last executing test programs: 3.33760428s ago: executing program 0 (id=854): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x80000000086) r4 = epoll_create1(0x80000) r5 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "2d185423bfe87441"}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x50}}, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="7ddfe27cd1c080fd7776ade56dbcdfe30e8a7b34b097e6f7d77171c9b443563ec280f866b78b", 0x26}, {&(0x7f00000001c0)="a238b5813002c4424612190773cb53dd1385d5ec33b482a9e587dadf00197ae8800dcb622995d40c614bb40f682ee5a82e55f606d7bb8e45f0aebdb5c849ec9551aba940bcda2e308781a017b5bb2e8d8510b82c620742a823bc15c1a9754b13395e128a4d1bd85d45511df674f93004bf3ae5ce5bf1789be6", 0x79}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x93}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x78, 0x0, 0xd, [0x3, 0x8a, 0x401, 0x67d, 0x6, 0xfffffffb, 0xfc6c, 0x8, 0xea4]}, @ssrr={0x89, 0xf, 0x15, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @lsrr={0x83, 0x1b, 0x9b, [@rand_addr=0x64010101, @local, @remote, @multicast1, @loopback, @private=0xa010102]}, @rr={0x7, 0x1b, 0xa4, [@dev={0xac, 0x14, 0x14, 0x21}, @remote, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @end, @rr={0x7, 0x7, 0x5b, [@broadcast]}, @timestamp={0x44, 0x20, 0x2c, 0x0, 0x7, [0x1, 0x1, 0x5, 0x1, 0x3, 0x0, 0x8]}]}}}], 0x128}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)={0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000480)={r2, 0x6, 0x3, r2}) write$cgroup_int(r11, &(0x7f00000003c0)=0x1000, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) 3.33728548s ago: executing program 0 (id=855): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}, 0xa8010000}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}}, 0x0) 3.228236252s ago: executing program 0 (id=856): openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) (async) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)="c0b26f04fd", 0x5) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0xf, 0x7fffffff, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x700, 0x7800, 0xb712, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0xf, 0x7fffffff, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x700, 0x7800, 0xb712, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x700, 0x40, 0xb9, 0x9a5, {{0x9, 0x4, 0x0, 0x37, 0x24, 0x68, 0x0, 0x5, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, {[@lsrr={0x83, 0x7, 0x8c, [@multicast2]}, @end, @lsrr={0x83, 0x7, 0x47, [@empty]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x700, 0x40, 0xb9, 0x9a5, {{0x9, 0x4, 0x0, 0x37, 0x24, 0x68, 0x0, 0x5, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2a}, {[@lsrr={0x83, 0x7, 0x8c, [@multicast2]}, @end, @lsrr={0x83, 0x7, 0x47, [@empty]}, @end]}}}}}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @local}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x354, r4, 0x0, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0xfffffffffffffdb7}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xdca4, 0x2, 0x9, 0x6}, {0x120, 0x5, 0x0, 0xdd}, {0xffb0, 0x8, 0xf, 0x7}, {0x6, 0x4}, {0xc, 0x3, 0x5, 0x8}, {0xc, 0x5, 0x5, 0x2}, {0x4, 0x6, 0x8, 0x1008}, {0xfff8, 0x88, 0x1, 0x2001}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x52}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x354}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3.227982381s ago: executing program 0 (id=857): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macvlan1\x00', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r2, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf0973ef3ee500", "d62cb2759e70ad75c3b50ef30b007511", "0c94cb4c"}, 0x28) sendto$inet6(r4, &(0x7f0000000300)="822d7bf9e161c7", 0x7, 0x8000, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendto$packet(r0, &(0x7f0000000040)="4a34a0", 0x3, 0x20004001, &(0x7f0000000140)={0x11, 0xf7, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) openat(r0, &(0x7f0000000200)='.\x00', 0x1, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000008000100", @ANYRES32=r1, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000080000"], 0xa4}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3.211803092s ago: executing program 0 (id=858): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9cc6d000) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) close(r2) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$peeksig(0x4209, r5, &(0x7f00000003c0)={0x1, 0x2000000}, 0x0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x3000)=nil, 0x930, 0xe, 0x2012, r4, 0x6000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mkdirat(r3, &(0x7f0000002040)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) (async) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) (async) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000002280)={{0x77359400}, {0x0, 0xea60}}) (async) getdents(r6, &(0x7f0000000140)=""/194, 0xc2) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x4052, r8, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x1, 0x840000000000a132, 0xffffffffffffffff, 0x1000) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x100000d, 0x50, r9, 0xf4882000) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 3.188405503s ago: executing program 0 (id=859): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000540)=ANY=[@ANYBLOB="120110010200004025ac1105a1a440000102030109026000f297578ae452c8885d9e1b020108007f0904000001020d00000524060001052400ff0f0d240f010b0800000105007f0006241ae47d1a8ba29893864cfadaaf4b477229000424135509058103080002f400090401000002000009058202200002900c0905f5a31000dc0b036ceed9d361fee440b61744252e97d28c6bea178286e54bc53ba3f54953ebc7d1554b9bddc98822d454a7df4fec1f360d87dd3926e3e2d5451114141002f9c4c037"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='1-2:5/'], 0x31) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000000000180009"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) capset(&(0x7f0000000400)={0x19980330, r6}, &(0x7f0000000440)={0x0, 0x7fffffff, 0x5, 0x1, 0x7, 0x9}) clock_adjtime(0x0, &(0x7f0000000200)={0x7fffffff, 0x8000000000000001, 0x80000001, 0xd6, 0x4, 0x2, 0x100, 0xd5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x100, 0x6, 0x2, 0x1, 0x8, 0x200, 0x8001, 0x4}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001a80)={0x20, 0x80, 0x1c, {0x401, 0x200, 0x309e, 0x8, 0x4, 0x3, 0x260, 0xf1c2, 0x9, 0x5, 0x7, 0x2df4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000003b80)={0x14, 0x0, &(0x7f0000003b40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) close(r8) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) syz_open_procfs(r9, &(0x7f0000001840)='fd\x00') accept4$tipc(r8, 0x0, 0x0, 0x800) sendfile(r7, r8, 0x0, 0x4) 2.526086772s ago: executing program 3 (id=868): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="8394f6", 0x3, 0x8000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000700)="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", 0x5aa}], 0x1}}], 0x1, 0x4004404) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r2, @ANYBLOB="93132cbd7000fcdbdf2512"], 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0x40804) 2.525277732s ago: executing program 3 (id=869): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x6, 0x4, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0xfffd, 0x0, @multicast1}}]}, 0x50}}, 0x0) 2.472499843s ago: executing program 3 (id=870): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r0, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x1, 0x840000000000a132, 0xffffffffffffffff, 0x1000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xd1383000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r1, 0x200000ffcfff) 2.470037503s ago: executing program 3 (id=871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x8, 0x7fffffffffffffff}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, &(0x7f0000020240), 0x10010) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r5, 0x0) sendto$inet6(r0, &(0x7f0000000340)="4e44287258a41245e7eacf9cf268206136a965e69ccd941640d2feb6920dff39d740a6ca29bf3c8bc16155bd9951180280348e62b06375ebf0600d689e9d995a8ae317d2c361f920769de16fcde86782b9f29a578a58a8c1974da0d3fae431d031aecb9be9e1c353059722e5c0f11f1f9fac85cec4bdc509976405d6848d19d8420f792762578c050a641cf6ef8db4cd460b7937c99e53f9e839fe0cb103a63d1cd1237f2749b61edd312964099136e995ea260144f715f65c3988e91dbe01c2b81ff56298ad4a1bd448e1f865", 0xcd, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x40, @private2}, 0x1c) 2.355842225s ago: executing program 3 (id=872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x40, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x40}}, 0x0) (fail_nth: 4) 2.295063516s ago: executing program 3 (id=873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r3, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1.232178291s ago: executing program 2 (id=877): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x7ff, 0x0, "03880a17f2cd8bad"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000380)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000000c0)={{r4, 0xfffffffffffffffb, 0x7, 0x8000000000000000, 0x0, 0xf83, 0x9, 0xf931, 0x4, 0xb885, 0x0, 0x9, 0x4, 0x9, 0xff}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0xd) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x9, 0x9, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xeeee0000, 0x1c7056}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0xff, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x80000000, 0xffffffff, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000340)=@req3={0x801000, 0xfffffff9, 0x1000, 0x37, 0x7ff, 0xf83, 0x3}, 0x1c) 1.143056183s ago: executing program 2 (id=878): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000740), 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') pread64(r3, &(0x7f0000033240)=""/102391, 0x18ff7, 0xfffffffffffffffe) (async) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x4) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r7, 0x107, 0x16, 0x0, 0x0) (async) ioctl$UI_SET_LEDBIT(r6, 0x40045569, 0x3) (async) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) (async) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r5, 0xffffd000) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.000110445s ago: executing program 2 (id=881): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcb03dfc5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7548b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1368c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(0x0, 0x101000, 0x1e8) read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020}, 0x2020) r2 = dup(r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1e030cc03c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd"], 0xffdd) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000140)=ANY=[]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback={0x300}, 0x0, 0x0, 0x1000, 0x200, 0xa, 0x20}, {}, {0x0, 0x0, 0x9, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 902.638356ms ago: executing program 2 (id=882): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r3}, 0xffffffffffffffd1) splice(r0, &(0x7f0000000000)=0x8, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x800, 0x5) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) timer_create(0x2, 0x0, &(0x7f0000000140)=0x0) timer_gettime(r6, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e21e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000080)={0x80000002}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x301201, 0x0) ioctl$BLKBSZSET(r8, 0x40081271, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r9 = creat(&(0x7f0000000140)='./file0\x00', 0x10) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x572, 0x0, 0x1}]}) sendfile(r4, r4, 0x0, 0x5e7d) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0xee, 0x0, &(0x7f0000000240)="904e31e49acd7cfcd261daab5e54dae7c64c614a288d617a27c56cdfc2c326a57eb72a3bc52d3ba8e8a0f2a50356c395de06c5c51bdb67877a51e53e8b75eb92d213337123cea72f5eb0dc99de3217dd5fe15d938b48b7fc4e75e54c8c5a6d4b396f9fd13317c326538608fd839d47b1e7e948fe387dd7a44ab871089491ce41871b67aa181350280298b010837ef741d2bedb22b178f28ffea18472ce6574093d25d429c0844a76ab290ae099698640512cb6daa5432ca43bcdca04e334ea0defdbf317c052145784159488395881e14796e4f690119e69d12ddbf7b9cbf5a0d42896974db8393fe8c9d62a2665"}) 555.504222ms ago: executing program 2 (id=884): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) writev(r0, &(0x7f0000003e80)=[{&(0x7f0000000b00)="e17d7d078ebb15423428cac1adc4ddb2fe673df0848eda8fd7583195e04acc0e9de3214e3c37317e64a41a5f4e456de63a6fd60f62b8cf87fc6ac3fd4b6149b381d699f9d6e1903b1e38d813d8683f70d243405ff35838d23fd52a747ecc92ff475688909dbb548e6dfaea6e4788f2e0fb04ec9df48cd4d046d59bf086333ccc98f05e7941f8d6494eafa400519cd627d2c716843b0d1b605963090a6aecd18d52bc75c3c7c2431883274a77296313978f180e02e81432adf1efd7bce230716eb58b78642183441cd83dd10e46233cf20aaf99fee605ed76e32bcaf2946a74fd2a7961f238c6492c6a", 0xe9}, {&(0x7f0000000240)="2d52e91a4d80", 0x6}, {&(0x7f0000000280)="a2e621f20a8a64f93cc8f55e2268bf579274c09a6bd7cd92888dbeb80b0245fb0a77f417b0079ec81b12bd534effe1d67ac67dd486af84", 0x37}, {&(0x7f0000000c00)="282d86c7e4a80e881b5c1a69b1714ab6c6cb85fdfe66b4bb25183e1dba50f3cfab949cc4c299601e0b32620155765ed0d47056677630da37b76bf19a8c4879a5b59883bba280ec6e51fc2f31241686901f1f7ed71d26c3c4c9d6c495d1a36c2f5b163bcfb81ac800b6843bf8589e68df9611172fc75e96489c4a7befcfc94a4e051bba8b39dfa1f5626e784093b68fc70bc246f7eed622816c78eb7480011fc356c90154b6b5f45c606ce738eee242f728eadd77f3d709ace27a3ef2d2a94291ace46d6eace81f9fb3b09950eb94273726ed1e0416c12e3da2364cfa0e9922cfa9c5e64e3f149f327d539096eca45decc41fd7", 0xf3}, {&(0x7f0000000d00)="55fbb78c79fe64dab9c9207c9a8d3bcd45437d178fc765da54e06004bd0d5c64f31ae8e866fd80b050e07070445d33ab18b9bf6078fe07bbe4ddb12812a3527eafa35333fc24af195310cf3bae46ec050a6a0e109d867ad714884398bad2f8d9b16ad2f6178e7f6a836dca8ff58d39d6f54ac0339ac1e132ed1fb132b035a59aab041fee5c4fd0c0ded8b2da527722209769887275f06e9b5b4a955ca34a28f5332f625d58e6871ba86fc20fafe4ec7a", 0xb0}, {&(0x7f0000000dc0)="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", 0x43c}], 0x6) (fail_nth: 4) 410.274973ms ago: executing program 2 (id=885): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB="000504000000b6e792d6672b0c5f411c6c63a8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x10000000000000bf, 0x0, [{0x277, 0x0, 0xffffffffffffff8f}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000700)={0x0, 0x15, 0x4, "5c87dc7a"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0x24, 0x2, {0x2, 0x24}}, 0x0}, &(0x7f0000000640)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="40070800000095d70d5722136df6"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) shutdown(r5, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000)=0x8, 0x4) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x4000000000000, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f100, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x280002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) syz_usb_ep_read(r0, 0x6, 0xae, &(0x7f0000000740)=""/174) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 310.488025ms ago: executing program 1 (id=890): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r0, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x1fd}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x4b564d02, 0x0, 0x3}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2400000044fe80000000000000000000000000002a37200000200002000a1f"], 0x6c}}, 0x0) dup2(r5, r4) close_range(r4, 0xffffffffffffffff, 0x0) 139.182048ms ago: executing program 1 (id=891): syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x4, 0xd000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x40087543, 0x200000000000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8900) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_batadv\x00', 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) read$FUSE(r7, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000000)={0xa, 0x2, 0x101, @empty}, 0x1c) shutdown(r0, 0x1) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x2, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040044}, 0x20040000) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0x13, r0, 0xf9b83000) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x1400037e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) 56.790798ms ago: executing program 1 (id=892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x161800, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x5, 0x70bd2d, 0x25dfdbfe, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCGSID(r4, 0x5429, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x7, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0xffffffff, 0xd66}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, 0x0) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) write$cgroup_pressure(r8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)=@ethtool_coalesce={0x1, 0x8cb4, 0xfffffff7, 0x5, 0x101, 0x6, 0x1, 0x800, 0x0, 0x8001, 0x4, 0x4, 0x2, 0x7, 0xffffffff, 0x40, 0x80000001, 0x1d3, 0x9, 0x5c7, 0x4, 0x0, 0x5}}) r9 = signalfd4(r6, &(0x7f0000000040)={[0x1]}, 0x8, 0x800) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @loopback}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000200)={'ip6erspan0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x2d, 0x4, 0x0, {0x11, @sctp_ip4_spec={@multicast2, @loopback, 0x4e22, 0x4e23, 0x5}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 0x9, 0x2, [0x400, 0xb]}, @sctp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x15}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x4e21, 0x4e22, 0x7}, {0x0, @remote, 0x9, 0x401, [0x4, 0x2f]}, 0x0, 0x8001}, 0x4, [0x2, 0x1, 0x8, 0x6]}}) 290.3µs ago: executing program 1 (id=893): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/65, 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x2, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000280)=0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) (async) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@delpolicy={0x12c, 0x14, 0x200, 0x70bd25, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@loopback, 0x4e23, 0xd0dd, 0x4e22, 0x4, 0x0, 0xa17bb4c59274ebe3, 0x100, 0x33, 0x0, r2}, 0x0, 0x2}, [@algo_crypt={0x96, 0x2, {{'pcbc(aes-aesni)\x00'}, 0x270, "553cd2dbadd71c4c6edd304e6c64501b96f5c15729fbca6b9b8f144b97a2af6233a90839282588e66ad0bf56abde1b0342b3aa6eb05e293b8ba2f27792abdae208df84295ac0d6f2fafdb79438b9"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e21, @in6=@local}}, @srcaddr={0x14, 0xd, @in=@multicast1}, @offload={0xc, 0x1c, {r5, 0x1}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@delpolicy={0x12c, 0x14, 0x200, 0x70bd25, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@loopback, 0x4e23, 0xd0dd, 0x4e22, 0x4, 0x0, 0xa17bb4c59274ebe3, 0x100, 0x33, 0x0, r2}, 0x0, 0x2}, [@algo_crypt={0x96, 0x2, {{'pcbc(aes-aesni)\x00'}, 0x270, "553cd2dbadd71c4c6edd304e6c64501b96f5c15729fbca6b9b8f144b97a2af6233a90839282588e66ad0bf56abde1b0342b3aa6eb05e293b8ba2f27792abdae208df84295ac0d6f2fafdb79438b9"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e21, @in6=@local}}, @srcaddr={0x14, 0xd, @in=@multicast1}, @offload={0xc, 0x1c, {r5, 0x1}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) 153.82µs ago: executing program 1 (id=894): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = gettid() fcntl$setown(r1, 0x8, r2) syz_open_procfs(r2, &(0x7f0000000040)='io\x00') recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0) 0s ago: executing program 1 (id=895): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x3ff, @any, 0x7, 0x1}, 0xe) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000000)={0x8, 0x1}) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): om the interface descriptor's value: 2 [ 56.172662][ T64] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 56.182006][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.190099][ T64] usb 3-1: Product: syz [ 56.194412][ T64] usb 3-1: Manufacturer: syz [ 56.199527][ T64] usb 3-1: SerialNumber: syz [ 56.213781][ T64] usb 3-1: config 0 descriptor?? [ 56.220070][ T308] usb 4-1: USB disconnect, device number 6 [ 56.220760][ T36] audit: type=1326 audit(1750460338.710:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1285 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 56.249756][ T36] audit: type=1326 audit(1750460338.710:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1285 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 56.273081][ T36] audit: type=1326 audit(1750460338.740:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1285 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 56.296835][ T36] audit: type=1326 audit(1750460338.740:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1285 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 56.320382][ T36] audit: type=1326 audit(1750460338.740:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1285 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 56.433765][ T64] smsc95xx v2.0.0 [ 56.437453][ T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 56.447692][ T64] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 56.479687][ T36] audit: type=1400 audit(1750460338.955:307): avc: denied { read } for pid=1293 comm="syz.3.366" path="socket:[11205]" dev="sockfs" ino=11205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.666485][ T36] audit: type=1400 audit(1750460339.133:308): avc: denied { connect } for pid=1298 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.016562][ T64] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 57.177207][ T64] usb 1-1: no configurations [ 57.181871][ T64] usb 1-1: can't read configurations, error -22 [ 57.337127][ T64] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 57.362844][ T1312] input: syz0 as /devices/virtual/input/input28 [ 57.379309][ T1312] rust_binder: Error while translating object. [ 57.379352][ T1312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.379576][ T1313] rust_binder: Error while translating object. [ 57.385989][ T1312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 57.395322][ T1313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.410573][ T1313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 57.487787][ T1271] rust_binder: Read failure Err(EFAULT) in pid:275 [ 57.498863][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 57.516303][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 57.526643][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 57.534208][ T64] usb 1-1: no configurations [ 57.538822][ T64] usb 1-1: can't read configurations, error -22 [ 57.546103][ T64] usb usb1-port1: attempt power cycle [ 57.551659][ T9] usb 2-1: USB disconnect, device number 11 [ 57.914123][ T64] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 57.936301][ T64] usb 1-1: no configurations [ 57.940950][ T64] usb 1-1: can't read configurations, error -22 [ 58.085086][ T64] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 58.107191][ T64] usb 1-1: no configurations [ 58.111861][ T64] usb 1-1: can't read configurations, error -22 [ 58.118583][ T64] usb usb1-port1: unable to enumerate USB device [ 58.162357][ T36] audit: type=1400 audit(1750460340.528:309): avc: denied { getopt } for pid=1324 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.258625][ T1327] rust_binder: Write failure EFAULT in pid:285 [ 58.266700][ T308] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 58.439139][ T308] usb 4-1: unable to get BOS descriptor or descriptor too short [ 58.447375][ T308] usb 4-1: not running at top speed; connect to a high speed hub [ 58.458344][ T308] usb 4-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 58.468825][ T308] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 58.477832][ T308] usb 4-1: config 1 has no interface number 1 [ 58.484029][ T308] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 58.496886][ T308] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 58.509628][ T308] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.518782][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.526806][ T308] usb 4-1: Product: syz [ 58.530964][ T308] usb 4-1: Manufacturer: syz [ 58.535592][ T308] usb 4-1: SerialNumber: syz [ 58.756575][ T1319] rust_binder: Write failure EINVAL in pid:196 [ 58.759733][ T308] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 58.775113][ T308] usb 4-1: USB disconnect, device number 7 [ 58.862546][ T64] usb 3-1: USB disconnect, device number 12 [ 58.950885][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.204750][ T1345] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 59.204769][ T1345] rust_binder: Error while translating object. [ 59.213590][ T1345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.219809][ T1345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244 [ 59.257723][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 59.257742][ T1348] SELinux: policydb version 2031026196 does not match my version range 15-33 [ 59.257742][ T36] audit: type=1400 audit(1750460341.548:316): avc: denied { load_policy } for pid=1347 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.302368][ T1348] SELinux: failed to load policy [ 59.349426][ T1354] netlink: 76 bytes leftover after parsing attributes in process `syz.3.389'. [ 59.420721][ T308] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 59.580988][ T308] usb 2-1: Using ep0 maxpacket: 16 [ 59.587268][ T308] usb 2-1: config 0 interface 0 altsetting 67 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.600379][ T308] usb 2-1: config 0 interface 0 has no altsetting 0 [ 59.607161][ T308] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 59.616300][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.634663][ T308] usb 2-1: config 0 descriptor?? [ 59.666454][ T386] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 59.837404][ T386] usb 3-1: Using ep0 maxpacket: 16 [ 59.844411][ T386] usb 3-1: config 123 has an invalid interface number: 105 but max is 1 [ 59.852881][ T386] usb 3-1: config 123 has an invalid interface number: 114 but max is 1 [ 59.861309][ T386] usb 3-1: config 123 has no interface number 0 [ 59.867632][ T386] usb 3-1: config 123 has no interface number 1 [ 59.873979][ T386] usb 3-1: config 123 interface 105 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 59.888079][ T386] usb 3-1: config 123 interface 105 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 59.899420][ T386] usb 3-1: config 123 interface 105 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 59.910355][ T386] usb 3-1: config 123 interface 105 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 59.921569][ T386] usb 3-1: config 123 interface 105 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 59.932469][ T386] usb 3-1: config 123 interface 105 altsetting 6 has an endpoint descriptor with address 0x26, changing to 0x6 [ 59.944953][ T386] usb 3-1: config 123 interface 105 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 59.956039][ T386] usb 3-1: config 123 interface 114 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 59.967159][ T386] usb 3-1: config 123 interface 114 altsetting 129 has a duplicate endpoint with address 0x1, skipping [ 59.978289][ T386] usb 3-1: config 123 interface 114 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 59.991110][ T386] usb 3-1: config 123 interface 114 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 60.002231][ T386] usb 3-1: config 123 interface 114 altsetting 129 has an invalid endpoint descriptor of length 6, skipping [ 60.013810][ T386] usb 3-1: config 123 interface 114 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 60.024926][ T386] usb 3-1: config 123 interface 114 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 60.036520][ T386] usb 3-1: config 123 interface 114 altsetting 129 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 60.048075][ T386] usb 3-1: config 123 interface 114 altsetting 129 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 60.061758][ T386] usb 3-1: config 123 interface 105 has no altsetting 0 [ 60.068810][ T386] usb 3-1: config 123 interface 114 has no altsetting 0 [ 60.076082][ T308] usbhid 2-1:0.0: can't add hid device: -71 [ 60.082144][ T308] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 60.093219][ T308] usb 2-1: USB disconnect, device number 12 [ 60.099443][ T386] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=10.b3 [ 60.109187][ T386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.117803][ T386] usb 3-1: Product: á°Š [ 60.122559][ T386] usb 3-1: Manufacturer: à  [ 60.127209][ T386] usb 3-1: SerialNumber: 筺⇉写儗줜ꎴ먺㻥ऱ왙⟨噋喒㌎辻첑ด쨺堜å†êˆ­ã¢ì†¿ëµ¼á‰·ê·¶ê„ˆã¿»êµéŠë•…̤徦ê½ä£‡ç™§ë§³å„¿ [ 60.311874][ T1379] capability: warning: `syz.3.398' uses 32-bit capabilities (legacy support in use) [ 60.330004][ T36] audit: type=1400 audit(1750460342.559:317): avc: denied { relabelfrom } for pid=1378 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.349809][ T36] audit: type=1400 audit(1750460342.559:318): avc: denied { relabelto } for pid=1378 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.370498][ T36] audit: type=1400 audit(1750460342.587:319): avc: denied { read } for pid=1362 comm="syz.2.393" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.371394][ T1363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.401108][ T1363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.414360][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 60.530868][ T1383] rust_binder: Error in use_page_slow: ESRCH [ 60.530894][ T1383] rust_binder: use_range failure ESRCH [ 60.537138][ T1383] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 60.542856][ T1383] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.551005][ T1383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:298 [ 60.564079][ T1384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.575774][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.598810][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.608926][ T9] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 60.618037][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.627892][ T9] usb 1-1: config 0 descriptor?? [ 60.640903][ T386] usb 3-1: USB disconnect, device number 13 [ 60.873848][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 61.034088][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 61.041054][ T31] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 61.050217][ T31] usb 2-1: config 0 has no interface number 0 [ 61.057817][ T31] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 61.069014][ T31] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 61.072402][ T9] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 61.082788][ T31] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 61.088461][ T9] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 61.097263][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.104647][ T9] hid-led 0003:27B8:01ED.0006: unknown main item tag 0x0 [ 61.112960][ T31] usb 2-1: Product: syz [ 61.124442][ T31] usb 2-1: Manufacturer: syz [ 61.129250][ T31] usb 2-1: SerialNumber: syz [ 61.135008][ T31] usb 2-1: config 0 descriptor?? [ 61.140302][ T1387] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 61.147765][ T1387] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 61.326729][ T1400] FAULT_INJECTION: forcing a failure. [ 61.326729][ T1400] name failslab, interval 1, probability 0, space 0, times 0 [ 61.340030][ T1400] CPU: 0 UID: 0 PID: 1400 Comm: syz.2.405 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 61.340065][ T1400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.340085][ T1400] Call Trace: [ 61.340092][ T1400] [ 61.340101][ T1400] __dump_stack+0x21/0x30 [ 61.340139][ T1400] dump_stack_lvl+0x10c/0x190 [ 61.340163][ T1400] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.340187][ T1400] dump_stack+0x19/0x20 [ 61.340207][ T1400] should_fail_ex+0x3d9/0x530 [ 61.340230][ T1400] should_failslab+0xac/0x100 [ 61.340262][ T1400] kmem_cache_alloc_noprof+0x42/0x3a0 [ 61.340282][ T1400] ? security_inode_alloc+0x51/0x200 [ 61.340309][ T1400] security_inode_alloc+0x51/0x200 [ 61.340329][ T1400] inode_init_always_gfp+0x756/0x9e0 [ 61.340355][ T1400] alloc_inode+0xc5/0x270 [ 61.340380][ T1400] new_inode_pseudo+0x19/0x40 [ 61.340406][ T1400] alloc_anon_inode+0x22/0x350 [ 61.340423][ T1400] dma_buf_export+0x2fd/0xa70 [ 61.340443][ T1400] udmabuf_create+0xdda/0x1340 [ 61.340467][ T1400] ? udmabuf_ioctl+0x2e0/0x2e0 [ 61.340487][ T1400] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 61.340515][ T1400] ? __kasan_check_write+0x18/0x20 [ 61.340535][ T1400] udmabuf_ioctl+0x1d2/0x2e0 [ 61.340552][ T1400] ? __cfi_mutex_unlock+0x10/0x10 [ 61.340570][ T1400] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 61.340591][ T1400] ? __fget_files+0x2c5/0x340 [ 61.340615][ T1400] ? bpf_lsm_file_ioctl+0xd/0x20 [ 61.340635][ T1400] ? security_file_ioctl+0x34/0xd0 [ 61.340659][ T1400] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 61.340677][ T1400] __se_sys_ioctl+0x132/0x1b0 [ 61.340702][ T1400] __x64_sys_ioctl+0x7f/0xa0 [ 61.340728][ T1400] x64_sys_call+0x1878/0x2ee0 [ 61.340754][ T1400] do_syscall_64+0x58/0xf0 [ 61.340778][ T1400] ? clear_bhb_loop+0x35/0x90 [ 61.340804][ T1400] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.340830][ T1400] RIP: 0033:0x7f7b8478e929 [ 61.340850][ T1400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.340868][ T1400] RSP: 002b:00007f7b855ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.340891][ T1400] RAX: ffffffffffffffda RBX: 00007f7b849b5fa0 RCX: 00007f7b8478e929 [ 61.340905][ T1400] RDX: 0000200000000080 RSI: 0000000040187542 RDI: 0000000000000003 [ 61.340917][ T1400] RBP: 00007f7b855ce090 R08: 0000000000000000 R09: 0000000000000000 [ 61.340928][ T1400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.340940][ T1400] R13: 0000000000000000 R14: 00007f7b849b5fa0 R15: 00007fffe89ba2c8 [ 61.340955][ T1400] [ 61.372379][ T1387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.456569][ T1405] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 61.470544][ T1387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.638358][ T1387] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 61.656401][ T1387] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 61.690186][ T1417] netlink: 324 bytes leftover after parsing attributes in process `syz.2.411'. [ 61.760729][ T1284] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 61.779296][ T1425] fuse: Bad value for 'fd' [ 61.865969][ T1434] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.884234][ T31] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 61.900918][ T1284] usb 4-1: device descriptor read/64, error -71 [ 61.900945][ T31] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 61.925859][ T31] asix 2-1:0.251: probe with driver asix failed with error -5 [ 61.942431][ T31] usb 2-1: USB disconnect, device number 13 [ 62.177521][ T1284] usb 4-1: device descriptor read/64, error -71 [ 62.433899][ T1284] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 62.490177][ T36] audit: type=1400 audit(1750460344.578:320): avc: denied { getopt } for pid=1439 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.583391][ T1284] usb 4-1: device descriptor read/64, error -71 [ 62.804826][ T1447] fuse: Bad value for 'fd' [ 62.855013][ T36] audit: type=1400 audit(1750460344.924:321): avc: denied { bind } for pid=1452 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.874529][ T1284] usb 4-1: device descriptor read/64, error -71 [ 62.989613][ T1284] usb usb4-port1: attempt power cycle [ 63.004841][ T1466] fuse: Bad value for 'fd' [ 63.171089][ T386] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 63.198459][ T9] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 63.211274][ T9] usb 1-1: USB disconnect, device number 14 [ 63.282347][ T1474] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 63.290990][ T1474] overlayfs: missing 'lowerdir' [ 63.296501][ T1474] binder: Bad value for 'defcontext' [ 63.320616][ T1476] random: crng reseeded on system resumption [ 63.332480][ T386] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.342780][ T386] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.352493][ T386] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.355640][ T1476] rust_binder: Got transaction with invalid offset. [ 63.361612][ T1476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.362346][ T386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.368546][ T1284] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 63.368636][ T1476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 63.378881][ T386] usb 3-1: SerialNumber: syz [ 63.407243][ T1284] usb 4-1: device descriptor read/8, error -71 [ 63.414830][ T1478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:248 [ 63.427525][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 63.496352][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.496502][ T1481] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 63.546417][ T1284] usb 4-1: device descriptor read/8, error -71 [ 63.609154][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 63.615797][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 63.627101][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 63.643318][ T31] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 63.657468][ T386] usb 3-1: 0:2 : does not exist [ 63.667206][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.678393][ T386] usb 3-1: USB disconnect, device number 14 [ 63.693117][ T31] usb 2-1: config 0 descriptor?? [ 63.844228][ T1284] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 63.853442][ T1488] fuse: Invalid rootmode [ 63.868305][ T1284] usb 4-1: device descriptor read/8, error -71 [ 63.880229][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.881863][ T1490] binder: Unknown parameter 'fscontext?}' [ 64.027268][ T1284] usb 4-1: device descriptor read/8, error -71 [ 64.130687][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 64.137403][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 64.143583][ T1284] usb usb4-port1: unable to enumerate USB device [ 64.146943][ T31] usb 2-1: USB disconnect, device number 14 [ 64.542156][ T1506] can0: slcan on ptm0. [ 64.592162][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 64.679589][ T1524] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 64.690383][ T1524] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 64.752462][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 64.759150][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.770192][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.783112][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.792216][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.807601][ T31] usb 3-1: config 0 descriptor?? [ 64.823362][ T1533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.455'. [ 65.051602][ T9] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 65.211868][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 65.249375][ T31] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.256754][ T31] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.264041][ T31] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.271313][ T31] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.278574][ T31] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.285794][ T31] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.293043][ T31] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.300296][ T31] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.307522][ T31] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.314777][ T31] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 65.324154][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input33 [ 65.350784][ T9] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 65.399192][ T31] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 65.467379][ T1284] usb 3-1: USB disconnect, device number 15 [ 65.511048][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 65.524379][ T1506] can0 (unregistered): slcan off ptm0. [ 65.525773][ T9] usb usb2-port1: attempt power cycle [ 65.537846][ T1553] usb usb5: selecting invalid altsetting 2 [ 65.636613][ T1567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 65.768277][ T1581] rust_binder: Write failure EINVAL in pid:243 [ 65.799533][ T64] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 65.895883][ T9] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 65.928157][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 65.981174][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 65.989046][ T64] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 66.000240][ T64] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 66.013694][ T64] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 66.039215][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.052098][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.052128][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.056401][ T64] usb 1-1: config 0 descriptor?? [ 66.059166][ T1600] rust_binder: inc_ref_done called when no active inc_refs [ 66.070371][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.077594][ T9] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 66.094409][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.094436][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.104990][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.111537][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.111824][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 66.118199][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.129923][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.136559][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.137985][ T9] usb usb2-port1: unable to enumerate USB device [ 66.143303][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.164473][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.171179][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.177951][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.184786][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.191320][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.198271][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.204772][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.211329][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.217831][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.224331][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.230814][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.237389][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.243906][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.250400][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.256852][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.263370][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.269879][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.276344][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.283024][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.289515][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.296218][ T1599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.510917][ T64] usbhid 1-1:0.0: can't add hid device: -71 [ 66.524196][ T64] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 66.541357][ T64] usb 1-1: USB disconnect, device number 15 [ 66.705835][ T36] audit: type=1400 audit(1750460348.518:322): avc: denied { getattr } for pid=1628 comm="syz.3.474" path="socket:[14502]" dev="sockfs" ino=14502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.765263][ T36] audit: type=1400 audit(1750460348.584:323): avc: denied { watch watch_reads } for pid=1654 comm="syz.3.475" path="/103" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.766782][ T1655] overlayfs: conflicting lowerdir path [ 66.809182][ T1657] rust_binder: Failed copying remainder into alloc: EFAULT [ 66.809202][ T1657] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 66.816532][ T1657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 66.824936][ T1657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:267 [ 66.975223][ T64] hid (null): report_id 915 is invalid [ 66.993786][ T64] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 67.001271][ T64] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 67.008706][ T64] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 67.016091][ T64] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 67.023532][ T64] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 67.031065][ T64] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 67.038482][ T64] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 67.045925][ T64] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 67.053374][ T64] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 67.060984][ T64] hid-generic 01FF:0004:0400.0008: report_id 915 is invalid [ 67.068307][ T64] hid-generic 01FF:0004:0400.0008: item 0 4 1 8 parsing failed [ 67.076473][ T64] hid-generic 01FF:0004:0400.0008: probe with driver hid-generic failed with error -22 [ 67.137121][ T36] audit: type=1400 audit(1750460348.930:324): avc: denied { setcheckreqprot } for pid=1684 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 67.236789][ T1695] FAULT_INJECTION: forcing a failure. [ 67.236789][ T1695] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.249922][ T1695] CPU: 0 UID: 0 PID: 1695 Comm: syz.3.493 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 67.249958][ T1695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.249971][ T1695] Call Trace: [ 67.249980][ T1695] [ 67.249987][ T1695] __dump_stack+0x21/0x30 [ 67.250009][ T1695] dump_stack_lvl+0x10c/0x190 [ 67.250026][ T1695] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.250044][ T1695] ? _raw_spin_lock_bh+0x90/0x120 [ 67.250065][ T1695] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 67.250085][ T1695] dump_stack+0x19/0x20 [ 67.250102][ T1695] should_fail_ex+0x3d9/0x530 [ 67.250119][ T1695] should_fail+0xf/0x20 [ 67.250134][ T1695] should_fail_usercopy+0x1e/0x30 [ 67.250151][ T1695] _copy_from_user+0x22/0xb0 [ 67.250171][ T1695] sock_do_ioctl+0x18b/0x330 [ 67.250189][ T1695] ? sock_show_fdinfo+0xd0/0xd0 [ 67.250206][ T1695] ? __cfi_vfs_write+0x10/0x10 [ 67.250224][ T1695] ? __kasan_check_write+0x18/0x20 [ 67.250240][ T1695] ? mutex_unlock+0x8b/0x240 [ 67.250255][ T1695] sock_ioctl+0x634/0x7b0 [ 67.250278][ T1695] ? __cfi_sock_ioctl+0x10/0x10 [ 67.250299][ T1695] ? __fget_files+0x2c5/0x340 [ 67.250320][ T1695] ? bpf_lsm_file_ioctl+0xd/0x20 [ 67.250336][ T1695] ? security_file_ioctl+0x34/0xd0 [ 67.250357][ T1695] ? __cfi_sock_ioctl+0x10/0x10 [ 67.250372][ T1695] __se_sys_ioctl+0x132/0x1b0 [ 67.250393][ T1695] __x64_sys_ioctl+0x7f/0xa0 [ 67.250413][ T1695] x64_sys_call+0x1878/0x2ee0 [ 67.250432][ T1695] do_syscall_64+0x58/0xf0 [ 67.250452][ T1695] ? clear_bhb_loop+0x35/0x90 [ 67.250475][ T1695] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.250496][ T1695] RIP: 0033:0x7f5579d8e929 [ 67.250509][ T1695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.250522][ T1695] RSP: 002b:00007f557abcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.250539][ T1695] RAX: ffffffffffffffda RBX: 00007f5579fb5fa0 RCX: 00007f5579d8e929 [ 67.250551][ T1695] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000003 [ 67.250562][ T1695] RBP: 00007f557abcd090 R08: 0000000000000000 R09: 0000000000000000 [ 67.250577][ T1695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.250590][ T1695] R13: 0000000000000000 R14: 00007f5579fb5fa0 R15: 00007ffee18a6618 [ 67.250607][ T1695] [ 67.515860][ T1700] binder: Unknown parameter 'statsE_' [ 67.754874][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 67.915138][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 67.921513][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 67.932722][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 67.945994][ T31] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 67.955269][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.967734][ T31] usb 3-1: config 0 descriptor?? [ 68.087843][ T1713] fuse: Bad value for 'rootmode' [ 68.207721][ T36] audit: type=1400 audit(1750460349.931:325): avc: denied { lock } for pid=1719 comm="syz.3.503" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.231148][ T36] audit: type=1400 audit(1750460349.941:326): avc: denied { read append } for pid=1719 comm="syz.3.503" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.255423][ T36] audit: type=1400 audit(1750460349.941:327): avc: denied { open } for pid=1719 comm="syz.3.503" path="/119/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.302428][ T36] audit: type=1400 audit(1750460349.997:328): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.407113][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 68.413629][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 68.424054][ T31] usb 3-1: USB disconnect, device number 16 [ 68.462633][ T36] audit: type=1400 audit(1750460350.175:329): avc: denied { setattr } for pid=1727 comm="syz.3.507" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.580900][ T36] audit: type=1400 audit(1750460350.278:330): avc: denied { write } for pid=1733 comm="syz.3.510" name="usbmon2" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.604639][ T36] audit: type=1400 audit(1750460350.278:331): avc: denied { ioctl } for pid=1733 comm="syz.3.510" path="/dev/usbmon2" dev="devtmpfs" ino=97 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.824838][ T1738] fuse: Unknown parameter 'use00000000000000000000' [ 69.036572][ T1753] rust_binder: Write failure EFAULT in pid:333 [ 69.063850][ T1753] block device autoloading is deprecated and will be removed. [ 69.086952][ T1753] syz.2.518: attempt to access beyond end of device [ 69.086952][ T1753] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 69.179948][ T1757] FAULT_INJECTION: forcing a failure. [ 69.179948][ T1757] name failslab, interval 1, probability 0, space 0, times 0 [ 69.192761][ T1757] CPU: 0 UID: 0 PID: 1757 Comm: syz.3.519 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 69.192798][ T1757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.192811][ T1757] Call Trace: [ 69.192816][ T1757] [ 69.192823][ T1757] __dump_stack+0x21/0x30 [ 69.192845][ T1757] dump_stack_lvl+0x10c/0x190 [ 69.192863][ T1757] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.192882][ T1757] dump_stack+0x19/0x20 [ 69.192899][ T1757] should_fail_ex+0x3d9/0x530 [ 69.192921][ T1757] should_failslab+0xac/0x100 [ 69.192951][ T1757] kmem_cache_alloc_noprof+0x42/0x3a0 [ 69.192978][ T1757] ? fuse_request_alloc+0x43/0x200 [ 69.192998][ T1757] fuse_request_alloc+0x43/0x200 [ 69.193017][ T1757] ? fuse_get_req+0x42c/0xb00 [ 69.193052][ T1757] fuse_get_req+0x445/0xb00 [ 69.193071][ T1757] ? fuse_request_alloc+0x200/0x200 [ 69.193091][ T1757] __fuse_simple_request+0x27f/0x1970 [ 69.193112][ T1757] ? __cfi___fuse_simple_request+0x10/0x10 [ 69.193134][ T1757] ? is_bpf_text_address+0x17b/0x1a0 [ 69.193155][ T1757] ? setattr_prepare+0x212/0xb70 [ 69.193173][ T1757] fuse_do_setattr+0x172d/0x2ca0 [ 69.193198][ T1757] ? __cfi_fuse_do_setattr+0x10/0x10 [ 69.193223][ T1757] ? is_bpf_text_address+0x17b/0x1a0 [ 69.193245][ T1757] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 69.193264][ T1757] ? arch_stack_walk+0x10b/0x170 [ 69.193285][ T1757] ? stack_trace_save+0x9d/0xe0 [ 69.193304][ T1757] ? __kasan_slab_alloc+0x73/0x90 [ 69.193325][ T1757] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 69.193342][ T1757] ? security_inode_alloc+0x51/0x200 [ 69.193359][ T1757] ? inode_init_always_gfp+0x756/0x9e0 [ 69.193380][ T1757] ? alloc_inode+0xc5/0x270 [ 69.193400][ T1757] ? new_inode+0x25/0x1e0 [ 69.193421][ T1757] ? proc_pid_make_inode+0x25/0x140 [ 69.193440][ T1757] ? proc_pident_instantiate+0x6d/0x2c0 [ 69.193470][ T1757] ? __asan_memcpy+0x5a/0x80 [ 69.193487][ T1757] ? avc_has_perm_noaudit+0x286/0x360 [ 69.193503][ T1757] ? avc_has_perm+0x144/0x220 [ 69.193518][ T1757] ? __cfi_avc_has_perm+0x10/0x10 [ 69.193533][ T1757] ? irqentry_exit+0x4a/0x60 [ 69.193549][ T1757] ? sysvec_call_function_single+0x4d/0x90 [ 69.193565][ T1757] ? asm_sysvec_call_function_single+0x1f/0x30 [ 69.193590][ T1757] fuse_setattr+0x647/0x2100 [ 69.193605][ T1757] ? __cfi_fuse_setattr+0x10/0x10 [ 69.193618][ T1757] ? is_bpf_text_address+0x17b/0x1a0 [ 69.193639][ T1757] ? avc_has_perm_noaudit+0x268/0x360 [ 69.193655][ T1757] ? __asan_memcpy+0x5a/0x80 [ 69.193672][ T1757] ? avc_has_perm_noaudit+0x286/0x360 [ 69.193687][ T1757] ? avc_has_perm+0x144/0x220 [ 69.193704][ T1757] ? __cfi_avc_has_perm+0x10/0x10 [ 69.193719][ T1757] ? stack_depot_save_flags+0x38/0x800 [ 69.193738][ T1757] ? selinux_inode_setattr+0x5bc/0x7c0 [ 69.193758][ T1757] ? kasan_save_track+0x3e/0x80 [ 69.193777][ T1757] ? __cfi_selinux_inode_setattr+0x10/0x10 [ 69.193797][ T1757] ? __x64_sys_utimensat+0x150/0x230 [ 69.193813][ T1757] ? current_time+0x1d8/0x280 [ 69.193827][ T1757] ? __cfi_current_time+0x10/0x10 [ 69.193842][ T1757] ? bpf_lsm_inode_setattr+0xd/0x20 [ 69.193856][ T1757] ? try_break_deleg+0x7c/0x140 [ 69.193872][ T1757] ? __cfi_fuse_setattr+0x10/0x10 [ 69.193885][ T1757] notify_change+0xbac/0xee0 [ 69.193903][ T1757] vfs_utimes+0x3fa/0x570 [ 69.193918][ T1757] ? __cfi_vfs_utimes+0x10/0x10 [ 69.193933][ T1757] ? asm_sysvec_call_function_single+0x1f/0x30 [ 69.193956][ T1757] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 69.193975][ T1757] do_utimes+0x1bc/0x2a0 [ 69.193990][ T1757] ? __cfi_do_utimes+0x10/0x10 [ 69.194009][ T1757] ? __kasan_check_write+0x18/0x20 [ 69.194035][ T1757] __x64_sys_utimensat+0x150/0x230 [ 69.194051][ T1757] ? __cfi___x64_sys_utimensat+0x10/0x10 [ 69.194068][ T1757] ? __kasan_check_read+0x15/0x20 [ 69.194094][ T1757] x64_sys_call+0x24df/0x2ee0 [ 69.194121][ T1757] do_syscall_64+0x58/0xf0 [ 69.194146][ T1757] ? clear_bhb_loop+0x35/0x90 [ 69.194168][ T1757] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.194190][ T1757] RIP: 0033:0x7f5579d8e929 [ 69.194203][ T1757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.194216][ T1757] RSP: 002b:00007f557abac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 69.194233][ T1757] RAX: ffffffffffffffda RBX: 00007f5579fb6080 RCX: 00007f5579d8e929 [ 69.194245][ T1757] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 69.194255][ T1757] RBP: 00007f557abac090 R08: 0000000000000000 R09: 0000000000000000 [ 69.194265][ T1757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.194274][ T1757] R13: 0000000000000001 R14: 00007f5579fb6080 R15: 00007ffee18a6618 [ 69.194287][ T1757] [ 69.772292][ T1761] fuse: Unknown parameter 'use00000000000000000000' [ 70.137599][ T308] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 70.308581][ T308] usb 3-1: Using ep0 maxpacket: 32 [ 70.318082][ T308] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 70.336407][ T308] usb 3-1: config 0 has no interface number 0 [ 70.345707][ T308] usb 3-1: config 0 interface 184 has no altsetting 0 [ 70.359215][ T308] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 70.372705][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.391657][ T308] usb 3-1: Product: syz [ 70.395954][ T308] usb 3-1: Manufacturer: syz [ 70.402413][ T308] usb 3-1: SerialNumber: syz [ 70.413517][ T308] usb 3-1: config 0 descriptor?? [ 70.423262][ T308] smsc75xx v1.0.0 [ 71.123163][ T308] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 71.135271][ T308] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 71.145440][ T308] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 71.156577][ T308] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 71.166304][ T308] usb 3-1: USB disconnect, device number 17 [ 71.353465][ T1785] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 71.353515][ T1785] rust_binder: Read failure Err(EFAULT) in pid:348 [ 71.362394][ T1785] rust_binder: Write failure EINVAL in pid:348 [ 71.553144][ T1793] binder: Bad value for 'stats' [ 71.684218][ T1795] fuse: Unknown parameter 'user_i00000000000000000000' [ 71.772590][ T1801] FAULT_INJECTION: forcing a failure. [ 71.772590][ T1801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.786016][ T1801] CPU: 1 UID: 0 PID: 1801 Comm: syz.1.536 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 71.786057][ T1801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.786072][ T1801] Call Trace: [ 71.786081][ T1801] [ 71.786090][ T1801] __dump_stack+0x21/0x30 [ 71.786138][ T1801] dump_stack_lvl+0x10c/0x190 [ 71.786167][ T1801] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.786197][ T1801] dump_stack+0x19/0x20 [ 71.786222][ T1801] should_fail_ex+0x3d9/0x530 [ 71.786251][ T1801] should_fail+0xf/0x20 [ 71.786274][ T1801] should_fail_usercopy+0x1e/0x30 [ 71.786301][ T1801] _copy_from_user+0x22/0xb0 [ 71.786333][ T1801] memdup_user+0x81/0x180 [ 71.786358][ T1801] ? strndup_user+0x40/0xd0 [ 71.786382][ T1801] strndup_user+0x6c/0xd0 [ 71.786408][ T1801] __se_sys_mount+0x9f/0x480 [ 71.786436][ T1801] ? ksys_write+0x1ef/0x250 [ 71.786465][ T1801] ? __x64_sys_mount+0xf0/0xf0 [ 71.786494][ T1801] __x64_sys_mount+0xc3/0xf0 [ 71.786522][ T1801] x64_sys_call+0x2021/0x2ee0 [ 71.786553][ T1801] do_syscall_64+0x58/0xf0 [ 71.786583][ T1801] ? clear_bhb_loop+0x35/0x90 [ 71.786619][ T1801] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.786653][ T1801] RIP: 0033:0x7f241438e929 [ 71.786673][ T1801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.786691][ T1801] RSP: 002b:00007f24151a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.786716][ T1801] RAX: ffffffffffffffda RBX: 00007f24145b5fa0 RCX: 00007f241438e929 [ 71.786736][ T1801] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 71.786753][ T1801] RBP: 00007f24151a9090 R08: 0000200000000340 R09: 0000000000000000 [ 71.786769][ T1801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.786785][ T1801] R13: 0000000000000000 R14: 00007f24145b5fa0 R15: 00007ffcf872c138 [ 71.786806][ T1801] [ 72.122187][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 72.122206][ T36] audit: type=1400 audit(1750460353.591:334): avc: denied { setopt } for pid=1809 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.218828][ T1815] fuse: Unknown parameter 'user_i00000000000000000000' [ 72.248492][ T36] audit: type=1400 audit(1750460353.712:335): avc: denied { setattr } for pid=1816 comm="syz.1.543" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.285039][ T1817] rust_binder: Error while translating object. [ 72.285123][ T1817] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.291839][ T1817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 72.342810][ T1819] rust_binder: Write failure EINVAL in pid:356 [ 72.413722][ T1823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:358 [ 72.519939][ T1828] serio: Serial port ttynull [ 72.755190][ T1832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.755638][ T1832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:360 [ 73.053599][ T36] audit: type=1400 audit(1750460354.461:336): avc: denied { getopt } for pid=1836 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.108731][ T1839] fuse: Unknown parameter 'user_id00000000000000000000' [ 73.237109][ T36] audit: type=1326 audit(1750460354.639:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1840 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 73.247172][ T1844] binder: Unknown parameter 'context' [ 73.308180][ T36] audit: type=1326 audit(1750460354.639:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1840 comm="syz.3.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 73.321933][ T1844] binder: Unknown parameter 'context' [ 73.343618][ T1844] binder: Unknown parameter 'context' [ 73.353532][ T1844] binder: Unknown parameter 'context' [ 73.466342][ T1844] binder: Unknown parameter 'context' [ 73.483851][ T1844] binder: Unknown parameter 'context' [ 73.503519][ T1844] binder: Unknown parameter 'context' [ 73.509144][ T1844] binder: Unknown parameter 'context' [ 73.524846][ T1844] binder: Unknown parameter 'context' [ 73.530540][ T1844] binder: Unknown parameter 'context' [ 73.553873][ T1844] binder: Unknown parameter 'context' [ 73.572996][ T1844] binder: Unknown parameter 'context' [ 73.588937][ T1844] binder: Unknown parameter 'context' [ 73.594723][ T1844] binder: Unknown parameter 'context' [ 73.608444][ T1844] binder: Unknown parameter 'context' [ 73.614358][ T1844] binder: Unknown parameter 'context' [ 73.620046][ T1844] binder: Unknown parameter 'context' [ 73.632867][ T1844] binder: Unknown parameter 'context' [ 73.640078][ T1844] binder: Unknown parameter 'context' [ 73.655233][ T1844] binder: Unknown parameter 'context' [ 73.661115][ T1844] binder: Unknown parameter 'context' [ 73.666964][ T1844] binder: Unknown parameter 'context' [ 73.672599][ T1844] binder: Unknown parameter 'context' [ 73.685131][ T1844] binder: Unknown parameter 'context' [ 73.691440][ T1844] binder: Unknown parameter 'context' [ 73.697349][ T1844] binder: Unknown parameter 'context' [ 73.703724][ T1844] binder: Unknown parameter 'context' [ 73.709376][ T1844] binder: Unknown parameter 'context' [ 73.716075][ T1844] binder: Unknown parameter 'context' [ 73.727412][ T1844] binder: Unknown parameter 'context' [ 73.734432][ T1844] binder: Unknown parameter 'context' [ 73.740124][ T1844] binder: Unknown parameter 'context' [ 73.753387][ T1844] binder: Unknown parameter 'context' [ 73.815478][ T1868] rust_binder: Error in use_page_slow: ESRCH [ 73.815496][ T1868] rust_binder: use_range failure ESRCH [ 73.846078][ T1868] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 73.846107][ T1868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 73.854138][ T1868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:384 [ 73.865549][ T1869] fuse: Unknown parameter 'user_id00000000000000000000' [ 73.955777][ T1876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.955808][ T1876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.970831][ T1872] kvm: pic: non byte write [ 74.019206][ T36] audit: type=1400 audit(1750460355.369:339): avc: denied { bind } for pid=1882 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.055390][ T36] audit: type=1400 audit(1750460355.369:340): avc: denied { node_bind } for pid=1882 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 74.162772][ T1896] fuse: Unknown parameter 'user_id00000000000000000000' [ 74.316426][ T36] audit: type=1400 audit(1750460355.650:341): avc: denied { create } for pid=1902 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 74.358841][ T36] audit: type=1400 audit(1750460355.687:342): avc: denied { name_bind } for pid=1904 comm="syz.3.577" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 74.362674][ T1905] rust_binder: Write failure EFAULT in pid:393 [ 74.422285][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 74.454308][ T386] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 74.605116][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.616236][ T308] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 74.625714][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.635487][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.644819][ T45] usb 3-1: Product: syz [ 74.649766][ T45] usb 3-1: Manufacturer: syz [ 74.654573][ T45] usb 3-1: SerialNumber: syz [ 74.659365][ T386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.670981][ T386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.688002][ T386] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.703400][ T386] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.712851][ T386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.727063][ T386] usb 2-1: config 0 descriptor?? [ 74.785527][ T308] usb 4-1: Using ep0 maxpacket: 8 [ 74.792096][ T308] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.803356][ T308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.810390][ T308] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 74.819733][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.833787][ T308] usb 4-1: config 0 descriptor?? [ 75.058129][ T308] usbhid 4-1:0.0: can't add hid device: -71 [ 75.065615][ T308] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 75.080173][ T308] usb 4-1: USB disconnect, device number 12 [ 75.439564][ T386] usbhid 2-1:0.0: can't add hid device: -71 [ 75.448192][ T386] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 75.459530][ T386] usb 2-1: USB disconnect, device number 19 [ 75.783343][ T1919] fuse: Bad value for 'fd' [ 75.783618][ T45] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 75.794741][ T45] cdc_ncm 3-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 75.803063][ T45] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 76.073792][ T45] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 76.109044][ T45] usb 3-1: USB disconnect, device number 18 [ 76.115514][ T45] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 76.163111][ T1943] fuse: Bad value for 'fd' [ 76.302829][ T1284] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 76.473748][ T1284] usb 2-1: Using ep0 maxpacket: 16 [ 76.480065][ T1284] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 76.488827][ T1284] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.499153][ T1284] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.505825][ T308] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 76.509952][ T1284] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.524724][ T1284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.532762][ T1284] usb 2-1: Product: syz [ 76.536937][ T1284] usb 2-1: Manufacturer: syz [ 76.541572][ T1284] usb 2-1: SerialNumber: syz [ 76.634588][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 76.667263][ T308] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.680749][ T308] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 76.692951][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 76.712431][ T308] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.726896][ T308] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 76.736086][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.744137][ T308] usb 4-1: Product: syz [ 76.748326][ T308] usb 4-1: Manufacturer: syz [ 76.753033][ T308] usb 4-1: SerialNumber: syz [ 76.758812][ T308] usb 4-1: config 0 descriptor?? [ 76.765227][ T1951] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.774363][ T308] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input37 [ 76.802083][ T1984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:381 [ 76.815670][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 76.831466][ T9] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 76.839964][ T9] usb 1-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 76.850520][ T9] usb 1-1: config 0 has no interface number 0 [ 76.856736][ T9] usb 1-1: config 0 interface 49 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.869811][ T9] usb 1-1: config 0 interface 49 has no altsetting 0 [ 76.878034][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=500b, bcdDevice= 5.19 [ 76.887271][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.896295][ T9] usb 1-1: Product: syz [ 76.900738][ T9] usb 1-1: Manufacturer: syz [ 76.905500][ T9] usb 1-1: SerialNumber: syz [ 76.910865][ T9] usb 1-1: config 0 descriptor?? [ 76.924507][ T1990] fuse: Bad value for 'fd' [ 76.986847][ T1284] usb 2-1: 0:2 : does not exist [ 77.006789][ T1951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.015469][ T1951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.029877][ T36] audit: type=1400 audit(1750460358.195:343): avc: denied { read } for pid=94 comm="acpid" name="event4" dev="devtmpfs" ino=557 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 77.110297][ T64] usb 4-1: USB disconnect, device number 13 [ 77.124427][ T1999] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 77.131849][ T1999] rust_binder: Write failure EINVAL in pid:396 [ 77.149437][ T2001] 9pnet_virtio: no channels available for device syz [ 77.609854][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.616330][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.638604][ T1284] usb 2-1: USB disconnect, device number 20 [ 77.645349][ T9] snd-usb-audio 1-1:0.49: probe with driver snd-usb-audio failed with error -2 [ 77.666302][ T1542] udevd[1542]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.49/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 77.710241][ T2009] netlink: 393 bytes leftover after parsing attributes in process `syz.3.608'. [ 77.719401][ T2010] netlink: 393 bytes leftover after parsing attributes in process `syz.3.608'. [ 77.728908][ T2009] rust_binder: Error in use_page_slow: ESRCH [ 77.728923][ T2009] rust_binder: use_range failure ESRCH [ 77.734962][ T2009] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 77.740470][ T2009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.748626][ T2009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:431 [ 77.821035][ T1543] udevd[1543]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.897483][ T2014] input: syz0 as /devices/virtual/input/input38 [ 77.972244][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 77.972262][ T36] audit: type=1400 audit(1750460359.075:346): avc: denied { associate } for pid=2024 comm="syz.3.614" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.364981][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 78.526358][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.537365][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.547154][ T45] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 78.556231][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.564913][ T45] usb 4-1: config 0 descriptor?? [ 78.578915][ T1284] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 78.738955][ T1284] usb 2-1: Using ep0 maxpacket: 16 [ 78.745263][ T1284] usb 2-1: config 4 has an invalid interface number: 15 but max is 0 [ 78.753475][ T1284] usb 2-1: config 4 has no interface number 0 [ 78.759615][ T1284] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 78.769635][ T1284] usb 2-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 78.779606][ T1284] usb 2-1: config 4 interface 15 has no altsetting 0 [ 78.788021][ T1284] usb 2-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 78.797173][ T1284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.805231][ T1284] usb 2-1: Product: syz [ 78.809415][ T1284] usb 2-1: Manufacturer: syz [ 78.814073][ T1284] usb 2-1: SerialNumber: syz [ 78.819743][ T2041] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.827028][ T2041] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.002611][ T45] hid-led 0003:27B8:01ED.0009: unknown main item tag 0x0 [ 79.009793][ T45] hid-led 0003:27B8:01ED.0009: unknown main item tag 0x0 [ 79.017057][ T45] hid-led 0003:27B8:01ED.0009: unknown main item tag 0x0 [ 79.024136][ T45] hid-led 0003:27B8:01ED.0009: unknown main item tag 0x0 [ 79.031229][ T45] hid-led 0003:27B8:01ED.0009: unknown main item tag 0x0 [ 79.049788][ T2041] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.057200][ T2041] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.220747][ T45] hid-led 0003:27B8:01ED.0009: probe with driver hid-led failed with error -71 [ 79.234322][ T45] usb 4-1: USB disconnect, device number 14 [ 79.299129][ T2045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.622'. [ 79.313304][ T36] audit: type=1326 audit(1750460360.320:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 79.313797][ T2045] binder: Unknown parameter 'context' [ 79.337381][ T36] audit: type=1326 audit(1750460360.320:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 79.365561][ T36] audit: type=1326 audit(1750460360.320:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 79.388995][ T36] audit: type=1326 audit(1750460360.348:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 79.412467][ T36] audit: type=1326 audit(1750460360.348:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 79.435868][ T36] audit: type=1326 audit(1750460360.348:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 79.439251][ T2048] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.459306][ T36] audit: type=1326 audit(1750460360.348:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 79.491011][ T36] audit: type=1326 audit(1750460360.348:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 79.514205][ T36] audit: type=1326 audit(1750460360.348:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz.3.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5579d8e929 code=0x7ffc0000 [ 79.775426][ T354] Bluetooth: hci0: command 0x1003 tx timeout [ 79.775440][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.872701][ T9] usb 1-1: USB disconnect, device number 16 [ 80.460764][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 80.471732][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 80.697869][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 80.712587][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 80.724130][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 80.735611][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 80.747125][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 80.758450][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 80.769813][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 80.781164][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 80.792622][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 80.803930][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 80.815350][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 80.826695][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 80.838339][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 80.849709][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 80.861252][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 80.872633][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 80.877758][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 80.891761][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 80.908466][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 80.920198][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 80.931610][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 80.942989][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 80.954307][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 80.966016][ T1284] ax88179_178a 2-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 80.984658][ T1284] ax88179_178a 2-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, Toshiba USB Ethernet Adapter, 86:ea:6f:eb:a6:66 [ 81.003817][ T1284] usb 2-1: USB disconnect, device number 21 [ 81.022806][ T1284] ax88179_178a 2-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, Toshiba USB Ethernet Adapter [ 81.070589][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.082662][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.093853][ T45] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 81.103259][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.115692][ T45] usb 3-1: config 0 descriptor?? [ 81.367688][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 81.539814][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.550033][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.559865][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 81.569001][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 81.577160][ T9] usb 1-1: SerialNumber: syz [ 81.851392][ T9] usb 1-1: 0:2 : does not exist [ 81.863669][ T9] usb 1-1: USB disconnect, device number 17 [ 82.041559][ T1543] udevd[1543]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.099370][ T2106] overlayfs: upper fs does not support tmpfile. [ 82.331817][ T2122] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 82.346743][ T2124] netlink: 'syz.3.652': attribute type 4 has an invalid length. [ 82.347411][ T2126] fuse: Unknown parameter 'fd0x0000000000000003' [ 82.514632][ T2147] fuse: Unknown parameter 'fd0x0000000000000003' [ 82.810915][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 82.972479][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.982760][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 194, using maximum allowed: 30 [ 82.993686][ T9] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 83.006852][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.013503][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 83.022674][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.033544][ T9] usb 1-1: config 0 descriptor?? [ 83.505807][ T2161] rust_binder: Write failure EINVAL in pid:491 [ 83.519076][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 83.519096][ T36] audit: type=1400 audit(1750460362.259:372): avc: denied { ioctl } for pid=2162 comm="syz.3.668" path="socket:[18124]" dev="sockfs" ino=18124 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.541699][ T2165] FAULT_INJECTION: forcing a failure. [ 83.541699][ T2165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.570098][ T2165] CPU: 1 UID: 0 PID: 2165 Comm: syz.3.669 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 83.570134][ T2165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.570147][ T2165] Call Trace: [ 83.570154][ T2165] [ 83.570162][ T2165] __dump_stack+0x21/0x30 [ 83.570190][ T2165] dump_stack_lvl+0x10c/0x190 [ 83.570233][ T2165] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.570259][ T2165] dump_stack+0x19/0x20 [ 83.570281][ T2165] should_fail_ex+0x3d9/0x530 [ 83.570303][ T2165] should_fail+0xf/0x20 [ 83.570324][ T2165] should_fail_usercopy+0x1e/0x30 [ 83.570345][ T2165] _copy_from_user+0x22/0xb0 [ 83.570371][ T2165] csum_and_copy_from_iter_full+0x4c5/0x1c00 [ 83.570402][ T2165] ? __cfi_csum_and_copy_from_iter_full+0x10/0x10 [ 83.570432][ T2165] ip_generic_getfrag+0x137/0x290 [ 83.570460][ T2165] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 83.570488][ T2165] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 83.570516][ T2165] raw6_getfrag+0x25a/0x390 [ 83.570539][ T2165] ? __alloc_skb+0x1bc/0x370 [ 83.570567][ T2165] __ip6_append_data+0x2dab/0x3ab0 [ 83.570591][ T2165] ? __cfi_raw6_getfrag+0x10/0x10 [ 83.570612][ T2165] ? __kasan_check_write+0x18/0x20 [ 83.570636][ T2165] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 83.570666][ T2165] ? ip6_setup_cork+0x1390/0x1390 [ 83.570686][ T2165] ? __kasan_check_read+0x15/0x20 [ 83.570709][ T2165] ? ip6_setup_cork+0x9de/0x1390 [ 83.570731][ T2165] ? lock_sock_nested+0x1f5/0x290 [ 83.570755][ T2165] ip6_append_data+0x1ba/0x380 [ 83.570777][ T2165] ? __cfi_raw6_getfrag+0x10/0x10 [ 83.570800][ T2165] rawv6_sendmsg+0x1314/0x1840 [ 83.570826][ T2165] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 83.570849][ T2165] ? selinux_socket_sendmsg+0x284/0x380 [ 83.570874][ T2165] ? is_bpf_text_address+0x17b/0x1a0 [ 83.570900][ T2165] ? avc_has_perm_noaudit+0x268/0x360 [ 83.570921][ T2165] ? inet_send_prepare+0x64/0x4f0 [ 83.570939][ T2165] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 83.570959][ T2165] inet_sendmsg+0x113/0x120 [ 83.570978][ T2165] sock_write_iter+0x3cb/0x4f0 [ 83.571000][ T2165] ? __cfi_sock_write_iter+0x10/0x10 [ 83.571023][ T2165] ? selinux_file_permission+0x88b/0xb30 [ 83.571054][ T2165] do_iter_readv_writev+0x4f2/0x6a0 [ 83.571081][ T2165] ? vfs_iter_read+0x5f0/0x5f0 [ 83.571108][ T2165] ? bpf_lsm_file_permission+0xd/0x20 [ 83.571132][ T2165] vfs_writev+0x485/0xcf0 [ 83.571163][ T2165] ? do_writev+0x2d0/0x2d0 [ 83.571192][ T2165] ? vfs_write+0x8ba/0xe80 [ 83.571233][ T2165] do_writev+0x14d/0x2d0 [ 83.571263][ T2165] ? vfs_readv+0xa50/0xa50 [ 83.571293][ T2165] ? __kasan_check_read+0x15/0x20 [ 83.571316][ T2165] __x64_sys_writev+0x81/0x90 [ 83.571343][ T2165] x64_sys_call+0x1fbb/0x2ee0 [ 83.571369][ T2165] do_syscall_64+0x58/0xf0 [ 83.571395][ T2165] ? clear_bhb_loop+0x35/0x90 [ 83.571424][ T2165] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.571452][ T2165] RIP: 0033:0x7f5579d8e929 [ 83.571470][ T2165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.571488][ T2165] RSP: 002b:00007f557abcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 83.571510][ T2165] RAX: ffffffffffffffda RBX: 00007f5579fb5fa0 RCX: 00007f5579d8e929 [ 83.571526][ T2165] RDX: 0000000000000006 RSI: 0000200000003e80 RDI: 0000000000000003 [ 83.571539][ T2165] RBP: 00007f557abcd090 R08: 0000000000000000 R09: 0000000000000000 [ 83.571553][ T2165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.571565][ T2165] R13: 0000000000000000 R14: 00007f5579fb5fa0 R15: 00007ffee18a6618 [ 83.571582][ T2165] [ 83.646977][ T2169] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 83.702364][ T2171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:497 [ 83.711815][ T2169] rust_binder: Read failure Err(EFAULT) in pid:497 [ 83.824073][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 83.840400][ T2173] loop0: detected capacity change from 0 to 8388608 [ 83.849566][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 83.982975][ T45] usb 3-1: USB disconnect, device number 19 [ 84.005636][ T2177] fuse: Unknown parameter 'fd0x0000000000000003' [ 84.055217][ T2182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313 [ 84.296910][ T45] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 84.365416][ T36] audit: type=1400 audit(1750460363.054:373): avc: denied { setattr } for pid=2196 comm="syz.1.682" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.387068][ T36] audit: type=1400 audit(1750460363.054:374): avc: denied { write } for pid=2196 comm="syz.1.682" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.407810][ T36] audit: type=1326 audit(1750460363.054:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.1.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241438e929 code=0x7fc00000 [ 84.431288][ T36] audit: type=1326 audit(1750460363.054:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.1.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241438e929 code=0x7fc00000 [ 84.454971][ T36] audit: type=1326 audit(1750460363.054:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.1.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241438e929 code=0x7fc00000 [ 84.478512][ T36] audit: type=1326 audit(1750460363.054:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.1.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241438e929 code=0x7fc00000 [ 84.501900][ T36] audit: type=1326 audit(1750460363.054:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.1.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241438e929 code=0x7fc00000 [ 84.525277][ T36] audit: type=1326 audit(1750460363.054:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.1.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241438e929 code=0x7fc00000 [ 84.549919][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.558027][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 84.566699][ T45] usb 3-1: config 1 interface 0 altsetting 166 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.579706][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 84.587895][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.40 [ 84.597073][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.605105][ T45] usb 3-1: Product: syz [ 84.609561][ T45] usb 3-1: Manufacturer: syz [ 84.614406][ T45] usb 3-1: SerialNumber: syz [ 84.944984][ T45] usbhid 3-1:1.0: can't add hid device: -71 [ 84.951034][ T45] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 84.963812][ T45] usb 3-1: USB disconnect, device number 20 [ 84.987676][ T2207] binder: Bad value for 'stats' [ 84.993390][ T2207] binder: Bad value for 'stats' [ 85.023911][ T2211] syzkaller0: entered allmulticast mode [ 85.177128][ T2218] syz.3.690 (2218): /proc/2217/oom_adj is deprecated, please use /proc/2217/oom_score_adj instead. [ 85.207949][ T2221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:429 [ 85.226186][ T2226] binder: Unknown parameter 'fscontext?}' [ 85.558417][ T1284] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 85.718795][ T1284] usb 3-1: Using ep0 maxpacket: 8 [ 85.725043][ T1284] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 85.735038][ T1284] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 85.746250][ T1284] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.755390][ T1284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.763457][ T1284] usb 3-1: Product: syz [ 85.767660][ T1284] usb 3-1: Manufacturer: syz [ 85.778602][ T9] usb 1-1: USB disconnect, device number 18 [ 85.784984][ T1284] usb 3-1: SerialNumber: syz [ 86.225552][ T2234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.234218][ T2234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.243600][ T2260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.254911][ T2260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.265032][ T2260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.280727][ T2234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.292232][ T2260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.305899][ T2234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.357430][ T1284] cdc_ncm 3-1:1.0: bind() failure [ 86.375901][ T1284] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 86.398399][ T1284] cdc_ncm 3-1:1.1: bind() failure [ 86.403307][ T2279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.403683][ T2279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:489 [ 86.411223][ T1284] usb 3-1: USB disconnect, device number 21 [ 86.439904][ T36] audit: type=1326 audit(1750460364.990:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2283 comm="syz.1.716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f241438e929 code=0x0 [ 86.659563][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 86.819879][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 86.826190][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 86.832949][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 86.842039][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.850757][ T45] usb 4-1: config 0 descriptor?? [ 87.348423][ T2296] rust_binder: Write failure EINVAL in pid:497 [ 87.361959][ T2299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.388816][ T2289] overlayfs: statfs failed on './file0' [ 87.444045][ T2306] fuse: Unknown parameter '' [ 87.504705][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 87.511437][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 87.520315][ T45] usb 4-1: USB disconnect, device number 15 [ 87.551643][ T2313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.551677][ T2313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 87.785605][ T2319] can: request_module (can-proto-0) failed. [ 87.948295][ T2336] mmap: syz.0.734 (2336) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.226628][ T2362] netlink: 168 bytes leftover after parsing attributes in process `syz.0.744'. [ 88.359107][ T2366] rust_binder: Failed copying remainder into alloc: EFAULT [ 88.359128][ T2366] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 88.366519][ T2366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 88.374878][ T2366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:379 [ 88.767577][ T2376] rust_binder: Write failure EINVAL in pid:468 [ 88.806721][ T2380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 88.813094][ T2380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:472 [ 88.924503][ T2343] overlayfs: statfs failed on './file0' [ 89.227012][ T45] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 89.385649][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 89.391923][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.403731][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.412848][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.420881][ T45] usb 3-1: Product: syz [ 89.425084][ T45] usb 3-1: Manufacturer: syz [ 89.429757][ T45] usb 3-1: SerialNumber: syz [ 89.436165][ T45] cdc_ncm 3-1:1.0: skipping garbage [ 89.441485][ T45] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 89.448882][ T45] cdc_ncm 3-1:1.0: bind() failure [ 89.567378][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 89.651883][ T2385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.660472][ T2385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.670272][ T45] usb 3-1: USB disconnect, device number 22 [ 89.719890][ T2417] input: syz1 as /devices/virtual/input/input40 [ 89.727737][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 89.736493][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 89.746215][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.755128][ T10] usb 1-1: config 0 descriptor?? [ 89.835051][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 89.835071][ T36] audit: type=1400 audit(1750460368.171:388): avc: denied { ioctl } for pid=2421 comm="syz.3.768" path="net:[4026532515]" dev="nsfs" ino=4026532515 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.978999][ T2403] 9pnet_virtio: no channels available for device syz [ 90.011287][ T36] audit: type=1400 audit(1750460368.330:389): avc: denied { remount } for pid=2437 comm="syz.1.775" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.040368][ T2441] rust_binder: Error while translating object. [ 90.040401][ T2441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 90.046758][ T2441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:531 [ 90.225852][ T2447] netlink: 304 bytes leftover after parsing attributes in process `syz.2.778'. [ 90.305083][ T45] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 90.315336][ T36] audit: type=1400 audit(1750460368.610:390): avc: denied { read } for pid=2449 comm="syz.2.779" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 90.352812][ T36] audit: type=1400 audit(1750460368.648:391): avc: denied { append } for pid=2451 comm="syz.2.780" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.376395][ T36] audit: type=1400 audit(1750460368.648:392): avc: denied { create } for pid=2451 comm="syz.2.780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 90.396576][ T36] audit: type=1400 audit(1750460368.648:393): avc: denied { getopt } for pid=2451 comm="syz.2.780" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 90.497469][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 90.503683][ T45] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 90.511828][ T45] usb 2-1: config 0 has no interface number 0 [ 90.519397][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 90.528471][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.536524][ T45] usb 2-1: Product: syz [ 90.540736][ T45] usb 2-1: Manufacturer: syz [ 90.545342][ T45] usb 2-1: SerialNumber: syz [ 90.550879][ T45] usb 2-1: config 0 descriptor?? [ 90.556726][ T45] smsc95xx v2.0.0 [ 90.732658][ T2075] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 90.894296][ T2075] usb 3-1: config 0 has an invalid interface number: 176 but max is 0 [ 90.902538][ T2075] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 90.911310][ T2075] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 90.920060][ T2075] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.930198][ T2075] usb 3-1: config 0 has no interface number 0 [ 90.936347][ T2075] usb 3-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 90.946190][ T2075] usb 3-1: config 0 interface 176 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.960673][ T2075] usb 3-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 90.969819][ T2075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.977991][ T2075] usb 3-1: Product: syz [ 90.982237][ T2075] usb 3-1: Manufacturer: syz [ 90.986942][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 90.997693][ T2075] usb 3-1: SerialNumber: syz [ 91.002761][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 91.012121][ T2075] usb 3-1: config 0 descriptor?? [ 91.179303][ T2463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:566 [ 91.234094][ T36] audit: type=1400 audit(1750460369.471:394): avc: denied { execmem } for pid=2468 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 91.287236][ T2470] rust_binder: 2456 RLIMIT_NICE not set [ 91.320143][ T2075] snd-usb-audio 3-1:0.176: probe with driver snd-usb-audio failed with error -2 [ 91.343373][ T2075] usb 3-1: USB disconnect, device number 23 [ 91.350788][ T2475] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 91.360677][ T2475] rust_binder: Write failure EINVAL in pid:490 [ 91.535158][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.176/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.940886][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 91.951090][ T10] asix 1-1:0.0: probe with driver asix failed with error -71 [ 91.959554][ T10] usb 1-1: USB disconnect, device number 19 [ 92.499840][ T2502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.499879][ T2502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:590 [ 92.566305][ T2511] FAULT_INJECTION: forcing a failure. [ 92.566305][ T2511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.588656][ T2511] CPU: 0 UID: 0 PID: 2511 Comm: syz.3.802 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 92.588690][ T2511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.588704][ T2511] Call Trace: [ 92.588711][ T2511] [ 92.588720][ T2511] __dump_stack+0x21/0x30 [ 92.588750][ T2511] dump_stack_lvl+0x10c/0x190 [ 92.588774][ T2511] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.588800][ T2511] ? __kasan_check_write+0x18/0x20 [ 92.588824][ T2511] ? proc_fail_nth_write+0x17e/0x210 [ 92.588843][ T2511] dump_stack+0x19/0x20 [ 92.588863][ T2511] should_fail_ex+0x3d9/0x530 [ 92.588880][ T2511] should_fail+0xf/0x20 [ 92.588896][ T2511] should_fail_usercopy+0x1e/0x30 [ 92.588913][ T2511] _copy_from_user+0x22/0xb0 [ 92.588940][ T2511] __sys_sendto+0x29e/0x6f0 [ 92.588969][ T2511] ? __cfi___sys_sendto+0x10/0x10 [ 92.588999][ T2511] ? __kasan_check_write+0x18/0x20 [ 92.589018][ T2511] ? __cfi_ksys_write+0x10/0x10 [ 92.589043][ T2511] __x64_sys_sendto+0xe9/0x100 [ 92.589065][ T2511] x64_sys_call+0x2c2c/0x2ee0 [ 92.589093][ T2511] do_syscall_64+0x58/0xf0 [ 92.589118][ T2511] ? clear_bhb_loop+0x35/0x90 [ 92.589147][ T2511] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.589169][ T2511] RIP: 0033:0x7f5579d8e929 [ 92.589183][ T2511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.589196][ T2511] RSP: 002b:00007f557abcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 92.589215][ T2511] RAX: ffffffffffffffda RBX: 00007f5579fb5fa0 RCX: 00007f5579d8e929 [ 92.589232][ T2511] RDX: 000000000000009d RSI: 00002000000001c0 RDI: 0000000000000003 [ 92.589246][ T2511] RBP: 00007f557abcd090 R08: 0000200000000000 R09: 0000000000000014 [ 92.589259][ T2511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.589272][ T2511] R13: 0000000000000000 R14: 00007f5579fb5fa0 R15: 00007ffee18a6618 [ 92.589288][ T2511] [ 92.884906][ T2520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:404 [ 93.063237][ T1284] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 93.218647][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 93.229679][ T45] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 93.238835][ T45] usb 2-1: USB disconnect, device number 22 [ 93.257187][ T1284] usb 4-1: config 0 has no interfaces? [ 93.258882][ T2533] random: crng reseeded on system resumption [ 93.267825][ T1284] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.277989][ T1284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.288934][ T1284] usb 4-1: config 0 descriptor?? [ 93.302143][ T2533] Restarting kernel threads ... done. [ 93.510742][ T1284] usb 4-1: USB disconnect, device number 16 [ 93.858243][ T2541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:409 [ 94.124914][ T2557] overlayfs: missing 'lowerdir' [ 94.175731][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x7 [ 94.184454][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x7 [ 94.196730][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.208870][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.221044][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.237342][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.247196][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.260594][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.269332][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.279015][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.288927][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.314974][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.328963][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.339923][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.353183][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.364315][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.374330][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.385391][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.395216][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.405056][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.414870][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.425868][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.435716][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.445575][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.461168][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.470976][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.480856][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.491836][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.500978][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.511716][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.521506][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.540552][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.551543][ T2564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=2564 comm=syz.2.821 [ 94.552671][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.565372][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.580515][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.588322][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.595935][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.603996][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.611675][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.619256][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.627231][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.649954][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.658438][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.680130][ T2566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.680168][ T2566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:521 [ 94.689952][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.723439][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.731724][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x6 [ 94.767899][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x3 [ 94.778815][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.786729][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.794378][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.802206][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.809931][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.817704][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.825240][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.852718][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.860353][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.867924][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.875487][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.883015][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.890755][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.898614][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.906469][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.916332][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.923894][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.931376][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.938921][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.946411][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.953986][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.961522][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.969165][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.976690][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 94.984248][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.030306][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.037812][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.048778][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.057906][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.065427][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.072863][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.080325][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.089045][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.097303][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.104748][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.112215][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.119689][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.127363][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.134821][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.142687][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.150179][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.157631][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.165863][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.176673][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.184165][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.199854][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.207562][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.215183][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.222625][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.230397][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.241076][ T36] audit: type=1326 audit(1750460373.222:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2588 comm="syz.1.832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f241438e929 code=0x0 [ 95.244450][ T2584] block device autoloading is deprecated and will be removed. [ 95.263898][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.277438][ T2584] syz.3.830: attempt to access beyond end of device [ 95.277438][ T2584] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 95.279000][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.300868][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.309390][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.317042][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.324642][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.332202][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.339626][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.349251][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.356424][ T2594] FAULT_INJECTION: forcing a failure. [ 95.356424][ T2594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.361792][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.377354][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.379386][ T2594] CPU: 0 UID: 0 PID: 2594 Comm: syz.3.834 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 95.379426][ T2594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.379441][ T2594] Call Trace: [ 95.379448][ T2594] [ 95.379458][ T2594] __dump_stack+0x21/0x30 [ 95.379491][ T2594] dump_stack_lvl+0x10c/0x190 [ 95.379519][ T2594] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.379548][ T2594] dump_stack+0x19/0x20 [ 95.379574][ T2594] should_fail_ex+0x3d9/0x530 [ 95.379602][ T2594] should_fail+0xf/0x20 [ 95.379626][ T2594] should_fail_usercopy+0x1e/0x30 [ 95.379670][ T2594] _copy_from_iter+0x1a3/0x14b0 [ 95.379702][ T2594] ? __kasan_check_write+0x18/0x20 [ 95.379729][ T2594] ? __build_skb_around+0x2a4/0x5a0 [ 95.379761][ T2594] ? __cfi__copy_from_iter+0x10/0x10 [ 95.379790][ T2594] ? check_stack_object+0x82/0x140 [ 95.379818][ T2594] ? __virt_addr_valid+0x2a6/0x380 [ 95.379853][ T2594] ? __check_object_size+0x455/0x620 [ 95.379882][ T2594] netlink_sendmsg+0x680/0xaf0 [ 95.379918][ T2594] ? __cfi_netlink_sendmsg+0x10/0x10 [ 95.379953][ T2594] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 95.379988][ T2594] ? security_socket_sendmsg+0x33/0xd0 [ 95.380024][ T2594] ? __cfi_netlink_sendmsg+0x10/0x10 [ 95.380064][ T2594] ____sys_sendmsg+0xa15/0xa70 [ 95.380103][ T2594] ? __sys_sendmsg_sock+0x50/0x50 [ 95.380140][ T2594] ? import_iovec+0x81/0xb0 [ 95.380173][ T2594] ___sys_sendmsg+0x220/0x2a0 [ 95.380208][ T2594] ? __sys_sendmsg+0x280/0x280 [ 95.380243][ T2594] ? proc_fail_nth_write+0x17e/0x210 [ 95.380266][ T2594] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 95.380299][ T2594] __x64_sys_sendmsg+0x1eb/0x2c0 [ 95.380321][ T2594] ? fput+0x1a5/0x240 [ 95.380357][ T2594] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 95.380378][ T2594] ? ksys_write+0x1ef/0x250 [ 95.380407][ T2594] ? __kasan_check_read+0x15/0x20 [ 95.380433][ T2594] x64_sys_call+0x2a4c/0x2ee0 [ 95.380463][ T2594] do_syscall_64+0x58/0xf0 [ 95.380493][ T2594] ? clear_bhb_loop+0x35/0x90 [ 95.380529][ T2594] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.380567][ T2594] RIP: 0033:0x7f5579d8e929 [ 95.380587][ T2594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.380606][ T2594] RSP: 002b:00007f557abcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.380650][ T2594] RAX: ffffffffffffffda RBX: 00007f5579fb5fa0 RCX: 00007f5579d8e929 [ 95.380669][ T2594] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 95.380684][ T2594] RBP: 00007f557abcd090 R08: 0000000000000000 R09: 0000000000000000 [ 95.380699][ T2594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.380713][ T2594] R13: 0000000000000000 R14: 00007f5579fb5fa0 R15: 00007ffee18a6618 [ 95.380733][ T2594] [ 95.415856][ T36] audit: type=1400 audit(1750460373.390:396): avc: denied { mount } for pid=2596 comm="syz.3.835" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.420019][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.693105][ T1284] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 95.693681][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.708469][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.715924][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.723328][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.730834][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.738274][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.745662][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.753132][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.760564][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.768168][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.775591][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.783026][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.790486][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.797888][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.805305][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.812762][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.820357][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.828180][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.835915][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.843383][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.850823][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.858301][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.865073][ T1284] usb 4-1: Using ep0 maxpacket: 16 [ 95.865977][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.875435][ T1284] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 95.881296][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.892321][ T1284] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.894958][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.905362][ T1284] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.915806][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.924777][ T1284] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.928890][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.937798][ T1284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.953403][ T1284] usb 4-1: Product: syz [ 95.957656][ T1284] usb 4-1: Manufacturer: syz [ 95.959356][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.964633][ T1284] usb 4-1: SerialNumber: syz [ 95.969841][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.982343][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.989779][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 95.997290][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.004771][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.012242][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.019775][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.027269][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.034701][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.042320][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.049795][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.057272][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.064691][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.072223][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.079706][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.087230][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.094678][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.102170][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.109581][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.117020][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.124483][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.131935][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.139378][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.146829][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.154330][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.161760][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.169262][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.176975][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.184672][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.185049][ T2608] rust_binder: Error while translating object. [ 96.192138][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.207935][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.211659][ T2608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.215445][ T2608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:539 [ 96.217292][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.246087][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.255077][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.262692][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.270122][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.277617][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.285096][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.295902][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.303386][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.310817][ T45] hid-generic 01FF:0004:0400.000A: unknown main item tag 0x0 [ 96.318963][ T45] hid-generic 01FF:0004:0400.000A: hidraw0: HID v0.05 Device [syz0] on syz1 [ 96.360550][ T2618] rust_binder: Write failure EINVAL in pid:544 [ 96.360862][ T2616] fido_id[2616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.422139][ T1284] usb 4-1: 0:2 : does not exist [ 96.516288][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 96.580291][ T2629] rust_binder: Write failure EINVAL in pid:430 [ 96.612745][ T2633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28789 sclass=netlink_route_socket pid=2633 comm=syz.0.848 [ 96.676631][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 96.682884][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 96.691206][ T10] usb 2-1: config 0 has no interface number 0 [ 96.697405][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 96.705696][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 96.714886][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.722998][ T10] usb 2-1: Product: syz [ 96.727274][ T10] usb 2-1: Manufacturer: syz [ 96.731915][ T10] usb 2-1: SerialNumber: syz [ 96.737395][ T10] usb 2-1: config 0 descriptor?? [ 96.743387][ T10] smsc75xx v1.0.0 [ 96.963899][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 96.975206][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 96.986530][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 96.997654][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 97.012096][ T10] usb 2-1: USB disconnect, device number 23 [ 97.481486][ T36] audit: type=1400 audit(1750460375.317:397): avc: denied { create } for pid=2655 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.501831][ T36] audit: type=1400 audit(1750460375.345:398): avc: denied { write } for pid=2655 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.527080][ T36] audit: type=1400 audit(1750460375.345:399): avc: denied { nlmsg_write } for pid=2655 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.555583][ T1284] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 97.574855][ T1284] usb 4-1: USB disconnect, device number 17 [ 97.585510][ T45] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 97.757092][ T1543] udevd[1543]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.773167][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 97.779749][ T45] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 97.790634][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 97.803640][ T45] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 97.812721][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.821592][ T45] usb 3-1: config 0 descriptor?? [ 97.895369][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 98.020368][ T2673] rust_binder: Error while translating object. [ 98.020403][ T2673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.026734][ T2673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:569 [ 98.067821][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 98.084622][ T10] usb 1-1: can't read configurations, error -61 [ 98.128619][ T2680] cgroup: No subsys list or none specified [ 98.226805][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 98.312295][ T2075] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 98.388676][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 98.396381][ T10] usb 1-1: can't read configurations, error -61 [ 98.403149][ T10] usb usb1-port1: attempt power cycle [ 98.465305][ T2698] FAULT_INJECTION: forcing a failure. [ 98.465305][ T2698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.473371][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 98.479003][ T2698] CPU: 0 UID: 0 PID: 2698 Comm: syz.3.872 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 98.479042][ T2698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.479057][ T2698] Call Trace: [ 98.479065][ T2698] [ 98.479075][ T2698] __dump_stack+0x21/0x30 [ 98.479110][ T2698] dump_stack_lvl+0x10c/0x190 [ 98.479138][ T2698] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.479167][ T2698] dump_stack+0x19/0x20 [ 98.479194][ T2698] should_fail_ex+0x3d9/0x530 [ 98.479221][ T2698] should_fail+0xf/0x20 [ 98.479245][ T2698] should_fail_usercopy+0x1e/0x30 [ 98.479272][ T2698] _copy_from_iter+0x1a3/0x14b0 [ 98.479304][ T2698] ? __kasan_check_write+0x18/0x20 [ 98.479331][ T2698] ? __build_skb_around+0x2a4/0x5a0 [ 98.479362][ T2698] ? __cfi__copy_from_iter+0x10/0x10 [ 98.479392][ T2698] ? check_stack_object+0x82/0x140 [ 98.479420][ T2698] ? __virt_addr_valid+0x2a6/0x380 [ 98.479455][ T2698] ? __check_object_size+0x455/0x620 [ 98.479484][ T2698] netlink_sendmsg+0x680/0xaf0 [ 98.479520][ T2698] ? __cfi_netlink_sendmsg+0x10/0x10 [ 98.479566][ T2698] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 98.479605][ T2698] ? security_socket_sendmsg+0x33/0xd0 [ 98.479632][ T2698] ? __cfi_netlink_sendmsg+0x10/0x10 [ 98.479665][ T2698] ____sys_sendmsg+0xa15/0xa70 [ 98.479703][ T2698] ? __sys_sendmsg_sock+0x50/0x50 [ 98.479739][ T2698] ? import_iovec+0x81/0xb0 [ 98.479772][ T2698] ___sys_sendmsg+0x220/0x2a0 [ 98.479807][ T2698] ? __sys_sendmsg+0x280/0x280 [ 98.479841][ T2698] ? proc_fail_nth_write+0x17e/0x210 [ 98.479864][ T2698] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 98.479894][ T2698] __x64_sys_sendmsg+0x1eb/0x2c0 [ 98.479915][ T2698] ? fput+0x1a5/0x240 [ 98.479950][ T2698] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 98.479972][ T2698] ? ksys_write+0x1ef/0x250 [ 98.480002][ T2698] ? __kasan_check_read+0x15/0x20 [ 98.480031][ T2698] x64_sys_call+0x2a4c/0x2ee0 [ 98.480062][ T2698] do_syscall_64+0x58/0xf0 [ 98.480092][ T2698] ? clear_bhb_loop+0x35/0x90 [ 98.480127][ T2698] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.480161][ T2698] RIP: 0033:0x7f5579d8e929 [ 98.480181][ T2698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.480200][ T2698] RSP: 002b:00007f557abcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.480226][ T2698] RAX: ffffffffffffffda RBX: 00007f5579fb5fa0 RCX: 00007f5579d8e929 [ 98.480245][ T2698] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 98.480261][ T2698] RBP: 00007f557abcd090 R08: 0000000000000000 R09: 0000000000000000 [ 98.480276][ T2698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.480291][ T2698] R13: 0000000000000000 R14: 00007f5579fb5fa0 R15: 00007ffee18a6618 [ 98.480310][ T2698] [ 98.764888][ T2075] usb 2-1: Using ep0 maxpacket: 32 [ 98.770114][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 98.778843][ T2075] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 98.782688][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 98.787084][ T2075] usb 2-1: config 0 has no interface number 0 [ 98.801522][ T45] usb 3-1: USB disconnect, device number 24 [ 98.807482][ T2075] usb 2-1: config 0 interface 49 has no altsetting 0 [ 98.817413][ T2075] usb 2-1: New USB device found, idVendor=0499, idProduct=500b, bcdDevice= 5.19 [ 98.817782][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 98.826539][ T2075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.834987][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 98.842119][ T2075] usb 2-1: Product: syz [ 98.842139][ T2075] usb 2-1: Manufacturer: syz [ 98.850345][ T10] usb 1-1: can't read configurations, error -61 [ 98.853863][ T2075] usb 2-1: SerialNumber: syz [ 98.870109][ T2075] usb 2-1: config 0 descriptor?? [ 98.877664][ T2075] snd-usb-audio 2-1:0.49: probe with driver snd-usb-audio failed with error -2 [ 98.892903][ T1543] udevd[1543]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.49/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.996627][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 99.017905][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 99.024657][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.036358][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.046619][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.046700][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 99.049608][ T36] audit: type=1400 audit(1750460376.786:400): avc: denied { read } for pid=2702 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.082819][ T10] usb 1-1: can't read configurations, error -61 [ 99.089197][ T10] usb usb1-port1: unable to enumerate USB device [ 99.096316][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.102619][ T45] usb 2-1: USB disconnect, device number 24 [ 99.105270][ T9] usb 4-1: config 0 descriptor?? [ 99.118060][ T9] hub 4-1:0.0: USB hub found [ 99.331275][ T9] hub 4-1:0.0: 1 port detected [ 99.547241][ T2706] x_tables: duplicate underflow at hook 1 [ 99.566108][ T2708] rust_binder: Write failure EFAULT in pid:556 [ 99.680860][ T2714] random: crng reseeded on system resumption [ 99.844053][ T36] audit: type=1400 audit(1750460377.534:401): avc: denied { read } for pid=2719 comm="syz.1.880" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 99.866135][ T36] audit: type=1400 audit(1750460377.534:402): avc: denied { open } for pid=2719 comm="syz.1.880" path="/231/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 99.982223][ T2700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.982259][ T2700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:634 [ 99.992573][ T45] usb 4-1: USB disconnect, device number 18 [ 100.028966][ T2729] FAULT_INJECTION: forcing a failure. [ 100.028966][ T2729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.042195][ T2729] CPU: 1 UID: 0 PID: 2729 Comm: syz.2.884 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 100.042229][ T2729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.042243][ T2729] Call Trace: [ 100.042250][ T2729] [ 100.042258][ T2729] __dump_stack+0x21/0x30 [ 100.042287][ T2729] dump_stack_lvl+0x10c/0x190 [ 100.042307][ T2729] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.042336][ T2729] dump_stack+0x19/0x20 [ 100.042355][ T2729] should_fail_ex+0x3d9/0x530 [ 100.042375][ T2729] should_fail+0xf/0x20 [ 100.042391][ T2729] should_fail_usercopy+0x1e/0x30 [ 100.042410][ T2729] _copy_from_user+0x22/0xb0 [ 100.042432][ T2729] csum_and_copy_from_iter_full+0x6c1/0x1c00 [ 100.042460][ T2729] ? __cfi_csum_and_copy_from_iter_full+0x10/0x10 [ 100.042485][ T2729] ip_generic_getfrag+0x137/0x290 [ 100.042508][ T2729] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 100.042530][ T2729] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 100.042553][ T2729] raw6_getfrag+0x25a/0x390 [ 100.042574][ T2729] ? __alloc_skb+0x1bc/0x370 [ 100.042595][ T2729] __ip6_append_data+0x2dab/0x3ab0 [ 100.042618][ T2729] ? __cfi_raw6_getfrag+0x10/0x10 [ 100.042636][ T2729] ? __kasan_check_write+0x18/0x20 [ 100.042655][ T2729] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 100.042678][ T2729] ? ip6_setup_cork+0x1390/0x1390 [ 100.042695][ T2729] ? __kasan_check_read+0x15/0x20 [ 100.042713][ T2729] ? ip6_setup_cork+0x9de/0x1390 [ 100.042729][ T2729] ? lock_sock_nested+0x1f5/0x290 [ 100.042748][ T2729] ip6_append_data+0x1ba/0x380 [ 100.042766][ T2729] ? __cfi_raw6_getfrag+0x10/0x10 [ 100.042785][ T2729] rawv6_sendmsg+0x1314/0x1840 [ 100.042806][ T2729] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 100.042826][ T2729] ? selinux_socket_sendmsg+0x284/0x380 [ 100.042847][ T2729] ? is_bpf_text_address+0x17b/0x1a0 [ 100.042872][ T2729] ? avc_has_perm_noaudit+0x268/0x360 [ 100.042890][ T2729] ? inet_send_prepare+0x64/0x4f0 [ 100.042905][ T2729] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 100.042924][ T2729] inet_sendmsg+0x113/0x120 [ 100.042939][ T2729] sock_write_iter+0x3cb/0x4f0 [ 100.042957][ T2729] ? __cfi_sock_write_iter+0x10/0x10 [ 100.042977][ T2729] ? selinux_file_permission+0x88b/0xb30 [ 100.043001][ T2729] do_iter_readv_writev+0x4f2/0x6a0 [ 100.043024][ T2729] ? vfs_iter_read+0x5f0/0x5f0 [ 100.043046][ T2729] ? bpf_lsm_file_permission+0xd/0x20 [ 100.043064][ T2729] vfs_writev+0x485/0xcf0 [ 100.043088][ T2729] ? do_writev+0x2d0/0x2d0 [ 100.043111][ T2729] ? vfs_write+0x8ba/0xe80 [ 100.043134][ T2729] do_writev+0x14d/0x2d0 [ 100.043157][ T2729] ? vfs_readv+0xa50/0xa50 [ 100.043181][ T2729] ? __kasan_check_read+0x15/0x20 [ 100.043199][ T2729] __x64_sys_writev+0x81/0x90 [ 100.043219][ T2729] x64_sys_call+0x1fbb/0x2ee0 [ 100.043241][ T2729] do_syscall_64+0x58/0xf0 [ 100.043262][ T2729] ? clear_bhb_loop+0x35/0x90 [ 100.043287][ T2729] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.043311][ T2729] RIP: 0033:0x7f7b8478e929 [ 100.043331][ T2729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.043346][ T2729] RSP: 002b:00007f7b855ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 100.043364][ T2729] RAX: ffffffffffffffda RBX: 00007f7b849b5fa0 RCX: 00007f7b8478e929 [ 100.043378][ T2729] RDX: 0000000000000006 RSI: 0000200000003e80 RDI: 0000000000000003 [ 100.043389][ T2729] RBP: 00007f7b855ce090 R08: 0000000000000000 R09: 0000000000000000 [ 100.043399][ T2729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.043410][ T2729] R13: 0000000000000000 R14: 00007f7b849b5fa0 R15: 00007fffe89ba2c8 [ 100.043424][ T2729] [ 100.574778][ T2743] tipc: Enabling of bearer rejected, failed to enable media [ 100.664312][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 100.809320][ T2756] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 100.809320][ T2756] null pointer dereference occurred [ 100.821808][ T2756] ------------[ cut here ]------------ [ 100.827317][ T2756] kernel BUG at rust/helpers/bug.c:7! [ 100.833006][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 100.838667][ T2756] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 100.845489][ T36] audit: type=1400 audit(1750460378.451:403): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 100.845651][ T2756] CPU: 1 UID: 0 PID: 2756 Comm: syz.1.895 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 100.867758][ T36] audit: type=1400 audit(1750460378.451:404): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.880919][ T2756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.880938][ T2756] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 100.880982][ T2756] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 5e a1 20 c1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 14 65 69 4d 90 90 90 90 90 90 90 90 90 [ 100.909104][ T36] audit: type=1400 audit(1750460378.451:405): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.912349][ T2756] RSP: 0018:ffffc90000f0f1d0 EFLAGS: 00010246 [ 100.912373][ T2756] RAX: 000000000000005a RBX: 1ffff920001e1e3c RCX: 759b4528c2c99000 [ 100.912390][ T2756] RDX: ffffc90001661000 RSI: 00000000000031ab RDI: 00000000000031ac [ 100.921397][ T36] audit: type=1400 audit(1750460378.451:406): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.937285][ T2756] RBP: ffffc90000f0f1d0 R08: ffffc90000f0eec7 R09: 1ffff920001e1dd8 [ 100.937307][ T2756] R10: dffffc0000000000 R11: fffff520001e1dd9 R12: 0000000000000000 [ 100.937329][ T2756] R13: dffffc0000000000 R14: ffffc90000f0f200 R15: ffffc90000f0f230 [ 100.937348][ T2756] FS: 00007f24151a96c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 100.963424][ T36] audit: type=1400 audit(1750460378.451:407): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.964604][ T2756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.964624][ T2756] CR2: 000000110c33873b CR3: 0000000119d76000 CR4: 00000000003526b0 [ 100.964645][ T2756] DR0: 0000000000000008 DR1: 0000000000000008 DR2: 0000000000000006 [ 100.964659][ T2756] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.972743][ T36] audit: type=1400 audit(1750460378.451:408): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.980616][ T2756] Call Trace: [ 100.980627][ T2756] [ 100.980636][ T2756] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 100.980676][ T2756] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 101.001451][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 101.009134][ T2756] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 101.009186][ T2756] ? p9pdu_vwritef+0x2720/0x2720 [ 101.017389][ T10] usb 3-1: config 0 has no interface number 0 [ 101.025258][ T2756] ? radix_tree_node_alloc+0x1af/0x400 [ 101.025306][ T2756] ? __cfi_p9pdu_vwritef+0x10/0x10 [ 101.034357][ T36] audit: type=1400 audit(1750460378.451:409): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.054624][ T2756] ? p9pdu_vwritef+0x1c5e/0x2720 [ 101.054658][ T2756] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 101.070147][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 101.077433][ T2756] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 101.077492][ T2756] ? p9pdu_writef+0xdb/0x130 [ 101.087997][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.108318][ T2756] ? p9pdu_vwritef+0x2720/0x2720 [ 101.108359][ T2756] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 101.108399][ T2756] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 101.108428][ T2756] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 101.121274][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.122132][ T2756] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 101.132562][ T10] usb 3-1: Product: syz [ 101.138279][ T2756] ? p9_client_prepare_req+0x732/0xa10 [ 101.138318][ T2756] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 101.138354][ T2756] ? __kasan_check_write+0x18/0x20 [ 101.152447][ T10] usb 3-1: Manufacturer: syz [ 101.156860][ T2756] ? _raw_spin_lock+0x8c/0x120 [ 101.156896][ T2756] ? __cfi__raw_spin_lock+0x10/0x10 [ 101.163342][ T10] usb 3-1: SerialNumber: syz [ 101.168438][ T2756] ? __kasan_check_write+0x18/0x20 [ 101.168483][ T2756] ? _raw_spin_lock+0x8c/0x120 [ 101.168509][ T2756] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 101.209734][ T36] audit: type=1400 audit(1750460378.816:410): avc: denied { setattr } for pid=2760 comm="syz.3.897" name="NETLINK" dev="sockfs" ino=24198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.215873][ T2756] p9_fd_request+0x391/0x520 [ 101.247023][ T10] usb 3-1: config 0 descriptor?? [ 101.252336][ T2756] p9_client_rpc+0x2f9/0xb40 [ 101.252369][ T2756] ? bt_sock_poll+0x477/0x7b0 [ 101.252393][ T2756] ? p9_fid_create+0x3d0/0x3d0 [ 101.263209][ T10] smsc75xx v1.0.0 [ 101.269064][ T2756] ? __cfi_sock_poll+0x10/0x10 [ 101.269098][ T2756] ? p9_conn_create+0x4c9/0x570 [ 101.326776][ T2763] random: crng reseeded on system resumption [ 101.326848][ T2756] ? p9_fd_create+0x2f3/0x4c0 [ 101.416072][ T2756] p9_client_create+0x96a/0x1190 [ 101.421058][ T2756] ? __cfi_p9_client_create+0x10/0x10 [ 101.426463][ T2756] ? kasan_save_alloc_info+0x40/0x50 [ 101.431789][ T2756] ? __kasan_kmalloc+0x96/0xb0 [ 101.436587][ T2756] ? kstrdup+0x7b/0x140 [ 101.440778][ T2756] ? __kasan_check_write+0x18/0x20 [ 101.445919][ T2756] v9fs_session_init+0x1e1/0x1820 [ 101.450995][ T2756] ? __cfi_v9fs_session_init+0x10/0x10 [ 101.456487][ T2756] ? kasan_save_alloc_info+0x40/0x50 [ 101.461803][ T2756] ? __kasan_kmalloc+0x96/0xb0 [ 101.466599][ T2756] ? v9fs_mount+0xbd/0xa00 [ 101.471047][ T2756] v9fs_mount+0xd7/0xa00 [ 101.475319][ T2756] ? selinux_sb_eat_lsm_opts+0xa69/0xb40 [ 101.480983][ T2756] ? __cfi_v9fs_mount+0x10/0x10 [ 101.485862][ T2756] ? selinux_capable+0x38/0x50 [ 101.490667][ T2756] legacy_get_tree+0x103/0x1b0 [ 101.495465][ T2756] ? __cfi_v9fs_mount+0x10/0x10 [ 101.500348][ T2756] vfs_get_tree+0x9e/0x290 [ 101.504791][ T2756] do_new_mount+0x251/0xb40 [ 101.509328][ T2756] path_mount+0x688/0x1050 [ 101.513772][ T2756] ? putname+0x113/0x150 [ 101.518038][ T2756] __se_sys_mount+0x2bd/0x480 [ 101.522744][ T2756] ? __x64_sys_mount+0xf0/0xf0 [ 101.527535][ T2756] ? __kasan_check_write+0x18/0x20 [ 101.532677][ T2756] ? fpregs_restore_userregs+0x11d/0x260 [ 101.538351][ T2756] __x64_sys_mount+0xc3/0xf0 [ 101.543025][ T2756] x64_sys_call+0x2021/0x2ee0 [ 101.547736][ T2756] do_syscall_64+0x58/0xf0 [ 101.552192][ T2756] ? clear_bhb_loop+0x35/0x90 [ 101.556913][ T2756] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.562846][ T2756] RIP: 0033:0x7f241438e929 [ 101.567283][ T2756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.586915][ T2756] RSP: 002b:00007f24151a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.595452][ T2756] RAX: ffffffffffffffda RBX: 00007f24145b5fa0 RCX: 00007f241438e929 [ 101.603452][ T2756] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 101.611455][ T2756] RBP: 00007f2414410b39 R08: 0000200000000340 R09: 0000000000000000 [ 101.619572][ T2756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.627607][ T2756] R13: 0000000000000000 R14: 00007f24145b5fa0 R15: 00007ffcf872c138 [ 101.635620][ T2756] [ 101.638663][ T2756] Modules linked in: [ 101.643063][ T2756] ---[ end trace 0000000000000000 ]--- [ 101.649089][ T2756] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 101.654501][ T2756] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 5e a1 20 c1 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 14 65 69 4d 90 90 90 90 90 90 90 90 90 [ 101.674516][ T2756] RSP: 0018:ffffc90000f0f1d0 EFLAGS: 00010246 [ 101.681200][ T2756] RAX: 000000000000005a RBX: 1ffff920001e1e3c RCX: 759b4528c2c99000 [ 101.689248][ T2756] RDX: ffffc90001661000 RSI: 00000000000031ab RDI: 00000000000031ac [ 101.697622][ T2756] RBP: ffffc90000f0f1d0 R08: ffffc90000f0eec7 R09: 1ffff920001e1dd8 [ 101.706666][ T2756] R10: dffffc0000000000 R11: fffff520001e1dd9 R12: 0000000000000000 [ 101.715049][ T2756] R13: dffffc0000000000 R14: ffffc90000f0f200 R15: ffffc90000f0f230 [ 101.726012][ T2756] FS: 00007f24151a96c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 101.735549][ T2756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.742376][ T2756] CR2: 00007f2415167d58 CR3: 0000000119d76000 CR4: 00000000003526b0 [ 101.750415][ T2756] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.758495][ T2756] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.766629][ T2756] Kernel panic - not syncing: Fatal exception [ 101.773031][ T2756] Kernel Offset: disabled [ 101.777364][ T2756] Rebooting in 86400 seconds..