last executing test programs: 3m3.92941133s ago: executing program 2 (id=84): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) getgroups(0x1, &(0x7f0000000080)=[r1]) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) keyctl$setperm(0x5, r0, 0x30925) 3m3.87211533s ago: executing program 2 (id=85): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x88c2) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 3m3.87191514s ago: executing program 2 (id=86): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x9, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x400008001, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r2, 0x7}) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="5393ba99a8e4d53c04905b33a8f56e9ea389d768bbcf2822e9e92b1da89a6640a14505662e41431f63735d5173710c66f355b7890a214dd0f7b69aff2a858d909bc16bfce42ad5909f347e4721fd3239edefeb5dd246d66f6b22c1a1a219540732b01bbff2f81d1f76c7984b8501d0eecf3cf9048a0e", 0x76}], 0x1, 0x3, 0x1f) 3m3.847882021s ago: executing program 2 (id=87): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000a80)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death={0x400c630e}], 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$UHID_INPUT(r4, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, 0x0, 0x20000000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x4a, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r6, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80, 0x20}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c8e}, 0x4050) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8953, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) 3m3.558344625s ago: executing program 2 (id=90): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) clock_nanosleep(0xfffffff2, 0xfffffdfc, &(0x7f0000000140)={0x77359400}, 0x0) 3m3.434167267s ago: executing program 2 (id=91): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000004000000000000000000000001000000000000000000000000000004000000000000ff0f"], 0x28) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) r2 = getpid() getpriority(0x2, r2) 3m3.389084488s ago: executing program 32 (id=91): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000004000000000000000000000001000000000000000000000000000004000000000000ff0f"], 0x28) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) r2 = getpid() getpriority(0x2, r2) 2m48.640646023s ago: executing program 1 (id=270): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x120) read$FUSE(r1, &(0x7f0000000dc0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) 2m48.588176414s ago: executing program 1 (id=271): pipe(&(0x7f0000000400)) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000180), 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x166) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 2m47.356070453s ago: executing program 1 (id=281): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1}, 0x10) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000180)=r1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x20, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x101) 2m47.355789533s ago: executing program 1 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18) clock_settime(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket(0x3, 0x3, 0x4) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) accept$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000100)=0x60) clock_adjtime(0x6, &(0x7f00000001c0)={0x5, 0x8, 0x100000001, 0x53, 0x7, 0x401, 0x800, 0x1, 0x2, 0x7fffffffffffffff, 0x5, 0x32c570a0, 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x1, 0xd, 0x2, 0x7fffffffffffffff, 0xaf30, 0x8, 0x0, 0xd45, 0x6, 0x5}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f0000001380)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x3, 0x0, 0x2}]) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 2m47.355211803s ago: executing program 1 (id=283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) (fail_nth: 9) 2m47.282078994s ago: executing program 1 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 2m47.226059485s ago: executing program 33 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 2m44.175669811s ago: executing program 3 (id=331): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f00000050c0)=[{{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x80, 0x0}}], 0x1, 0x4800) clock_adjtime(0x0, &(0x7f00000003c0)={0xe61, 0x6, 0x7, 0xf, 0x16, 0x9, 0x3, 0x7, 0x3, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0xfffffffffffffffc, 0x3, 0x6, 0x1, 0x3f, 0x0, 0x1, 0x8, 0x5, 0xb9a, 0x0, 0x1ff}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xd, 0x0, 0x7, 0x1d9, 0x8004, 0x1, 0x1}]}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000014000159e99eabc6934d950002"], 0x48}}, 0x4000) 2m44.138118092s ago: executing program 3 (id=332): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x42, {0x42, 0x31, "9645a3be3d8bdda406c072abeca8c8e9ed4bf5d6438c0465b6c0baff0d84249d2535a5638bc52093df0b44b912d96c5ad41cd65d5c655351f45afe844085f1c5"}}, &(0x7f00000002c0)={0x0, 0x3, 0x95, @string={0x95, 0x3, "23f4164841701d65708649044240e6c4d1d0f414f378099c5812a2004f2b7f5370ec10031b82e597834af3af09d76f8bdcdc315393318c8b27ba14e3b2f1b84b8289aa37ec5b6c82ec1a729d15b8d519c93c201fbaef5c07beaecf151e2aa3b44211cbdef7e45bfcbd5374e79b0f4c95ba73c0c73a6fd51e555383f9e1315d9adfe2c121cde10fdace0002a939407c37de5c0f"}}, &(0x7f0000000100)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x4, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0xa, 0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x4, 0x5, 0x10, 0x9}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x80, 0x3, 0x5, "e60824b1", "4f3beec0"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x4, 0x1, 0x5, 0x101, 0x2}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x40, 0x8, 0x2e, "af72512d8eac6b492634ed0743a4b3fb75dedaadbc32c0ec41b90ad5272e1eafd45c8a359a6380853afa947697c1"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x80, 0x20}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x9, 0x1}, &(0x7f0000000680)={0x40, 0xb, 0x2, "02d8"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, &(0x7f0000000740)={0x40, 0x17, 0x6, @random="7948489c6d0c"}, &(0x7f0000000780)={0x40, 0x19, 0x2, '\\\a'}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0xfe9}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x9c}}) 2m42.671578734s ago: executing program 3 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') lseek(r2, 0x80000001, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x90}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x7}, {0x77}, {0x0, 0x85, 0xbe}, {0x0, 0xc2}, {0x0, 0x2, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfa, '\x00', 0x42}, {0x0, 0x5}, {0x0, 0x50, 0x0, '\x00', 0x1}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x0, '\x00', 0xd}, {0x2, 0x2, 0x4, '\x00', 0x9}, {}, {0x1, 0xfd, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0x3}]}}) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 2m42.587890045s ago: executing program 3 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000280), 0x20800c0, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4adf4df294bcd31a}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}], [{@obj_role}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x38, 0x39, 0x0, 0x1b, 0x31, 0x31, 0x32], 0x2d, [0x39, 0x65, 0x33, 0x30], 0x2d, [0x62, 0x35, 0x37, 0x35], 0x2d, [0x31, 0x64, 0x30, 0x66], 0x2d, [0x66, 0x34, 0x66, 0x30, 0x34, 0x37, 0x33, 0x61]}}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}}) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000380)=""/154, 0x9a}], 0x1, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x62) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x8000, 0x20, 0x6, 0x1, {{0x13, 0x4, 0x3, 0x5, 0x4c, 0x68, 0x0, 0x38, 0x13c15c28dfebb82f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x1f, 0x6b, [@dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @empty, @rand_addr=0x64010100, @local, @empty, @loopback]}, @cipso={0x86, 0x15, 0x3, [{0x2, 0x5, "f83d4d"}, {0x6, 0xa, "753ffe0e429e4d27"}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xb6, 0x2, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x700, 0x7800, 0x3, 0x400}}) sendmsg$inet(r3, &(0x7f0000000b80)={&(0x7f0000000700)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000740)="02b1da3595a57c93b03363a8c0ed8eead17c2c5275c26c4b54a414c73e0c19f802db93a669982576bddec84b9bef3690324543467d1b94b43275cf64b4526d43df28d745c3d137b0a8d7fd8224314d2d8a3e9baf1393038e1aac36e6080e937e005dc64ebb8e1ba144510eef5c91e59fdd628eeb4916e8972e1e69309f6ace5e4b4a7e67fe8e231e27debc018aeaaab7c7e1a12b39b75c5ec9e9af61d354d4c275190eb0dc06f1080711e15adfb3f0f3365c32d8b4aa43ed84911f0f16e48bf232a5f5179f9155d2f70fa0c820", 0xcd}, {&(0x7f0000000840)="a68da724dc8bef596ba21a2d274bd65f9e2f80812926920f3d79aeb20613cc0c", 0x20}], 0x2, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0x28, 0x2, [{0x6, 0x9, "29688c8aee99ad"}, {0x5, 0x3, "a3"}, {0x5, 0xb, "ae38d42fa883195ee8"}, {0x2, 0xb, "d3dbc800c77eb6ffb7"}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdcc0}}, @ip_retopts={{0x48, 0x0, 0x7, {[@generic={0x82, 0x10, "47f34877ae8e3ec9ed50d5472904"}, @noop, @lsrr={0x83, 0x27, 0x29, [@local, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @local, @local, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x118}, 0x20000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r11, 0xff0a, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) getpeername$packet(r8, &(0x7f0000000bc0), &(0x7f0000000c00)=0x14) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x200a, 0x0) 2m42.587446456s ago: executing program 3 (id=346): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) pipe(&(0x7f0000000000)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2c011, r0, 0xd0eb4000) 2m42.562265456s ago: executing program 3 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001, 0x0, 0x10000}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3f27}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x800) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r2, &(0x7f0000000b80)="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", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) 2m42.515984577s ago: executing program 34 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001, 0x0, 0x10000}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3f27}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x800) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r2, &(0x7f0000000b80)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cc43c320544317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b7884db26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac3909750f46a9a8e76a13264ed2b654b9a6eb1809", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) 2m32.846786604s ago: executing program 4 (id=456): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x500, 0x0) close(0x3) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x80040000, &(0x7f0000000000)="31633e909fa3fb1c97c30b2c124775f17ced428fbe475679a6f6e4efb01307c54e560f06c5462d6b2281299c8e760818e3458215e13ea49b252c6bc0faeec7ec64deed8fe02c2de6e518fc84229fda76b19fe2afee32fb6285a1171e95e9259b5fc62d957c104ebfcca8d53a8a13b811b48b4f1d4c589244d17ae8a5e882bd81dbd87f5b18cc5217afd13799361b23cfd5307fa4a0d6a80918d5234fb800d79a1354ffdd1d35b418f594968532dee2a73d342f1788cf6a2e2fc2b49db8", 0xbd, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="a1907694e9a56ebed2243e6ec475c5cd10df224467912d1b794fd6c1a8dd6accd22b2740f0d2c9feff27afce29b804") ptrace(0x4207, r2) (async) ptrace(0x4207, r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2141) (async) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2141) ptrace$peekuser(0x3, r1, 0x28) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xb) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xb) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 2m32.741324946s ago: executing program 4 (id=457): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) (fail_nth: 9) 2m32.559678249s ago: executing program 4 (id=459): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) r3 = socket$igmp6(0xa, 0x3, 0x2) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000200), 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) chdir(&(0x7f0000000100)='./file0\x00') setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000340)='wg1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x78) close(r5) close(r4) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) 2m31.216513279s ago: executing program 4 (id=469): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000000)='\x00'/10, 0xa, 0xc840, &(0x7f00000000c0)={0x2, 0x4c20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0) sendmsg$unix(r3, &(0x7f0000001040)={&(0x7f0000000c00)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000c80)="259acc1be36d767e48020dadabd0078fd630291d546db9d262ebbf96a9e751d8fbddf81068e3d20d20780a7a4e0a5d5f8c72635eb29d475daf86c580bd9562cf5ef5a77305e8d937e8ead8bce09459c52bb87868c1a1595889ab9e830329fd865d863c8c54adc826c565e03ea85858c1cba38b5d1680d9166b21884e8f43fcf5c459c89c97f75352f900415664080275f9bbcf5563f13bb929d9685218d9b5f2fd0b3bcc38708f9557c0e9bf9a3ae0102b2981655e974fb95dddf71a4f87b8e6ec81990742347cc8b5ab36e2af1b488ddeab3ab152f95a11a7", 0xd9}, {&(0x7f0000000d80)="75b02b2757a56c0d6437652547afdbe8fd851a5ee9384f04a348bf0266dba47095e4e64c8a3207683d16662a40b9ccc2040863f5cf18e383f48285f0c685053a6a15bd9f1c045c9b4a09dbc6ca826aef16184251532ebb04e6182f266e4047a9e8025dd6f090dd69c91f2f99b48b6dd10882abdd043b4cc70189f41106de603b17cdbf07c983880126e46dbd1f0909877abbea71b2037a7472524ef6a4604f60e2a4fb212befa8aa26e76bd439f9a1fb05c1f1ca97024dbaf67f8ed07d47942387f474fb3e8829e5e425730587208330259a16661ec0cec8f186a42c34cc", 0xde}, {&(0x7f0000000e80)="00a8f2c69cc89376632d71f9295fdcb83426449e50573886b648b1dffc4a9b557632d6b7387e3910f496a6be6fdc53394b7184dd0b221e319bf3863ce36bdda7d097a29e65ef101816b3749fa9b5a963888505bb132b40789d5094686e9879ced8b9e13d545da7bf2039a4f81776dfc6370451b6283921f77c0e072b4e6f10292a57f9defb4d3426c3933b7563b43ae9eed532b60cba632eff461d12ac107b27d95bd177d0572f3578073c13148b0c0c1e5c9538f3a1dc6fdfb7cfa8df9fb26ecb", 0xc1}, {&(0x7f0000000f80)="aa13e25744606e6eaedb9e6a400387948e4e5b486d441b5afe795f9068914fc03e7653a3d0b676ba560474b8e1ba9fb3b7f1ea863e7efdb025a48759232174ec5a4d2376b9ad6a91140ab42c19c2", 0x4e}], 0x4, 0x0, 0x0, 0x4000040}, 0x8000) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000001600)='ip6gre0\x00') ftruncate(r3, 0x398a0bdb) ioctl$FICLONE(r2, 0x40049409, r3) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r1, 0x0, r1) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) fspick(r5, &(0x7f0000000080)='./file0\x00', 0x0) mount$incfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100862, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200040, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000580)=""/176, 0xb0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m31.087602111s ago: executing program 4 (id=471): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000002900)=0x659c, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x4, 0x2}, 0x0, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x4, 0xfffffffc, 0x6c7d, 0x0, 0x4, 0x0, 0x0, 0x3, 0x2, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x6, 0x3, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0x8000edc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffff, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000a5f000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6}]}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000200)='devices.list\x00', 0x26e1, 0x0) close(r8) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040044) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x3) 2m30.966622663s ago: executing program 4 (id=474): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname(r0, &(0x7f0000000000)=@ax25={{0x3, @null}, [@netrom, @rose, @bcast, @remote, @default, @rose, @remote, @rose]}, &(0x7f00000000c0)=0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x801, 0x0, 0x3, 0x2, {0xa, 0x4e24, 0x231, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x9}}}, 0x32) 2m30.935853934s ago: executing program 35 (id=474): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname(r0, &(0x7f0000000000)=@ax25={{0x3, @null}, [@netrom, @rose, @bcast, @remote, @default, @rose, @remote, @rose]}, &(0x7f00000000c0)=0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x801, 0x0, 0x3, 0x2, {0xa, 0x4e24, 0x231, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x9}}}, 0x32) 22.640588144s ago: executing program 0 (id=2030): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r2 = inotify_init1(0x80000) close(r2) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0xb2, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000200), 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r5, 0xffffd000) 22.323864319s ago: executing program 0 (id=2035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x4, 0x2, 0xf00, 0x0, @adapter={0x60, 0x5, 0x3, 0x7, 0x2}}]}) 22.319903289s ago: executing program 0 (id=2036): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) lsm_set_self_attr(0x65, &(0x7f0000001580)=ANY=[@ANYRES16, @ANYBLOB="a0c2d6fd10ef35bc72ab4d5867289f"], 0x20, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xd, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 22.30076599s ago: executing program 0 (id=2037): r0 = socket$igmp(0x2, 0x3, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unlinkat(r2, &(0x7f0000000440)='./file0/../file0\x00', 0x200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455cb, 0x6800000000000000) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x12021) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)='P\"@', 0x3, 0x4000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 22.26414897s ago: executing program 0 (id=2038): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x107040, 0x0) 22.26360596s ago: executing program 0 (id=2039): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (fail_nth: 1) 11.401335266s ago: executing program 7 (id=2072): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x84, 0x0, 0x0, {0x4, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, r2, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x1, 0x50339398, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x50) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r4, r5, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000000)=[@register_looper, @acquire_done={0x40106309, 0x2}], 0xfffffffffffffff4, 0x0, 0x0}) 9.772700211s ago: executing program 5 (id=2075): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept4(r2, 0x0, 0x0, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000740)=0x40) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = dup3(r3, r3, 0x80000) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) accept$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000040)=0x1c) 9.771693971s ago: executing program 7 (id=2076): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read(r1, 0x0, 0x0) write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000cee0203001a000000", 0x33a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xb8}}, 0x4004090) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x6a800, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) mount$binderfs(0x0, &(0x7f0000003e00)='./binderfs\x00', 0x0, 0x104000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = userfaultfd(0x801) futex(0x0, 0x84, 0x2, 0x0, 0x0, 0x22) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x88, 0x2d, 0x0, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 9.766462321s ago: executing program 6 (id=2077): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000040)=0xe8) chown(&(0x7f0000000000)='./file0\x00', r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) fsopen(0x0, 0x2000000) r7 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x95\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\a\xbaT=\xe8R\x84\xef\xdb\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000140)={r7, 0x0, 0x0, 0x4000}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000002000000d0040000000000000000000000000100"]) keyctl$clear(0x3, 0xfffffffffffffffd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b00010000000009049c0002010351000905031300000000000725f70200000209050e"], 0x0) request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000d0000000000000007000000d90100000480000001b23d000100"/48]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 7.991195668s ago: executing program 5 (id=2078): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0}, 0x2020) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, r3, {0x7}}, 0x18) r5 = dup(r0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4602, 0x0) write(r7, &(0x7f00000000c0)="f906280213", 0x5) write(r1, &(0x7f0000000200)="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", 0xff) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xffaf) write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 7.990907158s ago: executing program 6 (id=2079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000000001010400000000000000000a000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) 6.219032315s ago: executing program 5 (id=2080): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000480)=ANY=[@ANYBLOB="2f030b129842e429d712417c8b012faf0e51cc6ff8b664f601adc86de1b0886be9a2e8e30440e6cc177d2d49894af0d9fe7b98dea22140153a50aba47df1a2c7f9ee0b658fc51913104511ff7f0000000041f1f855284b45bb98"]}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) rmdir(&(0x7f0000000180)='./file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004006) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/161, 0xa1, 0x0, &(0x7f0000000200)=""/109, 0x6d}, &(0x7f0000000400)=0x40) timer_create(0x5, &(0x7f0000000600)={0x0, 0x7, 0x0, @thr={&(0x7f0000000500)="e5cd0cc4b796caabb9f1e91988f830eef508458cfc3d50d605367e4bad260515600707402689038025571c9effafc9b4a0f5df0e5fdd11cdd068345f1eba8ebe0516b59eece85e703bad49193174b53257c70e9cbbdef806b6a34c04a3ae95a6589c83d2661c81ed7c0e3c736d99d761c4036db9faca8da8d5ce669c4bba85d955b5484ec63d69a44e80bbe4d3cd76b4ea3392db6cbb8b5bf8e102c831ac75f4e84054d1eca911000e540ee91e35c00a51704afede3ca107ff677710d9a0eeea56b648a45411b7809f438d20d0387baa42d175aabc6d1419f7d3636c5c1b9142f034", &(0x7f0000000440)="3af866a0528853cdd006905dce4a93e427a98a1145ebdfd05893f9e20005be8a325c52b75698782f61ab"}}, &(0x7f0000000640)) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) brk(0x8000000000000008) 6.215528645s ago: executing program 7 (id=2081): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000300)=0x80, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@local, @multicast1, 0x0, 0x2, [@local, @empty]}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x10, 0x10, 0x6, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8008, 0x8, 0x8000, 0xfffffffd}}) getsockopt$inet_mreqn(r4, 0x0, 0x24, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r5, @ANYBLOB="04002dbd754e5bf6d0045a077000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400040000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040078000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="04000280"], 0x1a0}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r8 = socket(0x11, 0x3, 0x0) r9 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025c00020108007f09358a6a80df6a4500334efcb5b504000001020d00000524060001052400ff0f0d240f010b000000010100040e06241ae4291209058103080002f4000904e5ffff010d00000904010102020d000009"], 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x108, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe38a}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x880) r12 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc20e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xb90}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x2, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xa, 0x2a, 0x6d}}]}}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x1, 0x3, 0xb1, 0x40, 0x2}, 0x1c, &(0x7f0000000440)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x86, "7ed79bf62e215cb9b63f629ba1d34217"}]}, 0x8, [{0x4e, &(0x7f0000000540)=@string={0x4e, 0x3, "93e0ead208a5ffc2cd2b31387f1db06650b8565ae34f12b9779db9ff1f04714c9ccb300f1dd9faea403b0b75c8ff1989aaa2b8425ce02373ced8df8adbeaa0fd05911b0674ad8407ea0ceb13"}}, {0xf9, &(0x7f0000000600)=@string={0xf9, 0x3, "818ac7474822eec4634831382285a4f2fb1026a58b353f679f8c6ecd5c55dae276bd7633f5d969af6a5ce31b7335ff5db93374441721df8a47a026efac21a9583eba4b716402d051bb5f19756e23262026117d49e17ef337d63d187696bcaae12125667774d57425a642a614eff3cea87b448cf0fb1a58d132d5e1141f2f4e7defd7148884aac24187ee2fd734deb928cfc6dfabee050d4ccbba8ece68070c5751865e865a247e90fd414e26c12cdfa3c7639917f3f019fb0cefddb7fa4ca5f0551bbe3474df3bf1b2cf11e927484f1004895175a850110fcdb4e3e716e91ddae56698782b1224756458f7f5d15f49c66328d41d743575"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x425}}, {0xfa, &(0x7f0000000a00)=@string={0xfa, 0x3, "eebc4326f2c0f2e3390628580d98bb5afbf07c81ee3b00849a5e7091c9d41f62aee2f7a929f9436410e2c79481ab8af45d67c4451341077ef74c2285d91f93498d8a6e112876e5309367d96bac921e1f8c27e8eb021958fcd09d10e745ba967b2855a4b633ceb423741268924b755bfd2e2966cc94f9e4e380089d4eccf8e1609f9deb1241e82bf7dfba061601efb6814f1e40913d6d3c8c3888d62be89605322d4b09641c235b4570fdaa7b5a8035f8834dda974c796641880d5bef6124724352db0fb9f49047332c2c205afb988a49f543592733b9d3017906c57daa66b71c5a0942b4d15a2cfcec3bd8d7ce91c88e6a231cde138010d6"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x816}}]}) syz_usb_control_io$hid(r12, &(0x7f0000000cc0)={0x24, &(0x7f0000000800)={0x40, 0x8, 0x29, {0x29, 0x8, "c3a2a6139d0942d2ac5bd7bf2778110907f7c7218c9ec736ebc4d569e55ac8eda90c519a39060a"}}, &(0x7f0000000c00)={0x0, 0x3, 0x22, @string={0x22, 0x3, "52706c4b88f9ef83cabac1c50e6804373524b82c60ca1751b55a4b64aa94db98"}}, &(0x7f0000000c40)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x1, "58c09c5d"}, @local=@item_4={0x3, 0x2, 0x1, "d8ac0c37"}, @local=@item_012={0x1, 0x2, 0x8, "b7"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x1, 0x0, 0xc, "84"}, @local=@item_4={0x3, 0x2, 0x5, '`tbu'}, @global=@item_4={0x3, 0x1, 0x2, "81d8f197"}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xd0c}}}}, &(0x7f0000000f00)={0x2c, &(0x7f0000000d00)={0x0, 0x0, 0x84, "9e5289ba1b5cf78fda52b318bb22041539c620cd339594e6b1730f6ee068c80ff5d8bcf92d89ff98fa706c56cdbd34d104990be338981a4d15da67129cbb76ac25825b4f12029d5d4fc154c82cf888455a53e27910baa63d622ee4ed5e5f99b7b1ebac4f1dcc5fb7ba12b40d3526b8ae3b7f9401ce9297f69a5a67df602c243695368b91"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000e40)={0x20, 0x1, 0x62, "34a5ab498d3302971d3cc977bcf21e0ceed5b263fc435be98ff5d1ef7148455565772f9074d3217ca6b2ecea34d0ba4da607ac8d372ec40d6b11d25c754be38ca9800ea344a2fe904c9da2cab83112735de6075821693bf809e5508c150b935345ef"}, &(0x7f0000000ec0)={0x20, 0x3, 0x1, 0x2}}) 6.215147595s ago: executing program 6 (id=2082): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'lo\x00', &(0x7f0000000180)=@ethtool_ts_info}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003440)={'tunl0\x00', 0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x0, 0x101}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0800002a9000071900be008300"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/33, 0x21}], 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x4, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x880) 4.276374855s ago: executing program 5 (id=2083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="0f795f29bad004b000eec4e3fdcf93000000263e0f0178000f0d770566b9800000c00f326635000100000f300f01c92e0fc73f0f01ca66c1fd29", 0x3a}], 0x1, 0x4, &(0x7f0000000100)=[@efer={0x2, 0x500}], 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.275815575s ago: executing program 7 (id=2084): sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x1, 0x1000}, 0x0) sigaltstack(0x0, 0x0) 4.269650815s ago: executing program 6 (id=2085): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x4, 0x2, 0xf00, 0x0, @adapter={0x60, 0x5, 0x3, 0x7, 0x2}}]}) 2.170124107s ago: executing program 5 (id=2086): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.169983937s ago: executing program 7 (id=2087): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCFLSH(r0, 0x8924, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/162) 2.169807027s ago: executing program 6 (id=2088): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$AUTOFS_IOC_FAIL(r0, 0x40187542, 0x92) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000cc0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) poll(&(0x7f0000000040)=[{r3, 0x200}], 0x1, 0x138) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x3) 58.630079ms ago: executing program 5 (id=2089): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) close(r1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000000000000ab20d5a796cabf2282af928dcc2c7151c908e7e4271158ab1ba777404e25dc18d9918757cefc768c735ec28ca6e62d"], &(0x7f00000000c0)=0x24) 52.792969ms ago: executing program 7 (id=2090): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000180)={0x5}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r4, 0x0, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000005740), 0x22, 0x0) pwritev2(r5, &(0x7f0000005a00)=[{&(0x7f0000005780)="74f9f17cbdc07e", 0x7}], 0x1, 0x80, 0x1, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=2091): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000480)=ANY=[@ANYBLOB="2f030b129842e429d712417c8b012faf0e51cc6ff8b664f601adc86de1b0886be9a2e8e30440e6cc177d2d49894af0d9fe7b98dea22140153a50aba47df1a2c7f9ee0b658fc51913104511ff7f0000000041f1f855284b45bb98"]}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) rmdir(&(0x7f0000000180)='./file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004006) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/161, 0xa1, 0x0, &(0x7f0000000200)=""/109, 0x6d}, &(0x7f0000000400)=0x40) timer_create(0x5, &(0x7f0000000600)={0x0, 0x7, 0x0, @thr={&(0x7f0000000500)="e5cd0cc4b796caabb9f1e91988f830eef508458cfc3d50d605367e4bad260515600707402689038025571c9effafc9b4a0f5df0e5fdd11cdd068345f1eba8ebe0516b59eece85e703bad49193174b53257c70e9cbbdef806b6a34c04a3ae95a6589c83d2661c81ed7c0e3c736d99d761c4036db9faca8da8d5ce669c4bba85d955b5484ec63d69a44e80bbe4d3cd76b4ea3392db6cbb8b5bf8e102c831ac75f4e84054d1eca911000e540ee91e35c00a51704afede3ca107ff677710d9a0eeea56b648a45411b7809f438d20d0387baa42d175aabc6d1419f7d3636c5c1b9142f034", &(0x7f0000000440)="3af866a0528853cdd006905dce4a93e427a98a1145ebdfd05893f9e20005be8a325c52b75698782f61ab"}}, &(0x7f0000000640)) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) kernel console output (not intermixed with test programs): T2484] R13: 0000000000000000 R14: 00007f4b495b5fa0 R15: 00007fffcadabcb8 [ 104.030702][ T2484] [ 104.615832][ T2499] FAULT_INJECTION: forcing a failure. [ 104.615832][ T2499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.645221][ T2499] CPU: 0 UID: 0 PID: 2499 Comm: syz.7.835 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 104.645251][ T2499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.645262][ T2499] Call Trace: [ 104.645268][ T2499] [ 104.645276][ T2499] __dump_stack+0x21/0x30 [ 104.645301][ T2499] dump_stack_lvl+0x10c/0x190 [ 104.645327][ T2499] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.645346][ T2499] ? kstrtoull+0x13b/0x1e0 [ 104.645364][ T2499] dump_stack+0x19/0x20 [ 104.645382][ T2499] should_fail_ex+0x3d9/0x530 [ 104.645401][ T2499] should_fail+0xf/0x20 [ 104.645418][ T2499] should_fail_usercopy+0x1e/0x30 [ 104.645436][ T2499] _copy_from_user+0x22/0xb0 [ 104.645458][ T2499] ___sys_sendmsg+0x159/0x2a0 [ 104.645483][ T2499] ? __sys_sendmsg+0x280/0x280 [ 104.645506][ T2499] ? proc_fail_nth_write+0x17e/0x210 [ 104.645523][ T2499] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 104.645545][ T2499] __x64_sys_sendmsg+0x1eb/0x2c0 [ 104.645560][ T2499] ? fput+0x1a5/0x240 [ 104.645582][ T2499] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 104.645598][ T2499] ? ksys_write+0x1ef/0x250 [ 104.645618][ T2499] ? __kasan_check_read+0x15/0x20 [ 104.645638][ T2499] x64_sys_call+0x2a4c/0x2ee0 [ 104.645658][ T2499] do_syscall_64+0x58/0xf0 [ 104.645676][ T2499] ? clear_bhb_loop+0x35/0x90 [ 104.645701][ T2499] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.645723][ T2499] RIP: 0033:0x7f0322f8e929 [ 104.645739][ T2499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.645754][ T2499] RSP: 002b:00007f0323ec0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.645774][ T2499] RAX: ffffffffffffffda RBX: 00007f03231b5fa0 RCX: 00007f0322f8e929 [ 104.645795][ T2499] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 104.645807][ T2499] RBP: 00007f0323ec0090 R08: 0000000000000000 R09: 0000000000000000 [ 104.645819][ T2499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.645831][ T2499] R13: 0000000000000000 R14: 00007f03231b5fa0 R15: 00007ffe786696c8 [ 104.645846][ T2499] [ 105.398496][ T723] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 105.499936][ T474] usb 7-1: USB disconnect, device number 17 [ 105.569542][ T723] usb 8-1: Using ep0 maxpacket: 16 [ 105.589435][ T723] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.604924][ T723] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.619207][ T723] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.629183][ T723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.637753][ T723] usb 8-1: Product: syz [ 105.641936][ T723] usb 8-1: Manufacturer: syz [ 105.647478][ T723] usb 8-1: SerialNumber: syz [ 105.911623][ T474] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 106.071960][ T474] usb 7-1: Using ep0 maxpacket: 16 [ 106.078911][ T474] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.089795][ T723] usb 8-1: cannot find UAC_HEADER [ 106.094877][ T474] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.111967][ T723] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 106.120955][ T474] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.147486][ T474] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.176485][ T474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.185996][ T474] usb 7-1: Product: syz [ 106.190648][ T474] usb 7-1: Manufacturer: syz [ 106.203243][ T474] usb 7-1: SerialNumber: syz [ 106.224272][ T474] cdc_ncm 7-1:1.0: skipping garbage [ 106.233127][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.236739][ T474] cdc_ncm 7-1:1.0: invalid descriptor buffer length [ 106.267051][ T474] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 106.276272][ T474] cdc_ncm 7-1:1.0: bind() failure [ 106.307785][ T590] usb 8-1: USB disconnect, device number 11 [ 106.444047][ T36] kauditd_printk_skb: 607 callbacks suppressed [ 106.444065][ T36] audit: type=1400 audit(1750438955.343:8420): avc: denied { map } for pid=2512 comm="syz.6.840" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.445655][ T305] usb 7-1: USB disconnect, device number 18 [ 106.451119][ T36] audit: type=1400 audit(1750438955.343:8421): avc: denied { read } for pid=2512 comm="syz.6.840" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.525787][ T36] audit: type=1400 audit(1750438955.427:8422): avc: denied { read write } for pid=1060 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.572964][ T36] audit: type=1400 audit(1750438955.427:8423): avc: denied { read write open } for pid=1060 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.598769][ T36] audit: type=1400 audit(1750438955.427:8424): avc: denied { ioctl } for pid=1060 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.624750][ T36] audit: type=1400 audit(1750438955.445:8425): avc: denied { read } for pid=2525 comm="syz.5.844" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.647358][ T36] audit: type=1400 audit(1750438955.445:8426): avc: denied { read open } for pid=2525 comm="syz.5.844" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.671659][ T36] audit: type=1400 audit(1750438955.445:8427): avc: denied { ioctl } for pid=2525 comm="syz.5.844" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.719679][ T2528] FAULT_INJECTION: forcing a failure. [ 106.719679][ T2528] name failslab, interval 1, probability 0, space 0, times 0 [ 106.724092][ T36] audit: type=1400 audit(1750438955.445:8428): avc: denied { execmem } for pid=2525 comm="syz.5.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 106.732402][ T2528] CPU: 0 UID: 0 PID: 2528 Comm: syz.5.845 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 106.732430][ T2528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.732442][ T2528] Call Trace: [ 106.732449][ T2528] [ 106.732463][ T2528] __dump_stack+0x21/0x30 [ 106.732487][ T2528] dump_stack_lvl+0x10c/0x190 [ 106.732505][ T2528] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.732523][ T2528] ? mas_wr_walk_descend+0x57d/0x8d0 [ 106.732542][ T2528] dump_stack+0x19/0x20 [ 106.732559][ T2528] should_fail_ex+0x3d9/0x530 [ 106.732578][ T2528] should_failslab+0xac/0x100 [ 106.732599][ T2528] kmem_cache_alloc_noprof+0x42/0x3a0 [ 106.732618][ T2528] ? vm_area_dup+0x42/0x5f0 [ 106.732640][ T2528] vm_area_dup+0x42/0x5f0 [ 106.732661][ T2528] __split_vma+0x1bd/0xa80 [ 106.732680][ T2528] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 106.732701][ T2528] vms_gather_munmap_vmas+0x273/0xdd0 [ 106.732721][ T2528] ? vma_link+0x4f0/0x680 [ 106.732740][ T2528] ? __cfi_vma_link+0x10/0x10 [ 106.732760][ T2528] do_vmi_align_munmap+0x244/0x5d0 [ 106.732781][ T2528] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 106.732801][ T2528] ? mas_walk+0x3f7/0x650 [ 106.732818][ T2528] ? mas_find+0x358/0x5f0 [ 106.732834][ T2528] do_vmi_munmap+0x246/0x2e0 [ 106.732854][ T2528] move_vma+0xa82/0x1200 [ 106.732870][ T2528] ? vma_expandable+0x100/0x100 [ 106.732885][ T2528] ? cap_mmap_addr+0x16a/0x2e0 [ 106.732907][ T2528] ? security_mmap_addr+0x97/0xb0 [ 106.732929][ T2528] mremap_to+0x547/0x610 [ 106.732944][ T2528] __se_sys_mremap+0x7e5/0x1010 [ 106.732961][ T2528] ? __cfi_vfs_write+0x10/0x10 [ 106.732978][ T2528] ? __x64_sys_mremap+0xf0/0xf0 [ 106.732993][ T2528] ? __kasan_check_write+0x18/0x20 [ 106.733010][ T2528] ? mutex_unlock+0x8b/0x240 [ 106.733025][ T2528] ? __cfi_mutex_unlock+0x10/0x10 [ 106.733040][ T2528] ? __fget_files+0x2c5/0x340 [ 106.733060][ T2528] ? __kasan_check_write+0x18/0x20 [ 106.733077][ T2528] ? fput+0x1a5/0x240 [ 106.733098][ T2528] ? ksys_write+0x1ef/0x250 [ 106.733117][ T2528] ? __cfi_ksys_write+0x10/0x10 [ 106.733136][ T2528] __x64_sys_mremap+0xc3/0xf0 [ 106.733152][ T2528] x64_sys_call+0x2ac4/0x2ee0 [ 106.733171][ T2528] do_syscall_64+0x58/0xf0 [ 106.733190][ T2528] ? clear_bhb_loop+0x35/0x90 [ 106.733212][ T2528] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.733233][ T2528] RIP: 0033:0x7f4b4938e929 [ 106.733248][ T2528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.733261][ T2528] RSP: 002b:00007f4b4a175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 106.733280][ T2528] RAX: ffffffffffffffda RBX: 00007f4b495b5fa0 RCX: 00007f4b4938e929 [ 106.733293][ T2528] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000200000001000 [ 106.733305][ T2528] RBP: 00007f4b4a175090 R08: 0000200000005000 R09: 0000000000000000 [ 106.733317][ T2528] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 106.733328][ T2528] R13: 0000000000000000 R14: 00007f4b495b5fa0 R15: 00007fffcadabcb8 [ 106.733342][ T2528] [ 106.791351][ T2530] tun0: tun_chr_ioctl cmd 1074025675 [ 106.796262][ T36] audit: type=1400 audit(1750438955.445:8429): avc: denied { name_bind } for pid=2525 comm="syz.5.844" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 106.816989][ T2530] tun0: persist disabled [ 106.856787][ T2531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.083868][ T2530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 107.090330][ T2530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:323 [ 107.172596][ T2537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.185328][ T2537] rust_binder: Error while translating object. [ 107.191779][ T2537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.205240][ T2537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:291 [ 107.402282][ T2546] FAULT_INJECTION: forcing a failure. [ 107.402282][ T2546] name failslab, interval 1, probability 0, space 0, times 0 [ 107.425910][ T2546] CPU: 0 UID: 0 PID: 2546 Comm: syz.5.853 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 107.425939][ T2546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.425950][ T2546] Call Trace: [ 107.425957][ T2546] [ 107.425964][ T2546] __dump_stack+0x21/0x30 [ 107.425988][ T2546] dump_stack_lvl+0x10c/0x190 [ 107.426008][ T2546] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.426028][ T2546] ? avc_has_perm+0x144/0x220 [ 107.426045][ T2546] ? __cfi_avc_has_perm+0x10/0x10 [ 107.426063][ T2546] dump_stack+0x19/0x20 [ 107.426081][ T2546] should_fail_ex+0x3d9/0x530 [ 107.426101][ T2546] should_failslab+0xac/0x100 [ 107.426121][ T2546] __kmalloc_cache_noprof+0x41/0x3c0 [ 107.426141][ T2546] ? vhost_task_create+0x101/0x350 [ 107.426162][ T2546] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 107.426187][ T2546] vhost_task_create+0x101/0x350 [ 107.426208][ T2546] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 107.426233][ T2546] ? __cfi_vhost_task_create+0x10/0x10 [ 107.426256][ T2546] ? __cfi_vhost_task_fn+0x10/0x10 [ 107.426277][ T2546] ? __kasan_check_write+0x18/0x20 [ 107.426295][ T2546] ? mutex_lock+0x92/0x1c0 [ 107.426311][ T2546] ? __cfi_mutex_lock+0x10/0x10 [ 107.426327][ T2546] ? kernel_text_address+0xa9/0xe0 [ 107.426346][ T2546] kvm_mmu_post_init_vm+0x1a6/0x310 [ 107.426366][ T2546] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 107.426385][ T2546] ? _parse_integer_limit+0x195/0x1e0 [ 107.426403][ T2546] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 107.426428][ T2546] ? kstrtoull+0x13b/0x1e0 [ 107.426445][ T2546] ? kstrtouint+0x78/0xf0 [ 107.426461][ T2546] ? ioctl_has_perm+0x1aa/0x4d0 [ 107.426484][ T2546] ? __asan_memcpy+0x5a/0x80 [ 107.426502][ T2546] ? ioctl_has_perm+0x3e0/0x4d0 [ 107.426524][ T2546] ? has_cap_mac_admin+0xd0/0xd0 [ 107.426546][ T2546] ? __kasan_check_write+0x18/0x20 [ 107.426563][ T2546] ? mutex_lock_killable+0x92/0x1c0 [ 107.426580][ T2546] ? __cfi_mutex_lock_killable+0x10/0x10 [ 107.426598][ T2546] ? proc_fail_nth_write+0x17e/0x210 [ 107.426616][ T2546] kvm_vcpu_ioctl+0x96f/0xee0 [ 107.426639][ T2546] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 107.426660][ T2546] ? __cfi_vfs_write+0x10/0x10 [ 107.426679][ T2546] ? __kasan_check_write+0x18/0x20 [ 107.426697][ T2546] ? mutex_unlock+0x8b/0x240 [ 107.426713][ T2546] ? __cfi_mutex_unlock+0x10/0x10 [ 107.426729][ T2546] ? __fget_files+0x2c5/0x340 [ 107.426752][ T2546] ? __fget_files+0x2c5/0x340 [ 107.426773][ T2546] ? bpf_lsm_file_ioctl+0xd/0x20 [ 107.426792][ T2546] ? security_file_ioctl+0x34/0xd0 [ 107.426813][ T2546] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 107.426833][ T2546] __se_sys_ioctl+0x132/0x1b0 [ 107.426855][ T2546] __x64_sys_ioctl+0x7f/0xa0 [ 107.426875][ T2546] x64_sys_call+0x1878/0x2ee0 [ 107.426896][ T2546] do_syscall_64+0x58/0xf0 [ 107.426916][ T2546] ? clear_bhb_loop+0x35/0x90 [ 107.426939][ T2546] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.426962][ T2546] RIP: 0033:0x7f4b4938e929 [ 107.426976][ T2546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.426989][ T2546] RSP: 002b:00007f4b4a175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.427009][ T2546] RAX: ffffffffffffffda RBX: 00007f4b495b5fa0 RCX: 00007f4b4938e929 [ 107.427023][ T2546] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 107.427035][ T2546] RBP: 00007f4b4a175090 R08: 0000000000000000 R09: 0000000000000000 [ 107.427047][ T2546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.427059][ T2546] R13: 0000000000000000 R14: 00007f4b495b5fa0 R15: 00007fffcadabcb8 [ 107.427074][ T2546] [ 107.828586][ T2555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.857'. [ 107.909476][ T305] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 108.081775][ T305] usb 8-1: Using ep0 maxpacket: 16 [ 108.088778][ T305] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.099610][ T305] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.113136][ T305] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.134968][ T305] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.143462][ T305] usb 8-1: Product: syz [ 108.148106][ T305] usb 8-1: Manufacturer: syz [ 108.152715][ T305] usb 8-1: SerialNumber: syz [ 108.252909][ T590] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 108.413212][ T590] usb 6-1: Using ep0 maxpacket: 8 [ 108.425424][ T590] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.436353][ T590] usb 6-1: config 0 interface 0 has no altsetting 0 [ 108.442973][ T590] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 108.453037][ T590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.471491][ T590] usb 6-1: config 0 descriptor?? [ 108.609487][ T305] usb 8-1: cannot find UAC_HEADER [ 108.619005][ T305] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.697246][ T590] usbhid 6-1:0.0: can't add hid device: -71 [ 108.712594][ T590] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 108.726919][ T590] usb 6-1: USB disconnect, device number 24 [ 108.743942][ T1747] udevd[1747]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 108.829422][ T10] usb 8-1: USB disconnect, device number 12 [ 109.291366][ T590] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 109.471566][ T590] usb 7-1: Using ep0 maxpacket: 8 [ 109.481629][ T2582] binder: Unknown parameter 'defcontext01777777777777777777777' [ 109.484597][ T590] usb 7-1: config 0 has no interfaces? [ 109.510219][ T590] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.545101][ T2587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.553496][ T590] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.562327][ T590] usb 7-1: Product: syz [ 109.566494][ T590] usb 7-1: Manufacturer: syz [ 109.571122][ T305] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 109.580621][ T2587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.588660][ T590] usb 7-1: SerialNumber: syz [ 109.597709][ T590] usb 7-1: config 0 descriptor?? [ 109.749546][ T305] usb 6-1: Using ep0 maxpacket: 8 [ 109.756448][ T305] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 109.766095][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.775458][ T305] usb 6-1: config 0 descriptor?? [ 109.826902][ T2564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.844552][ T2564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.867930][ T723] usb 7-1: USB disconnect, device number 19 [ 110.380273][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 110.439238][ T305] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 110.449321][ T305] asix 6-1:0.0: probe with driver asix failed with error -61 [ 110.551312][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 110.579453][ T2626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 110.588933][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.620367][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.642587][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.653755][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.662229][ T10] usb 8-1: Product: syz [ 110.668304][ T10] usb 8-1: Manufacturer: syz [ 110.673546][ T10] usb 8-1: SerialNumber: syz [ 111.121709][ T10] usb 8-1: cannot find UAC_HEADER [ 111.129906][ T10] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 111.168736][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.336931][ T10] usb 8-1: USB disconnect, device number 13 [ 111.606779][ T2637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.615353][ T2637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.627247][ T2635] binder: Unknown parameter 'stas' [ 111.813170][ T36] kauditd_printk_skb: 561 callbacks suppressed [ 111.813186][ T36] audit: type=1400 audit(1750438960.375:8991): avc: denied { ioctl } for pid=2641 comm="syz.6.893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.879462][ T36] audit: type=1400 audit(1750438960.431:8992): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.904057][ T36] audit: type=1400 audit(1750438960.431:8993): avc: denied { read write open } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.930159][ T36] audit: type=1400 audit(1750438960.431:8994): avc: denied { ioctl } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.957082][ T36] audit: type=1400 audit(1750438960.459:8995): avc: denied { ioctl } for pid=2641 comm="syz.6.893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.982407][ T723] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 111.992404][ T36] audit: type=1400 audit(1750438960.497:8996): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.016709][ T36] audit: type=1400 audit(1750438960.497:8997): avc: denied { read write open } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.033536][ T2649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.069408][ T36] audit: type=1400 audit(1750438960.497:8998): avc: denied { ioctl } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.079042][ T2649] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 112.101444][ T36] audit: type=1400 audit(1750438960.534:8999): avc: denied { ioctl } for pid=2641 comm="syz.6.893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.114948][ T2649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 112.134309][ T2649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:323 [ 112.135164][ T36] audit: type=1400 audit(1750438960.534:9000): avc: denied { ioctl } for pid=2641 comm="syz.6.893" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.178240][ T2651] netlink: 12 bytes leftover after parsing attributes in process `syz.7.897'. [ 112.187147][ T723] usb 7-1: Using ep0 maxpacket: 8 [ 112.212185][ T723] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 41853, setting to 1024 [ 112.235963][ T723] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16 [ 112.247412][ T723] usb 7-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.270066][ T723] usb 7-1: config 1 interface 0 has no altsetting 0 [ 112.292223][ T723] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.315260][ T723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.336643][ T723] usb 7-1: Product: syz [ 112.340820][ T723] usb 7-1: Manufacturer: syz [ 112.345452][ T723] usb 7-1: SerialNumber: syz [ 112.359546][ T2642] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 112.377907][ T2642] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 112.445671][ T2665] FAULT_INJECTION: forcing a failure. [ 112.445671][ T2665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.467705][ T2665] CPU: 1 UID: 0 PID: 2665 Comm: syz.7.901 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 112.467734][ T2665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.467746][ T2665] Call Trace: [ 112.467752][ T2665] [ 112.467760][ T2665] __dump_stack+0x21/0x30 [ 112.467784][ T2665] dump_stack_lvl+0x10c/0x190 [ 112.467804][ T2665] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.467824][ T2665] ? kstrtoull+0x13b/0x1e0 [ 112.467841][ T2665] dump_stack+0x19/0x20 [ 112.467859][ T2665] should_fail_ex+0x3d9/0x530 [ 112.467878][ T2665] should_fail+0xf/0x20 [ 112.467893][ T2665] should_fail_usercopy+0x1e/0x30 [ 112.467911][ T2665] _copy_from_user+0x22/0xb0 [ 112.467931][ T2665] ___sys_sendmsg+0x159/0x2a0 [ 112.467955][ T2665] ? __sys_sendmsg+0x280/0x280 [ 112.467978][ T2665] ? proc_fail_nth_write+0x17e/0x210 [ 112.467995][ T2665] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 112.468017][ T2665] __x64_sys_sendmsg+0x1eb/0x2c0 [ 112.468033][ T2665] ? fput+0x1a5/0x240 [ 112.468055][ T2665] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 112.468070][ T2665] ? ksys_write+0x1ef/0x250 [ 112.468090][ T2665] ? __kasan_check_read+0x15/0x20 [ 112.468110][ T2665] x64_sys_call+0x2a4c/0x2ee0 [ 112.468130][ T2665] do_syscall_64+0x58/0xf0 [ 112.468157][ T2665] ? clear_bhb_loop+0x35/0x90 [ 112.468181][ T2665] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.468203][ T2665] RIP: 0033:0x7f0322f8e929 [ 112.468219][ T2665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.468233][ T2665] RSP: 002b:00007f0323ec0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.468253][ T2665] RAX: ffffffffffffffda RBX: 00007f03231b5fa0 RCX: 00007f0322f8e929 [ 112.468265][ T2665] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 112.468277][ T2665] RBP: 00007f0323ec0090 R08: 0000000000000000 R09: 0000000000000000 [ 112.468289][ T2665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.468300][ T2665] R13: 0000000000000000 R14: 00007f03231b5fa0 R15: 00007ffe786696c8 [ 112.468315][ T2665] [ 112.693229][ T2670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.720846][ T2670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.775000][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 112.804010][ T2672] random: crng reseeded on system resumption [ 112.904042][ T2673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.904'. [ 112.945999][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 112.952811][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.962895][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.969741][ T2675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 112.974652][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.992846][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.000841][ T10] usb 8-1: Product: syz [ 113.004995][ T10] usb 8-1: Manufacturer: syz [ 113.009572][ T10] usb 8-1: SerialNumber: syz [ 113.451970][ T10] usb 8-1: cannot find UAC_HEADER [ 113.460327][ T10] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 113.509853][ T1747] udevd[1747]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.667744][ T590] usb 8-1: USB disconnect, device number 14 [ 113.820257][ T305] usb 6-1: USB disconnect, device number 25 [ 114.228908][ T305] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 114.389265][ T305] usb 6-1: Using ep0 maxpacket: 16 [ 114.396495][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.407421][ T305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.417198][ T305] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.430025][ T305] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.439096][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.453475][ T305] usb 6-1: config 0 descriptor?? [ 114.687740][ T2694] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.688641][ T2694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.695145][ T2694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 114.917945][ T2679] overlayfs: failed to resolve '/HJ@}q+dc8shnP': -2 [ 114.944325][ T723] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 114.955302][ T723] usb 7-1: USB disconnect, device number 20 [ 114.968355][ T305] microsoft 0003:045E:07DA.0006: unknown global tag 0xc [ 114.993308][ T305] microsoft 0003:045E:07DA.0006: item 0 0 1 12 parsing failed [ 115.014241][ T305] microsoft 0003:045E:07DA.0006: parse failed [ 115.030705][ T305] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 115.044658][ T2672] Restarting kernel threads ... done. [ 115.169664][ T590] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 115.199051][ T460] usb 6-1: USB disconnect, device number 26 [ 115.330053][ T590] usb 8-1: Using ep0 maxpacket: 16 [ 115.341456][ T590] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.361204][ T590] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.377639][ T590] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.388322][ T590] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.409357][ T590] usb 8-1: Product: syz [ 115.419568][ T590] usb 8-1: Manufacturer: syz [ 115.424180][ T590] usb 8-1: SerialNumber: syz [ 115.662261][ T2737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.682909][ T2737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.721890][ T2738] rust_binder: Error while translating object. [ 115.721931][ T2738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 115.728744][ T2738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:296 [ 115.791767][ T2741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.815891][ T2741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.823751][ T2741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.835071][ T2741] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 115.841531][ T2741] rust_binder: Read failure Err(EFAULT) in pid:345 [ 115.851071][ T2741] rust_binder: Write failure EINVAL in pid:345 [ 115.858607][ T2741] rust_binder: Read failure Err(EAGAIN) in pid:345 [ 115.869584][ T590] usb 8-1: cannot find UAC_HEADER [ 115.894857][ T590] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.959273][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 116.084716][ T590] usb 8-1: USB disconnect, device number 15 [ 116.121134][ T474] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 116.281478][ T474] usb 6-1: Using ep0 maxpacket: 32 [ 116.288507][ T474] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 116.296685][ T474] usb 6-1: config 0 has no interface number 0 [ 116.305280][ T474] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.314365][ T474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.322340][ T474] usb 6-1: Product: syz [ 116.326505][ T474] usb 6-1: Manufacturer: syz [ 116.331085][ T474] usb 6-1: SerialNumber: syz [ 116.337067][ T474] usb 6-1: config 0 descriptor?? [ 116.344876][ T474] smsc95xx v2.0.0 [ 116.550163][ T2751] overlayfs: conflicting options: nfs_export=on,index=off [ 116.781476][ T2741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.806620][ T2741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.822392][ T474] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 116.858768][ T474] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 116.890858][ T474] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 116.908966][ T474] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 116.924394][ T474] usb 6-1: USB disconnect, device number 27 [ 117.168280][ T2794] binder: Unknown parameter 'processor : 0 [ 117.168280][ T2794] vendor_id : GenuineIntel [ 117.168280][ T2794] cpu family : 6 [ 117.168280][ T2794] model : 79 [ 117.168280][ T2794] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 117.168280][ T2794] stepping : 0 [ 117.168280][ T2794] microcode : 0xffffffff [ 117.168280][ T2794] cpu MHz : 2200.116 [ 117.168280][ T2794] cache size : 56320 KB [ 117.168280][ T2794] physical id : 0 [ 117.168280][ T2794] siblings : 2 [ 117.168280][ T2794] core id : 0 [ 117.168280][ T2794] cpu cores : 1 [ 117.168280][ T2794] apicid : 0 [ 117.168280][ T2794] initial apicid : 0 [ 117.168280][ T2794] fpu : yes [ 117.168280][ T2794] fpu_exception : yes [ 117.168280][ T2794] cpuid level : 13 [ 117.168280][ T2794] wp : yes [ 117.168280][ T2794] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 117.168280][ T2794] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 117.187574][ T36] kauditd_printk_skb: 683 callbacks suppressed [ 117.187592][ T36] audit: type=1400 audit(1750438965.398:9684): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.344418][ T2798] overlayfs: workdir and upperdir must be separate subtrees [ 117.360119][ T36] audit: type=1400 audit(1750438965.398:9685): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.434306][ T36] audit: type=1400 audit(1750438965.398:9686): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.504805][ T36] audit: type=1400 audit(1750438965.445:9687): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.588947][ T36] audit: type=1400 audit(1750438965.445:9688): avc: denied { read write open } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.634020][ T2819] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.639345][ T1567] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.645402][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.653849][ T290] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64 [ 117.660558][ T1567] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 117.681316][ T2818] rust_binder: Error while translating object. [ 117.681354][ T2818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 117.690103][ T2818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:314 [ 117.787146][ T2827] overlayfs: workdir and upperdir must be separate subtrees [ 118.120785][ T2854] overlayfs: workdir and upperdir must be separate subtrees [ 118.210916][ T2856] FAULT_INJECTION: forcing a failure. [ 118.210916][ T2856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.224067][ T2856] CPU: 1 UID: 0 PID: 2856 Comm: syz.6.982 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 118.224094][ T2856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.224110][ T2856] Call Trace: [ 118.224116][ T2856] [ 118.224124][ T2856] __dump_stack+0x21/0x30 [ 118.224147][ T2856] dump_stack_lvl+0x10c/0x190 [ 118.224166][ T2856] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.224186][ T2856] dump_stack+0x19/0x20 [ 118.224205][ T2856] should_fail_ex+0x3d9/0x530 [ 118.224224][ T2856] should_fail+0xf/0x20 [ 118.224240][ T2856] should_fail_usercopy+0x1e/0x30 [ 118.224260][ T2856] _copy_to_user+0x24/0xa0 [ 118.224280][ T2856] simple_read_from_buffer+0xed/0x160 [ 118.224306][ T2856] proc_fail_nth_read+0x19e/0x210 [ 118.224322][ T2856] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 118.224340][ T2856] ? bpf_lsm_file_permission+0xd/0x20 [ 118.224358][ T2856] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 118.224375][ T2856] vfs_read+0x278/0xb60 [ 118.224394][ T2856] ? __cfi_vfs_read+0x10/0x10 [ 118.224413][ T2856] ? __kasan_check_write+0x18/0x20 [ 118.224431][ T2856] ? mutex_lock+0x92/0x1c0 [ 118.224447][ T2856] ? __cfi_mutex_lock+0x10/0x10 [ 118.224464][ T2856] ? __fget_files+0x2c5/0x340 [ 118.224485][ T2856] ksys_read+0x141/0x250 [ 118.224504][ T2856] ? __cfi_ksys_read+0x10/0x10 [ 118.224521][ T2856] ? __kasan_check_write+0x18/0x20 [ 118.224539][ T2856] ? fput+0x1a5/0x240 [ 118.224561][ T2856] ? __kasan_check_read+0x15/0x20 [ 118.224579][ T2856] __x64_sys_read+0x7f/0x90 [ 118.224598][ T2856] x64_sys_call+0x2638/0x2ee0 [ 118.224619][ T2856] do_syscall_64+0x58/0xf0 [ 118.224638][ T2856] ? clear_bhb_loop+0x35/0x90 [ 118.224661][ T2856] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.224684][ T2856] RIP: 0033:0x7ff3f198d33c [ 118.224699][ T2856] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.224714][ T2856] RSP: 002b:00007ff3f2748030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.224734][ T2856] RAX: ffffffffffffffda RBX: 00007ff3f1bb5fa0 RCX: 00007ff3f198d33c [ 118.224748][ T2856] RDX: 000000000000000f RSI: 00007ff3f27480a0 RDI: 0000000000000006 [ 118.224760][ T2856] RBP: 00007ff3f2748090 R08: 0000000000000000 R09: 0000000000000000 [ 118.224773][ T2856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.224784][ T2856] R13: 0000000000000000 R14: 00007ff3f1bb5fa0 R15: 00007fff38021db8 [ 118.224799][ T2856] [ 118.269938][ T474] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 118.545254][ T2868] random: crng reseeded on system resumption [ 118.662638][ T2877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.671805][ T2877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.703071][ T474] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 118.712491][ T474] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.723413][ T474] usb 8-1: config 0 descriptor?? [ 118.740273][ T2879] incfs: Backing dir is not set, filesystem can't be mounted. [ 118.747915][ T2879] incfs: mount failed -2 [ 118.966240][ T2895] FAULT_INJECTION: forcing a failure. [ 118.966240][ T2895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.979564][ T2895] CPU: 1 UID: 0 PID: 2895 Comm: syz.6.1000 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 118.979591][ T2895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.979603][ T2895] Call Trace: [ 118.979609][ T2895] [ 118.979617][ T2895] __dump_stack+0x21/0x30 [ 118.979639][ T2895] dump_stack_lvl+0x10c/0x190 [ 118.979656][ T2895] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.979675][ T2895] ? lock_sock_nested+0x1f5/0x290 [ 118.979694][ T2895] dump_stack+0x19/0x20 [ 118.979712][ T2895] should_fail_ex+0x3d9/0x530 [ 118.979731][ T2895] should_fail+0xf/0x20 [ 118.979747][ T2895] should_fail_usercopy+0x1e/0x30 [ 118.979766][ T2895] _copy_from_user+0x22/0xb0 [ 118.979787][ T2895] tls_setsockopt+0x4d1/0xd60 [ 118.979805][ T2895] ? __cfi_tls_setsockopt+0x10/0x10 [ 118.979823][ T2895] ? __cfi_vfs_write+0x10/0x10 [ 118.979842][ T2895] sock_common_setsockopt+0xb5/0xd0 [ 118.979861][ T2895] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 118.979880][ T2895] do_sock_setsockopt+0x26a/0x400 [ 118.979903][ T2895] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 118.979928][ T2895] __x64_sys_setsockopt+0x1b8/0x250 [ 118.979951][ T2895] x64_sys_call+0x2adc/0x2ee0 [ 118.979972][ T2895] do_syscall_64+0x58/0xf0 [ 118.979993][ T2895] ? clear_bhb_loop+0x35/0x90 [ 118.980016][ T2895] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.980038][ T2895] RIP: 0033:0x7ff3f198e929 [ 118.980053][ T2895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.980067][ T2895] RSP: 002b:00007ff3f2748038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.980086][ T2895] RAX: ffffffffffffffda RBX: 00007ff3f1bb5fa0 RCX: 00007ff3f198e929 [ 118.980100][ T2895] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 118.980111][ T2895] RBP: 00007ff3f2748090 R08: 0000000000000028 R09: 0000000000000000 [ 118.980123][ T2895] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 118.980135][ T2895] R13: 0000000000000000 R14: 00007ff3f1bb5fa0 R15: 00007fff38021db8 [ 118.980150][ T2895] [ 119.045831][ T2894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.384887][ T2846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.410036][ T2846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.582891][ T2921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.595236][ T2921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.603143][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 119.638025][ T2846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.646488][ T2846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.766651][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 119.773956][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.784137][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.795536][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.804619][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.812663][ T10] usb 7-1: Product: syz [ 119.816817][ T10] usb 7-1: Manufacturer: syz [ 119.821416][ T10] usb 7-1: SerialNumber: syz [ 120.151529][ T305] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 120.262581][ T10] usb 7-1: cannot find UAC_HEADER [ 120.269332][ T474] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 120.282840][ T474] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 120.294741][ T474] asix 8-1:0.0: probe with driver asix failed with error -71 [ 120.302696][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 120.315963][ T474] usb 8-1: USB disconnect, device number 16 [ 120.345369][ T305] usb 6-1: Using ep0 maxpacket: 16 [ 120.365620][ T305] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 120.373795][ T305] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.416062][ T305] usb 6-1: config 0 has no interface number 0 [ 120.434189][ T305] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 120.437720][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.443562][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.468068][ T305] usb 6-1: Product: syz [ 120.472887][ T305] usb 6-1: Manufacturer: syz [ 120.480204][ T590] usb 7-1: USB disconnect, device number 21 [ 120.501246][ T305] usb 6-1: SerialNumber: syz [ 120.515057][ T305] usb 6-1: config 0 descriptor?? [ 120.526580][ T305] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 120.533003][ T305] usb 6-1: No valid video chain found. [ 120.762147][ T2923] netlink: 424 bytes leftover after parsing attributes in process `syz.5.1012'. [ 120.798284][ T590] usb 6-1: USB disconnect, device number 28 [ 121.386329][ T2957] overlayfs: workdir and upperdir must be separate subtrees [ 121.456147][ T2960] rust_binder: Read failure Err(EAGAIN) in pid:365 [ 121.744389][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 121.926134][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 121.933530][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.943971][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.955140][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.964212][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.972377][ T10] usb 7-1: Product: syz [ 121.976563][ T10] usb 7-1: Manufacturer: syz [ 121.981178][ T10] usb 7-1: SerialNumber: syz [ 122.033056][ T64] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 122.193407][ T64] usb 8-1: Using ep0 maxpacket: 32 [ 122.200604][ T64] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.210813][ T64] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.222223][ T64] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.231293][ T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.239278][ T64] usb 8-1: Product: syz [ 122.243422][ T64] usb 8-1: Manufacturer: syz [ 122.248044][ T64] usb 8-1: SerialNumber: syz [ 122.425548][ T10] usb 7-1: cannot find UAC_HEADER [ 122.433447][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 122.493562][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.540073][ T36] kauditd_printk_skb: 835 callbacks suppressed [ 122.540089][ T36] audit: type=1400 audit(1750438970.393:10512): avc: denied { read write } for pid=1060 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.573005][ T36] audit: type=1400 audit(1750438970.402:10513): avc: denied { read write open } for pid=1060 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.598236][ T2989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.598336][ T2989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.624932][ T36] audit: type=1400 audit(1750438970.402:10514): avc: denied { ioctl } for pid=1060 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.644274][ T590] usb 7-1: USB disconnect, device number 22 [ 122.651448][ T36] audit: type=1400 audit(1750438970.440:10515): avc: denied { create } for pid=2987 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.679297][ T36] audit: type=1400 audit(1750438970.440:10516): avc: denied { create } for pid=2987 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.706566][ T36] audit: type=1400 audit(1750438970.440:10517): avc: denied { read } for pid=2988 comm="syz.5.1041" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.730398][ T36] audit: type=1400 audit(1750438970.440:10518): avc: denied { read open } for pid=2988 comm="syz.5.1041" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.754052][ T36] audit: type=1400 audit(1750438970.440:10519): avc: denied { ioctl } for pid=2988 comm="syz.5.1041" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.778705][ T36] audit: type=1400 audit(1750438970.440:10520): avc: denied { setopt } for pid=2987 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.798378][ T36] audit: type=1400 audit(1750438970.440:10521): avc: denied { read write } for pid=2987 comm="syz.0.1049" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.286776][ T2995] FAULT_INJECTION: forcing a failure. [ 123.286776][ T2995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.316471][ T2995] CPU: 0 UID: 0 PID: 2995 Comm: syz.6.1042 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 123.316506][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.316518][ T2995] Call Trace: [ 123.316524][ T2995] [ 123.316532][ T2995] __dump_stack+0x21/0x30 [ 123.316560][ T2995] dump_stack_lvl+0x10c/0x190 [ 123.316578][ T2995] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.316599][ T2995] dump_stack+0x19/0x20 [ 123.316617][ T2995] should_fail_ex+0x3d9/0x530 [ 123.316636][ T2995] should_fail+0xf/0x20 [ 123.316660][ T2995] should_fail_usercopy+0x1e/0x30 [ 123.316679][ T2995] _copy_to_user+0x24/0xa0 [ 123.316700][ T2995] simple_read_from_buffer+0xed/0x160 [ 123.316726][ T2995] proc_fail_nth_read+0x19e/0x210 [ 123.316743][ T2995] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 123.316760][ T2995] ? bpf_lsm_file_permission+0xd/0x20 [ 123.316778][ T2995] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 123.316795][ T2995] vfs_read+0x278/0xb60 [ 123.316814][ T2995] ? __cfi_vfs_read+0x10/0x10 [ 123.316832][ T2995] ? __kasan_check_write+0x18/0x20 [ 123.316850][ T2995] ? mutex_lock+0x92/0x1c0 [ 123.316866][ T2995] ? __cfi_mutex_lock+0x10/0x10 [ 123.316882][ T2995] ? __fget_files+0x2c5/0x340 [ 123.316905][ T2995] ksys_read+0x141/0x250 [ 123.316922][ T2995] ? __cfi_ksys_read+0x10/0x10 [ 123.316940][ T2995] ? __kasan_check_read+0x15/0x20 [ 123.316957][ T2995] __x64_sys_read+0x7f/0x90 [ 123.316975][ T2995] x64_sys_call+0x2638/0x2ee0 [ 123.316995][ T2995] do_syscall_64+0x58/0xf0 [ 123.317015][ T2995] ? clear_bhb_loop+0x35/0x90 [ 123.317039][ T2995] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.317061][ T2995] RIP: 0033:0x7ff3f198d33c [ 123.317076][ T2995] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.317090][ T2995] RSP: 002b:00007ff3f2748030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.317110][ T2995] RAX: ffffffffffffffda RBX: 00007ff3f1bb5fa0 RCX: 00007ff3f198d33c [ 123.317124][ T2995] RDX: 000000000000000f RSI: 00007ff3f27480a0 RDI: 0000000000000003 [ 123.317135][ T2995] RBP: 00007ff3f2748090 R08: 0000000000000000 R09: 0000000000000000 [ 123.317147][ T2995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.317158][ T2995] R13: 0000000000000000 R14: 00007ff3f1bb5fa0 R15: 00007fff38021db8 [ 123.317173][ T2995] [ 123.986899][ T3017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.996024][ T3017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.044013][ T3019] overlayfs: workdir and upperdir must be separate subtrees [ 124.070837][ T3020] veth0_to_bridge: entered promiscuous mode [ 124.089814][ T3020] veth0_to_bridge: entered allmulticast mode [ 124.581289][ T3030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.589818][ T3030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.945346][ T64] usb 8-1: 0:2 : does not exist [ 124.957772][ T64] usb 8-1: USB disconnect, device number 17 [ 124.989557][ T3037] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.034596][ T3039] overlayfs: workdir and upperdir must be separate subtrees [ 125.155274][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.296258][ T3052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.342780][ T3052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.475312][ T3059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.477798][ T3059] rust_binder: Error while translating object. [ 125.484493][ T3059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 125.490738][ T3059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390 [ 125.496799][ T723] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 125.621545][ T3063] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 125.640579][ T3063] overlayfs: missing 'lowerdir' [ 125.721291][ T723] usb 7-1: Using ep0 maxpacket: 16 [ 125.731158][ T723] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.757565][ T723] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.784695][ T723] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.801934][ T723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.818695][ T723] usb 7-1: Product: syz [ 125.826381][ T723] usb 7-1: Manufacturer: syz [ 125.836912][ T723] usb 7-1: SerialNumber: syz [ 125.963004][ T3069] overlayfs: workdir and upperdir must be separate subtrees [ 126.033090][ T3071] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.037879][ T3071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:402 [ 126.196677][ T3077] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 126.215552][ T3077] overlayfs: missing 'lowerdir' [ 126.285137][ T723] usb 7-1: cannot find UAC_HEADER [ 126.292492][ T723] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 126.352058][ T590] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 126.383013][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.505260][ T31] usb 7-1: USB disconnect, device number 23 [ 126.523648][ T3087] overlayfs: workdir and upperdir must be separate subtrees [ 126.533794][ T590] usb 6-1: Using ep0 maxpacket: 16 [ 126.547839][ T590] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 126.562169][ T590] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.597929][ T590] usb 6-1: config 0 has no interface number 0 [ 126.630815][ T590] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 126.645866][ T590] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.660775][ T590] usb 6-1: Product: syz [ 126.672020][ T590] usb 6-1: Manufacturer: syz [ 126.681560][ T590] usb 6-1: SerialNumber: syz [ 126.701898][ T590] usb 6-1: config 0 descriptor?? [ 126.714989][ T590] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 126.729694][ T590] usb 6-1: No valid video chain found. [ 126.943213][ T3073] netlink: 424 bytes leftover after parsing attributes in process `syz.5.1077'. [ 126.962125][ T723] usb 6-1: USB disconnect, device number 29 [ 127.525759][ T3133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.553446][ T3133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.726515][ T3143] 9pnet_fd: Insufficient options for proto=fd [ 127.941803][ T36] kauditd_printk_skb: 596 callbacks suppressed [ 127.941819][ T36] audit: type=1400 audit(1750438975.454:11114): avc: denied { read write } for pid=1060 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.973036][ T36] audit: type=1400 audit(1750438975.454:11115): avc: denied { read write open } for pid=1060 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.998787][ T36] audit: type=1400 audit(1750438975.454:11116): avc: denied { ioctl } for pid=1060 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.001872][ T3154] FAULT_INJECTION: forcing a failure. [ 128.001872][ T3154] name failslab, interval 1, probability 0, space 0, times 0 [ 128.025244][ T36] audit: type=1400 audit(1750438975.472:11117): avc: denied { read } for pid=3153 comm="syz.5.1110" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.039566][ T3154] CPU: 1 UID: 0 PID: 3154 Comm: syz.5.1110 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 128.039594][ T3154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.039604][ T3154] Call Trace: [ 128.039611][ T3154] [ 128.039618][ T3154] __dump_stack+0x21/0x30 [ 128.039642][ T3154] dump_stack_lvl+0x10c/0x190 [ 128.039660][ T3154] ? __cfi_dump_stack_lvl+0x10/0x10 [ 128.039680][ T3154] dump_stack+0x19/0x20 [ 128.039698][ T3154] should_fail_ex+0x3d9/0x530 [ 128.039716][ T3154] should_failslab+0xac/0x100 [ 128.039737][ T3154] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 128.039756][ T3154] ? dup_task_struct+0xbc/0xc50 [ 128.039772][ T3154] ? kasan_save_track+0x4f/0x80 [ 128.039792][ T3154] dup_task_struct+0xbc/0xc50 [ 128.039807][ T3154] ? __kasan_check_write+0x18/0x20 [ 128.039825][ T3154] ? _raw_spin_lock_irq+0x8d/0x120 [ 128.039846][ T3154] ? copy_process+0x3220/0x3220 [ 128.039862][ T3154] ? __kasan_check_write+0x18/0x20 [ 128.039880][ T3154] copy_process+0x538/0x3220 [ 128.039897][ T3154] ? __cfi_copy_process+0x10/0x10 [ 128.039920][ T3154] ? __kasan_check_write+0x18/0x20 [ 128.039937][ T3154] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 128.039961][ T3154] vhost_task_create+0x1d6/0x350 [ 128.039982][ T3154] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 128.040005][ T3154] ? __cfi_vhost_task_create+0x10/0x10 [ 128.040027][ T3154] ? __cfi_vhost_task_fn+0x10/0x10 [ 128.040047][ T3154] ? __kasan_check_write+0x18/0x20 [ 128.040064][ T3154] ? mutex_lock+0x92/0x1c0 [ 128.040078][ T3154] ? __cfi_mutex_lock+0x10/0x10 [ 128.040100][ T3154] ? kernel_text_address+0xa9/0xe0 [ 128.040116][ T3154] kvm_mmu_post_init_vm+0x1a6/0x310 [ 128.040136][ T3154] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 128.040155][ T3154] ? _parse_integer_limit+0x195/0x1e0 [ 128.040172][ T3154] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 128.040189][ T3154] ? kstrtoull+0x13b/0x1e0 [ 128.040205][ T3154] ? kstrtouint+0x78/0xf0 [ 128.040221][ T3154] ? ioctl_has_perm+0x1aa/0x4d0 [ 128.040242][ T3154] ? __asan_memcpy+0x5a/0x80 [ 128.040260][ T3154] ? ioctl_has_perm+0x3e0/0x4d0 [ 128.040281][ T3154] ? has_cap_mac_admin+0xd0/0xd0 [ 128.040301][ T3154] ? __kasan_check_write+0x18/0x20 [ 128.040318][ T3154] ? mutex_lock_killable+0x92/0x1c0 [ 128.040334][ T3154] ? __cfi_mutex_lock_killable+0x10/0x10 [ 128.040349][ T3154] ? proc_fail_nth_write+0x17e/0x210 [ 128.040367][ T3154] kvm_vcpu_ioctl+0x96f/0xee0 [ 128.040387][ T3154] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 128.040407][ T3154] ? __cfi_vfs_write+0x10/0x10 [ 128.040426][ T3154] ? __kasan_check_write+0x18/0x20 [ 128.040443][ T3154] ? mutex_unlock+0x8b/0x240 [ 128.040457][ T3154] ? __cfi_mutex_unlock+0x10/0x10 [ 128.040472][ T3154] ? __fget_files+0x2c5/0x340 [ 128.040492][ T3154] ? __fget_files+0x2c5/0x340 [ 128.040512][ T3154] ? bpf_lsm_file_ioctl+0xd/0x20 [ 128.040529][ T3154] ? security_file_ioctl+0x34/0xd0 [ 128.040549][ T3154] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 128.040569][ T3154] __se_sys_ioctl+0x132/0x1b0 [ 128.040589][ T3154] __x64_sys_ioctl+0x7f/0xa0 [ 128.040609][ T3154] x64_sys_call+0x1878/0x2ee0 [ 128.040629][ T3154] do_syscall_64+0x58/0xf0 [ 128.040648][ T3154] ? clear_bhb_loop+0x35/0x90 [ 128.040670][ T3154] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.040691][ T3154] RIP: 0033:0x7f4b4938e929 [ 128.040706][ T3154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.040720][ T3154] RSP: 002b:00007f4b4a175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.040739][ T3154] RAX: ffffffffffffffda RBX: 00007f4b495b5fa0 RCX: 00007f4b4938e929 [ 128.040752][ T3154] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 128.040763][ T3154] RBP: 00007f4b4a175090 R08: 0000000000000000 R09: 0000000000000000 [ 128.040774][ T3154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.040784][ T3154] R13: 0000000000000000 R14: 00007f4b495b5fa0 R15: 00007fffcadabcb8 [ 128.040798][ T3154] [ 128.276757][ T3159] netlink: 424 bytes leftover after parsing attributes in process `syz.0.1112'. [ 128.281931][ T36] audit: type=1400 audit(1750438975.472:11118): avc: denied { read open } for pid=3153 comm="syz.5.1110" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.484419][ T36] audit: type=1400 audit(1750438975.472:11119): avc: denied { ioctl } for pid=3153 comm="syz.5.1110" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.509823][ T36] audit: type=1400 audit(1750438975.519:11120): avc: denied { read write } for pid=3153 comm="syz.5.1110" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.534117][ T36] audit: type=1400 audit(1750438975.519:11121): avc: denied { read write open } for pid=3153 comm="syz.5.1110" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.560892][ T36] audit: type=1400 audit(1750438975.519:11122): avc: denied { ioctl } for pid=3153 comm="syz.5.1110" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.644778][ T36] audit: type=1400 audit(1750438975.650:11123): avc: denied { read write } for pid=1222 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.663005][ T3178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.678673][ T3179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:453 [ 128.689190][ T3179] bpf: Bad value for 'mode' [ 128.715265][ T3178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.990920][ T3194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.004414][ T3194] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 129.011183][ T3194] rust_binder: Error while translating object. [ 129.029636][ T3194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.043738][ T3194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:462 [ 129.643350][ T3237] FAULT_INJECTION: forcing a failure. [ 129.643350][ T3237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.700600][ T3237] CPU: 0 UID: 0 PID: 3237 Comm: syz.6.1147 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 129.700632][ T3237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.700643][ T3237] Call Trace: [ 129.700649][ T3237] [ 129.700656][ T3237] __dump_stack+0x21/0x30 [ 129.700680][ T3237] dump_stack_lvl+0x10c/0x190 [ 129.700699][ T3237] ? __cfi_dump_stack_lvl+0x10/0x10 [ 129.700720][ T3237] dump_stack+0x19/0x20 [ 129.700738][ T3237] should_fail_ex+0x3d9/0x530 [ 129.700757][ T3237] should_fail+0xf/0x20 [ 129.700774][ T3237] should_fail_usercopy+0x1e/0x30 [ 129.700793][ T3237] _copy_from_user+0x22/0xb0 [ 129.700814][ T3237] __se_sys_mount+0x182/0x480 [ 129.700835][ T3237] ? ksys_write+0x1ef/0x250 [ 129.700854][ T3237] ? __x64_sys_mount+0xf0/0xf0 [ 129.700874][ T3237] __x64_sys_mount+0xc3/0xf0 [ 129.700893][ T3237] x64_sys_call+0x2021/0x2ee0 [ 129.700913][ T3237] do_syscall_64+0x58/0xf0 [ 129.700935][ T3237] ? clear_bhb_loop+0x35/0x90 [ 129.700958][ T3237] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 129.700980][ T3237] RIP: 0033:0x7ff3f198e929 [ 129.700996][ T3237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.701009][ T3237] RSP: 002b:00007ff3f2748038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.701027][ T3237] RAX: ffffffffffffffda RBX: 00007ff3f1bb5fa0 RCX: 00007ff3f198e929 [ 129.701040][ T3237] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 129.701053][ T3237] RBP: 00007ff3f2748090 R08: 00002000000005c0 R09: 0000000000000000 [ 129.701065][ T3237] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 129.701075][ T3237] R13: 0000000000000000 R14: 00007ff3f1bb5fa0 R15: 00007fff38021db8 [ 129.701089][ T3237] [ 129.944104][ T590] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 130.104468][ T590] usb 6-1: Using ep0 maxpacket: 16 [ 130.120225][ T3255] netlink: 424 bytes leftover after parsing attributes in process `syz.7.1154'. [ 130.127452][ T590] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.142634][ T590] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.173118][ T590] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.185896][ T590] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.204411][ T590] usb 6-1: Product: syz [ 130.208587][ T590] usb 6-1: Manufacturer: syz [ 130.223313][ T590] usb 6-1: SerialNumber: syz [ 130.261723][ T3263] binder: Bad value for 'max' [ 130.596309][ T31] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 130.669275][ T590] usb 6-1: cannot find UAC_HEADER [ 130.679016][ T590] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 130.745543][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.792763][ T31] usb 7-1: config 2 has an invalid interface number: 129 but max is 1 [ 130.801685][ T31] usb 7-1: config 2 has an invalid interface number: 39 but max is 1 [ 130.809820][ T31] usb 7-1: config 2 has no interface number 0 [ 130.817109][ T31] usb 7-1: config 2 has no interface number 1 [ 130.823849][ T31] usb 7-1: config 2 interface 129 altsetting 241 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 130.835538][ T31] usb 7-1: config 2 interface 129 altsetting 241 has an invalid descriptor for endpoint zero, skipping [ 130.846684][ T31] usb 7-1: config 2 interface 129 altsetting 241 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 130.857905][ T31] usb 7-1: config 2 interface 129 altsetting 241 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 130.869113][ T31] usb 7-1: config 2 interface 129 altsetting 241 endpoint 0x84 has invalid maxpacket 1024, setting to 64 [ 130.880435][ T31] usb 7-1: config 2 interface 39 altsetting 127 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 130.893389][ T590] usb 6-1: USB disconnect, device number 30 [ 130.904755][ T31] usb 7-1: config 2 interface 39 altsetting 127 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 130.916416][ T31] usb 7-1: config 2 interface 39 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 130.927429][ T31] usb 7-1: config 2 interface 39 altsetting 127 has a duplicate endpoint with address 0xC, skipping [ 130.938256][ T31] usb 7-1: config 2 interface 39 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 130.949184][ T31] usb 7-1: config 2 interface 39 altsetting 127 has a duplicate endpoint with address 0xE, skipping [ 130.959985][ T31] usb 7-1: config 2 interface 39 altsetting 127 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 130.971055][ T31] usb 7-1: config 2 interface 39 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 130.981904][ T31] usb 7-1: config 2 interface 39 altsetting 127 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 130.993890][ T31] usb 7-1: config 2 interface 129 has no altsetting 0 [ 131.000666][ T31] usb 7-1: config 2 interface 39 has no altsetting 0 [ 131.010531][ T31] usb 7-1: New USB device found, idVendor=04e6, idProduct=000c, bcdDevice= 1.00 [ 131.019579][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.027579][ T31] usb 7-1: Product: syz [ 131.032509][ T31] usb 7-1: Manufacturer: syz [ 131.038508][ T31] usb 7-1: SerialNumber: syz [ 131.048197][ T3267] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 131.103400][ T3281] netlink: 424 bytes leftover after parsing attributes in process `syz.7.1164'. [ 131.198806][ T3287] netlink: 'syz.7.1167': attribute type 1 has an invalid length. [ 131.279899][ T31] usb-storage 7-1:2.129: USB Mass Storage device detected [ 131.310147][ T31] usb-storage 7-1:2.129: Quirks match for vid 04e6 pid 000c: 4 [ 131.369621][ T31] usb-storage 7-1:2.39: USB Mass Storage device detected [ 131.387667][ T31] usb-storage 7-1:2.39: Quirks match for vid 04e6 pid 000c: 4 [ 131.467213][ T31] usb 7-1: USB disconnect, device number 24 [ 131.576021][ T3306] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 131.627077][ T3309] netlink: 424 bytes leftover after parsing attributes in process `syz.5.1173'. [ 132.081709][ T3339] netlink: 424 bytes leftover after parsing attributes in process `syz.6.1186'. [ 132.146361][ T64] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 132.317399][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 132.342114][ T64] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.363030][ T64] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.389956][ T64] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.402956][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.424344][ T723] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 132.435055][ T64] usb 6-1: Product: syz [ 132.447952][ T64] usb 6-1: Manufacturer: syz [ 132.462828][ T64] usb 6-1: SerialNumber: syz [ 132.509405][ T3355] overlayfs: workdir and upperdir must be separate subtrees [ 132.613241][ T723] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 132.630653][ T723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.664508][ T723] usb 7-1: Product: syz [ 132.668706][ T723] usb 7-1: Manufacturer: syz [ 132.691566][ T723] usb 7-1: SerialNumber: syz [ 132.708463][ T723] usb 7-1: config 0 descriptor?? [ 132.731000][ T3364] netlink: 424 bytes leftover after parsing attributes in process `syz.7.1196'. [ 132.848894][ T3368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.870286][ T3368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.917193][ T64] usb 6-1: cannot find UAC_HEADER [ 132.926470][ T64] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 133.032018][ T1747] udevd[1747]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.132992][ T31] usb 6-1: USB disconnect, device number 31 [ 133.300209][ T36] kauditd_printk_skb: 892 callbacks suppressed [ 133.300226][ T36] audit: type=1400 audit(1750438980.467:11971): avc: denied { mounton } for pid=3379 comm="syz.7.1203" path="/223/bus" dev="tmpfs" ino=1248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 133.301872][ T3380] overlayfs: workdir and upperdir must be separate subtrees [ 133.351178][ T36] audit: type=1400 audit(1750438980.514:11972): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.380883][ T36] audit: type=1400 audit(1750438980.514:11973): avc: denied { read write open } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.406938][ T36] audit: type=1400 audit(1750438980.514:11974): avc: denied { ioctl } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.433445][ T36] audit: type=1400 audit(1750438980.542:11975): avc: denied { ioctl } for pid=3342 comm="syz.6.1187" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.464049][ T36] audit: type=1400 audit(1750438980.542:11976): avc: denied { ioctl } for pid=3342 comm="syz.6.1187" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.506024][ T36] audit: type=1400 audit(1750438980.561:11977): avc: denied { create } for pid=3381 comm="syz.7.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.527806][ T36] audit: type=1400 audit(1750438980.561:11978): avc: denied { bind } for pid=3381 comm="syz.7.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.573550][ T36] audit: type=1400 audit(1750438980.561:11979): avc: denied { write } for pid=3381 comm="syz.7.1204" name="netlink" dev="proc" ino=4026532557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 133.598970][ T36] audit: type=1400 audit(1750438980.561:11980): avc: denied { write } for pid=3381 comm="syz.7.1204" path="/proc/552/net/netlink" dev="proc" ino=4026532557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 133.812483][ T723] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 133.822939][ T723] asix 7-1:0.0: probe with driver asix failed with error -32 [ 133.846983][ T723] usb 7-1: USB disconnect, device number 25 [ 133.944431][ T3404] FAULT_INJECTION: forcing a failure. [ 133.944431][ T3404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.986620][ T3404] CPU: 0 UID: 0 PID: 3404 Comm: syz.7.1214 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 133.986652][ T3404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.986664][ T3404] Call Trace: [ 133.986671][ T3404] [ 133.986678][ T3404] __dump_stack+0x21/0x30 [ 133.986703][ T3404] dump_stack_lvl+0x10c/0x190 [ 133.986722][ T3404] ? __cfi_dump_stack_lvl+0x10/0x10 [ 133.986742][ T3404] ? __kasan_check_write+0x18/0x20 [ 133.986761][ T3404] ? proc_fail_nth_write+0x17e/0x210 [ 133.986778][ T3404] dump_stack+0x19/0x20 [ 133.986796][ T3404] should_fail_ex+0x3d9/0x530 [ 133.986815][ T3404] should_fail+0xf/0x20 [ 133.986832][ T3404] should_fail_usercopy+0x1e/0x30 [ 133.986851][ T3404] _copy_from_user+0x22/0xb0 [ 133.986873][ T3404] __sys_sendto+0x29e/0x6f0 [ 133.986895][ T3404] ? __cfi___sys_sendto+0x10/0x10 [ 133.986918][ T3404] ? __kasan_check_write+0x18/0x20 [ 133.986937][ T3404] ? __cfi_ksys_write+0x10/0x10 [ 133.986958][ T3404] __x64_sys_sendto+0xe9/0x100 [ 133.986980][ T3404] x64_sys_call+0x2c2c/0x2ee0 [ 133.987001][ T3404] do_syscall_64+0x58/0xf0 [ 133.987028][ T3404] ? clear_bhb_loop+0x35/0x90 [ 133.987052][ T3404] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 133.987075][ T3404] RIP: 0033:0x7f0322f8e929 [ 133.987090][ T3404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.987106][ T3404] RSP: 002b:00007f0323ec0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 133.987127][ T3404] RAX: ffffffffffffffda RBX: 00007f03231b5fa0 RCX: 00007f0322f8e929 [ 133.987141][ T3404] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 133.987153][ T3404] RBP: 00007f0323ec0090 R08: 0000200000000140 R09: 0000000000000014 [ 133.987167][ T3404] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 133.987178][ T3404] R13: 0000000000000000 R14: 00007f03231b5fa0 R15: 00007ffe786696c8 [ 133.987192][ T3404] [ 134.722797][ T31] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 134.929990][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.948393][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.959244][ T31] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 134.968308][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.980427][ T31] usb 8-1: config 0 descriptor?? [ 135.268019][ T723] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 135.428831][ T723] usb 6-1: Using ep0 maxpacket: 32 [ 135.431867][ T31] usbhid 8-1:0.0: can't add hid device: -71 [ 135.449299][ T723] usb 6-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 8 [ 135.454062][ T31] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 135.459837][ T3464] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3464 comm=syz.6.1239 [ 135.479844][ T723] usb 6-1: config 1 interface 0 has no altsetting 0 [ 135.488610][ T31] usb 8-1: USB disconnect, device number 18 [ 135.523160][ T723] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 135.553751][ T723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.567354][ T723] usb 6-1: Product: 䐊 [ 135.571539][ T723] usb 6-1: Manufacturer: ࡠ [ 135.586915][ T723] usb 6-1: SerialNumber: syz [ 135.603239][ T3445] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 135.783419][ T3476] fuseblk: Bad value for 'group_id' [ 135.790004][ T3476] fuseblk: Bad value for 'group_id' [ 135.845121][ T723] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 135.875817][ T723] usb 6-1: USB disconnect, device number 32 [ 135.905272][ T723] usblp0: removed [ 136.454685][ T31] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 136.615043][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 136.634103][ T31] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.655047][ T31] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.679409][ T31] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.688624][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.710443][ T31] usb 8-1: Product: syz [ 136.720272][ T31] usb 8-1: Manufacturer: syz [ 136.734663][ T31] usb 8-1: SerialNumber: syz [ 136.815499][ T3509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.826306][ T3509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.129130][ T3522] binder: Unknown parameter 'defcontext01777777777777777777777' [ 137.179050][ T31] usb 8-1: cannot find UAC_HEADER [ 137.197147][ T31] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 137.317450][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.394760][ T723] usb 8-1: USB disconnect, device number 19 [ 137.704212][ T3540] KVM: debugfs: duplicate directory 3540-4 [ 137.759466][ T3542] FAULT_INJECTION: forcing a failure. [ 137.759466][ T3542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.772830][ T3542] CPU: 1 UID: 0 PID: 3542 Comm: syz.5.1274 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 137.772861][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.772874][ T3542] Call Trace: [ 137.772889][ T3542] [ 137.772896][ T3542] __dump_stack+0x21/0x30 [ 137.772923][ T3542] dump_stack_lvl+0x10c/0x190 [ 137.772945][ T3542] ? __cfi_dump_stack_lvl+0x10/0x10 [ 137.772967][ T3542] dump_stack+0x19/0x20 [ 137.772983][ T3542] should_fail_ex+0x3d9/0x530 [ 137.773003][ T3542] should_fail+0xf/0x20 [ 137.773020][ T3542] should_fail_usercopy+0x1e/0x30 [ 137.773040][ T3542] _copy_from_user+0x22/0xb0 [ 137.773063][ T3542] memdup_user+0x81/0x180 [ 137.773082][ T3542] ? strndup_user+0x40/0xd0 [ 137.773101][ T3542] strndup_user+0x6c/0xd0 [ 137.773121][ T3542] __se_sys_mount+0x9f/0x480 [ 137.773142][ T3542] ? ksys_write+0x1ef/0x250 [ 137.773163][ T3542] ? __x64_sys_mount+0xf0/0xf0 [ 137.773184][ T3542] __x64_sys_mount+0xc3/0xf0 [ 137.773203][ T3542] x64_sys_call+0x2021/0x2ee0 [ 137.773225][ T3542] do_syscall_64+0x58/0xf0 [ 137.773246][ T3542] ? clear_bhb_loop+0x35/0x90 [ 137.773270][ T3542] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.773294][ T3542] RIP: 0033:0x7f4b4938e929 [ 137.773310][ T3542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.773326][ T3542] RSP: 002b:00007f4b4a175038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.773347][ T3542] RAX: ffffffffffffffda RBX: 00007f4b495b5fa0 RCX: 00007f4b4938e929 [ 137.773361][ T3542] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 137.773375][ T3542] RBP: 00007f4b4a175090 R08: 0000200000000180 R09: 0000000000000000 [ 137.773388][ T3542] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 137.773400][ T3542] R13: 0000000000000000 R14: 00007f4b495b5fa0 R15: 00007fffcadabcb8 [ 137.773416][ T3542] [ 138.484275][ T3565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.497964][ T3565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.655166][ T36] kauditd_printk_skb: 702 callbacks suppressed [ 138.655183][ T36] audit: type=1400 audit(1750438985.472:12683): avc: denied { read } for pid=3566 comm="syz.6.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.685528][ T3567] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.688261][ T3571] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.698670][ T3571] audit: audit_lost=33 audit_rate_limit=0 audit_backlog_limit=64 [ 138.699691][ T3567] audit: audit_lost=34 audit_rate_limit=0 audit_backlog_limit=64 [ 138.707604][ T36] audit: type=1400 audit(1750438985.481:12684): avc: denied { write } for pid=3566 comm="syz.6.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.716997][ T3567] audit: backlog limit exceeded [ 138.738695][ T1060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.739676][ T3567] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.748543][ T3571] audit: backlog limit exceeded [ 138.757100][ T3572] syzkaller0: entered allmulticast mode [ 138.806645][ T590] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 138.977717][ T590] usb 8-1: device descriptor read/64, error -71 [ 139.154029][ T3590] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.154396][ T3590] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.247182][ T590] usb 8-1: device descriptor read/64, error -71 [ 139.533587][ T590] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 139.693953][ T590] usb 8-1: device descriptor read/64, error -71 [ 139.950553][ T590] usb 8-1: device descriptor read/64, error -71 [ 140.079256][ T590] usb usb8-port1: attempt power cycle [ 140.352179][ T3631] rust_binder: Error while translating object. [ 140.352207][ T3631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 140.384776][ T3631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:517 [ 140.452969][ T590] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 140.508516][ T590] usb 8-1: device descriptor read/8, error -71 [ 140.656089][ T590] usb 8-1: device descriptor read/8, error -71 [ 140.813660][ T3652] syz.5.1313 uses obsolete (PF_INET,SOCK_PACKET) [ 140.919769][ T3657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 140.919801][ T3657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:574 [ 140.934075][ T590] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 140.955493][ T3657] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 140.955515][ T3657] rust_binder: Read failure Err(EFAULT) in pid:574 [ 140.977556][ T3662] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.995391][ T3661] rust_binder: Write failure EINVAL in pid:930 [ 141.029128][ T590] usb 8-1: device descriptor read/8, error -71 [ 141.039244][ T3662] rust_binder: Error in use_page_slow: ESRCH [ 141.039262][ T3662] rust_binder: use_range failure ESRCH [ 141.051389][ T3662] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 141.077411][ T3662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 141.092182][ T3662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:930 [ 141.162780][ T3670] netlink: 424 bytes leftover after parsing attributes in process `syz.0.1320'. [ 141.192895][ T590] usb 8-1: device descriptor read/8, error -71 [ 141.318443][ T590] usb usb8-port1: unable to enumerate USB device [ 141.377448][ T3683] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 141.819291][ T3698] input: syz1 as /devices/virtual/input/input17 [ 141.920869][ T3703] netlink: 424 bytes leftover after parsing attributes in process `syz.7.1332'. [ 142.388244][ T3725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.420713][ T3725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.831086][ T3746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.884796][ T3746] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 142.895042][ T3746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 142.911835][ T3746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:595 [ 142.933521][ T3748] input: syz0 as /devices/virtual/input/input18 [ 143.076897][ T3761] 9pnet: p9_errstr2errno: server reported unknown error [ 143.085653][ T3756] binder: Bad value for 'defcontext' [ 143.212069][ T3767] SELinux: Context system_u: is not valid (left unmapped). [ 143.472045][ T3782] usb usb5: usbfs: process 3782 (syz.7.1364) did not claim interface 0 before use [ 143.561735][ T3786] FAULT_INJECTION: forcing a failure. [ 143.561735][ T3786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.593505][ T3786] CPU: 0 UID: 0 PID: 3786 Comm: syz.5.1367 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 143.593537][ T3786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.593548][ T3786] Call Trace: [ 143.593555][ T3786] [ 143.593562][ T3786] __dump_stack+0x21/0x30 [ 143.593588][ T3786] dump_stack_lvl+0x10c/0x190 [ 143.593607][ T3786] ? __cfi_dump_stack_lvl+0x10/0x10 [ 143.593627][ T3786] dump_stack+0x19/0x20 [ 143.593645][ T3786] should_fail_ex+0x3d9/0x530 [ 143.593663][ T3786] should_fail+0xf/0x20 [ 143.593680][ T3786] should_fail_usercopy+0x1e/0x30 [ 143.593699][ T3786] strncpy_from_user+0x28/0x270 [ 143.593718][ T3786] path_setxattr+0xf3/0x560 [ 143.593739][ T3786] ? simple_xattrs_free+0x180/0x180 [ 143.593763][ T3786] ? __cfi_ksys_write+0x10/0x10 [ 143.593782][ T3786] __x64_sys_setxattr+0xc9/0xe0 [ 143.593798][ T3786] x64_sys_call+0x2d94/0x2ee0 [ 143.593817][ T3786] do_syscall_64+0x58/0xf0 [ 143.593836][ T3786] ? clear_bhb_loop+0x35/0x90 [ 143.593857][ T3786] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.593879][ T3786] RIP: 0033:0x7f4b4938e929 [ 143.593894][ T3786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.593908][ T3786] RSP: 002b:00007f4b4a175038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 143.593928][ T3786] RAX: ffffffffffffffda RBX: 00007f4b495b5fa0 RCX: 00007f4b4938e929 [ 143.593941][ T3786] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000480 [ 143.593954][ T3786] RBP: 00007f4b4a175090 R08: 0000000000000000 R09: 0000000000000000 [ 143.593966][ T3786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.593977][ T3786] R13: 0000000000000000 R14: 00007f4b495b5fa0 R15: 00007fffcadabcb8 [ 143.593992][ T3786] [ 143.704465][ T3791] rust_binder: Write failure EFAULT in pid:607 [ 144.007145][ T36] kauditd_printk_skb: 1711 callbacks suppressed [ 144.007163][ T36] audit: type=1400 audit(1750438990.486:14359): avc: denied { read write } for pid=3810 comm="syz.7.1376" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.027863][ T3811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.095713][ T36] audit: type=1400 audit(1750438990.486:14360): avc: denied { read write open } for pid=3810 comm="syz.7.1376" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.166536][ T36] audit: type=1400 audit(1750438990.486:14361): avc: denied { create } for pid=3810 comm="syz.7.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 144.225777][ T36] audit: type=1400 audit(1750438990.486:14362): avc: denied { create } for pid=3810 comm="syz.7.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.304949][ T36] audit: type=1400 audit(1750438990.495:14363): avc: denied { write } for pid=3810 comm="syz.7.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.332694][ T3823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.342913][ T3823] audit: audit_lost=48 audit_rate_limit=0 audit_backlog_limit=64 [ 144.354883][ T36] audit: type=1400 audit(1750438990.495:14364): avc: denied { read } for pid=3810 comm="syz.7.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.360066][ T1060] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.375261][ T3823] audit: backlog limit exceeded [ 144.827676][ T3847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.837854][ T3847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.890971][ T3847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.899550][ T3847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.195905][ T3870] FAULT_INJECTION: forcing a failure. [ 145.195905][ T3870] name failslab, interval 1, probability 0, space 0, times 0 [ 145.208609][ T3870] CPU: 0 UID: 0 PID: 3870 Comm: syz.6.1396 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 145.208635][ T3870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.208645][ T3870] Call Trace: [ 145.208651][ T3870] [ 145.208658][ T3870] __dump_stack+0x21/0x30 [ 145.208678][ T3870] dump_stack_lvl+0x10c/0x190 [ 145.208695][ T3870] ? __cfi_dump_stack_lvl+0x10/0x10 [ 145.208713][ T3870] ? pointer+0xdd0/0xdd0 [ 145.208730][ T3870] dump_stack+0x19/0x20 [ 145.208746][ T3870] should_fail_ex+0x3d9/0x530 [ 145.208762][ T3870] should_failslab+0xac/0x100 [ 145.208782][ T3870] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 145.208800][ T3870] ? sidtab_sid2str_get+0x139/0x370 [ 145.208819][ T3870] kmemdup_noprof+0x31/0x80 [ 145.208835][ T3870] sidtab_sid2str_get+0x139/0x370 [ 145.208854][ T3870] security_sid_to_context_core+0x30d/0x5d0 [ 145.208873][ T3870] security_sid_to_context+0x2e/0x50 [ 145.208889][ T3870] avc_audit_post_callback+0x107/0x780 [ 145.208905][ T3870] ? audit_log_format+0xdb/0x140 [ 145.208920][ T3870] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 145.208935][ T3870] ? __cfi_audit_log_format+0x10/0x10 [ 145.208950][ T3870] ? audit_log_untrustedstring+0xea/0x100 [ 145.208964][ T3870] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 145.208980][ T3870] common_lsm_audit+0x147a/0x1860 [ 145.208994][ T3870] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 145.209010][ T3870] ? __kasan_slab_free+0x6a/0x80 [ 145.209028][ T3870] ? __cfi_common_lsm_audit+0x10/0x10 [ 145.209042][ T3870] ? avc_node_kill+0x29e/0x2f0 [ 145.209056][ T3870] ? __kasan_check_write+0x18/0x20 [ 145.209072][ T3870] ? avc_node_kill+0x2b6/0x2f0 [ 145.209088][ T3870] slow_avc_audit+0x18d/0x1f0 [ 145.209102][ T3870] ? __cfi_slow_avc_audit+0x10/0x10 [ 145.209117][ T3870] ? avc_has_perm_noaudit+0x2b9/0x360 [ 145.209134][ T3870] avc_has_perm+0x1cd/0x220 [ 145.209150][ T3870] ? __cfi_avc_has_perm+0x10/0x10 [ 145.209168][ T3870] ? __asan_memcpy+0x5a/0x80 [ 145.209186][ T3870] selinux_mount+0x39a/0x4e0 [ 145.209204][ T3870] ? __cfi_selinux_mount+0x10/0x10 [ 145.209223][ T3870] security_sb_mount+0x72/0x100 [ 145.209240][ T3870] path_mount+0xca/0x1050 [ 145.209264][ T3870] ? putname+0x113/0x150 [ 145.209284][ T3870] __se_sys_mount+0x2bd/0x480 [ 145.209302][ T3870] ? ksys_write+0x1ef/0x250 [ 145.209320][ T3870] ? __x64_sys_mount+0xf0/0xf0 [ 145.209339][ T3870] __x64_sys_mount+0xc3/0xf0 [ 145.209359][ T3870] x64_sys_call+0x2021/0x2ee0 [ 145.209380][ T3870] do_syscall_64+0x58/0xf0 [ 145.209400][ T3870] ? clear_bhb_loop+0x35/0x90 [ 145.209424][ T3870] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 145.209446][ T3870] RIP: 0033:0x7ff3f198e929 [ 145.209461][ T3870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.209476][ T3870] RSP: 002b:00007ff3f2748038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 145.209496][ T3870] RAX: ffffffffffffffda RBX: 00007ff3f1bb5fa0 RCX: 00007ff3f198e929 [ 145.209509][ T3870] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 145.209522][ T3870] RBP: 00007ff3f2748090 R08: 00002000000001c0 R09: 0000000000000000 [ 145.209535][ T3870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.209546][ T3870] R13: 0000000000000000 R14: 00007ff3f1bb5fa0 R15: 00007fff38021db8 [ 145.209561][ T3870] [ 145.210227][ T3870] overlayfs: missing 'workdir' [ 145.660440][ T3876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.706014][ T3876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.934234][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.004166][ T3902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3902 comm=syz.7.1407 [ 146.151064][ T10] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 146.313339][ T10] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 146.322406][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.331544][ T10] usb 6-1: config 0 descriptor?? [ 146.488784][ T3907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.497297][ T3907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.553936][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 147.077093][ T3915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.089655][ T3915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.632954][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 147.649190][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 147.660405][ T10] asix 6-1:0.0: probe with driver asix failed with error -71 [ 147.671120][ T10] usb 6-1: USB disconnect, device number 33 [ 147.898729][ T3926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1418'. [ 147.928419][ T3926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.928448][ T3926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:605 [ 148.055936][ T3932] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3932 comm=syz.0.1420 [ 148.237484][ T3941] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1424'. [ 148.457972][ T3957] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3957 comm=syz.7.1430 [ 148.520065][ T3959] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.531188][ T3959] rust_binder: Write failure EINVAL in pid:652 [ 148.994835][ T3978] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 149.031782][ T3978] overlayfs: missing 'lowerdir' [ 149.133105][ T3986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.264286][ T3992] SELinux: policydb version -845211227 does not match my version range 15-33 [ 149.273466][ T3992] SELinux: failed to load policy [ 149.363196][ T36] kauditd_printk_skb: 748 callbacks suppressed [ 149.363212][ T36] audit: type=1400 audit(1750438995.499:15105): avc: denied { create } for pid=3999 comm="syz.5.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.390450][ T36] audit: type=1400 audit(1750438995.499:15106): avc: denied { write } for pid=3999 comm="syz.5.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.421014][ T36] audit: type=1400 audit(1750438995.537:15107): avc: denied { read write } for pid=1060 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.490903][ T36] audit: type=1400 audit(1750438995.537:15108): avc: denied { read write open } for pid=1060 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.509435][ T4004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.525833][ T36] audit: type=1400 audit(1750438995.537:15109): avc: denied { ioctl } for pid=1060 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.554520][ T31] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 149.566882][ T36] audit: type=1400 audit(1750438995.546:15110): avc: denied { ioctl } for pid=3991 comm="syz.6.1446" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.604638][ T4008] random: crng reseeded on system resumption [ 149.630597][ T4010] rust_binder: Write failure EFAULT in pid:1018 [ 149.634838][ T36] audit: type=1400 audit(1750438995.574:15111): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.669869][ T36] audit: type=1400 audit(1750438995.574:15112): avc: denied { read write open } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.695527][ T36] audit: type=1400 audit(1750438995.574:15113): avc: denied { ioctl } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.740797][ T36] audit: type=1400 audit(1750438995.593:15114): avc: denied { write } for pid=4001 comm="syz.5.1449" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 149.763731][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 149.779131][ T31] usb 7-1: config 1 interface 0 altsetting 19 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 149.805758][ T31] usb 7-1: config 1 interface 0 altsetting 19 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.836982][ T31] usb 7-1: config 1 interface 0 has no altsetting 0 [ 149.851370][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.852083][ T4014] FAULT_INJECTION: forcing a failure. [ 149.852083][ T4014] name failslab, interval 1, probability 0, space 0, times 0 [ 149.865932][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.883425][ T31] usb 7-1: Product: syz [ 149.894101][ T4014] CPU: 0 UID: 0 PID: 4014 Comm: syz.7.1453 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 149.894129][ T4014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.894140][ T4014] Call Trace: [ 149.894146][ T4014] [ 149.894153][ T4014] __dump_stack+0x21/0x30 [ 149.894183][ T4014] dump_stack_lvl+0x10c/0x190 [ 149.894202][ T4014] ? __cfi_dump_stack_lvl+0x10/0x10 [ 149.894224][ T4014] dump_stack+0x19/0x20 [ 149.894241][ T4014] should_fail_ex+0x3d9/0x530 [ 149.894261][ T4014] should_failslab+0xac/0x100 [ 149.894283][ T4014] __kmalloc_noprof+0x69/0x450 [ 149.894302][ T4014] ? fuse_do_ioctl+0x235/0x1ed0 [ 149.894321][ T4014] fuse_do_ioctl+0x235/0x1ed0 [ 149.894341][ T4014] ? __cfi_fuse_do_ioctl+0x10/0x10 [ 149.894359][ T4014] ? ioctl_has_perm+0x384/0x4d0 [ 149.894382][ T4014] ? has_cap_mac_admin+0xd0/0xd0 [ 149.894405][ T4014] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 149.894423][ T4014] ? selinux_file_ioctl+0x6e0/0x1360 [ 149.894446][ T4014] ? vfs_write+0x8ba/0xe80 [ 149.894466][ T4014] ? __cfi_mutex_unlock+0x10/0x10 [ 149.894483][ T4014] ? __fget_files+0x2c5/0x340 [ 149.894505][ T4014] fuse_ioctl_common+0x17d/0x1a0 [ 149.894524][ T4014] fuse_dir_ioctl+0x109/0x140 [ 149.894542][ T4014] ? __cfi_fuse_dir_ioctl+0x10/0x10 [ 149.894559][ T4014] __se_sys_ioctl+0x132/0x1b0 [ 149.894581][ T4014] __x64_sys_ioctl+0x7f/0xa0 [ 149.894602][ T4014] x64_sys_call+0x1878/0x2ee0 [ 149.894623][ T4014] do_syscall_64+0x58/0xf0 [ 149.894643][ T4014] ? clear_bhb_loop+0x35/0x90 [ 149.894667][ T4014] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 149.894690][ T4014] RIP: 0033:0x7f0322f8e929 [ 149.894704][ T4014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.894718][ T4014] RSP: 002b:00007f0323ec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.894737][ T4014] RAX: ffffffffffffffda RBX: 00007f03231b5fa0 RCX: 00007f0322f8e929 [ 149.894750][ T4014] RDX: 0000000000000000 RSI: 0000000000007704 RDI: 0000000000000004 [ 149.894762][ T4014] RBP: 00007f0323ec0090 R08: 0000000000000000 R09: 0000000000000000 [ 149.894774][ T4014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.894785][ T4014] R13: 0000000000000000 R14: 00007f03231b5fa0 R15: 00007ffe786696c8 [ 149.894800][ T4014] [ 149.901005][ T31] usb 7-1: Manufacturer: syz [ 150.063107][ T4021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.080787][ T31] usb 7-1: SerialNumber: syz [ 150.105144][ T4021] rust_binder: Error while translating object. [ 150.117107][ T3992] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 150.123469][ T4021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.181450][ T4021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:651 [ 150.270943][ T4027] overlayfs: failed to resolve './file1/file0': -2 [ 150.419927][ T31] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 150.440657][ T31] usb 7-1: USB disconnect, device number 26 [ 151.017548][ T4058] cgroup: No subsys list or none specified [ 151.467217][ T4083] rust_binder: Read failure Err(EAGAIN) in pid:674 [ 151.721025][ T4095] usb usb8: usbfs: process 4095 (syz.5.1486) did not claim interface 0 before use [ 151.945370][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 152.004300][ T4103] binder: Unknown parameter '' [ 152.116432][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 152.126095][ T10] usb 7-1: too many configurations: 236, using maximum allowed: 8 [ 152.139074][ T10] usb 7-1: config 0 has no interfaces? [ 152.150071][ T10] usb 7-1: config 0 has no interfaces? [ 152.169119][ T10] usb 7-1: config 0 has no interfaces? [ 152.192894][ T10] usb 7-1: config 0 has no interfaces? [ 152.230269][ T10] usb 7-1: config 0 has no interfaces? [ 152.247155][ T10] usb 7-1: config 0 has no interfaces? [ 152.256637][ T10] usb 7-1: config 0 has no interfaces? [ 152.282129][ T10] usb 7-1: config 0 has no interfaces? [ 152.308882][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 152.334282][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 152.361406][ T10] usb 7-1: Product: syz [ 152.369574][ T10] usb 7-1: Manufacturer: syz [ 152.377253][ T10] usb 7-1: SerialNumber: syz [ 152.389168][ T10] usb 7-1: config 0 descriptor?? [ 152.670315][ T4122] binder: Unknown parameter 'processor : 0 [ 152.670315][ T4122] vendor_id : GenuineIntel [ 152.670315][ T4122] cpu family : 6 [ 152.670315][ T4122] model : 79 [ 152.670315][ T4122] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 152.670315][ T4122] stepping : 0 [ 152.670315][ T4122] microcode : 0xffffffff [ 152.670315][ T4122] cpu MHz : 2200.116 [ 152.670315][ T4122] cache size : 56320 KB [ 152.670315][ T4122] physical id : 0 [ 152.670315][ T4122] siblings : 2 [ 152.670315][ T4122] core id : 0 [ 152.670315][ T4122] cpu cores : 1 [ 152.670315][ T4122] apicid : 0 [ 152.670315][ T4122] initial apicid : 0 [ 152.670315][ T4122] fpu : yes [ 152.670315][ T4122] fpu_exception : yes [ 152.670315][ T4122] cpuid level : 13 [ 152.670315][ T4122] wp : yes [ 152.670315][ T4122] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 152.670315][ T4122] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 152.675186][ T4121] binder: Unknown parameter 'fscontext?}' [ 152.944111][ T4129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.069561][ T4134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.110604][ T4134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.145425][ T4141] bpf: Bad value for 'uid' [ 153.659991][ T4156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.668482][ T4156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.773473][ T723] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 153.933961][ T723] usb 6-1: Invalid ep0 maxpacket: 32 [ 153.964143][ T4161] rust_binder: Write failure EFAULT in pid:718 [ 154.083549][ T723] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 154.254547][ T723] usb 6-1: Invalid ep0 maxpacket: 32 [ 154.260185][ T723] usb usb6-port1: attempt power cycle [ 154.334594][ T4175] FAULT_INJECTION: forcing a failure. [ 154.334594][ T4175] name failslab, interval 1, probability 0, space 0, times 0 [ 154.347223][ T4175] CPU: 0 UID: 0 PID: 4175 Comm: syz.0.1520 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 154.347249][ T4175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.347260][ T4175] Call Trace: [ 154.347266][ T4175] [ 154.347272][ T4175] __dump_stack+0x21/0x30 [ 154.347296][ T4175] dump_stack_lvl+0x10c/0x190 [ 154.347314][ T4175] ? __cfi_dump_stack_lvl+0x10/0x10 [ 154.347331][ T4175] ? is_bpf_text_address+0x17b/0x1a0 [ 154.347353][ T4175] ? kernel_text_address+0xa9/0xe0 [ 154.347364][ T4175] dump_stack+0x19/0x20 [ 154.347374][ T4175] should_fail_ex+0x3d9/0x530 [ 154.347386][ T4175] should_failslab+0xac/0x100 [ 154.347399][ T4175] kmem_cache_alloc_noprof+0x42/0x3a0 [ 154.347411][ T4175] ? skb_clone+0x229/0x460 [ 154.347424][ T4175] ? skb_csum_hwoffload_help+0x12f/0x940 [ 154.347435][ T4175] skb_clone+0x229/0x460 [ 154.347448][ T4175] dev_queue_xmit_nit+0x1ad/0xae0 [ 154.347458][ T4175] ? netif_skb_features+0x89f/0xbf0 [ 154.347469][ T4175] dev_hard_start_xmit+0x187/0x770 [ 154.347481][ T4175] __dev_queue_xmit+0x19cc/0x3790 [ 154.347493][ T4175] ? __dev_queue_xmit+0x24c/0x3790 [ 154.347505][ T4175] ? kasan_save_alloc_info+0x40/0x50 [ 154.347515][ T4175] ? __kasan_slab_alloc+0x73/0x90 [ 154.347527][ T4175] ? __cfi___dev_queue_xmit+0x10/0x10 [ 154.347539][ T4175] ? __asan_memset+0x39/0x50 [ 154.347549][ T4175] ? ip6t_do_table+0x1305/0x14d0 [ 154.347561][ T4175] ? __build_skb_around+0x2a4/0x5a0 [ 154.347574][ T4175] ? __kasan_check_read+0x15/0x20 [ 154.347584][ T4175] ? selinux_ip_postroute+0x250/0xf40 [ 154.347598][ T4175] ? __asan_memcpy+0x5a/0x80 [ 154.347608][ T4175] ip6_finish_output2+0x116e/0x1990 [ 154.347620][ T4175] ? __cfi_ip6_finish_output2+0x10/0x10 [ 154.347631][ T4175] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 154.347644][ T4175] ip6_finish_output+0x54f/0xb10 [ 154.347653][ T4175] ip6_output+0x1d5/0x3c0 [ 154.347662][ T4175] ? __cfi_ip6_output+0x10/0x10 [ 154.347671][ T4175] ? __cfi_ip6_finish_output+0x10/0x10 [ 154.347680][ T4175] ? __cfi_ip6t_do_table+0x10/0x10 [ 154.347691][ T4175] ? __cfi_ip6_output+0x10/0x10 [ 154.347700][ T4175] ip6_local_out+0x22f/0x440 [ 154.347710][ T4175] ? __cfi_ip6_local_out+0x10/0x10 [ 154.347720][ T4175] ? __cfi_dst_output+0x10/0x10 [ 154.347735][ T4175] ip6_send_skb+0xba/0x1d0 [ 154.347752][ T4175] udp_v6_send_skb+0xbc3/0x1740 [ 154.347763][ T4175] udpv6_sendmsg+0x1c8f/0x26c0 [ 154.347779][ T4175] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 154.347793][ T4175] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 154.347808][ T4175] ? avc_has_perm+0x144/0x220 [ 154.347826][ T4175] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 154.347846][ T4175] ? do_user_addr_fault+0xbc4/0x1200 [ 154.347864][ T4175] ? inet_send_prepare+0x64/0x4f0 [ 154.347873][ T4175] ? __cfi_udpv6_sendmsg+0x10/0x10 [ 154.347882][ T4175] inet6_sendmsg+0xef/0x120 [ 154.347896][ T4175] ____sys_sendmsg+0x5db/0xa70 [ 154.347910][ T4175] ? __sys_sendmsg_sock+0x50/0x50 [ 154.347924][ T4175] ? import_iovec+0x81/0xb0 [ 154.347937][ T4175] ___sys_sendmsg+0x220/0x2a0 [ 154.347951][ T4175] ? __sys_sendmsg+0x280/0x280 [ 154.347964][ T4175] ? kstrtouint+0x78/0xf0 [ 154.347976][ T4175] __sys_sendmmsg+0x271/0x470 [ 154.347985][ T4175] ? __cfi___sys_sendmmsg+0x10/0x10 [ 154.347996][ T4175] ? __cfi_ksys_write+0x10/0x10 [ 154.348007][ T4175] __x64_sys_sendmmsg+0xa4/0xc0 [ 154.348016][ T4175] x64_sys_call+0xfec/0x2ee0 [ 154.348031][ T4175] do_syscall_64+0x58/0xf0 [ 154.348043][ T4175] ? clear_bhb_loop+0x35/0x90 [ 154.348056][ T4175] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 154.348069][ T4175] RIP: 0033:0x7f2a9398e929 [ 154.348079][ T4175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.348087][ T4175] RSP: 002b:00007f2a947b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 154.348100][ T4175] RAX: ffffffffffffffda RBX: 00007f2a93bb5fa0 RCX: 00007f2a9398e929 [ 154.348107][ T4175] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 0000000000000004 [ 154.348114][ T4175] RBP: 00007f2a947b1090 R08: 0000000000000000 R09: 0000000000000000 [ 154.348121][ T4175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.348127][ T4175] R13: 0000000000000000 R14: 00007f2a93bb5fa0 R15: 00007ffe410abdb8 [ 154.348135][ T4175] [ 154.765808][ T36] kauditd_printk_skb: 831 callbacks suppressed [ 154.765823][ T36] audit: type=1400 audit(1750439000.541:15895): avc: denied { ioctl } for pid=4151 comm="syz.5.1509" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.822114][ T723] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 154.836809][ T36] audit: type=1400 audit(1750439000.597:15896): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.843155][ T723] usb 6-1: Invalid ep0 maxpacket: 32 [ 154.881612][ T36] audit: type=1400 audit(1750439000.597:15897): avc: denied { read write open } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.906728][ T36] audit: type=1400 audit(1750439000.597:15898): avc: denied { ioctl } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.932830][ T305] usb 7-1: USB disconnect, device number 27 [ 154.951358][ T36] audit: type=1400 audit(1750439000.607:15899): avc: denied { read write } for pid=4176 comm="syz.7.1521" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.014198][ T36] audit: type=1400 audit(1750439000.607:15900): avc: denied { read write open } for pid=4176 comm="syz.7.1521" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.033559][ T4181] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 155.038637][ T4181] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 155.046591][ T36] audit: type=1400 audit(1750439000.607:15901): avc: denied { ioctl } for pid=4176 comm="syz.7.1521" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.047222][ T4181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1057 [ 155.077740][ T36] audit: type=1400 audit(1750439000.607:15902): avc: denied { ioctl } for pid=4176 comm="syz.7.1521" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.115527][ T723] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 155.123107][ T31] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 155.133031][ T36] audit: type=1400 audit(1750439000.607:15903): avc: denied { ioctl } for pid=4176 comm="syz.7.1521" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.196400][ T4187] 8021q: VLANs not supported on lo [ 155.201313][ T723] usb 6-1: Invalid ep0 maxpacket: 32 [ 155.216765][ T723] usb usb6-port1: unable to enumerate USB device [ 155.224380][ T36] audit: type=1400 audit(1750439000.607:15904): avc: denied { ioctl } for pid=4176 comm="syz.7.1521" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.224409][ T4187] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 155.281791][ T723] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 155.306296][ T31] usb 8-1: unable to get BOS descriptor or descriptor too short [ 155.306405][ T723] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.324490][ T31] usb 8-1: not running at top speed; connect to a high speed hub [ 155.337554][ T31] usb 8-1: config 1 interface 0 altsetting 166 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.350562][ T31] usb 8-1: config 1 interface 0 has no altsetting 0 [ 155.378492][ T31] usb 8-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40 [ 155.387553][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.388189][ T4192] kvm: user requested TSC rate below hardware speed [ 155.419810][ T31] usb 8-1: Product: syz [ 155.423980][ T31] usb 8-1: Manufacturer: syz [ 155.428570][ T31] usb 8-1: SerialNumber: syz [ 155.612909][ T4198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.621530][ T4198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.677199][ T31] usbhid 8-1:1.0: can't add hid device: -71 [ 155.683168][ T31] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 155.707272][ T31] usb 8-1: USB disconnect, device number 24 [ 156.050565][ T723] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 156.214697][ T723] usb 7-1: Using ep0 maxpacket: 16 [ 156.215712][ T4208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.230488][ T723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.230523][ T4208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.266329][ T723] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.279868][ T723] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.285914][ T4208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.297598][ T4208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.302326][ T723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.326785][ T723] usb 7-1: config 0 descriptor?? [ 156.392801][ T4214] SELinux: failed to load policy [ 156.497985][ T4219] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 156.498033][ T4219] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 156.517679][ T4219] rust_binder: Read failure Err(EFAULT) in pid:738 [ 156.767198][ T723] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 156.779257][ T723] microsoft 0003:045E:07DA.0008: bogus close delimiter [ 156.786174][ T723] microsoft 0003:045E:07DA.0008: item 0 0 2 10 parsing failed [ 156.795017][ T723] microsoft 0003:045E:07DA.0008: parse failed [ 156.801568][ T723] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 156.993467][ T723] usb 7-1: USB disconnect, device number 28 [ 157.141032][ T31] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 157.304453][ T31] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 157.313652][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.323412][ T31] usb 6-1: config 0 descriptor?? [ 157.857297][ T64] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 158.017634][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 158.024695][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.035662][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.048479][ T64] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 158.057674][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.066918][ T64] usb 7-1: config 0 descriptor?? [ 158.507103][ T64] usbhid 7-1:0.0: can't add hid device: -71 [ 158.513134][ T64] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 158.522808][ T64] usb 7-1: USB disconnect, device number 29 [ 159.502313][ T31] usb 6-1: Cannot set autoneg [ 159.507092][ T31] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 159.525091][ T31] usb 6-1: USB disconnect, device number 38 [ 159.677486][ T4259] SELinux: failed to load policy [ 160.125570][ T36] kauditd_printk_skb: 602 callbacks suppressed [ 160.125591][ T36] audit: type=1400 audit(1750439005.564:16507): avc: denied { create } for pid=4270 comm="syz.7.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.171283][ T4275] FAULT_INJECTION: forcing a failure. [ 160.171283][ T4275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.184461][ T36] audit: type=1400 audit(1750439005.564:16508): avc: denied { setopt } for pid=4270 comm="syz.7.1560" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.218964][ T4275] CPU: 1 UID: 0 PID: 4275 Comm: syz.5.1562 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 160.218996][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.219007][ T4275] Call Trace: [ 160.219014][ T4275] [ 160.219022][ T4275] __dump_stack+0x21/0x30 [ 160.219046][ T4275] dump_stack_lvl+0x10c/0x190 [ 160.219063][ T4275] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.219081][ T4275] ? do_vfs_ioctl+0xeda/0x1e30 [ 160.219102][ T4275] dump_stack+0x19/0x20 [ 160.219120][ T4275] should_fail_ex+0x3d9/0x530 [ 160.219138][ T4275] should_fail+0xf/0x20 [ 160.219155][ T4275] should_fail_usercopy+0x1e/0x30 [ 160.219177][ T4275] _copy_from_user+0x22/0xb0 [ 160.219200][ T4275] kvm_vm_ioctl+0x757/0xb80 [ 160.219219][ T4275] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 160.219238][ T4275] ? ioctl_has_perm+0x1aa/0x4d0 [ 160.219261][ T4275] ? __asan_memcpy+0x5a/0x80 [ 160.219280][ T4275] ? ioctl_has_perm+0x3e0/0x4d0 [ 160.219301][ T4275] ? has_cap_mac_admin+0xd0/0xd0 [ 160.219324][ T4275] ? proc_fail_nth_write+0x17e/0x210 [ 160.219341][ T4275] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 160.219358][ T4275] ? selinux_file_ioctl+0x6e0/0x1360 [ 160.219380][ T4275] ? vfs_write+0x8ba/0xe80 [ 160.219399][ T4275] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 160.219421][ T4275] ? __cfi_vfs_write+0x10/0x10 [ 160.219439][ T4275] ? __kasan_slab_free+0x6a/0x80 [ 160.219460][ T4275] ? kmem_cache_free+0x1c1/0x4c0 [ 160.219479][ T4275] ? putname+0x113/0x150 [ 160.219499][ T4275] ? putname+0x113/0x150 [ 160.219519][ T4275] ? __kasan_check_read+0x15/0x20 [ 160.219538][ T4275] ? ksys_write+0x1de/0x250 [ 160.219556][ T4275] ? bpf_lsm_file_ioctl+0xd/0x20 [ 160.219572][ T4275] ? security_file_ioctl+0x34/0xd0 [ 160.219592][ T4275] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 160.219609][ T4275] __se_sys_ioctl+0x132/0x1b0 [ 160.219628][ T4275] __x64_sys_ioctl+0x7f/0xa0 [ 160.219647][ T4275] x64_sys_call+0x1878/0x2ee0 [ 160.219668][ T4275] do_syscall_64+0x58/0xf0 [ 160.219688][ T4275] ? clear_bhb_loop+0x35/0x90 [ 160.219718][ T4275] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 160.219741][ T4275] RIP: 0033:0x7f4b4938e929 [ 160.219757][ T4275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.219772][ T4275] RSP: 002b:00007f4b4a175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.219792][ T4275] RAX: ffffffffffffffda RBX: 00007f4b495b5fa0 RCX: 00007f4b4938e929 [ 160.219806][ T4275] RDX: 0000200000000080 RSI: 000000004020ae76 RDI: 0000000000000004 [ 160.219819][ T4275] RBP: 00007f4b4a175090 R08: 0000000000000000 R09: 0000000000000000 [ 160.219831][ T4275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.219843][ T4275] R13: 0000000000000000 R14: 00007f4b495b5fa0 R15: 00007fffcadabcb8 [ 160.219858][ T4275] [ 160.337560][ T36] audit: type=1400 audit(1750439005.583:16509): avc: denied { unlink } for pid=4272 comm="syz.6.1561" name="#45" dev="tmpfs" ino=1481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.572254][ T36] audit: type=1400 audit(1750439005.592:16510): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.654792][ T36] audit: type=1400 audit(1750439005.592:16512): avc: denied { mount } for pid=4272 comm="syz.6.1561" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 160.702891][ T36] audit: type=1400 audit(1750439005.592:16511): avc: denied { read write open } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.816197][ T36] audit: type=1400 audit(1750439005.602:16513): avc: denied { ioctl } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.908417][ T36] audit: type=1400 audit(1750439005.770:16514): avc: denied { read write } for pid=4277 comm="syz.7.1563" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.933444][ T36] audit: type=1400 audit(1750439005.770:16515): avc: denied { read write open } for pid=4277 comm="syz.7.1563" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.957836][ T36] audit: type=1400 audit(1750439005.770:16516): avc: denied { ioctl } for pid=4277 comm="syz.7.1563" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.064494][ T31] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 161.245528][ T31] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 161.256894][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.264897][ T31] usb 6-1: Product: syz [ 161.278271][ T31] usb 6-1: Manufacturer: syz [ 161.282889][ T31] usb 6-1: SerialNumber: syz [ 161.289047][ T31] usb 6-1: config 0 descriptor?? [ 161.417264][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 161.579792][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 161.599006][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 161.619538][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.629617][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.641748][ T10] usb 7-1: SerialNumber: syz [ 161.650826][ T4297] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 161.890639][ T4297] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 162.198062][ T4288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.228125][ T4288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.245117][ T4321] FAULT_INJECTION: forcing a failure. [ 162.245117][ T4321] name failslab, interval 1, probability 0, space 0, times 0 [ 162.289277][ T4321] CPU: 0 UID: 0 PID: 4321 Comm: syz.0.1582 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 162.289308][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.289320][ T4321] Call Trace: [ 162.289326][ T4321] [ 162.289334][ T4321] __dump_stack+0x21/0x30 [ 162.289360][ T4321] dump_stack_lvl+0x10c/0x190 [ 162.289379][ T4321] ? __cfi_dump_stack_lvl+0x10/0x10 [ 162.289399][ T4321] ? __kasan_check_write+0x18/0x20 [ 162.289418][ T4321] dump_stack+0x19/0x20 [ 162.289436][ T4321] should_fail_ex+0x3d9/0x530 [ 162.289456][ T4321] should_failslab+0xac/0x100 [ 162.289476][ T4321] __kmalloc_cache_noprof+0x41/0x3c0 [ 162.289497][ T4321] ? tcp_sendmsg_fastopen+0x1e2/0x6e0 [ 162.289527][ T4321] tcp_sendmsg_fastopen+0x1e2/0x6e0 [ 162.289550][ T4321] tcp_sendmsg_locked+0x4879/0x4ee0 [ 162.289573][ T4321] ? _parse_integer_limit+0x3d/0x1e0 [ 162.289591][ T4321] ? _parse_integer_limit+0x195/0x1e0 [ 162.289608][ T4321] ? avc_has_perm_noaudit+0x21c/0x360 [ 162.289628][ T4321] ? __kasan_check_write+0x18/0x20 [ 162.289645][ T4321] ? _raw_spin_lock_bh+0x90/0x120 [ 162.289667][ T4321] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 162.289687][ T4321] ? kstrtouint_from_user+0xfb/0x150 [ 162.289705][ T4321] ? x64_sys_call+0xe69/0x2ee0 [ 162.289727][ T4321] ? _raw_spin_unlock_bh+0x54/0x60 [ 162.289748][ T4321] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 162.289770][ T4321] ? __kasan_check_write+0x18/0x20 [ 162.289788][ T4321] ? proc_fail_nth_write+0x17e/0x210 [ 162.289805][ T4321] ? __cfi_tcp_sendmsg+0x10/0x10 [ 162.289825][ T4321] tcp_sendmsg+0x3e/0xe0 [ 162.289845][ T4321] ? __cfi_tcp_sendmsg+0x10/0x10 [ 162.289866][ T4321] inet6_sendmsg+0xb7/0x120 [ 162.289888][ T4321] __sys_sendto+0x446/0x6f0 [ 162.289911][ T4321] ? __cfi___sys_sendto+0x10/0x10 [ 162.289933][ T4321] ? __kasan_check_write+0x18/0x20 [ 162.289953][ T4321] ? __cfi_ksys_write+0x10/0x10 [ 162.289974][ T4321] __x64_sys_sendto+0xe9/0x100 [ 162.289996][ T4321] x64_sys_call+0x2c2c/0x2ee0 [ 162.290016][ T4321] do_syscall_64+0x58/0xf0 [ 162.290036][ T4321] ? clear_bhb_loop+0x35/0x90 [ 162.290059][ T4321] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 162.290080][ T4321] RIP: 0033:0x7f2a9398e929 [ 162.290096][ T4321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.290110][ T4321] RSP: 002b:00007f2a947b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 162.290130][ T4321] RAX: ffffffffffffffda RBX: 00007f2a93bb5fa0 RCX: 00007f2a9398e929 [ 162.290144][ T4321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 162.290156][ T4321] RBP: 00007f2a947b1090 R08: 00002000000001c0 R09: 000000000000001c [ 162.290168][ T4321] R10: 0000000024000048 R11: 0000000000000246 R12: 0000000000000001 [ 162.290179][ T4321] R13: 0000000000000000 R14: 00007f2a93bb5fa0 R15: 00007ffe410abdb8 [ 162.290194][ T4321] [ 162.588414][ T31] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 162.604863][ T4324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1100 [ 162.616113][ T31] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 162.640241][ T4329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.648736][ T4329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.661084][ T10] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 162.665017][ T31] asix 6-1:0.0: probe with driver asix failed with error -71 [ 162.670376][ T10] usb 7-1: USB disconnect, device number 30 [ 162.701679][ T31] usb 6-1: USB disconnect, device number 39 [ 162.962533][ T4334] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 163.036724][ T4340] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1588'. [ 163.534383][ T4368] SELinux: Context system_u:object_r:hald_var_run_t:s0 is not valid (left unmapped). [ 164.021403][ T4392] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 164.085261][ T4395] 9pnet_fd: Insufficient options for proto=fd [ 164.405557][ T4408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.415541][ T4408] rust_binder: Write failure EINVAL in pid:742 [ 164.541621][ T4416] syz.5.1618: attempt to access beyond end of device [ 164.541621][ T4416] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 164.597431][ T4417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.085731][ T4440] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.107298][ T4441] rust_binder: Write failure EINVAL in pid:758 [ 165.114592][ T4440] rust_binder: ENOSPC from range_alloc.reserve_new - size: 4615172634223575152 [ 165.121780][ T4440] rust_binder: Failed to allocate buffer. len:4615172634223575152, is_oneway:false [ 165.130799][ T4440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 165.140909][ T4440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:758 [ 165.379254][ T4453] FAULT_INJECTION: forcing a failure. [ 165.379254][ T4453] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 165.424007][ T4453] CPU: 0 UID: 0 PID: 4453 Comm: syz.0.1633 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 165.424037][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.424049][ T4453] Call Trace: [ 165.424056][ T4453] [ 165.424063][ T4453] __dump_stack+0x21/0x30 [ 165.424087][ T4453] dump_stack_lvl+0x10c/0x190 [ 165.424106][ T4453] ? __cfi_dump_stack_lvl+0x10/0x10 [ 165.424127][ T4453] dump_stack+0x19/0x20 [ 165.424145][ T4453] should_fail_ex+0x3d9/0x530 [ 165.424164][ T4453] should_fail_alloc_page+0xeb/0x110 [ 165.424186][ T4453] __alloc_pages_noprof+0x19d/0x6c0 [ 165.424204][ T4453] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 165.424220][ T4453] ? kernel_text_address+0xa9/0xe0 [ 165.424238][ T4453] ? __kernel_text_address+0x11/0x40 [ 165.424255][ T4453] ? unwind_get_return_address+0x51/0x90 [ 165.424274][ T4453] get_free_pages_noprof+0x14/0x40 [ 165.424291][ T4453] kasan_populate_vmalloc_pte+0x4c/0x170 [ 165.424312][ T4453] __apply_to_page_range+0x7ff/0xca0 [ 165.424335][ T4453] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 165.424361][ T4453] ? kvm_vcpu_ioctl+0x96f/0xee0 [ 165.424382][ T4453] ? apply_to_page_range+0x60/0x60 [ 165.424404][ T4453] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 165.424423][ T4453] apply_to_page_range+0x3f/0x60 [ 165.424444][ T4453] kasan_populate_vmalloc+0x64/0x80 [ 165.424463][ T4453] alloc_vmap_area+0x1d7f/0x2500 [ 165.424481][ T4453] ? kasan_save_alloc_info+0x40/0x50 [ 165.424498][ T4453] ? vm_map_ram+0xdd0/0xdd0 [ 165.424514][ T4453] ? __get_vm_area_node+0x154/0x3a0 [ 165.424531][ T4453] ? copy_process+0x538/0x3220 [ 165.424547][ T4453] __get_vm_area_node+0x1dc/0x3a0 [ 165.424564][ T4453] __vmalloc_node_range_noprof+0x33c/0x1420 [ 165.424583][ T4453] ? copy_process+0x538/0x3220 [ 165.424602][ T4453] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 165.424620][ T4453] ? kasan_save_alloc_info+0x40/0x50 [ 165.424638][ T4453] ? arch_dup_task_struct+0x5b/0xe0 [ 165.424658][ T4453] ? __asan_memcpy+0x5a/0x80 [ 165.424677][ T4453] dup_task_struct+0x5bd/0xc50 [ 165.424693][ T4453] ? copy_process+0x538/0x3220 [ 165.424709][ T4453] ? _raw_spin_lock_irq+0x8d/0x120 [ 165.424730][ T4453] ? copy_process+0x3220/0x3220 [ 165.424746][ T4453] ? __kasan_check_write+0x18/0x20 [ 165.424765][ T4453] copy_process+0x538/0x3220 [ 165.424782][ T4453] ? __cfi_copy_process+0x10/0x10 [ 165.424805][ T4453] ? __kasan_check_write+0x18/0x20 [ 165.424821][ T4453] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 165.424844][ T4453] vhost_task_create+0x1d6/0x350 [ 165.424866][ T4453] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 165.424891][ T4453] ? __cfi_vhost_task_create+0x10/0x10 [ 165.424913][ T4453] ? __cfi_vhost_task_fn+0x10/0x10 [ 165.424937][ T4453] ? __kasan_check_write+0x18/0x20 [ 165.424955][ T4453] ? mutex_lock+0x92/0x1c0 [ 165.424970][ T4453] ? __cfi_mutex_lock+0x10/0x10 [ 165.424986][ T4453] ? kernel_text_address+0xa9/0xe0 [ 165.425003][ T4453] kvm_mmu_post_init_vm+0x1a6/0x310 [ 165.425022][ T4453] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 165.425042][ T4453] ? _parse_integer_limit+0x195/0x1e0 [ 165.425061][ T4453] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 165.425080][ T4453] ? kstrtoull+0x13b/0x1e0 [ 165.425097][ T4453] ? kstrtouint+0x78/0xf0 [ 165.425113][ T4453] ? ioctl_has_perm+0x1aa/0x4d0 [ 165.425135][ T4453] ? __asan_memcpy+0x5a/0x80 [ 165.425154][ T4453] ? ioctl_has_perm+0x3e0/0x4d0 [ 165.425176][ T4453] ? has_cap_mac_admin+0xd0/0xd0 [ 165.425198][ T4453] ? __kasan_check_write+0x18/0x20 [ 165.425216][ T4453] ? mutex_lock_killable+0x92/0x1c0 [ 165.425233][ T4453] ? __cfi_mutex_lock_killable+0x10/0x10 [ 165.425250][ T4453] ? proc_fail_nth_write+0x17e/0x210 [ 165.425269][ T4453] kvm_vcpu_ioctl+0x96f/0xee0 [ 165.425290][ T4453] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 165.425311][ T4453] ? __cfi_vfs_write+0x10/0x10 [ 165.425330][ T4453] ? __kasan_check_write+0x18/0x20 [ 165.425348][ T4453] ? mutex_unlock+0x8b/0x240 [ 165.425370][ T4453] ? __cfi_mutex_unlock+0x10/0x10 [ 165.425386][ T4453] ? __fget_files+0x2c5/0x340 [ 165.425409][ T4453] ? __fget_files+0x2c5/0x340 [ 165.425431][ T4453] ? bpf_lsm_file_ioctl+0xd/0x20 [ 165.425448][ T4453] ? security_file_ioctl+0x34/0xd0 [ 165.425470][ T4453] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 165.425490][ T4453] __se_sys_ioctl+0x132/0x1b0 [ 165.425513][ T4453] __x64_sys_ioctl+0x7f/0xa0 [ 165.425534][ T4453] x64_sys_call+0x1878/0x2ee0 [ 165.425554][ T4453] do_syscall_64+0x58/0xf0 [ 165.425575][ T4453] ? clear_bhb_loop+0x35/0x90 [ 165.425597][ T4453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 165.425619][ T4453] RIP: 0033:0x7f2a9398e929 [ 165.425634][ T4453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.425649][ T4453] RSP: 002b:00007f2a947b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.425669][ T4453] RAX: ffffffffffffffda RBX: 00007f2a93bb5fa0 RCX: 00007f2a9398e929 [ 165.425683][ T4453] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 165.425695][ T4453] RBP: 00007f2a947b1090 R08: 0000000000000000 R09: 0000000000000000 [ 165.425707][ T4453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.425719][ T4453] R13: 0000000000000000 R14: 00007f2a93bb5fa0 R15: 00007ffe410abdb8 [ 165.425734][ T4453] [ 165.425787][ T4453] syz.0.1633: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 165.938196][ T36] kauditd_printk_skb: 764 callbacks suppressed [ 165.938210][ T36] audit: type=1400 audit(1750439010.999:17281): avc: denied { ioctl } for pid=4448 comm="syz.5.1631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.953816][ T4453] CPU: 1 UID: 0 PID: 4453 Comm: syz.0.1633 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 165.953842][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.953854][ T4453] Call Trace: [ 165.953860][ T4453] [ 165.953867][ T4453] __dump_stack+0x21/0x30 [ 165.953891][ T4453] dump_stack_lvl+0x10c/0x190 [ 165.953909][ T4453] ? __cfi_dump_stack_lvl+0x10/0x10 [ 165.953929][ T4453] dump_stack+0x19/0x20 [ 165.953945][ T4453] warn_alloc+0x1bc/0x2a0 [ 165.953961][ T4453] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 165.953985][ T4453] ? __cfi_warn_alloc+0x10/0x10 [ 165.954000][ T4453] ? kfree+0x156/0x400 [ 165.954017][ T4453] ? copy_process+0x538/0x3220 [ 165.954034][ T4453] ? __get_vm_area_node+0x1f5/0x3a0 [ 165.954051][ T4453] __vmalloc_node_range_noprof+0x361/0x1420 [ 165.954071][ T4453] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 165.954095][ T4453] ? kasan_save_alloc_info+0x40/0x50 [ 165.954112][ T4453] ? arch_dup_task_struct+0x5b/0xe0 [ 165.954131][ T4453] ? __asan_memcpy+0x5a/0x80 [ 165.954149][ T4453] dup_task_struct+0x5bd/0xc50 [ 165.954164][ T4453] ? copy_process+0x538/0x3220 [ 165.954180][ T4453] ? _raw_spin_lock_irq+0x8d/0x120 [ 165.954201][ T4453] ? copy_process+0x3220/0x3220 [ 165.954215][ T4453] ? __kasan_check_write+0x18/0x20 [ 165.954233][ T4453] copy_process+0x538/0x3220 [ 165.954251][ T4453] ? __cfi_copy_process+0x10/0x10 [ 165.954274][ T4453] ? __kasan_check_write+0x18/0x20 [ 165.954291][ T4453] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 165.954315][ T4453] vhost_task_create+0x1d6/0x350 [ 165.954335][ T4453] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 165.954359][ T4453] ? __cfi_vhost_task_create+0x10/0x10 [ 165.954380][ T4453] ? __cfi_vhost_task_fn+0x10/0x10 [ 165.954399][ T4453] ? __kasan_check_write+0x18/0x20 [ 165.954417][ T4453] ? mutex_lock+0x92/0x1c0 [ 165.954432][ T4453] ? __cfi_mutex_lock+0x10/0x10 [ 165.954446][ T4453] ? kernel_text_address+0xa9/0xe0 [ 165.954463][ T4453] kvm_mmu_post_init_vm+0x1a6/0x310 [ 165.954482][ T4453] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 165.954501][ T4453] ? _parse_integer_limit+0x195/0x1e0 [ 165.954519][ T4453] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 165.954536][ T4453] ? kstrtoull+0x13b/0x1e0 [ 165.954552][ T4453] ? kstrtouint+0x78/0xf0 [ 165.954567][ T4453] ? ioctl_has_perm+0x1aa/0x4d0 [ 165.954589][ T4453] ? __asan_memcpy+0x5a/0x80 [ 165.954607][ T4453] ? ioctl_has_perm+0x3e0/0x4d0 [ 165.954628][ T4453] ? has_cap_mac_admin+0xd0/0xd0 [ 165.954648][ T4453] ? __kasan_check_write+0x18/0x20 [ 165.954665][ T4453] ? mutex_lock_killable+0x92/0x1c0 [ 165.954681][ T4453] ? __cfi_mutex_lock_killable+0x10/0x10 [ 165.954697][ T4453] ? proc_fail_nth_write+0x17e/0x210 [ 165.954714][ T4453] kvm_vcpu_ioctl+0x96f/0xee0 [ 165.954735][ T4453] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 165.954754][ T4453] ? __cfi_vfs_write+0x10/0x10 [ 165.954772][ T4453] ? __kasan_check_write+0x18/0x20 [ 165.954789][ T4453] ? mutex_unlock+0x8b/0x240 [ 165.954804][ T4453] ? __cfi_mutex_unlock+0x10/0x10 [ 165.954822][ T4453] ? __fget_files+0x2c5/0x340 [ 165.954843][ T4453] ? __fget_files+0x2c5/0x340 [ 165.954863][ T4453] ? bpf_lsm_file_ioctl+0xd/0x20 [ 165.954880][ T4453] ? security_file_ioctl+0x34/0xd0 [ 165.954900][ T4453] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 165.954919][ T4453] __se_sys_ioctl+0x132/0x1b0 [ 165.954940][ T4453] __x64_sys_ioctl+0x7f/0xa0 [ 165.954960][ T4453] x64_sys_call+0x1878/0x2ee0 [ 165.954980][ T4453] do_syscall_64+0x58/0xf0 [ 165.954999][ T4453] ? clear_bhb_loop+0x35/0x90 [ 165.955021][ T4453] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 165.955042][ T4453] RIP: 0033:0x7f2a9398e929 [ 165.955057][ T4453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.955071][ T4453] RSP: 002b:00007f2a947b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.955094][ T4453] RAX: ffffffffffffffda RBX: 00007f2a93bb5fa0 RCX: 00007f2a9398e929 [ 165.955107][ T4453] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 165.955118][ T4453] RBP: 00007f2a947b1090 R08: 0000000000000000 R09: 0000000000000000 [ 165.955129][ T4453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.955139][ T4453] R13: 0000000000000000 R14: 00007f2a93bb5fa0 R15: 00007ffe410abdb8 [ 165.955153][ T4453] [ 165.955212][ T4453] Mem-Info: [ 165.992851][ T723] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 165.997253][ T4453] active_anon:7074 inactive_anon:1 isolated_anon:0 [ 165.997253][ T4453] active_file:12483 inactive_file:12666 isolated_file:0 [ 165.997253][ T4453] unevictable:0 dirty:602 writeback:0 [ 165.997253][ T4453] slab_reclaimable:5377 slab_unreclaimable:72191 [ 165.997253][ T4453] mapped:25051 shmem:163 pagetables:1224 [ 165.997253][ T4453] sec_pagetables:0 bounce:0 [ 165.997253][ T4453] kernel_misc_reclaimable:0 [ 165.997253][ T4453] free:1519884 free_pcp:1855 free_cma:0 [ 166.010120][ T36] audit: type=1400 audit(1750439011.074:17282): avc: denied { ioctl } for pid=4448 comm="syz.5.1631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.010558][ T4453] Node 0 active_anon:28296kB inactive_anon:4kB active_file:49932kB inactive_file:50664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100204kB dirty:2408kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5152kB pagetables:4896kB sec_pagetables:0kB all_unreclaimable? no [ 166.013947][ T36] audit: type=1400 audit(1750439011.074:17283): avc: denied { ioctl } for pid=4448 comm="syz.5.1631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.019156][ T4453] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966004kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:0kB free_cma:0kB [ 166.023188][ T36] audit: type=1400 audit(1750439011.083:17284): avc: denied { ioctl } for pid=4448 comm="syz.5.1631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.031105][ T4453] lowmem_reserve[]: [ 166.100263][ T36] audit: type=1400 audit(1750439011.149:17285): avc: denied { ioctl } for pid=4448 comm="syz.5.1631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.102884][ T4453] 0 [ 166.185868][ T36] audit: type=1400 audit(1750439011.223:17286): avc: denied { ioctl } for pid=4448 comm="syz.5.1631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.186838][ T4453] 3921 [ 166.192565][ T36] audit: type=1400 audit(1750439011.233:17287): avc: denied { ioctl } for pid=4448 comm="syz.5.1631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.198050][ T4453] 3921 [ 166.205032][ T36] audit: type=1400 audit(1750439011.251:17288): avc: denied { ioctl } for pid=4448 comm="syz.5.1631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.209176][ T4453] Normal free:3120248kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28296kB inactive_anon:4kB active_file:49932kB inactive_file:50664kB unevictable:0kB writepending:2408kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1356kB local_pcp:80kB free_cma:0kB [ 166.215774][ T36] audit: type=1400 audit(1750439011.251:17289): avc: denied { ioctl } for pid=4448 comm="syz.5.1631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.216653][ T4453] lowmem_reserve[]: [ 166.226555][ T723] usb 6-1: config 51 has an invalid interface number: 105 but max is 0 [ 166.231082][ T4453] 0 [ 166.241910][ T36] audit: type=1400 audit(1750439011.251:17290): avc: denied { ioctl } for pid=4448 comm="syz.5.1631" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.247172][ T4453] 0 [ 166.260114][ T723] usb 6-1: config 51 has an invalid interface number: 185 but max is 0 [ 166.277269][ T4453] 0 [ 166.290100][ T723] usb 6-1: config 51 has 2 interfaces, different from the descriptor's value: 1 [ 166.312355][ T4453] [ 166.340662][ T723] usb 6-1: config 51 has no interface number 0 [ 166.357645][ T4453] DMA32: [ 166.370774][ T723] usb 6-1: config 51 has no interface number 1 [ 166.399106][ T4453] 7*4kB [ 166.404305][ T723] usb 6-1: config 51 interface 105 altsetting 179 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 166.407309][ T4453] (M) [ 166.411008][ T723] usb 6-1: config 51 interface 105 altsetting 179 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 166.417154][ T4453] 3*8kB [ 166.489260][ T723] usb 6-1: config 51 interface 105 altsetting 179 has an invalid descriptor for endpoint zero, skipping [ 166.524454][ T4453] (M) [ 166.601811][ T723] usb 6-1: too many endpoints for config 51 interface 185 altsetting 138: 93, using maximum allowed: 30 [ 166.646855][ T4453] 4*16kB [ 166.656003][ T723] usb 6-1: config 51 interface 185 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 93 [ 166.656936][ T4453] (M) [ 166.683515][ T723] usb 6-1: config 51 interface 105 has no altsetting 0 [ 166.684733][ T4453] 5*32kB [ 166.740727][ T723] usb 6-1: config 51 interface 185 has no altsetting 0 [ 166.771497][ T4453] (M) [ 166.813554][ T723] usb 6-1: New USB device found, idVendor=2357, idProduct=0107, bcdDevice=98.bd [ 166.865630][ T4453] 5*64kB [ 166.889465][ T723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.921241][ T4453] (M) [ 166.946578][ T723] usb 6-1: Product: ॓ΐ铯ᶯン汗栟ቝ௵ꟑ丬퐙師ອ姢炂巼櫟숪맄ᗊ爯闶 [ 166.975692][ T723] usb 6-1: Manufacturer: 豟黑ࠛ걇沛씚䞢֯卣尋疤ၔ钌咓຃⛎ꎒ譝닻㋷攙ꡯ䝸㭸욇䎲㱟ᓼ颜윧ᵥᐺ侏囪恪⦤鉱ᰨ؉峾꫌㎅恾諢뀠诩积ས렖伫ⵢ蜹燬꼘빁尟⪥욈᷐甋⦎凼榧䠴䙇㷵霑⾷Ṕ㎾ᙰ઱空 [ 166.990230][ T4453] 4*128kB [ 167.001663][ T723] usb 6-1: SerialNumber: ❚ꯕ梯䢻᥾꽭類론䄓㩜轒鈐ﻮ拫뛓ᡷፉੱ㋮먡⫠荘窾䃻盜ꠧ盽㽸ꑉꞣ맞瀮吳꾥䑷镘辏㺎ᾳꏅﻰ듡줒ㅵ썽ᘨ鉆뫤홥✔⒠䌋燮㺄䣑㲮頖㖍ꉯ‌࡜탲؀⃙⼘᳒䁹偻蟩惥綰싛䓋鞟 [ 167.031943][ T4453] (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 167.051604][ T4453] Normal: 1136*4kB (UE) 870*8kB (UME) 766*16kB (UME) 543*32kB (UME) 246*64kB (UME) 81*128kB (UME) 35*256kB (UME) 25*512kB (UME) 14*1024kB (UME) 6*2048kB (UME) 733*4096kB (UM) = 3118000kB [ 167.053483][ T4449] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 167.071141][ T4453] 25311 total pagecache pages [ 167.083437][ T4453] 1 pages in swap cache [ 167.087606][ T4453] Free swap = 124716kB [ 167.091761][ T4453] Total swap = 124996kB [ 167.097093][ T4453] 2097051 pages RAM [ 167.106318][ T4453] 0 pages HighMem/MovableOnly [ 167.112368][ T4453] 351520 pages reserved [ 167.118731][ T4453] 0 pages cma reserved [ 167.124758][ T4453] Memory allocations: [ 167.129791][ T4453] 0 B 0 init/main.c:1370 func:do_initcalls [ 167.139598][ T4453] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 167.148328][ T4453] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 167.156008][ T4453] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 167.164937][ T4453] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 167.179034][ T4453] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 167.187887][ T4453] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 167.195887][ T4453] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 167.209100][ T4453] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 167.217714][ T4453] 0 B 0 init/initramfs.c:101 func:find_link [ 167.352988][ T723] usb 6-1: USB disconnect, device number 40 [ 167.670514][ T4485] fuse: Bad value for 'fd' [ 167.694554][ T4484] overlay: ./file0 is not a directory [ 167.983702][ T4508] FAULT_INJECTION: forcing a failure. [ 167.983702][ T4508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.015677][ T4508] CPU: 1 UID: 0 PID: 4508 Comm: syz.7.1655 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 168.015706][ T4508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.015718][ T4508] Call Trace: [ 168.015725][ T4508] [ 168.015733][ T4508] __dump_stack+0x21/0x30 [ 168.015758][ T4508] dump_stack_lvl+0x10c/0x190 [ 168.015778][ T4508] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.015799][ T4508] dump_stack+0x19/0x20 [ 168.015817][ T4508] should_fail_ex+0x3d9/0x530 [ 168.015836][ T4508] should_fail+0xf/0x20 [ 168.015852][ T4508] should_fail_usercopy+0x1e/0x30 [ 168.015871][ T4508] strncpy_from_user+0x28/0x270 [ 168.015888][ T4508] ? getname_flags+0xc6/0x710 [ 168.015909][ T4508] getname_flags+0x102/0x710 [ 168.015929][ T4508] ? __kasan_check_read+0x15/0x20 [ 168.015949][ T4508] __x64_sys_rmdir+0x3e/0x60 [ 168.015964][ T4508] x64_sys_call+0xaf7/0x2ee0 [ 168.015983][ T4508] do_syscall_64+0x58/0xf0 [ 168.016003][ T4508] ? clear_bhb_loop+0x35/0x90 [ 168.016026][ T4508] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 168.016049][ T4508] RIP: 0033:0x7f0322f8e929 [ 168.016064][ T4508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.016079][ T4508] RSP: 002b:00007f0323ec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 168.016099][ T4508] RAX: ffffffffffffffda RBX: 00007f03231b5fa0 RCX: 00007f0322f8e929 [ 168.016113][ T4508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 168.016125][ T4508] RBP: 00007f0323ec0090 R08: 0000000000000000 R09: 0000000000000000 [ 168.016137][ T4508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.016149][ T4508] R13: 0000000000000000 R14: 00007f03231b5fa0 R15: 00007ffe786696c8 [ 168.016164][ T4508] [ 168.263719][ T4520] rust_binder: Write failure EINVAL in pid:769 [ 168.265942][ T4520] SELinux: security_context_str_to_sid () failed with errno=-22 [ 168.633459][ T31] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 168.796874][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 168.804509][ T31] usb 6-1: can't read configurations, error -61 [ 168.943503][ T31] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 169.120373][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 169.135874][ T31] usb 6-1: can't read configurations, error -61 [ 169.146603][ T31] usb usb6-port1: attempt power cycle [ 169.152484][ T4546] FAULT_INJECTION: forcing a failure. [ 169.152484][ T4546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.167321][ T4546] CPU: 0 UID: 0 PID: 4546 Comm: syz.6.1668 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 169.167349][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.167361][ T4546] Call Trace: [ 169.167367][ T4546] [ 169.167375][ T4546] __dump_stack+0x21/0x30 [ 169.167398][ T4546] dump_stack_lvl+0x10c/0x190 [ 169.167418][ T4546] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.167436][ T4546] ? kstrtoull+0x13b/0x1e0 [ 169.167452][ T4546] dump_stack+0x19/0x20 [ 169.167468][ T4546] should_fail_ex+0x3d9/0x530 [ 169.167487][ T4546] should_fail+0xf/0x20 [ 169.167504][ T4546] should_fail_usercopy+0x1e/0x30 [ 169.167526][ T4546] _copy_from_user+0x22/0xb0 [ 169.167546][ T4546] ___sys_sendmsg+0x159/0x2a0 [ 169.167571][ T4546] ? __sys_sendmsg+0x280/0x280 [ 169.167595][ T4546] ? proc_fail_nth_write+0x17e/0x210 [ 169.167611][ T4546] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 169.167633][ T4546] __x64_sys_sendmsg+0x1eb/0x2c0 [ 169.167649][ T4546] ? fput+0x1a5/0x240 [ 169.167671][ T4546] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 169.167687][ T4546] ? ksys_write+0x1ef/0x250 [ 169.167707][ T4546] ? __kasan_check_read+0x15/0x20 [ 169.167727][ T4546] x64_sys_call+0x2a4c/0x2ee0 [ 169.167748][ T4546] do_syscall_64+0x58/0xf0 [ 169.167766][ T4546] ? clear_bhb_loop+0x35/0x90 [ 169.167790][ T4546] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.167812][ T4546] RIP: 0033:0x7ff3f198e929 [ 169.167827][ T4546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.167842][ T4546] RSP: 002b:00007ff3f2748038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.167862][ T4546] RAX: ffffffffffffffda RBX: 00007ff3f1bb5fa0 RCX: 00007ff3f198e929 [ 169.167875][ T4546] RDX: 0000000002000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 169.167888][ T4546] RBP: 00007ff3f2748090 R08: 0000000000000000 R09: 0000000000000000 [ 169.167901][ T4546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.167918][ T4546] R13: 0000000000000000 R14: 00007ff3f1bb5fa0 R15: 00007fff38021db8 [ 169.167931][ T4546] [ 169.546126][ T31] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 169.591722][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 169.627650][ T31] usb 6-1: can't read configurations, error -61 [ 169.777391][ T31] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 169.822362][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 169.862841][ T31] usb 6-1: can't read configurations, error -61 [ 169.873974][ T31] usb usb6-port1: unable to enumerate USB device [ 170.010601][ T4579] netlink: 'syz.0.1682': attribute type 18 has an invalid length. [ 170.031403][ T4579] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 170.063089][ T4579] rust_binder: Write failure EINVAL in pid:1188 [ 170.237750][ T4589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 170.259278][ T4589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:719 [ 170.547085][ T305] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 170.618161][ T4597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.618198][ T4597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1198 [ 170.718120][ T305] usb 7-1: device descriptor read/64, error -71 [ 170.735271][ T4604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.996052][ T305] usb 7-1: device descriptor read/64, error -71 [ 171.157723][ T4621] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1698'. [ 171.202034][ T4621] cgroup2: Unknown parameter 'favordynmodsBY' [ 171.284716][ T305] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 171.297944][ T36] kauditd_printk_skb: 752 callbacks suppressed [ 171.297959][ T36] audit: type=1400 audit(1750439016.003:18043): avc: denied { create } for pid=4630 comm="syz.7.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.345919][ T36] audit: type=1400 audit(1750439016.013:18044): avc: denied { write } for pid=4630 comm="syz.7.1703" name="001" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 171.369857][ T36] audit: type=1400 audit(1750439016.013:18045): avc: denied { write } for pid=4630 comm="syz.7.1703" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 171.405059][ T36] audit: type=1400 audit(1750439016.013:18046): avc: denied { setopt } for pid=4630 comm="syz.7.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.425599][ T36] audit: type=1400 audit(1750439016.022:18047): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.449856][ T36] audit: type=1400 audit(1750439016.022:18048): avc: denied { read write open } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.474951][ T36] audit: type=1400 audit(1750439016.022:18049): avc: denied { ioctl } for pid=1567 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.500598][ T305] usb 7-1: device descriptor read/64, error -71 [ 171.505973][ T36] audit: type=1400 audit(1750439016.031:18050): avc: denied { read } for pid=4632 comm="syz.7.1704" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 171.529562][ T36] audit: type=1400 audit(1750439016.031:18051): avc: denied { read open } for pid=4632 comm="syz.7.1704" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 171.591767][ T36] audit: type=1400 audit(1750439016.050:18052): avc: denied { ioctl } for pid=4588 comm="syz.6.1686" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.765778][ T305] usb 7-1: device descriptor read/64, error -71 [ 171.883452][ T305] usb usb7-port1: attempt power cycle [ 172.049608][ T4652] FAULT_INJECTION: forcing a failure. [ 172.049608][ T4652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.067188][ T4652] CPU: 1 UID: 0 PID: 4652 Comm: syz.7.1712 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 172.067218][ T4652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.067229][ T4652] Call Trace: [ 172.067235][ T4652] [ 172.067243][ T4652] __dump_stack+0x21/0x30 [ 172.067271][ T4652] dump_stack_lvl+0x10c/0x190 [ 172.067290][ T4652] ? __cfi_dump_stack_lvl+0x10/0x10 [ 172.067310][ T4652] dump_stack+0x19/0x20 [ 172.067329][ T4652] should_fail_ex+0x3d9/0x530 [ 172.067347][ T4652] should_fail+0xf/0x20 [ 172.067363][ T4652] should_fail_usercopy+0x1e/0x30 [ 172.067380][ T4652] _copy_from_user+0x22/0xb0 [ 172.067400][ T4652] memdup_user+0x81/0x180 [ 172.067423][ T4652] ? strndup_user+0x40/0xd0 [ 172.067441][ T4652] strndup_user+0x6c/0xd0 [ 172.067458][ T4652] __se_sys_mount+0x9f/0x480 [ 172.067478][ T4652] ? ksys_write+0x1ef/0x250 [ 172.067498][ T4652] ? __x64_sys_mount+0xf0/0xf0 [ 172.067518][ T4652] __x64_sys_mount+0xc3/0xf0 [ 172.067538][ T4652] x64_sys_call+0x2021/0x2ee0 [ 172.067561][ T4652] do_syscall_64+0x58/0xf0 [ 172.067582][ T4652] ? clear_bhb_loop+0x35/0x90 [ 172.067606][ T4652] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 172.067628][ T4652] RIP: 0033:0x7f0322f8e929 [ 172.067643][ T4652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.067658][ T4652] RSP: 002b:00007f0323ec0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.067678][ T4652] RAX: ffffffffffffffda RBX: 00007f03231b5fa0 RCX: 00007f0322f8e929 [ 172.067693][ T4652] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 172.067706][ T4652] RBP: 00007f0323ec0090 R08: 0000200000000180 R09: 0000000000000000 [ 172.067722][ T4652] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 172.067733][ T4652] R13: 0000000000000000 R14: 00007f03231b5fa0 R15: 00007ffe786696c8 [ 172.067758][ T4652] [ 172.357390][ T4650] binder: Unknown parameter 'coy'LV"i5ntext' [ 172.365234][ T305] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 172.387955][ T305] usb 7-1: device descriptor read/8, error -71 [ 172.534832][ T305] usb 7-1: device descriptor read/8, error -71 [ 172.781428][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 172.792105][ T305] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 172.825981][ T305] usb 7-1: device descriptor read/8, error -71 [ 172.963244][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 172.970338][ T10] usb 8-1: config 0 has an invalid interface number: 13 but max is 0 [ 172.976500][ T305] usb 7-1: device descriptor read/8, error -71 [ 172.978525][ T10] usb 8-1: config 0 has no interface number 0 [ 172.990680][ T10] usb 8-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 173.000500][ T10] usb 8-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 173.016345][ T10] usb 8-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 173.038198][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.047379][ T10] usb 8-1: Product: syz [ 173.056162][ T10] usb 8-1: Manufacturer: syz [ 173.065396][ T10] usb 8-1: SerialNumber: syz [ 173.077219][ T10] usb 8-1: config 0 descriptor?? [ 173.083323][ T4682] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 173.088162][ T4665] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 173.102500][ T4665] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 173.103835][ T4682] overlayfs: missing 'lowerdir' [ 173.114908][ T305] usb usb7-port1: unable to enumerate USB device [ 173.125730][ T4682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1724'. [ 173.335855][ T4665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.344419][ T4665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.353389][ T305] usb 8-1: USB disconnect, device number 25 [ 173.379514][ T4690] binder: Unknown parameter 'permit_directio' [ 173.509038][ T4694] overlayfs: failed to resolve './file1': -2 [ 173.850472][ T723] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 173.923746][ T4712] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.024758][ T723] usb 8-1: config 0 has an invalid interface number: 229 but max is 0 [ 174.032950][ T4717] overlayfs: failed to resolve './file0': -2 [ 174.054801][ T723] usb 8-1: config 0 has no interface number 0 [ 174.067456][ T723] usb 8-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 174.094282][ T723] usb 8-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 174.106641][ T723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.122881][ T723] usb 8-1: Product: syz [ 174.131863][ T723] usb 8-1: Manufacturer: syz [ 174.138808][ T723] usb 8-1: SerialNumber: syz [ 174.150371][ T723] usb 8-1: config 0 descriptor?? [ 174.247501][ T64] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 174.374665][ T4727] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 174.374687][ T4727] rust_binder: Error while translating object. [ 174.395781][ T4727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.404671][ T723] usb 8-1: USB disconnect, device number 26 [ 174.433912][ T4727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:743 [ 174.449957][ T64] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.481654][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.489657][ T64] usb 6-1: Product: syz [ 174.495060][ T64] usb 6-1: Manufacturer: syz [ 174.499795][ T64] usb 6-1: SerialNumber: syz [ 174.635441][ T4737] overlayfs: failed to resolve './file0': -2 [ 174.781530][ T4744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1257 [ 174.786426][ T4745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.813849][ T4743] binfmt_misc: register: failed to install interpreter file ./file0 [ 174.898566][ T4750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 174.898598][ T4750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:755 [ 174.911279][ T4752] cgroup: noprefix used incorrectly [ 175.086891][ T4759] overlayfs: failed to resolve './file0': -2 [ 175.217970][ T4766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1269 [ 175.558541][ T4772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1275 [ 175.590463][ T64] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 175.608619][ T4772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1275 [ 175.613121][ T64] cdc_ncm 6-1:1.0: setting rx_max = 16384 [ 175.821981][ T64] cdc_ncm 6-1:1.0: setting tx_max = 16384 [ 176.037309][ T4715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:788 [ 176.045612][ T4784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1285 [ 176.056790][ T4784] rust_binder: Error while translating object. [ 176.068218][ T4784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 176.075277][ T4784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1285 [ 176.149380][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 176.244383][ T4790] netlink: 'syz.7.1770': attribute type 4 has an invalid length. [ 176.256910][ T4790] netlink: 'syz.7.1770': attribute type 4 has an invalid length. [ 176.295351][ T4793] overlayfs: failed to resolve './file0': -2 [ 176.385762][ T4797] FAULT_INJECTION: forcing a failure. [ 176.385762][ T4797] name failslab, interval 1, probability 0, space 0, times 0 [ 176.417197][ T4797] CPU: 0 UID: 0 PID: 4797 Comm: syz.6.1772 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 176.417227][ T4797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.417241][ T4797] Call Trace: [ 176.417248][ T4797] [ 176.417255][ T4797] __dump_stack+0x21/0x30 [ 176.417280][ T4797] dump_stack_lvl+0x10c/0x190 [ 176.417299][ T4797] ? __cfi_dump_stack_lvl+0x10/0x10 [ 176.417320][ T4797] ? skb_put+0x112/0x1f0 [ 176.417341][ T4797] dump_stack+0x19/0x20 [ 176.417359][ T4797] should_fail_ex+0x3d9/0x530 [ 176.417378][ T4797] should_failslab+0xac/0x100 [ 176.417401][ T4797] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 176.417422][ T4797] ? sidtab_sid2str_get+0x139/0x370 [ 176.417445][ T4797] kmemdup_noprof+0x31/0x80 [ 176.417463][ T4797] sidtab_sid2str_get+0x139/0x370 [ 176.417484][ T4797] security_sid_to_context_core+0x30d/0x5d0 [ 176.417504][ T4797] security_sid_to_context+0x2e/0x50 [ 176.417520][ T4797] avc_audit_post_callback+0x198/0x780 [ 176.417538][ T4797] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 176.417557][ T4797] ? audit_log_untrustedstring+0xea/0x100 [ 176.417576][ T4797] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 176.417594][ T4797] common_lsm_audit+0x147a/0x1860 [ 176.417611][ T4797] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 176.417633][ T4797] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 176.417651][ T4797] ? __cfi_common_lsm_audit+0x10/0x10 [ 176.417668][ T4797] ? avc_denied+0x112/0x180 [ 176.417686][ T4797] slow_avc_audit+0x18d/0x1f0 [ 176.417703][ T4797] ? __cfi_slow_avc_audit+0x10/0x10 [ 176.417719][ T4797] ? avc_has_perm_noaudit+0x360/0x360 [ 176.417737][ T4797] ? avc_has_perm_noaudit+0x21c/0x360 [ 176.417755][ T4797] avc_has_perm+0x1cd/0x220 [ 176.417778][ T4797] ? __cfi_avc_has_perm+0x10/0x10 [ 176.417797][ T4797] selinux_socket_sendmsg+0x284/0x380 [ 176.417815][ T4797] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 176.417837][ T4797] ? arch_stack_walk+0x10b/0x170 [ 176.417858][ T4797] security_socket_sendmsg+0x56/0xd0 [ 176.417878][ T4797] ____sys_sendmsg+0x52d/0xa70 [ 176.417902][ T4797] ? __sys_sendmsg_sock+0x50/0x50 [ 176.417926][ T4797] ? import_iovec+0x81/0xb0 [ 176.417949][ T4797] ___sys_sendmsg+0x220/0x2a0 [ 176.417971][ T4797] ? __sys_sendmsg+0x280/0x280 [ 176.417994][ T4797] ? proc_fail_nth_write+0x17e/0x210 [ 176.418011][ T4797] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 176.418032][ T4797] __x64_sys_sendmsg+0x1eb/0x2c0 [ 176.418048][ T4797] ? fput+0x1a5/0x240 [ 176.418070][ T4797] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 176.418086][ T4797] ? ksys_write+0x1ef/0x250 [ 176.418106][ T4797] ? __kasan_check_read+0x15/0x20 [ 176.418125][ T4797] x64_sys_call+0x2a4c/0x2ee0 [ 176.418143][ T4797] do_syscall_64+0x58/0xf0 [ 176.418161][ T4797] ? clear_bhb_loop+0x35/0x90 [ 176.418184][ T4797] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 176.418207][ T4797] RIP: 0033:0x7ff3f198e929 [ 176.418222][ T4797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.418236][ T4797] RSP: 002b:00007ff3f2748038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.418256][ T4797] RAX: ffffffffffffffda RBX: 00007ff3f1bb5fa0 RCX: 00007ff3f198e929 [ 176.418270][ T4797] RDX: 0000000020000800 RSI: 00002000000019c0 RDI: 0000000000000003 [ 176.418283][ T4797] RBP: 00007ff3f2748090 R08: 0000000000000000 R09: 0000000000000000 [ 176.418294][ T4797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.418306][ T4797] R13: 0000000000000000 R14: 00007ff3f1bb5fa0 R15: 00007fff38021db8 [ 176.418321][ T4797] [ 176.807281][ T36] kauditd_printk_skb: 747 callbacks suppressed [ 176.807296][ T36] audit: type=1400 audit(1750439021.167:18800): avc: denied { read write } for pid=1222 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.864948][ T36] audit: type=1400 audit(1750439021.167:18801): avc: denied { read write open } for pid=1222 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.890744][ T36] audit: type=1400 audit(1750439021.167:18802): avc: denied { ioctl } for pid=1222 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.916411][ T36] audit: type=1400 audit(1750439021.176:18803): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.988405][ T36] audit: type=1400 audit(1750439021.176:18804): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.013540][ T36] audit: type=1400 audit(1750439021.176:18805): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.039060][ T36] audit: type=1400 audit(1750439021.195:18806): avc: denied { read } for pid=4804 comm="syz.0.1775" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.039560][ T4813] audit: audit_lost=69 audit_rate_limit=0 audit_backlog_limit=64 [ 177.061790][ T36] audit: type=1400 audit(1750439021.204:18807): avc: denied { read open } for pid=4804 comm="syz.0.1775" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.093080][ T36] audit: type=1400 audit(1750439021.204:18808): avc: denied { ioctl } for pid=4804 comm="syz.0.1775" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.118295][ T4813] x_tables: duplicate underflow at hook 1 [ 177.139228][ T64] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 177.152204][ T64] usb 6-1: USB disconnect, device number 45 [ 177.171988][ T64] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 177.354625][ T4828] binder: Unknown parameter '00000000000000000000000' [ 177.361774][ T4826] x_tables: duplicate underflow at hook 1 [ 177.378050][ T4828] binder: Unknown parameter '00000000000000000000000' [ 177.581473][ T64] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 177.741857][ T305] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 177.744123][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 177.771428][ T64] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 177.796765][ T64] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 177.804341][ T64] usb 6-1: can't read configurations, error -61 [ 177.934286][ T305] usb 7-1: Using ep0 maxpacket: 32 [ 177.945005][ T305] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.958084][ T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 177.974453][ T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 177.986250][ T305] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 177.995857][ T305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.004449][ T64] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 178.025644][ T305] usb 7-1: config 0 descriptor?? [ 178.037413][ T4835] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 178.054950][ T305] hub 7-1:0.0: USB hub found [ 178.190968][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 178.198969][ T64] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 178.217085][ T64] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 178.229580][ T64] usb 6-1: can't read configurations, error -61 [ 178.244326][ T64] usb usb6-port1: attempt power cycle [ 178.297055][ T305] hub 7-1:0.0: 2 ports detected [ 178.607823][ T64] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 178.629926][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 178.635896][ T64] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 178.652061][ T64] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 178.659686][ T64] usb 6-1: can't read configurations, error -61 [ 178.810904][ T64] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 178.833057][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 178.839287][ T64] usb 6-1: too many configurations: 179, using maximum allowed: 8 [ 178.851088][ T64] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 178.859633][ T64] usb 6-1: can't read configurations, error -61 [ 178.866876][ T64] usb usb6-port1: unable to enumerate USB device [ 179.288765][ T4878] tipc: Started in network mode [ 179.307532][ T4878] tipc: Node identity 96808a68278d, cluster identity 4711 [ 179.315599][ T4878] tipc: Enabled bearer , priority 0 [ 179.325611][ T4878] tipc: Disabling bearer [ 179.372394][ T305] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 179.379369][ T305] usb 7-1: USB disconnect, device number 35 [ 180.407012][ T4930] FAULT_INJECTION: forcing a failure. [ 180.407012][ T4930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.420120][ T4930] CPU: 0 UID: 0 PID: 4930 Comm: syz.0.1824 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 180.420150][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.420161][ T4930] Call Trace: [ 180.420168][ T4930] [ 180.420176][ T4930] __dump_stack+0x21/0x30 [ 180.420201][ T4930] dump_stack_lvl+0x10c/0x190 [ 180.420220][ T4930] ? __cfi_dump_stack_lvl+0x10/0x10 [ 180.420241][ T4930] dump_stack+0x19/0x20 [ 180.420259][ T4930] should_fail_ex+0x3d9/0x530 [ 180.420278][ T4930] should_fail+0xf/0x20 [ 180.420295][ T4930] should_fail_usercopy+0x1e/0x30 [ 180.420313][ T4930] _copy_to_iter+0x1a3/0x14b0 [ 180.420333][ T4930] ? __cfi__copy_to_iter+0x10/0x10 [ 180.420355][ T4930] get_random_bytes_user+0x1a1/0x380 [ 180.420379][ T4930] ? mix_interrupt_randomness+0x230/0x230 [ 180.420402][ T4930] ? __cfi_selinux_file_permission+0x10/0x10 [ 180.420423][ T4930] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 180.420442][ T4930] urandom_read_iter+0x2b/0x170 [ 180.420463][ T4930] vfs_read+0x53d/0xb60 [ 180.420483][ T4930] ? __cfi_vfs_read+0x10/0x10 [ 180.420504][ T4930] ksys_read+0x141/0x250 [ 180.420523][ T4930] ? __cfi_ksys_read+0x10/0x10 [ 180.420542][ T4930] ? __kasan_check_read+0x15/0x20 [ 180.420562][ T4930] __x64_sys_read+0x7f/0x90 [ 180.420581][ T4930] x64_sys_call+0x2638/0x2ee0 [ 180.420601][ T4930] do_syscall_64+0x58/0xf0 [ 180.420622][ T4930] ? clear_bhb_loop+0x35/0x90 [ 180.420654][ T4930] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 180.420677][ T4930] RIP: 0033:0x7f2a9398e929 [ 180.420692][ T4930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.420707][ T4930] RSP: 002b:00007f2a94790038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.420727][ T4930] RAX: ffffffffffffffda RBX: 00007f2a93bb6080 RCX: 00007f2a9398e929 [ 180.420741][ T4930] RDX: 0000000000002002 RSI: 0000200000000000 RDI: 0000000000000003 [ 180.420753][ T4930] RBP: 00007f2a94790090 R08: 0000000000000000 R09: 0000000000000000 [ 180.420766][ T4930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.420777][ T4930] R13: 0000000000000000 R14: 00007f2a93bb6080 R15: 00007ffe410abdb8 [ 180.420792][ T4930] [ 182.158192][ T36] kauditd_printk_skb: 482 callbacks suppressed [ 182.158226][ T36] audit: type=1400 audit(1750439026.171:19290): avc: denied { read write } for pid=1222 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 182.188796][ T36] audit: type=1400 audit(1750439026.199:19291): avc: denied { read write } for pid=1222 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 182.213409][ T36] audit: type=1400 audit(1750439026.208:19292): avc: denied { read write } for pid=5007 comm="syz.6.1857" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 182.237129][ T36] audit: type=1400 audit(1750439026.208:19293): avc: denied { name_bind } for pid=5007 comm="syz.6.1857" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 182.259856][ T36] audit: type=1400 audit(1750439026.227:19294): avc: denied { read write } for pid=1222 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 182.282126][ T5015] FAULT_INJECTION: forcing a failure. [ 182.282126][ T5015] name failslab, interval 1, probability 0, space 0, times 0 [ 182.285097][ T36] audit: type=1400 audit(1750439026.246:19295): avc: denied { name_bind } for pid=5012 comm="syz.6.1858" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 182.315461][ T5015] CPU: 0 UID: 0 PID: 5015 Comm: syz.6.1859 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 182.315490][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.315502][ T5015] Call Trace: [ 182.315508][ T5015] [ 182.315516][ T5015] __dump_stack+0x21/0x30 [ 182.315555][ T5015] dump_stack_lvl+0x10c/0x190 [ 182.315576][ T5015] ? __cfi_dump_stack_lvl+0x10/0x10 [ 182.315596][ T5015] ? avc_perm_nonode+0x101/0x1b0 [ 182.315615][ T5015] dump_stack+0x19/0x20 [ 182.315634][ T5015] should_fail_ex+0x3d9/0x530 [ 182.315653][ T5015] should_failslab+0xac/0x100 [ 182.315676][ T5015] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 182.315696][ T5015] ? alloc_inode+0xa9/0x270 [ 182.315718][ T5015] ? avc_has_perm_noaudit+0x21c/0x360 [ 182.315737][ T5015] alloc_inode+0xa9/0x270 [ 182.315760][ T5015] new_inode_pseudo+0x19/0x40 [ 182.315782][ T5015] path_from_stashed+0x207/0x870 [ 182.315800][ T5015] ? _raw_spin_lock+0x8c/0x120 [ 182.315821][ T5015] ? __cfi__raw_spin_lock+0x10/0x10 [ 182.315843][ T5015] ? __kasan_check_write+0x18/0x20 [ 182.315862][ T5015] ? __cfi_path_from_stashed+0x10/0x10 [ 182.315880][ T5015] ? _raw_spin_unlock+0x45/0x60 [ 182.315900][ T5015] ns_get_path+0x7a/0xa0 [ 182.315921][ T5015] proc_ns_get_link+0xf7/0x210 [ 182.315945][ T5015] ? __cfi_proc_ns_get_link+0x10/0x10 [ 182.315968][ T5015] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 182.315989][ T5015] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 182.316006][ T5015] ? security_inode_follow_link+0x74/0x140 [ 182.316028][ T5015] ? __cfi_proc_ns_get_link+0x10/0x10 [ 182.316051][ T5015] pick_link+0x671/0xe80 [ 182.316071][ T5015] step_into+0xc58/0xf50 [ 182.316089][ T5015] ? __d_add+0x639/0xaa0 [ 182.316110][ T5015] ? set_root+0x420/0x420 [ 182.316130][ T5015] path_openat+0x19dd/0x34b0 [ 182.316157][ T5015] ? do_filp_open+0x3e0/0x3e0 [ 182.316181][ T5015] do_filp_open+0x1c6/0x3e0 [ 182.316222][ T5015] ? __cfi_do_filp_open+0x10/0x10 [ 182.316248][ T5015] ? alloc_fd+0x4e7/0x5a0 [ 182.316269][ T5015] do_sys_openat2+0x12c/0x1c0 [ 182.316286][ T5015] ? fput+0x1a5/0x240 [ 182.316313][ T5015] ? do_sys_open+0x100/0x100 [ 182.316329][ T5015] ? ksys_write+0x1ef/0x250 [ 182.316348][ T5015] ? __cfi_ksys_write+0x10/0x10 [ 182.316368][ T5015] __x64_sys_openat+0x13a/0x170 [ 182.316385][ T5015] x64_sys_call+0xe69/0x2ee0 [ 182.316406][ T5015] do_syscall_64+0x58/0xf0 [ 182.316426][ T5015] ? clear_bhb_loop+0x35/0x90 [ 182.316450][ T5015] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 182.316473][ T5015] RIP: 0033:0x7ff3f198d290 [ 182.316495][ T5015] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 182.316510][ T5015] RSP: 002b:00007ff3f2747f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 182.316534][ T5015] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff3f198d290 [ 182.316547][ T5015] RDX: 0000000000000002 RSI: 00007ff3f2747fa0 RDI: 00000000ffffff9c [ 182.316560][ T5015] RBP: 00007ff3f2747fa0 R08: 0000000000000000 R09: 0000000000000000 [ 182.316572][ T5015] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 182.316584][ T5015] R13: 0000000000000001 R14: 00007ff3f1bb5fa0 R15: 00007fff38021db8 [ 182.316599][ T5015] [ 182.634925][ T36] audit: type=1400 audit(1750439026.246:19296): avc: denied { create } for pid=5012 comm="syz.6.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 182.655038][ T36] audit: type=1400 audit(1750439026.265:19297): avc: denied { read write } for pid=1222 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 182.679269][ T36] audit: type=1400 audit(1750439026.302:19298): avc: denied { read write } for pid=1060 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 182.703446][ T36] audit: type=1400 audit(1750439026.330:19299): avc: denied { read } for pid=5014 comm="syz.6.1859" dev="nsfs" ino=4026532329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 184.239687][ T5106] netlink: 'syz.7.1898': attribute type 4 has an invalid length. [ 184.318185][ T5114] syzkaller0: entered allmulticast mode [ 184.705237][ T5131] netlink: 'syz.0.1908': attribute type 4 has an invalid length. [ 187.596726][ T36] kauditd_printk_skb: 360 callbacks suppressed [ 187.596742][ T36] audit: type=1400 audit(1750439031.260:19660): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 187.628165][ T36] audit: type=1400 audit(1750439031.278:19661): avc: denied { read } for pid=5272 comm="syz.7.1968" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 187.651341][ T36] audit: type=1400 audit(1750439031.288:19662): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 187.675576][ T36] audit: type=1326 audit(1750439031.297:19663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.7.1969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0322f8e929 code=0x0 [ 187.753696][ T36] audit: type=1400 audit(1750439031.409:19664): avc: denied { create } for pid=5274 comm="syz.7.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 187.791003][ T36] audit: type=1400 audit(1750439031.419:19665): avc: denied { read write } for pid=1222 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 187.817105][ T36] audit: type=1400 audit(1750439031.437:19666): avc: denied { read write } for pid=1060 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 187.854287][ T36] audit: type=1400 audit(1750439031.447:19667): avc: denied { read } for pid=5277 comm="syz.6.1970" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 187.878960][ T36] audit: type=1400 audit(1750439031.456:19668): avc: denied { read write } for pid=1222 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 187.904777][ T36] audit: type=1400 audit(1750439031.475:19669): avc: denied { read } for pid=5281 comm="syz.5.1971" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 188.465392][ T5319] FAULT_INJECTION: forcing a failure. [ 188.465392][ T5319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.478909][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.6.1988 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 188.478939][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.478947][ T5319] Call Trace: [ 188.478951][ T5319] [ 188.478955][ T5319] __dump_stack+0x21/0x30 [ 188.478971][ T5319] dump_stack_lvl+0x10c/0x190 [ 188.478983][ T5319] ? __cfi_dump_stack_lvl+0x10/0x10 [ 188.478994][ T5319] dump_stack+0x19/0x20 [ 188.479004][ T5319] should_fail_ex+0x3d9/0x530 [ 188.479016][ T5319] should_fail+0xf/0x20 [ 188.479025][ T5319] should_fail_usercopy+0x1e/0x30 [ 188.479036][ T5319] _copy_from_user+0x22/0xb0 [ 188.479048][ T5319] do_arpt_set_ctl+0x505/0xa00 [ 188.479059][ T5319] ? _raw_spin_unlock_bh+0x54/0x60 [ 188.479072][ T5319] ? sockopt_release_sock+0x5c/0x70 [ 188.479085][ T5319] ? __cfi_do_arpt_set_ctl+0x10/0x10 [ 188.479098][ T5319] ? do_ip_setsockopt+0x1bb2/0x29e0 [ 188.479112][ T5319] ? __cfi_do_ip_setsockopt+0x10/0x10 [ 188.479125][ T5319] ? selinux_socket_setsockopt+0x2ea/0x390 [ 188.479138][ T5319] nf_setsockopt+0x28d/0x2b0 [ 188.479148][ T5319] ip_setsockopt+0xf6/0x100 [ 188.479161][ T5319] tcp_setsockopt+0xef/0x110 [ 188.479171][ T5319] sock_common_setsockopt+0xb5/0xd0 [ 188.479182][ T5319] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 188.479192][ T5319] do_sock_setsockopt+0x26a/0x400 [ 188.479206][ T5319] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 188.479220][ T5319] __x64_sys_setsockopt+0x1b8/0x250 [ 188.479233][ T5319] x64_sys_call+0x2adc/0x2ee0 [ 188.479245][ T5319] do_syscall_64+0x58/0xf0 [ 188.479256][ T5319] ? clear_bhb_loop+0x35/0x90 [ 188.479271][ T5319] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 188.479283][ T5319] RIP: 0033:0x7ff3f198e929 [ 188.479293][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.479301][ T5319] RSP: 002b:00007ff3f2748038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.479313][ T5319] RAX: ffffffffffffffda RBX: 00007ff3f1bb5fa0 RCX: 00007ff3f198e929 [ 188.479321][ T5319] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 188.479327][ T5319] RBP: 00007ff3f2748090 R08: 0000000000000440 R09: 0000000000000000 [ 188.479334][ T5319] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 188.479340][ T5319] R13: 0000000000000000 R14: 00007ff3f1bb5fa0 R15: 00007fff38021db8 [ 188.479349][ T5319] [ 189.010195][ T5354] syzkaller0: entered allmulticast mode [ 189.128854][ T5360] syzkaller0: entered allmulticast mode [ 189.379887][ T5390] : renamed from xfrm0 (while UP) [ 189.489976][ T5414] FAULT_INJECTION: forcing a failure. [ 189.489976][ T5414] name failslab, interval 1, probability 0, space 0, times 0 [ 189.502675][ T5414] CPU: 0 UID: 0 PID: 5414 Comm: syz.0.2028 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 189.502704][ T5414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.502715][ T5414] Call Trace: [ 189.502721][ T5414] [ 189.502728][ T5414] __dump_stack+0x21/0x30 [ 189.502753][ T5414] dump_stack_lvl+0x10c/0x190 [ 189.502772][ T5414] ? __cfi_dump_stack_lvl+0x10/0x10 [ 189.502793][ T5414] dump_stack+0x19/0x20 [ 189.502811][ T5414] should_fail_ex+0x3d9/0x530 [ 189.502830][ T5414] should_failslab+0xac/0x100 [ 189.502853][ T5414] kmem_cache_alloc_noprof+0x42/0x3a0 [ 189.502871][ T5414] ? alloc_empty_file+0xbf/0x280 [ 189.502893][ T5414] alloc_empty_file+0xbf/0x280 [ 189.502914][ T5414] path_openat+0xf8/0x34b0 [ 189.502937][ T5414] ? _parse_integer+0x2e/0x40 [ 189.502954][ T5414] ? kasan_save_track+0x4f/0x80 [ 189.502975][ T5414] ? kasan_save_alloc_info+0x40/0x50 [ 189.502991][ T5414] ? __kasan_slab_alloc+0x73/0x90 [ 189.503012][ T5414] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 189.503030][ T5414] ? getname_flags+0xc6/0x710 [ 189.503049][ T5414] ? do_sys_openat2+0xcb/0x1c0 [ 189.503072][ T5414] ? __x64_sys_openat+0x13a/0x170 [ 189.503089][ T5414] ? x64_sys_call+0xe69/0x2ee0 [ 189.503109][ T5414] ? do_syscall_64+0x58/0xf0 [ 189.503132][ T5414] ? do_filp_open+0x3e0/0x3e0 [ 189.503155][ T5414] do_filp_open+0x1c6/0x3e0 [ 189.503178][ T5414] ? __cfi_do_filp_open+0x10/0x10 [ 189.503203][ T5414] ? alloc_fd+0x4e7/0x5a0 [ 189.503224][ T5414] do_sys_openat2+0x12c/0x1c0 [ 189.503240][ T5414] ? fput+0x1a5/0x240 [ 189.503262][ T5414] ? do_sys_open+0x100/0x100 [ 189.503278][ T5414] ? ksys_write+0x1ef/0x250 [ 189.503297][ T5414] ? __cfi_ksys_write+0x10/0x10 [ 189.503317][ T5414] __x64_sys_openat+0x13a/0x170 [ 189.503334][ T5414] x64_sys_call+0xe69/0x2ee0 [ 189.503355][ T5414] do_syscall_64+0x58/0xf0 [ 189.503374][ T5414] ? clear_bhb_loop+0x35/0x90 [ 189.503399][ T5414] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.503421][ T5414] RIP: 0033:0x7f2a9398e929 [ 189.503436][ T5414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.503450][ T5414] RSP: 002b:00007f2a947b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.503469][ T5414] RAX: ffffffffffffffda RBX: 00007f2a93bb5fa0 RCX: 00007f2a9398e929 [ 189.503483][ T5414] RDX: 0000000000000040 RSI: 0000200000002a00 RDI: ffffffffffffff9c [ 189.503496][ T5414] RBP: 00007f2a947b1090 R08: 0000000000000000 R09: 0000000000000000 [ 189.503508][ T5414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.503520][ T5414] R13: 0000000000000000 R14: 00007f2a93bb5fa0 R15: 00007ffe410abdb8 [ 189.503535][ T5414] [ 191.041703][ T5459] syzkaller0: entered allmulticast mode [ 193.312575][ T36] kauditd_printk_skb: 267 callbacks suppressed [ 193.312592][ T36] audit: type=1400 audit(1750439036.610:19937): avc: denied { execmem } for pid=5477 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 193.340442][ T36] audit: type=1400 audit(1750439036.610:19938): avc: denied { read } for pid=5479 comm="syz.5.2053" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 193.363227][ T36] audit: type=1400 audit(1750439036.610:19939): avc: denied { read } for pid=5479 comm="syz.5.2053" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 193.385926][ T36] audit: type=1400 audit(1750439036.610:19940): avc: denied { create } for pid=5479 comm="syz.5.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 193.405700][ T36] audit: type=1400 audit(1750439036.619:19941): avc: denied { read write } for pid=1060 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.429890][ T36] audit: type=1400 audit(1750439036.638:19942): avc: denied { create } for pid=5478 comm="syz.7.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 193.449553][ T36] audit: type=1400 audit(1750439036.638:19943): avc: denied { create } for pid=5480 comm="syz.6.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 193.469287][ T36] audit: type=1400 audit(1750439036.638:19944): avc: denied { create } for pid=5480 comm="syz.6.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 193.488965][ T36] audit: type=1400 audit(1750439036.648:19945): avc: denied { read write } for pid=1222 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.513116][ T36] audit: type=1400 audit(1750439036.657:19946): avc: denied { read write } for pid=5478 comm="syz.7.2054" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 198.764375][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 198.764391][ T36] audit: type=1400 audit(1750439041.708:19993): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 199.261644][ T36] audit: type=1400 audit(1750439042.166:19994): avc: denied { execmem } for pid=5518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 199.298837][ T36] audit: type=1400 audit(1750439042.176:19995): avc: denied { read } for pid=5520 comm="syz.6.2070" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 199.322376][ T36] audit: type=1400 audit(1750439042.176:19996): avc: denied { create } for pid=5520 comm="syz.6.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 199.342916][ T36] audit: type=1400 audit(1750439042.185:19997): avc: denied { read write } for pid=5520 comm="syz.6.2070" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 199.366461][ T36] audit: type=1400 audit(1750439042.194:19998): avc: denied { read } for pid=5519 comm="syz.5.2068" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 199.389232][ T36] audit: type=1400 audit(1750439042.194:19999): avc: denied { read } for pid=5519 comm="syz.5.2068" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 199.411980][ T36] audit: type=1400 audit(1750439042.194:20000): avc: denied { create } for pid=5519 comm="syz.5.2068" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 199.433523][ T36] audit: type=1400 audit(1750439042.194:20001): avc: denied { read append } for pid=5519 comm="syz.5.2068" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 199.456818][ T36] audit: type=1400 audit(1750439042.194:20002): avc: denied { read } for pid=5519 comm="syz.5.2068" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 204.123555][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 204.123571][ T36] audit: type=1400 audit(1750439046.712:20035): avc: denied { execmem } for pid=5544 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 204.150390][ T36] audit: type=1400 audit(1750439046.731:20036): avc: denied { read write } for pid=1060 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.174748][ T36] audit: type=1400 audit(1750439046.750:20037): avc: denied { create } for pid=5547 comm="syz.6.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 204.195449][ T36] audit: type=1400 audit(1750439046.759:20038): avc: denied { read write } for pid=1222 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.631549][ T36] audit: type=1400 audit(1750439048.125:20039): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.958028][ T36] audit: type=1400 audit(1750439048.434:20040): avc: denied { execmem } for pid=5549 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 205.983571][ T36] audit: type=1400 audit(1750439048.434:20041): avc: denied { create } for pid=5551 comm="syz.7.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 206.004456][ T36] audit: type=1400 audit(1750439048.434:20042): avc: denied { create } for pid=5551 comm="syz.7.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 206.024147][ T36] audit: type=1400 audit(1750439048.434:20043): avc: denied { create } for pid=5551 comm="syz.7.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 206.044668][ T36] audit: type=1400 audit(1750439048.434:20044): avc: denied { create } for pid=5551 comm="syz.7.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 209.937708][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 209.937725][ T36] audit: type=1400 audit(1750439052.156:20062): avc: denied { execmem } for pid=5563 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 209.968033][ T36] audit: type=1400 audit(1750439052.166:20063): avc: denied { read write } for pid=5566 comm="syz.6.2088" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 trawcon="system_u:object_r:hald_var_run_t:s0" [ 209.995722][ T36] audit: type=1400 audit(1750439052.166:20064): avc: denied { mounton } for pid=5566 comm="syz.6.2088" path="/420" dev="tmpfs" ino=2342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 210.018032][ T36] audit: type=1400 audit(1750439052.166:20065): avc: denied { create } for pid=5566 comm="syz.6.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 210.037574][ T36] audit: type=1400 audit(1750439052.166:20066): avc: denied { read write } for pid=5564 comm="syz.5.2086" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 210.060793][ T36] audit: type=1400 audit(1750439052.185:20067): avc: denied { read write } for pid=1060 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.084948][ T36] audit: type=1400 audit(1750439052.185:20068): avc: denied { read write } for pid=1567 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.289985][ T36] audit: type=1400 audit(1750439052.484:20069): avc: denied { read write } for pid=1222 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 212.110623][ T36] audit: type=1400 audit(1750439054.186:20070): avc: denied { execmem } for pid=5571 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 212.139430][ T36] audit: type=1400 audit(1750439054.205:20071): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2833]" dev="pipefs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 212.415361][ T12] bridge_slave_1: left allmulticast mode [ 212.421025][ T12] bridge_slave_1: left promiscuous mode [ 212.428595][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.437017][ T12] bridge_slave_0: left allmulticast mode [ 212.442653][ T12] bridge_slave_0: left promiscuous mode [ 212.449133][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.562957][ T12] veth1_macvtap: left promiscuous mode [ 212.568444][ T12] veth0_vlan: left promiscuous mode [ 212.819514][ T12] bridge_slave_1: left allmulticast mode [ 212.825150][ T12] bridge_slave_1: left promiscuous mode [ 212.830763][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.838132][ T12] bridge_slave_0: left allmulticast mode [ 212.843850][ T12] bridge_slave_0: left promiscuous mode [ 212.849435][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.857200][ T12] bridge_slave_1: left allmulticast mode [ 212.862873][ T12] bridge_slave_1: left promiscuous mode [ 212.868438][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.875915][ T12] bridge_slave_0: left allmulticast mode [ 212.881547][ T12] bridge_slave_0: left promiscuous mode [ 212.887221][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.086789][ T12] tipc: Left network mode [ 213.092016][ T12] veth1_macvtap: left promiscuous mode [ 213.097531][ T12] veth0_vlan: left promiscuous mode [ 213.102852][ T12] veth1_macvtap: left promiscuous mode [ 213.108341][ T12] veth0_vlan: left promiscuous mode