219817][ T2679] overlayfs: failed to clone upperpath [ 91.264151][ T2685] overlayfs: failed to clone upperpath [ 91.271394][ T479] usb 1-1: device descriptor read/64, error -71 [ 91.336870][ T2692] overlayfs: failed to clone upperpath [ 91.387385][ T2699] overlayfs: failed to clone upperpath [ 91.521405][ T479] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 91.671399][ T479] usb 1-1: device descriptor read/64, error -71 [ 91.843778][ T2713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.995'. [ 91.882923][ T2716] overlayfs: failed to clone upperpath [ 91.911391][ T479] usb 1-1: device descriptor read/64, error -71 [ 91.918156][ T2720] overlayfs: failed to clone upperpath [ 92.021555][ T479] usb usb1-port1: attempt power cycle [ 92.381820][ T479] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 92.422347][ T479] usb 1-1: device descriptor read/8, error -71 [ 92.552353][ T479] usb 1-1: device descriptor read/8, error -71 [ 92.851415][ T479] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 92.872516][ T479] usb 1-1: device descriptor read/8, error -71 [ 92.929728][ T2743] SELinux: Context system_u: is not valid (left unmapped). [ 92.939766][ T36] audit: type=1400 audit(1750434831.269:403): avc: denied { create } for pid=2742 comm="syz.3.1010" name="cgroup.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:" [ 92.984674][ T36] audit: type=1400 audit(1750434831.269:404): avc: denied { associate } for pid=2742 comm="syz.3.1010" name="cgroup.events" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 93.002399][ T479] usb 1-1: device descriptor read/8, error -71 [ 93.011309][ T36] audit: type=1400 audit(1750434831.269:405): avc: denied { read append open } for pid=2742 comm="syz.3.1010" path="/203/bus/cgroup.events" dev="overlay" ino=1223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:" [ 93.141393][ T479] usb usb1-port1: unable to enumerate USB device [ 93.521416][ T2766] rust_binder: Read failure Err(EAGAIN) in pid:474 [ 93.741402][ T479] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 93.912745][ T479] usb 3-1: config 0 has an invalid interface number: 138 but max is 0 [ 93.922052][ T479] usb 3-1: config 0 has no interface number 0 [ 93.932205][ T479] usb 3-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 93.945074][ T479] usb 3-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 93.954715][ T479] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.964891][ T479] usb 3-1: Product: syz [ 93.969109][ T479] usb 3-1: Manufacturer: syz [ 93.973764][ T479] usb 3-1: SerialNumber: syz [ 93.981726][ T479] usb 3-1: config 0 descriptor?? [ 93.988623][ T2762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.999659][ T479] ums-datafab 3-1:0.138: USB Mass Storage device detected [ 94.018914][ T479] scsi host1: usb-storage 3-1:0.138 [ 94.211708][ T305] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 94.381410][ T305] usb 1-1: Using ep0 maxpacket: 8 [ 94.389225][ T305] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 94.399539][ T2762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.399681][ T2762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.409374][ T305] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 94.419185][ T479] usb 3-1: USB disconnect, device number 27 [ 94.424866][ T305] usb 1-1: Product: syz [ 94.435642][ T305] usb 1-1: Manufacturer: syz [ 94.440355][ T305] usb 1-1: SerialNumber: syz [ 94.445651][ T305] usb 1-1: config 0 descriptor?? [ 95.181780][ T305] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 95.331428][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 95.337933][ T305] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.350057][ T305] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 95.359359][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.367478][ T305] usb 3-1: Product: syz [ 95.371819][ T305] usb 3-1: Manufacturer: syz [ 95.376522][ T305] usb 3-1: SerialNumber: syz [ 95.382055][ T305] usb 3-1: config 0 descriptor?? [ 95.591557][ T2812] input: syz0 as /devices/virtual/input/input12 [ 95.599791][ T2812] input: failed to attach handler leds to device input12, error: -6 [ 95.609737][ T2812] random: crng reseeded on system resumption [ 96.685328][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 96.685344][ T36] audit: type=1326 audit(1750467603.020:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a78e929 code=0x7fc00000 [ 96.720282][ T36] audit: type=1326 audit(1750467603.020:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd18a78e929 code=0x7fc00000 [ 96.745626][ T36] audit: type=1326 audit(1750467603.020:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a78e929 code=0x7fc00000 [ 96.770413][ T36] audit: type=1326 audit(1750467603.020:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a78e929 code=0x7fc00000 [ 96.796567][ T36] audit: type=1326 audit(1750467603.020:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a78e929 code=0x7fc00000 [ 96.822449][ T36] audit: type=1326 audit(1750467603.020:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a78e929 code=0x7fc00000 [ 96.848565][ T36] audit: type=1326 audit(1750467603.020:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a78e929 code=0x7fc00000 [ 96.874397][ T36] audit: type=1326 audit(1750467603.020:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a78e929 code=0x7fc00000 [ 96.898909][ T36] audit: type=1326 audit(1750467603.020:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a78e929 code=0x7fc00000 [ 96.923598][ T36] audit: type=1326 audit(1750467603.020:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18a78e929 code=0x7fc00000 [ 96.967264][ T2845] overlayfs: failed to clone upperpath [ 96.971533][ T479] usb 1-1: USB disconnect, device number 35 [ 97.118290][ T2855] binder: Bad value for 'max' [ 97.471426][ T479] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 97.631436][ T479] usb 1-1: Using ep0 maxpacket: 8 [ 97.639252][ T479] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 97.648668][ T479] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 97.657396][ T479] usb 1-1: Product: syz [ 97.661857][ T479] usb 1-1: Manufacturer: syz [ 97.666633][ T479] usb 1-1: SerialNumber: syz [ 97.672013][ T479] usb 1-1: config 0 descriptor?? [ 97.912192][ T2882] FAULT_INJECTION: forcing a failure. [ 97.912192][ T2882] name failslab, interval 1, probability 0, space 0, times 0 [ 97.925744][ T2882] CPU: 1 UID: 0 PID: 2882 Comm: syz.2.1061 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 97.925778][ T2882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.925789][ T2882] Call Trace: [ 97.925794][ T2882] [ 97.925799][ T2882] __dump_stack+0x21/0x30 [ 97.925816][ T2882] dump_stack_lvl+0x10c/0x190 [ 97.925828][ T2882] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.925839][ T2882] ? unwind_get_return_address+0x51/0x90 [ 97.925849][ T2882] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 97.925861][ T2882] dump_stack+0x19/0x20 [ 97.925871][ T2882] should_fail_ex+0x3d9/0x530 [ 97.925883][ T2882] should_failslab+0xac/0x100 [ 97.925897][ T2882] __kmalloc_cache_noprof+0x41/0x3c0 [ 97.925909][ T2882] ? sel_netport_sid+0x2f1/0x8b0 [ 97.925920][ T2882] sel_netport_sid+0x2f1/0x8b0 [ 97.925931][ T2882] selinux_socket_connect_helper+0x4f5/0x8a0 [ 97.925946][ T2882] ? socket_type_to_security_class+0x840/0x840 [ 97.925961][ T2882] ? proc_fail_nth_write+0x17e/0x210 [ 97.925971][ T2882] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 97.925980][ T2882] ? bpf_lsm_file_permission+0xd/0x20 [ 97.925992][ T2882] ? vfs_write+0x8ba/0xe80 [ 97.926004][ T2882] ? __fget_files+0x2c5/0x340 [ 97.926017][ T2882] selinux_socket_connect+0x27/0x40 [ 97.926027][ T2882] security_socket_connect+0x56/0xd0 [ 97.926040][ T2882] __sys_connect+0x2c3/0x440 [ 97.926053][ T2882] ? __cfi___sys_connect+0x10/0x10 [ 97.926067][ T2882] ? __kasan_check_read+0x15/0x20 [ 97.926077][ T2882] __x64_sys_connect+0x7e/0x90 [ 97.926090][ T2882] x64_sys_call+0x1c2f/0x2ee0 [ 97.926102][ T2882] do_syscall_64+0x58/0xf0 [ 97.926114][ T2882] ? clear_bhb_loop+0x35/0x90 [ 97.926129][ T2882] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.926143][ T2882] RIP: 0033:0x7f903918e929 [ 97.926153][ T2882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.926162][ T2882] RSP: 002b:00007f9039f8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 97.926175][ T2882] RAX: ffffffffffffffda RBX: 00007f90393b5fa0 RCX: 00007f903918e929 [ 97.926182][ T2882] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 97.926189][ T2882] RBP: 00007f9039f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 97.926196][ T2882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.926202][ T2882] R13: 0000000000000000 R14: 00007f90393b5fa0 R15: 00007ffd0e9bc3c8 [ 97.926210][ T2882] [ 98.650419][ T2895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.661448][ T2895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.297439][ T2901] overlayfs: failed to resolve './bus': -2 [ 99.360533][ T2911] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1071'. [ 100.098140][ T2917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 100.109191][ T2917] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.236564][ T452] usb 1-1: USB disconnect, device number 36 [ 100.257523][ T2926] input: syz1 as /devices/virtual/input/input13 [ 100.270667][ T2926] binder: Bad value for 'stats' [ 100.343035][ T2934] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 100.555669][ T2949] rust_binder: Error in use_page_slow: ESRCH [ 100.555683][ T2949] rust_binder: use_range failure ESRCH [ 100.561831][ T2949] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 100.567517][ T2949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 100.575903][ T2949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:518 [ 100.597026][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.614670][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.271310][ T2971] rust_binder: Write failure EINVAL in pid:526 [ 101.374226][ T2985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 101.414942][ T2989] __vm_enough_memory: pid: 2989, comm: syz.2.1106, bytes: 281474976845824 not enough memory for the allocation [ 101.444528][ T2993] FAULT_INJECTION: forcing a failure. [ 101.444528][ T2993] name failslab, interval 1, probability 0, space 0, times 0 [ 101.457609][ T2993] CPU: 0 UID: 0 PID: 2993 Comm: syz.2.1108 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 101.457641][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.457648][ T2993] Call Trace: [ 101.457652][ T2993] [ 101.457658][ T2993] __dump_stack+0x21/0x30 [ 101.457674][ T2993] dump_stack_lvl+0x10c/0x190 [ 101.457685][ T2993] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.457696][ T2993] ? release_sock+0x171/0x1f0 [ 101.457708][ T2993] dump_stack+0x19/0x20 [ 101.457718][ T2993] should_fail_ex+0x3d9/0x530 [ 101.457733][ T2993] should_failslab+0xac/0x100 [ 101.457753][ T2993] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 101.457771][ T2993] ? __alloc_skb+0x10c/0x370 [ 101.457791][ T2993] __alloc_skb+0x10c/0x370 [ 101.457804][ T2993] netlink_alloc_large_skb+0xf7/0x1b0 [ 101.457816][ T2993] netlink_sendmsg+0x586/0xaf0 [ 101.457830][ T2993] ? __cfi_netlink_sendmsg+0x10/0x10 [ 101.457843][ T2993] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 101.457857][ T2993] ? security_socket_sendmsg+0x33/0xd0 [ 101.457868][ T2993] ? __cfi_netlink_sendmsg+0x10/0x10 [ 101.457880][ T2993] ____sys_sendmsg+0xa15/0xa70 [ 101.457894][ T2993] ? __sys_sendmsg_sock+0x50/0x50 [ 101.457907][ T2993] ? import_iovec+0x81/0xb0 [ 101.457919][ T2993] ___sys_sendmsg+0x220/0x2a0 [ 101.457933][ T2993] ? __sys_sendmsg+0x280/0x280 [ 101.457945][ T2993] ? proc_fail_nth_write+0x17e/0x210 [ 101.457954][ T2993] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 101.457965][ T2993] __x64_sys_sendmsg+0x1eb/0x2c0 [ 101.457974][ T2993] ? fput+0x1a5/0x240 [ 101.457986][ T2993] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 101.457995][ T2993] ? ksys_write+0x1ef/0x250 [ 101.458005][ T2993] ? __kasan_check_read+0x15/0x20 [ 101.458016][ T2993] x64_sys_call+0x2a4c/0x2ee0 [ 101.458028][ T2993] do_syscall_64+0x58/0xf0 [ 101.458040][ T2993] ? clear_bhb_loop+0x35/0x90 [ 101.458053][ T2993] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.458066][ T2993] RIP: 0033:0x7f903918e929 [ 101.458075][ T2993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.458083][ T2993] RSP: 002b:00007f9039f8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.458095][ T2993] RAX: ffffffffffffffda RBX: 00007f90393b5fa0 RCX: 00007f903918e929 [ 101.458103][ T2993] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 101.458110][ T2993] RBP: 00007f9039f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 101.458116][ T2993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.458122][ T2993] R13: 0000000000000000 R14: 00007f90393b5fa0 R15: 00007ffd0e9bc3c8 [ 101.458129][ T2993] [ 101.461400][ T305] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 101.746839][ T3005] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 101.746862][ T3005] rust_binder: Read failure Err(EFAULT) in pid:560 [ 101.764130][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 101.764148][ T36] audit: type=1400 audit(1750467608.100:496): avc: denied { mount } for pid=3006 comm="syz.2.1115" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.881478][ T305] usb 4-1: Using ep0 maxpacket: 8 [ 101.889315][ T305] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 101.898569][ T305] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 101.907152][ T305] usb 4-1: Product: syz [ 101.911330][ T305] usb 4-1: Manufacturer: syz [ 101.915970][ T305] usb 4-1: SerialNumber: syz [ 101.921033][ T305] usb 4-1: config 0 descriptor?? [ 102.171190][ T3023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 102.190957][ T36] audit: type=1400 audit(1750467608.520:497): avc: denied { ioctl } for pid=3024 comm="syz.2.1122" path="socket:[21716]" dev="sockfs" ino=21716 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.232404][ T3050] binder: Unknown parameter '' [ 103.265508][ T3053] block device autoloading is deprecated and will be removed. [ 103.273163][ T3053] syz.2.1134: attempt to access beyond end of device [ 103.273163][ T3053] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 103.288434][ T36] audit: type=1400 audit(1750467609.620:498): avc: denied { listen } for pid=3052 comm="syz.2.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.323307][ T36] audit: type=1400 audit(1750467609.660:499): avc: denied { ioctl } for pid=3054 comm="syz.2.1135" path="socket:[21761]" dev="sockfs" ino=21761 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.373958][ T3060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.383444][ T3060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.543334][ T36] audit: type=1400 audit(1750467609.880:500): avc: denied { bind } for pid=3063 comm="syz.0.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.933129][ T36] audit: type=1400 audit(1750467610.270:501): avc: denied { append } for pid=3088 comm="syz.0.1148" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.983262][ T3091] FAULT_INJECTION: forcing a failure. [ 103.983262][ T3091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.996512][ T3091] CPU: 0 UID: 0 PID: 3091 Comm: syz.2.1149 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 103.996541][ T3091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.996550][ T3091] Call Trace: [ 103.996556][ T3091] [ 103.996563][ T3091] __dump_stack+0x21/0x30 [ 103.996588][ T3091] dump_stack_lvl+0x10c/0x190 [ 103.996604][ T3091] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.996623][ T3091] dump_stack+0x19/0x20 [ 103.996640][ T3091] should_fail_ex+0x3d9/0x530 [ 103.996657][ T3091] should_fail+0xf/0x20 [ 103.996671][ T3091] should_fail_usercopy+0x1e/0x30 [ 103.996685][ T3091] _copy_to_user+0x24/0xa0 [ 103.996702][ T3091] simple_read_from_buffer+0xed/0x160 [ 103.996723][ T3091] proc_fail_nth_read+0x19e/0x210 [ 103.996736][ T3091] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 103.996751][ T3091] ? bpf_lsm_file_permission+0xd/0x20 [ 103.996769][ T3091] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 103.996783][ T3091] vfs_read+0x278/0xb60 [ 103.996801][ T3091] ? __cfi_vfs_read+0x10/0x10 [ 103.996815][ T3091] ? __kasan_check_write+0x18/0x20 [ 103.996830][ T3091] ? mutex_lock+0x92/0x1c0 [ 103.996843][ T3091] ? __cfi_mutex_lock+0x10/0x10 [ 103.996855][ T3091] ? __fget_files+0x2c5/0x340 [ 103.996876][ T3091] ksys_read+0x141/0x250 [ 103.996891][ T3091] ? __cfi_ksys_read+0x10/0x10 [ 103.996907][ T3091] ? __kasan_check_read+0x15/0x20 [ 103.996922][ T3091] __x64_sys_read+0x7f/0x90 [ 103.996938][ T3091] x64_sys_call+0x2638/0x2ee0 [ 103.996956][ T3091] do_syscall_64+0x58/0xf0 [ 103.996971][ T3091] ? clear_bhb_loop+0x35/0x90 [ 103.996991][ T3091] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.997010][ T3091] RIP: 0033:0x7f903918d33c [ 103.997024][ T3091] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.997037][ T3091] RSP: 002b:00007f9039f8b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.997054][ T3091] RAX: ffffffffffffffda RBX: 00007f90393b5fa0 RCX: 00007f903918d33c [ 103.997066][ T3091] RDX: 000000000000000f RSI: 00007f9039f8b0a0 RDI: 0000000000000005 [ 103.997077][ T3091] RBP: 00007f9039f8b090 R08: 0000000000000000 R09: 0000000000000000 [ 103.997087][ T3091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.997096][ T3091] R13: 0000000000000000 R14: 00007f90393b5fa0 R15: 00007ffd0e9bc3c8 [ 103.997109][ T3091] [ 104.234419][ T305] usb 4-1: USB disconnect, device number 29 [ 104.330472][ T3102] syz.2.1154 (3102) used obsolete PPPIOCDETACH ioctl [ 104.472409][ T3109] FAULT_INJECTION: forcing a failure. [ 104.472409][ T3109] name failslab, interval 1, probability 0, space 0, times 0 [ 104.491398][ T3109] CPU: 0 UID: 0 PID: 3109 Comm: syz.3.1157 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 104.491433][ T3109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.491445][ T3109] Call Trace: [ 104.491451][ T3109] [ 104.491458][ T3109] __dump_stack+0x21/0x30 [ 104.491483][ T3109] dump_stack_lvl+0x10c/0x190 [ 104.491502][ T3109] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.491522][ T3109] dump_stack+0x19/0x20 [ 104.491539][ T3109] should_fail_ex+0x3d9/0x530 [ 104.491557][ T3109] should_failslab+0xac/0x100 [ 104.491579][ T3109] __kmalloc_noprof+0x69/0x450 [ 104.491598][ T3109] ? security_key_alloc+0x60/0x270 [ 104.491620][ T3109] security_key_alloc+0x60/0x270 [ 104.491641][ T3109] ? __kasan_check_write+0x18/0x20 [ 104.491659][ T3109] key_alloc+0x68e/0x1070 [ 104.491681][ T3109] request_key_and_link+0x57b/0x1070 [ 104.491702][ T3109] ? __cfi_request_key_and_link+0x10/0x10 [ 104.491722][ T3109] ? downgrade_write+0x440/0x440 [ 104.491741][ T3109] ? __cfi_key_default_cmp+0x10/0x10 [ 104.491763][ T3109] ? __cfi_keyring_search_iterator+0x10/0x10 [ 104.491786][ T3109] __se_sys_request_key+0x22d/0x340 [ 104.491804][ T3109] ? __x64_sys_request_key+0xc0/0xc0 [ 104.491822][ T3109] __x64_sys_request_key+0x9f/0xc0 [ 104.491838][ T3109] x64_sys_call+0x2b60/0x2ee0 [ 104.491857][ T3109] do_syscall_64+0x58/0xf0 [ 104.491876][ T3109] ? clear_bhb_loop+0x35/0x90 [ 104.491898][ T3109] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.491920][ T3109] RIP: 0033:0x7fd18a78e929 [ 104.491935][ T3109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.491950][ T3109] RSP: 002b:00007fd18b582038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 104.491969][ T3109] RAX: ffffffffffffffda RBX: 00007fd18a9b5fa0 RCX: 00007fd18a78e929 [ 104.491982][ T3109] RDX: 0000200000002340 RSI: 0000200000002300 RDI: 00002000000022c0 [ 104.491995][ T3109] RBP: 00007fd18b582090 R08: 0000000000000000 R09: 0000000000000000 [ 104.492007][ T3109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.492018][ T3109] R13: 0000000000000000 R14: 00007fd18a9b5fa0 R15: 00007ffc22d6e5b8 [ 104.492032][ T3109] [ 104.524695][ T3111] binder: Unknown parameter 'defcontext01777777777777777777777' [ 104.772088][ T370] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 104.791176][ T3120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.801560][ T3120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.839992][ T36] audit: type=1400 audit(1750467611.170:502): avc: denied { getopt } for pid=3121 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.932495][ T370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.943781][ T370] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 104.953100][ T370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.961870][ T370] usb 4-1: config 0 descriptor?? [ 105.169866][ T370] usbhid 4-1:0.0: can't add hid device: -71 [ 105.181060][ T370] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 105.196115][ T370] usb 4-1: USB disconnect, device number 30 [ 105.361578][ T479] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 105.391197][ T3156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.400297][ T3156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.501478][ T479] usb 1-1: device descriptor read/64, error -71 [ 105.741417][ T479] usb 1-1: device descriptor read/64, error -71 [ 105.754203][ T3167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65298 sclass=netlink_route_socket pid=3167 comm=syz.1.1180 [ 105.919874][ T3169] FAULT_INJECTION: forcing a failure. [ 105.919874][ T3169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.933787][ T3169] CPU: 0 UID: 0 PID: 3169 Comm: syz.2.1181 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 105.933814][ T3169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.933822][ T3169] Call Trace: [ 105.933826][ T3169] [ 105.933831][ T3169] __dump_stack+0x21/0x30 [ 105.933851][ T3169] dump_stack_lvl+0x10c/0x190 [ 105.933862][ T3169] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.933877][ T3169] dump_stack+0x19/0x20 [ 105.933887][ T3169] should_fail_ex+0x3d9/0x530 [ 105.933899][ T3169] should_fail+0xf/0x20 [ 105.933908][ T3169] should_fail_usercopy+0x1e/0x30 [ 105.933919][ T3169] _copy_from_user+0x22/0xb0 [ 105.933932][ T3169] memdup_sockptr_noprof+0xa7/0x110 [ 105.933947][ T3169] do_ip_setsockopt+0x1ca8/0x29e0 [ 105.933960][ T3169] ? __cfi_avc_has_perm+0x10/0x10 [ 105.933971][ T3169] ? __cfi_do_ip_setsockopt+0x10/0x10 [ 105.933984][ T3169] ? selinux_socket_setsockopt+0x2ea/0x390 [ 105.934020][ T3169] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 105.934031][ T3169] ip_setsockopt+0x63/0x100 [ 105.934044][ T3169] udp_setsockopt+0xa3/0xc0 [ 105.934058][ T3169] sock_common_setsockopt+0xb5/0xd0 [ 105.934071][ T3169] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 105.934081][ T3169] do_sock_setsockopt+0x26a/0x400 [ 105.934096][ T3169] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 105.934109][ T3169] __x64_sys_setsockopt+0x1b8/0x250 [ 105.934122][ T3169] x64_sys_call+0x2adc/0x2ee0 [ 105.934134][ T3169] do_syscall_64+0x58/0xf0 [ 105.934147][ T3169] ? clear_bhb_loop+0x35/0x90 [ 105.934162][ T3169] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.934176][ T3169] RIP: 0033:0x7f903918e929 [ 105.934186][ T3169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.934195][ T3169] RSP: 002b:00007f9039f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.934208][ T3169] RAX: ffffffffffffffda RBX: 00007f90393b5fa0 RCX: 00007f903918e929 [ 105.934216][ T3169] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 105.934222][ T3169] RBP: 00007f9039f8b090 R08: 0000000000000057 R09: 0000000000000000 [ 105.934228][ T3169] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.934235][ T3169] R13: 0000000000000000 R14: 00007f90393b5fa0 R15: 00007ffd0e9bc3c8 [ 105.934243][ T3169] [ 106.156421][ T3175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.165009][ T479] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 106.196927][ T3172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:622 [ 106.321452][ T479] usb 1-1: device descriptor read/64, error -71 [ 106.491825][ T3182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.500731][ T3182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.571396][ T479] usb 1-1: device descriptor read/64, error -71 [ 106.681531][ T479] usb usb1-port1: attempt power cycle [ 107.020713][ T3189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:633 [ 107.021501][ T479] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 107.032169][ T3189] rust_binder: Read failure Err(EFAULT) in pid:633 [ 107.052509][ T479] usb 1-1: device descriptor read/8, error -71 [ 107.192362][ T479] usb 1-1: device descriptor read/8, error -71 [ 107.237500][ T3195] binder: Bad value for 'stats' [ 107.428884][ T36] audit: type=1400 audit(1750467613.760:503): avc: denied { append } for pid=3201 comm="syz.2.1192" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.452574][ T3202] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 107.452574][ T3202] attempt to add with overflow [ 107.461541][ T479] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 107.470219][ T3202] ------------[ cut here ]------------ [ 107.482971][ T3202] kernel BUG at rust/helpers/bug.c:7! [ 107.488354][ T36] audit: type=1400 audit(1750467613.810:504): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 107.516680][ T3202] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 107.522663][ T479] usb 1-1: device descriptor read/8, error -71 [ 107.525137][ T3202] CPU: 1 UID: 0 PID: 3202 Comm: syz.2.1192 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 107.525175][ T3202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.525189][ T3202] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 107.570647][ T3202] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 e3 0f 37 88 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 a9 cb 7e 04 90 90 90 90 90 90 90 90 90 [ 107.571663][ T36] audit: type=1400 audit(1750467613.810:505): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.592355][ T3202] RSP: 0018:ffffc9000e9d73f0 EFLAGS: 00010246 [ 107.592384][ T3202] RAX: 000000000000008c RBX: 1ffff92001d3ae80 RCX: 5727c8cec1f74500 [ 107.592396][ T3202] RDX: ffffc90002a46000 RSI: 0000000000005a33 RDI: 0000000000005a34 [ 107.592407][ T3202] RBP: ffffc9000e9d73f0 R08: 0000000000000003 R09: 0000000000000004 [ 107.592418][ T3202] R10: dffffc0000000000 R11: fffff52001d3ade4 R12: 0000000000000000 [ 107.592430][ T3202] R13: dffffc0000000000 R14: ffffc9000e9d7420 R15: ffffc9000e9d7450 [ 107.615247][ T36] audit: type=1400 audit(1750467613.810:506): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.620682][ T3202] FS: 00007f9039f8b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 107.620702][ T3202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.629023][ T36] audit: type=1400 audit(1750467613.810:507): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.636608][ T3202] CR2: 0000200000004000 CR3: 0000000138a1c000 CR4: 00000000003526b0 [ 107.636627][ T3202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.636637][ T3202] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.636648][ T3202] Call Trace: [ 107.636654][ T3202] [ 107.645165][ T36] audit: type=1400 audit(1750467613.810:508): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.652557][ T3202] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 107.652591][ T3202] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 107.660848][ T36] audit: type=1400 audit(1750467613.810:509): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.681695][ T3202] ? kernel_text_address+0xa9/0xe0 [ 107.681720][ T3202] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 107.681751][ T3202] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 107.691039][ T36] audit: type=1400 audit(1750467613.810:510): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.697221][ T3202] ? arch_stack_walk+0x10b/0x170 [ 107.697248][ T3202] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 107.722420][ T479] usb 1-1: device descriptor read/8, error -71 [ 107.725677][ T3202] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 107.880182][ T3202] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 107.881520][ T479] usb usb1-port1: unable to enumerate USB device [ 107.890264][ T3202] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 107.890302][ T3202] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 107.919558][ T3202] ? mas_wr_store_type+0x8eb/0x1ad0 [ 107.924748][ T3202] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 107.937504][ T3202] ? mas_preallocate+0x56e/0xc60 [ 107.942461][ T3202] ? __cfi_mas_preallocate+0x10/0x10 [ 107.947752][ T3202] ? kasan_save_alloc_info+0x40/0x50 [ 107.953052][ T3202] ? __asan_memset+0x39/0x50 [ 107.957668][ T3202] mmap_region+0x1371/0x1bd0 [ 107.962280][ T3202] ? __cfi_mmap_region+0x10/0x10 [ 107.967216][ T3202] ? __futex_queue+0x19a/0x340 [ 107.971986][ T3202] ? __kasan_check_read+0x15/0x20 [ 107.977055][ T3202] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 107.983390][ T3202] ? file_mmap_ok+0x147/0x1a0 [ 107.988060][ T3202] do_mmap+0xb6d/0x13c0 [ 107.992212][ T3202] ? __cfi_do_mmap+0x10/0x10 [ 107.996817][ T3202] ? down_write_killable+0xe9/0x2d0 [ 108.002096][ T3202] ? __cfi_down_write_killable+0x10/0x10 [ 108.007788][ T3202] vm_mmap_pgoff+0x38f/0x4e0 [ 108.012382][ T3202] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 108.017491][ T3202] ? __fget_files+0x2c5/0x340 [ 108.022169][ T3202] ksys_mmap_pgoff+0x166/0x1e0 [ 108.026940][ T3202] __x64_sys_mmap+0x121/0x140 [ 108.031626][ T3202] x64_sys_call+0x13bf/0x2ee0 [ 108.036305][ T3202] do_syscall_64+0x58/0xf0 [ 108.040709][ T3202] ? clear_bhb_loop+0x35/0x90 [ 108.045824][ T3202] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.051803][ T3202] RIP: 0033:0x7f903918e929 [ 108.056224][ T3202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.075921][ T3202] RSP: 002b:00007f9039f8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 108.084328][ T3202] RAX: ffffffffffffffda RBX: 00007f90393b5fa0 RCX: 00007f903918e929 [ 108.092285][ T3202] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000 [ 108.100252][ T3202] RBP: 00007f9039210b39 R08: 0000000000000006 R09: 0000000000000000 [ 108.108233][ T3202] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 108.116213][ T3202] R13: 0000000000000000 R14: 00007f90393b5fa0 R15: 00007ffd0e9bc3c8 [ 108.124180][ T3202] [ 108.127186][ T3202] Modules linked in: [ 108.131312][ T3202] ---[ end trace 0000000000000000 ]--- [ 108.136830][ T3202] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 108.142449][ T3202] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 e3 0f 37 88 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 a9 cb 7e 04 90 90 90 90 90 90 90 90 90 [ 108.162431][ T3202] RSP: 0018:ffffc9000e9d73f0 EFLAGS: 00010246 [ 108.168511][ T3202] RAX: 000000000000008c RBX: 1ffff92001d3ae80 RCX: 5727c8cec1f74500 [ 108.177448][ T3202] RDX: ffffc90002a46000 RSI: 0000000000005a33 RDI: 0000000000005a34 [ 108.185813][ T3202] RBP: ffffc9000e9d73f0 R08: 0000000000000003 R09: 0000000000000004 [ 108.195243][ T3202] R10: dffffc0000000000 R11: fffff52001d3ade4 R12: 0000000000000000 [ 108.203649][ T3202] R13: dffffc0000000000 R14: ffffc9000e9d7420 R15: ffffc9000e9d7450 [ 108.212223][ T3202] FS: 00007f9039f8b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 108.221398][ T3202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.228157][ T3202] CR2: 0000200000004000 CR3: 0000000138a1c000 CR4: 00000000003526b0 [ 108.237236][ T3202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.246500][ T3202] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.254581][ T3202] Kernel panic - not syncing: Fatal exception [ 108.261040][ T3202] Kernel Offset: disabled [ 108.265451][ T3202] Rebooting in 86400 seconds..